$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/7A85F9D2148711F0AF960528C4F9AE02.roa File: 7A85F9D2148711F0AF960528C4F9AE02.roa (raw, json) Hash identifier: v93VVwAanSucSOqj9EwS1pD5Lqih1cuGiSwwM282Dpg= Subject key identifier: 4F:60:8D:08:70:C8:FE:C2:D4:BE:17:41:F6:CA:74:94:3F:79:9F:8B Certificate issuer: /CN=A91B4460/serialNumber=88919538EEDEC8320D5EAF6B1F32B29823AB7810 Certificate serial: 02 Authority key identifier: 88:91:95:38:EE:DE:C8:32:0D:5E:AF:6B:1F:32:B2:98:23:AB:78:10 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iJGVOO7eyDINXq9rHzKymCOreBA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/7A85F9D2148711F0AF960528C4F9AE02.roa Signing time: Tue 08 Apr 2025 14:40:56 +0000 ROA not before: Tue 08 Apr 2025 14:40:56 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 136942 IP address blocks: 161.248.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.crl rsync://rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iJGVOO7eyDINXq9rHzKymCOreBA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 07:07:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4460, serialNumber=88919538EEDEC8320D5EAF6B1F32B29823AB7810 Validity Not Before: Apr 8 14:40:56 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=67f53578-8b1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:62:1b:6b:65:77:3d:2c:21:59:99:a2:dc:f7: 61:9f:5d:20:0e:c6:72:81:9e:ff:59:e6:c7:e6:80: 58:94:d0:d0:c9:57:88:fb:74:39:cd:76:f8:26:3c: 07:47:9e:fd:8a:b0:ca:fb:4f:94:14:34:7c:9a:a0: bd:e6:6d:be:a9:5b:c8:3f:6c:fc:24:c3:ae:a9:b5: 32:4b:46:c4:1b:2c:f5:16:c1:af:6d:0d:e6:7f:52: d1:21:ff:ff:98:ac:8d:03:d2:b1:94:0d:ce:c0:51: 6f:9d:9e:e9:2e:7c:5d:fa:d1:db:f7:12:00:c6:8f: 95:bf:32:cc:db:e1:cd:2b:9e:dd:2d:18:50:42:29: e7:18:28:80:86:59:c1:47:a8:1d:a6:75:29:d4:8b: ff:84:bd:5d:fd:b8:5f:ce:82:f1:0a:b6:de:40:e3: 82:71:74:21:4a:a0:40:e2:b5:2a:95:c9:86:a0:81: 84:3f:1d:0d:f2:b9:a1:4a:95:3b:f2:ec:0f:48:af: 21:9f:9c:60:b8:88:a5:6a:42:01:bf:83:bc:b3:ba: 63:db:78:94:f7:3b:ea:d4:42:93:e6:0d:dc:f2:a4: 52:86:37:0b:69:cb:69:9f:6b:c7:66:8b:9a:d8:2d: 1f:cc:e3:8b:d1:62:86:4a:50:f7:d6:b1:8a:e4:bd: cb:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:60:8D:08:70:C8:FE:C2:D4:BE:17:41:F6:CA:74:94:3F:79:9F:8B X509v3 Authority Key Identifier: keyid:88:91:95:38:EE:DE:C8:32:0D:5E:AF:6B:1F:32:B2:98:23:AB:78:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iJGVOO7eyDINXq9rHzKymCOreBA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/7A85F9D2148711F0AF960528C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 