$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB629/E2CF940A45B411EF8FDB741DC4F9AE02/7CE4326245B511EFBAC06E1EC4F9AE02.roa File: 7CE4326245B511EFBAC06E1EC4F9AE02.roa (raw, json) Hash identifier: bllAWJknG6t7sgMmQWLY59vxPXpNHKXKelWOMC8ypAI= Subject key identifier: B5:90:80:11:75:73:B5:FE:B8:34:23:10:4B:40:79:4E:4A:31:66:C6 Certificate issuer: /CN=A91BB629/serialNumber=630EFC8BC8247F99A01280741E4A1A0DB7F147B0 Certificate serial: 5D Authority key identifier: 63:0E:FC:8B:C8:24:7F:99:A0:12:80:74:1E:4A:1A:0D:B7:F1:47:B0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yw78i8gkf5mgEoB0HkoaDbfxR7A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB629/E2CF940A45B411EF8FDB741DC4F9AE02/7CE4326245B511EFBAC06E1EC4F9AE02.roa Signing time: Thu 09 Jan 2025 05:20:18 +0000 ROA not before: Thu 09 Jan 2025 05:20:18 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 152317 IP address blocks: 157.10.140.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB629/E2CF940A45B411EF8FDB741DC4F9AE02/Yw78i8gkf5mgEoB0HkoaDbfxR7A.crl rsync://rpki.apnic.net/member_repository/A91BB629/E2CF940A45B411EF8FDB741DC4F9AE02/Yw78i8gkf5mgEoB0HkoaDbfxR7A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yw78i8gkf5mgEoB0HkoaDbfxR7A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:25:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 93 (0x5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB629, serialNumber=630EFC8BC8247F99A01280741E4A1A0DB7F147B0 Validity Not Before: Jan 9 05:20:18 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=677f5c92-a632 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f6:a5:33:98:5d:7b:7a:2d:63:76:ba:a3:f0: 71:29:fc:b6:05:80:d5:8c:cf:92:29:0a:5a:73:c7: b2:93:96:a3:bc:42:bb:f3:71:fb:c3:f5:26:db:ed: 87:43:5f:0f:b0:0c:ed:0c:50:4b:3c:11:75:21:fe: c2:19:a6:00:8d:72:2e:6d:bc:54:37:dc:30:6c:8a: 03:96:f6:13:5b:cd:dc:84:f2:cd:ba:51:c1:ae:0c: 67:17:be:aa:5d:7a:85:73:74:23:f8:bd:18:0d:16: c8:fd:80:38:61:6a:1d:e4:cf:56:15:2e:27:d3:61: 49:3d:08:ce:22:7c:a6:1a:31:5a:e3:47:6a:a5:4b: 0d:d0:79:b6:48:92:b2:4b:8e:7b:8c:88:c1:b9:43: aa:52:04:fc:4d:c3:1c:7b:9b:f6:e6:a5:de:eb:8d: 24:94:5b:e7:cc:1f:03:6a:91:33:8e:ab:11:e2:c9: 55:98:e4:5e:7d:3a:f6:1d:a9:63:2a:d4:a5:95:b3: 19:83:65:73:74:ce:7a:b1:04:11:7c:b8:3e:56:63: 7c:86:59:5b:ed:5f:b3:86:3d:37:54:60:4f:bc:28: 80:dc:43:df:22:95:93:83:aa:5e:86:18:d3:65:2c: 47:bc:10:14:90:4d:e9:a3:45:d6:fe:02:86:4e:30: fd:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:90:80:11:75:73:B5:FE:B8:34:23:10:4B:40:79:4E:4A:31:66:C6 X509v3 Authority Key Identifier: