$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/CEB2CA5686E011EF81BE1A7FC4F9AE02.roa File: CEB2CA5686E011EF81BE1A7FC4F9AE02.roa (raw, json) Hash identifier: 6Kn2Tc8nx8bkTt0Gnf962Qu64Px5Cncotr8SgT4Ke8I= Subject key identifier: 21:F0:55:BB:F7:1A:4D:7B:A7:56:AD:63:28:82:9A:67:70:5D:27:9F Certificate issuer: /CN=A91C2F8C/serialNumber=017D8DB8A78874AB2F9AD97DE57AFDE1BE167D44 Certificate serial: 02 Authority key identifier: 01:7D:8D:B8:A7:88:74:AB:2F:9A:D9:7D:E5:7A:FD:E1:BE:16:7D:44 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AX2NuKeIdKsvmtl95Xr94b4WfUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/CEB2CA5686E011EF81BE1A7FC4F9AE02.roa Signing time: Thu 10 Oct 2024 08:22:37 +0000 ROA not before: Thu 10 Oct 2024 08:22:37 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 153320 IP address blocks: 160.187.170.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.crl rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AX2NuKeIdKsvmtl95Xr94b4WfUQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:56:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2F8C, serialNumber=017D8DB8A78874AB2F9AD97DE57AFDE1BE167D44 Validity Not Before: Oct 10 08:22:37 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=67078ecd-4d53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ce:33:c6:6e:16:4e:b4:46:4a:7a:07:aa:d3: 30:82:41:5d:82:06:df:da:91:a4:14:02:48:b5:99: e5:35:31:17:fc:ba:97:74:4e:ea:a7:2c:d2:4d:79: 1a:5e:9b:e6:e2:fb:91:d1:63:d1:e9:1f:aa:26:df: f7:90:5a:bf:bd:7b:b9:b9:e0:2e:e0:a9:a8:ab:cf: 34:a4:f9:ff:0f:52:3b:b7:7a:f8:59:91:80:99:49: cf:24:75:2a:59:23:3d:c4:87:82:1a:52:19:41:6a: 2c:05:b0:ac:af:4b:88:55:e3:77:c2:a1:da:44:72: 34:99:e6:49:14:81:f7:7c:bc:30:f4:5a:54:00:0e: 33:ad:d0:5d:cc:f5:0d:b9:f1:1e:d5:b0:74:93:25: 87:1a:44:1b:fe:b6:91:7a:13:ae:23:39:6d:18:c7: a6:4c:79:25:ab:16:f9:bd:f6:6d:2e:f3:ee:28:28: 40:4e:94:11:2b:b6:91:ab:0c:38:94:5c:ad:c6:e1: 7e:72:be:b8:da:65:90:0d:9a:0c:6f:54:f1:9a:ef: 31:dc:4c:98:f6:3a:2d:86:80:13:72:8c:22:34:4a: 50:d3:09:a1:0d:51:95:40:27:d8:00:e9:09:85:1b: 61:66:6a:e9:c9:4c:60:99:a2:ec:0c:f5:ee:49:77: d8:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:F0:55:BB:F7:1A:4D:7B:A7:56:AD:63:28:82:9A:67:70:5D:27:9F X509v3 Authority Key Identifier: keyid:01:7D:8D:B8:A7:88:74:AB:2F:9A:D9:7D:E5:7A:FD:E1:BE:16:7D:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AX2NuKeIdKsvmtl95Xr94b4WfUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/CEB2CA5686E011EF81BE1A7FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.187.170.0/23 