161.248.11.0/24 Signature Algorithm: sha256WithRSAEncryption 38:53:25:fc:73:78:a0:6c:74:75:13:34:ef:7f:2b:24:64:dc: f5:a0:b2:85:ec:3c:29:ae:ca:98:78:63:f8:c7:17:a2:ba:c1: 2f:b2:89:cc:8a:76:d6:9d:a6:f3:d1:dd:73:88:c8:fc:c2:f8: 58:9e:1a:44:1d:4d:c5:b2:43:c2:49:34:ea:f9:d1:b4:e3:5d: 55:f9:cf:f7:94:cf:bd:65:d2:f1:21:06:00:2d:fd:ee:c2:92: 47:40:bf:de:df:66:67:6d:b0:9a:e3:44:57:dd:b9:c0:84:a3: c7:97:77:86:71:f7:01:23:0a:ea:e4:8b:8b:ba:8d:6a:cd:4b: 38:09:66:71:ec:26:0b:a9:36:38:4c:d0:3e:8d:8e:ac:74:59: d0:2b:04:55:69:1e:fb:a7:6c:17:39:4a:03:12:e6:d0:e0:82: 5f:76:21:35:9c:04:34:6f:4b:1e:1c:e5:33:6e:00:8d:57:77: c6:ba:45:b9:59:bb:94:7f:0e:3d:08:6a:71:21:7d:e9:c2:58: d8:08:c9:2f:cd:10:54:12:dc:7c:bd:d2:f0:73:a4:ac:2f:78: 22:c9:1d:58:3a:53:57:41:f5:0b:19:b6:b5:7d:c3:a6:3d:c0: 17:66:a7:2a:91:26:d4:56:8e:eb:c2:74:2c:34:27:64:81:be: a2:9c:a6:3f -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NDQ2MDExMC8GA1UEBRMoODg5MTk1MzhFRURFQzgzMjBENUVBRjZCMUYzMkIyOTgy M0FCNzgxMDAeFw0yNTA0MDgxNDQwNTZaFw0yNjAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3ZjUzNTc4LThiMWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIYhtrZXc9LCFZmaLc92GfXSAOxnKBnv9Z5sfmgFiU0NDJV4j7dDnNdvgmPAdH nv2KsMr7T5QUNHyaoL3mbb6pW8g/bPwkw66ptTJLRsQbLPUWwa9tDeZ/UtEh//+Y rI0D0rGUDc7AUW+dnukufF360dv3EgDGj5W/Mszb4c0rnt0tGFBCKecYKICGWcFH qB2mdSnUi/+EvV39uF/OgvEKtt5A44JxdCFKoEDitSqVyYaggYQ/HQ3yuaFKlTvy 7A9IryGfnGC4iKVqQgG/g7yzumPbeJT3O+rUQpPmDdzypFKGNwtpy2mfa8dmi5rY LR/M44vRYoZKUPfWsYrkvcvLAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUT2CNCHDI /sLUvhdB9sp0lD95n4swHwYDVR0jBBgwFoAUiJGVOO7eyDINXq9rHzKymCOreBAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0NDYwLzA0OTg2NDc2MTQ4 NzExRjBBNzlFQUIyNkM0RjlBRTAyL2lKR1ZPTzdleURJTlhxOXJIekt5bUNPcmVC QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvaUpHVk9PN2V5RElOWHE5ckh6S3ltQ09yZUJBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDQ2MC8wNDk4NjQ3NjE0ODcxMUYwQTc5RUFCMjZDNEY5QUUwMi83QTg1RjlEMjE0 ODcxMUYwQUY5NjA1MjhDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAKH4CzANBgkqhkiG9w0BAQsFAAOCAQEAOFMl/HN4oGx0dRM0 738rJGTc9aCyhew8Ka7KmHhj+McXorrBL7KJzIp21p2m89Hdc4jI/ML4WJ4aRB1N xbJDwkk06vnRtONdVfnP95TPvWXS8SEGAC397sKSR0C/3t9mZ22wmuNEV925wISj x5d3hnH3ASMK6uSLi7qNas1LOAlmcewmC6k2OEzQPo2OrHRZ0CsEVWke+6dsFzlK AxLm0OCCX3YhNZwENG9LHhzlM24AjVd3xrpFuVm7lH8OPQhqcSF96cJY2AjJL80Q VBLcfL3S8HOkrC94IskdWDpTV0H1Cxm2tX3Dpj3AF2anKpEm1FaO68J0LDQnZIG+ opymPw== -----END CERTIFICATE-----Generated at Sat Apr 26 17:02:14 2025 by rpki-client