$ rpki-client -vvf rpki.apnic.net/member_repository/A91A995E/2E7AF298FA6211EF95555C0EC4F9AE02/3E41E766FA6411EFB8C12C50C4F9AE02.roa File: 3E41E766FA6411EFB8C12C50C4F9AE02.roa (raw, json) Hash identifier: DEF0xkvw3q1tLXUQiXU0nzrLNhOtTutlaMvyugUJMpQ= Subject key identifier: 61:B6:46:D0:7C:B2:70:93:80:13:AF:71:89:7A:FA:26:26:80:DA:97 Certificate issuer: /CN=A91A995E/serialNumber=56E394AF1B5ACB8FF482C8C60269FEA0E4C427BE Certificate serial: 03 Authority key identifier: 56:E3:94:AF:1B:5A:CB:8F:F4:82:C8:C6:02:69:FE:A0:E4:C4:27:BE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VuOUrxtay4_0gsjGAmn-oOTEJ74.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A995E/2E7AF298FA6211EF95555C0EC4F9AE02/3E41E766FA6411EFB8C12C50C4F9AE02.roa Signing time: Thu 06 Mar 2025 08:23:12 +0000 ROA not before: Thu 06 Mar 2025 08:23:12 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 134182 IP address blocks: 161.248.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A995E/2E7AF298FA6211EF95555C0EC4F9AE02/VuOUrxtay4_0gsjGAmn-oOTEJ74.crl rsync://rpki.apnic.net/member_repository/A91A995E/2E7AF298FA6211EF95555C0EC4F9AE02/VuOUrxtay4_0gsjGAmn-oOTEJ74.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VuOUrxtay4_0gsjGAmn-oOTEJ74.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:53:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A995E, serialNumber=56E394AF1B5ACB8FF482C8C60269FEA0E4C427BE Validity Not Before: Mar 6 08:23:12 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=67c95b70-6122 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:43:2f:1a:ba:90:a9:14:92:35:c8:54:f3:9b: 9f:61:b7:65:d2:08:71:1f:a8:5b:24:c6:34:bc:73: af:65:16:f9:81:31:2b:c3:b1:6d:94:a9:7d:87:fa: a3:0c:25:a9:6f:35:ca:85:3d:a6:8e:49:fc:d2:51: 1a:c4:d1:40:13:24:ae:bd:9c:a6:e7:a4:a5:7e:8c: 44:ae:4d:c2:ce:3f:16:38:d2:56:a3:95:51:14:ea: 48:42:85:f6:aa:3a:bf:ac:b1:1f:65:0c:a1:3e:15: 28:f5:22:32:80:1d:c9:44:8c:e5:0f:39:3c:28:87: 18:07:01:4a:d3:0f:ea:4f:f4:13:55:62:e8:fd:2a: 1a:24:5d:61:e3:67:e7:35:c1:8f:22:43:66:27:a6: 21:ce:09:2b:fb:f7:a6:2c:6b:43:92:62:fa:a0:c7: b5:1c:e0:2e:da:2c:c2:4f:65:dc:2b:b3:a3:ca:81: 2c:74:98:65:83:38:d6:b7:ed:82:1c:88:c6:87:ee: e1:00:e7:ed:e8:f1:de:38:11:86:8a:5a:ee:ea:26: a6:06:6e:0d:76:05:ed:7e:61:00:62:06:bc:56:5a: d3:71:92:38:a8:ba:6a:04:26:e6:9f:c3:17:cf:8f: 9e:d1:a1:c3:c1:df:18:6f:5c:cc:ea:5d:1a:35:27: db:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:B6:46:D0:7C:B2:70:93:80:13:AF:71:89:7A:FA:26:26:80:DA:97 X509v3 Authority Key Identifier: keyid:56:E3:94:AF:1B:5A:CB:8F:F4:82:C8:C6:02:69:FE:A0:E4:C4:27:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A995E/2E7AF298FA6211EF95555C0EC4F9AE02/VuOUrxtay4_0gsjGAmn-oOTEJ74.