$ rpki-client -vvf rpki.apnic.net/member_repository/A91B65AC/CB74F8BEE1E011EEAF6E1E68C4F9AE02/48005D9EE5AE11EE9ECE4023C4F9AE02.roa File: 48005D9EE5AE11EE9ECE4023C4F9AE02.roa (raw, json) Hash identifier: WtIZQ/bC/mTF3o0eFavcTapTDeJCSmKxEjU8nMbUVMA= Subject key identifier: 56:F1:09:ED:8A:DF:8D:7D:53:0F:A6:D5:0B:BD:00:8D:45:A9:78:95 Certificate issuer: /CN=A91B65AC/serialNumber=A10F5783C8F9A6D94D29B4AA90C56E016BB51456 Certificate serial: CA Authority key identifier: A1:0F:57:83:C8:F9:A6:D9:4D:29:B4:AA:90:C5:6E:01:6B:B5:14:56 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oQ9Xg8j5ptlNKbSqkMVuAWu1FFY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B65AC/CB74F8BEE1E011EEAF6E1E68C4F9AE02/48005D9EE5AE11EE9ECE4023C4F9AE02.roa Signing time: Thu 03 Apr 2025 05:03:39 +0000 ROA not before: Thu 03 Apr 2025 05:03:39 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 152594 IP address blocks: 157.20.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B65AC/CB74F8BEE1E011EEAF6E1E68C4F9AE02/oQ9Xg8j5ptlNKbSqkMVuAWu1FFY.crl rsync://rpki.apnic.net/member_repository/A91B65AC/CB74F8BEE1E011EEAF6E1E68C4F9AE02/oQ9Xg8j5ptlNKbSqkMVuAWu1FFY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oQ9Xg8j5ptlNKbSqkMVuAWu1FFY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:41:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 202 (0xca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B65AC, serialNumber=A10F5783C8F9A6D94D29B4AA90C56E016BB51456 Validity Not Before: Apr 3 05:03:39 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67ee16ab-fc17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:d6:e7:fc:d8:26:33:7f:07:44:cb:7a:e2:0c: 10:92:a1:48:24:fc:4b:f0:b0:a8:f2:f5:cc:48:fd: b5:3d:32:4a:c5:b8:60:80:77:21:73:84:25:61:f4: 32:03:2f:d8:26:34:65:bb:5b:84:6f:8c:5e:c5:20: 65:12:09:6e:c6:7e:eb:06:af:12:b9:dd:f1:41:20: 60:ca:2f:e1:ba:32:1b:00:2f:57:bb:86:a8:80:b8: 55:c5:ea:b9:12:dd:07:e6:fe:07:08:55:c7:c4:9d: 89:46:2d:13:10:0c:f2:26:81:d9:7a:2c:c1:95:07: d1:22:46:b9:1a:fe:03:80:12:6d:a1:31:0b:1e:bc: 65:6b:19:d1:4b:7b:3c:7f:da:dc:a4:42:45:0c:e9: 3f:09:be:24:d2:f2:51:29:37:85:6d:c6:56:fd:66: 6d:8f:39:52:1c:85:a5:d3:d9:a4:b0:2c:7e:10:87: 33:6a:d1:13:64:bd:91:34:c8:38:35:19:5f:9a:14: 1c:4d:c8:bf:85:b3:ce:c4:db:92:54:b8:6b:b5:95: 59:45:33:bb:56:7f:7c:7c:c7:1b:78:34:9d:9d:c5: 32:e3:c2:08:c4:d4:29:e7:4a:2e:85:47:c7:54:3c: b6:35:88:ce:a7:a4:58:96:cc:6b:b3:2f:ed:a1:9d: 67:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:F1:09:ED:8A:DF:8D:7D:53:0F:A6:D5:0B:BD:00:8D:45:A9:78:95 X509v3 Authority Key Identifier: keyid:A1:0F:57:83:C8:F9:A6:D9:4D:29:B4:AA:90:C5:6E:01:6B:B5:14:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B65AC/CB74F8BEE1E011EEAF6E1E68C4F9AE02/oQ9Xg8j5ptlNKbSqkMVuAWu1FFY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oQ9Xg8j5ptlNKbSqkMVuAWu1FFY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B65AC/CB74F8BEE1E011EEAF6E1E68C4F9AE02/48005D9EE5AE11EE9ECE4023C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.20.129.