Signature Algorithm: sha256WithRSAEncryption 00:a7:e2:2f:5e:c8:4e:5b:e4:1e:e6:9e:71:52:33:72:70:27: b0:91:e6:2d:2b:7c:a8:5d:e0:8f:8c:4b:3f:be:60:13:7b:69: 28:62:eb:6c:08:37:c8:c0:b3:52:26:f2:2b:b4:89:e4:52:4d: 1f:d5:b6:0c:76:c9:a6:b6:d9:b1:41:ce:ce:37:08:da:74:24: 21:21:b1:19:a2:02:b2:e0:5a:c9:66:69:8e:44:d8:48:dc:3f: 8d:37:61:61:d1:86:de:ce:47:9f:06:64:31:8d:6a:98:71:ef: 2d:d6:6e:cf:ef:eb:f7:f8:e8:bc:1c:33:80:20:8f:1f:70:53: b5:66:b7:a7:81:4a:90:58:5f:39:2f:5b:64:45:a5:20:a8:dc: 36:2a:94:d8:b4:8f:3d:19:9d:07:2b:7e:c2:f8:79:9b:1a:fa: d7:3c:e8:15:60:da:b8:75:ee:94:17:f7:d7:0d:e9:92:89:eb: 56:7a:35:43:e9:c4:5e:e5:3f:2d:c7:1a:21:11:e1:3f:97:2a: 76:ee:22:7f:27:ed:2d:4d:ee:0a:4f:6a:4b:07:9a:be:cd:dd: 07:b6:00:ff:74:2f:86:a1:11:24:3c:e1:6b:8a:94:39:33:14: 5f:89:57:d2:68:e4:0c:0b:b9:3c:de:43:03:da:f4:71:cc:c9: 60:13:4e:d9 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD MkY4QzExMC8GA1UEBRMoMDE3RDhEQjhBNzg4NzRBQjJGOUFEOTdERTU3QUZERTFC RTE2N0Q0NDAeFw0yNDEwMTAwODIyMzdaFw0yNjAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3MDc4ZWNkLTRkNTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCmzjPGbhZOtEZKegeq0zCCQV2CBt/akaQUAki1meU1MRf8upd0TuqnLNJNeRpe m+bi+5HRY9HpH6om3/eQWr+9e7m54C7gqairzzSk+f8PUju3evhZkYCZSc8kdSpZ Iz3Eh4IaUhlBaiwFsKyvS4hV43fCodpEcjSZ5kkUgfd8vDD0WlQADjOt0F3M9Q25 8R7VsHSTJYcaRBv+tpF6E64jOW0Yx6ZMeSWrFvm99m0u8+4oKEBOlBErtpGrDDiU XK3G4X5yvrjaZZANmgxvVPGa7zHcTJj2Oi2GgBNyjCI0SlDTCaENUZVAJ9gA6QmF G2FmaunJTGCZouwM9e5Jd9hjAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUIfBVu/ca TXunVq1jKIKaZ3BdJ58wHwYDVR0jBBgwFoAUAX2NuKeIdKsvmtl95Xr94b4WfUQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMyRjhDLzU1NzlCOUIwODZF MDExRUY5QjZCMTc3RUM0RjlBRTAyL0FYMk51S2VJZEtzdm10bDk1WHI5NGI0V2ZV US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQVgyTnVLZUlkS3N2bXRsOTVYcjk0YjRXZlVRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkY4Qy81NTc5QjlCMDg2RTAxMUVGOUI2QjE3N0VDNEY5QUUwMi9DRUIyQ0E1Njg2 RTAxMUVGODFCRTFBN0ZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaC7qjANBgkqhkiG9w0BAQsFAAOCAQEAAKfiL17ITlvkHuae cVIzcnAnsJHmLSt8qF3gj4xLP75gE3tpKGLrbAg3yMCzUibyK7SJ5FJNH9W2DHbJ prbZsUHOzjcI2nQkISGxGaICsuBayWZpjkTYSNw/jTdhYdGG3s5HnwZkMY1qmHHv LdZuz+/r9/jovBwzgCCPH3BTtWa3p4FKkFhfOS9bZEWlIKjcNiqU2LSPPRmdByt+ wvh5mxr61zzoFWDauHXulBf31w3pkonrVno1Q+nEXuU/LccaIRHhP5cqdu4ifyft LU3uCk9qSweavs3dB7YA/3QvhqERJDzha4qUOTMUX4lX0mjkDAu5PN5DA9r0cczJ YBNO2Q== -----END CERTIFICATE-----Generated at Wed Nov 5 16:44:03 2025 by rpki-client