keyid:63:0E:FC:8B:C8:24:7F:99:A0:12:80:74:1E:4A:1A:0D:B7:F1:47:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB629/E2CF940A45B411EF8FDB741DC4F9AE02/Yw78i8gkf5mgEoB0HkoaDbfxR7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yw78i8gkf5mgEoB0HkoaDbfxR7A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB629/E2CF940A45B411EF8FDB741DC4F9AE02/7CE4326245B511EFBAC06E1EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.10.140.0/23 Signature Algorithm: sha256WithRSAEncryption 7f:d0:46:b8:91:ef:9d:d0:c0:c7:c9:b9:6c:43:08:c9:18:ff: 90:6e:e9:84:b3:11:4e:ec:73:7f:dc:c8:8d:96:07:97:f3:2d: 71:a9:ff:ef:2c:f7:c9:3d:b3:a5:56:cb:67:34:52:b8:c6:87: 13:02:c1:fb:85:2c:c7:10:e1:76:e6:7b:b1:dc:c6:02:8a:f4: 49:79:08:a1:e2:75:21:35:08:2a:04:c1:6f:a6:15:16:73:56: a8:10:a4:08:d4:05:4c:4e:7f:35:b4:0f:45:11:d6:b5:b8:98: 77:40:90:a3:eb:bc:ba:b9:2d:11:c3:ce:87:19:f4:7b:1d:0c: db:7e:14:de:50:56:74:89:5f:93:b6:2d:ec:8d:70:ec:d8:19: ad:58:fa:56:9e:58:d9:60:63:2e:12:e0:2e:0e:be:9e:89:8e: d7:67:e1:55:a7:d6:d8:d7:c7:e1:3f:9b:29:30:5d:f4:b0:6f: f9:a0:8b:77:35:d7:99:a2:9a:1b:7f:51:d2:11:bb:76:55:bf: 41:33:53:f0:bc:e5:f3:2b:c0:e8:8c:7a:12:e2:bd:06:81:9c: 49:3b:84:c6:44:63:bc:32:1d:ba:46:ad:c0:2b:70:bc:2d:c7: 1e:36:15:b0:e6:c3:b9:fd:9f:9b:b6:91:ee:b9:29:34:81:63: 08:34:a1:a4 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBXTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QjYyOTExMC8GA1UEBRMoNjMwRUZDOEJDODI0N0Y5OUEwMTI4MDc0MUU0QTFBMERC N0YxNDdCMDAeFw0yNTAxMDkwNTIwMThaFw0yNjAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY3N2Y1YzkyLWE2MzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDC9qUzmF17ei1jdrqj8HEp/LYFgNWMz5IpClpzx7KTlqO8QrvzcfvD9Sbb7YdD Xw+wDO0MUEs8EXUh/sIZpgCNci5tvFQ33DBsigOW9hNbzdyE8s26UcGuDGcXvqpd eoVzdCP4vRgNFsj9gDhhah3kz1YVLifTYUk9CM4ifKYaMVrjR2qlSw3QebZIkrJL jnuMiMG5Q6pSBPxNwxx7m/bmpd7rjSSUW+fMHwNqkTOOqxHiyVWY5F59OvYdqWMq 1KWVsxmDZXN0znqxBBF8uD5WY3yGWVvtX7OGPTdUYE+8KIDcQ98ilZODql6GGNNl LEe8EBSQTemjRdb+AoZOMP21AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUtZCAEXVz tf64NCMQS0B5TkoxZsYwHwYDVR0jBBgwFoAUYw78i8gkf5mgEoB0HkoaDbfxR7Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJCNjI5L0UyQ0Y5NDBBNDVC NDExRUY4RkRCNzQxREM0RjlBRTAyL1l3NzhpOGdrZjVtZ0VvQjBIa29hRGJmeFI3 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWXc3OGk4Z2tmNW1nRW9CMEhrb2FEYmZ4UjdBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjYyOS9FMkNGOTQwQTQ1QjQxMUVGOEZEQjc0MURDNEY5QUUwMi83Q0U0MzI2MjQ1 QjUxMUVGQkFDMDZFMUVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAZ0KjDANBgkqhkiG9w0BAQsFAAOCAQEAf9BGuJHvndDAx8m5 bEMIyRj/kG7phLMRTuxzf9zIjZYHl/Mtcan/7yz3yT2zpVbLZzRSuMaHEwLB+4Us xxDhduZ7sdzGAor0SXkIoeJ1ITUIKgTBb6YVFnNWqBCkCNQFTE5/NbQPRRHWtbiY d0CQo+u8urktEcPOhxn0ex0M234U3lBWdIlfk7Yt7I1w7NgZrVj6Vp5Y2WBjLhLg Lg6+nomO12fhVafW2NfH4T+bKTBd9LBv+aCLdzXXmaKaG39R0hG7dlW/QTNT8Lzl 8yvA6Ix6EuK9BoGcSTuExkRjvDIdukatwCtwvC3HHjYVsObDuf2fm7aR7rkpNIFj CDShpA== -----END CERTIFICATE-----Generated at Sat Apr 26 15:19:12 2025 by rpki-client