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VuOUrxtay4_0gsjGAmn-oOTEJ74.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A995E/2E7AF298FA6211EF95555C0EC4F9AE02/3E41E766FA6411EFB8C12C50C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 161.248.25.0/24 Signature Algorithm: sha256WithRSAEncryption b6:66:2f:48:f5:45:11:6d:1f:0e:05:c5:46:c3:e6:26:1b:5a: d4:ec:f2:9d:21:da:7d:f8:de:9a:f6:9d:ee:60:6a:e3:8e:43: ef:a6:69:a9:68:55:60:88:f7:ad:30:85:f7:a4:4a:7a:e6:57: a9:d7:c6:63:7e:80:02:a4:c9:98:40:71:86:7f:28:e1:e5:b9: 2a:be:9d:18:b2:af:48:56:87:90:4e:fd:3f:94:20:d0:a1:25: 44:99:9b:98:f1:02:c0:dd:43:df:e7:6a:a1:67:ec:aa:f5:8b: 62:5e:cd:04:1e:95:b8:89:82:7d:b1:6a:6a:69:5b:9e:c5:9a: 45:88:c9:5b:12:7f:4c:93:cb:15:2b:c9:68:89:7a:b8:db:21: 7c:d4:d2:e3:25:02:58:e4:bc:93:f6:ea:b2:51:76:ec:49:91: 1f:b8:13:b2:36:58:16:cd:9a:17:5f:6b:b5:03:d7:31:22:8c: 39:65:be:76:db:11:26:87:f4:10:1d:8d:cd:94:44:69:36:4f: f1:25:c4:01:1a:f2:84:3e:78:fa:5d:3c:f8:71:9d:35:07:02: b9:80:cb:77:53:1e:44:56:36:7d:a5:09:d6:55:b8:ac:b3:10: d7:cf:e3:7e:e5:9b:11:8b:8c:3d:f7:5f:3e:2c:5f:e5:54:54: 9f:66:1f:08 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB OTk1RTExMC8GA1UEBRMoNTZFMzk0QUYxQjVBQ0I4RkY0ODJDOEM2MDI2OUZFQTBF NEM0MjdCRTAeFw0yNTAzMDYwODIzMTJaFw0yNjAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY3Yzk1YjcwLTYxMjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQQy8aupCpFJI1yFTzm59ht2XSCHEfqFskxjS8c69lFvmBMSvDsW2UqX2H+qMM JalvNcqFPaaOSfzSURrE0UATJK69nKbnpKV+jESuTcLOPxY40lajlVEU6khChfaq Or+ssR9lDKE+FSj1IjKAHclEjOUPOTwohxgHAUrTD+pP9BNVYuj9KhokXWHjZ+c1 wY8iQ2YnpiHOCSv796Ysa0OSYvqgx7Uc4C7aLMJPZdwrs6PKgSx0mGWDONa37YIc iMaH7uEA5+3o8d44EYaKWu7qJqYGbg12Be1+YQBiBrxWWtNxkjioumoEJuafwxfP j57RocPB3xhvXMzqXRo1J9v9AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUYbZG0Hyy cJOAE69xiXr6JiaA2pcwHwYDVR0jBBgwFoAUVuOUrxtay4/0gsjGAmn+oOTEJ74w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5OTVFLzJFN0FGMjk4RkE2 MjExRUY5NTU1NUMwRUM0RjlBRTAyL1Z1T1VyeHRheTRfMGdzakdBbW4tb09URUo3 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVnVPVXJ4dGF5NF8wZ3NqR0Ftbi1vT1RFSjc0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTk1RS8yRTdBRjI5OEZBNjIxMUVGOTU1NTVDMEVDNEY5QUUwMi8zRTQxRTc2NkZB NjQxMUVGQjhDMTJDNTBDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAKH4GTANBgkqhkiG9w0BAQsFAAOCAQEAtmYvSPVFEW0fDgXF RsPmJhta1OzynSHaffjemvad7mBq445D76ZpqWhVYIj3rTCF96RKeuZXqdfGY36A AqTJmEBxhn8o4eW5Kr6dGLKvSFaHkE79P5Qg0KElRJmbmPECwN1D3+dqoWfsqvWL Yl7NBB6VuImCfbFqamlbnsWaRYjJWxJ/TJPLFSvJaIl6uNshfNTS4yUCWOS8k/bq slF27EmRH7gTsjZYFs2aF19rtQPXMSKMOWW+dtsRJof0EB2NzZREaTZP8SXEARry hD54+l08+HGdNQcCuYDLd1MeRFY2faUJ1lW4rLMQ18/jfuWbEYuMPfdfPixf5VRU n2YfCA== -----END CERTIFICATE-----Generated at Sat Apr 26 15:16:12 2025 by rpki-client