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:49:8b:25:bd:64:37:37:76:c5:8e:19:d8:ed:1d:35:16:0b: ce:82:8a:71:d8:be:ee:73:84:74:e0:8a:a9:ee:63:9c:ff:c1: 83:f7:2c:f6:bf:ae:55:22:21:1c:8d:05:8e:3e:08:8b:3f:d2: 96:34:22:e0:01:9a:05:1b:5f:47:e4:e9:76:0b:da:c7:37:8a: 18:4a:36:58:53:6d:7d:91:97:d8:2e:0f:fd:1b:e0:e4:cb:d9: d0:f8:4a:a9:2c:dc:f0:f6:3b:f9:2c:75:e3:a0:be:90:cf:f8: 99:2f:ab:65:8c:ff:b4:a2:bb:94:da:b8:17:53:1e:75:f9:ad: c2:70:1b:47:f8:1b:d8:54:c6:13:ce:78:95:44:ef:c2:6d:20: c0:76:f4:cf:42:77:9c:a9:22:15:7d:b9:b5:97:ba:dc:bc:79: 64:9f:0a:8d:8e:03:01:ea:4f:74:47:36:9b:42:8f:a6:e0:82: 58:80:d5:1e:9d:29:80:8a:b4:28:94:60:46:34:4d:f8:45:37: b1:f3:98:45:32:6c:e7:2c:0f:07:08:ab:b0:f9:17:34:1b:0f: 08:fe:ec:da:d9:8d:53:bb:ef:2f:cb:b2:54:c8:08:05:a5:97: e3:2b:64:0a:4c:4d:57:99:ea:8d:7a:7b:cf:22:b3:0c:b4:bd: 2b:2e:1e:37 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjY1QUMxMTAvBgNVBAUTKEExMEY1NzgzQzhGOUE2RDk0RDI5QjRBQTkwQzU2RTAx NkJCNTE0NTYwHhcNMjUwNDAzMDUwMzM5WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2VlMTZhYi1mYzE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7dbn/NgmM38HRMt64gwQkqFIJPxL8LCo8vXMSP21PTJKxbhggHchc4QlYfQy Ay/YJjRlu1uEb4xexSBlEgluxn7rBq8Sud3xQSBgyi/hujIbAC9Xu4aogLhVxeq5 Et0H5v4HCFXHxJ2JRi0TEAzyJoHZeizBlQfRIka5Gv4DgBJtoTELHrxlaxnRS3s8 f9rcpEJFDOk/Cb4k0vJRKTeFbcZW/WZtjzlSHIWl09mksCx+EIczatETZL2RNMg4 NRlfmhQcTci/hbPOxNuSVLhrtZVZRTO7Vn98fMcbeDSdncUy48IIxNQp50ouhUfH VDy2NYjOp6RYlsxrsy/toZ1nxQIDAQABo4IClTCCApEwHQYDVR0OBBYEFFbxCe2K 3419Uw+m1Qu9AI1FqXiVMB8GA1UdIwQYMBaAFKEPV4PI+abZTSm0qpDFbgFrtRRW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjVBQy9DQjc0RjhCRUUx RTAxMUVFQUY2RTFFNjhDNEY5QUUwMi9vUTlYZzhqNXB0bE5LYlNxa01WdUFXdTFG RlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL29ROVhnOGo1cHRsTktiU3FrTVZ1QVd1MUZGWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjY1QUMvQ0I3NEY4QkVFMUUwMTFFRUFGNkUxRTY4QzRGOUFFMDIvNDgwMDVEOUVF NUFFMTFFRTlFQ0U0MDIzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBACdFIEwDQYJKoZIhvcNAQELBQADggEBAJxJiyW9ZDc3dsWO GdjtHTUWC86CinHYvu5zhHTgiqnuY5z/wYP3LPa/rlUiIRyNBY4+CIs/0pY0IuAB mgUbX0fk6XYL2sc3ihhKNlhTbX2Rl9guD/0b4OTL2dD4Sqks3PD2O/ksdeOgvpDP +Jkvq2WM/7Siu5TauBdTHnX5rcJwG0f4G9hUxhPOeJVE78JtIMB29M9Cd5ypIhV9 ubWXuty8eWSfCo2OAwHqT3RHNptCj6bggliA1R6dKYCKtCiUYEY0TfhFN7HzmEUy bOcsDwcIq7D5FzQbDwj+7NrZjVO77y/LslTICAWll+MrZApMTVeZ6o16e88iswy0 vSsuHjc= -----END CERTIFICATE-----Generated at Sat Apr 26 12:22:58 2025 by rpki-client