$ rpki-client -vvf rpki.apnic.net/member_repository/A91C779D/460D1C5AE2AE11EE86F33C1EC4F9AE02/0BBBE2B2E2B211EEACBA3341C4F9AE02.roa File: 0BBBE2B2E2B211EEACBA3341C4F9AE02.roa (raw, json) Hash identifier: dwiUCjJJt0eG2N+1FVdoqJWTzPaXWWEUJdKiT+scZJI= Subject key identifier: 8D:5B:74:20:1D:FE:C4:5C:ED:C2:E3:53:EF:0C:F7:88:75:8D:D6:10 Certificate issuer: /CN=A91C779D/serialNumber=3480C56523348DDABA303E31F22DFA363F887E8F Certificate serial: A9 Authority key identifier: 34:80:C5:65:23:34:8D:DA:BA:30:3E:31:F2:2D:FA:36:3F:88:7E:8F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C779D/460D1C5AE2AE11EE86F33C1EC4F9AE02/0BBBE2B2E2B211EEACBA3341C4F9AE02.roa Signing time: Wed 05 Feb 2025 05:07:30 +0000 ROA not before: Wed 05 Feb 2025 05:07:30 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 152337 IP address blocks: 157.15.6.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C779D/460D1C5AE2AE11EE86F33C1EC4F9AE02/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.crl rsync://rpki.apnic.net/member_repository/A91C779D/460D1C5AE2AE11EE86F33C1EC4F9AE02/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:42:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 169 (0xa9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C779D, serialNumber=3480C56523348DDABA303E31F22DFA363F887E8F Validity Not Before: Feb 5 05:07:30 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67a2f211-0f77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:98:77:31:f5:11:39:a9:af:ff:7a:8a:f3:39: ad:24:a9:9f:54:3e:35:5e:d8:7a:00:5d:2a:e7:e1: 3e:da:c5:b1:9a:7e:b2:7e:b4:e1:01:cd:20:dc:4d: 3f:93:20:ba:cd:89:a9:1a:7b:97:01:3f:90:5b:08: ee:89:0d:00:cb:a5:e5:77:e1:29:4b:a9:24:5a:cb: 16:20:77:5d:5f:b1:91:98:6d:c2:4e:63:39:e3:3a: c4:f7:a1:50:e9:e7:d5:0a:fb:ab:86:1f:70:76:d5: d9:4b:0f:3e:5e:3f:2e:4f:02:da:14:e7:04:c2:00: f8:87:0b:97:ab:a2:74:59:c5:9d:67:35:b5:50:a2: 07:8b:4f:e1:86:38:83:13:77:11:6f:c1:73:c4:55: 5b:f9:f9:4a:0c:86:78:8b:2d:1f:c6:0a:b2:34:de: ad:6e:06:ed:f5:5d:bf:ef:59:d4:b3:2e:06:27:68: 75:63:bd:aa:fa:47:42:12:f9:01:12:43:24:8d:8f: 5f:ff:a6:63:e4:07:0b:9c:85:3c:e0:33:35:6d:62: f1:ee:5a:4e:20:cb:02:e1:f2:12:e8:0d:fc:dc:60: 5c:48:83:86:20:9a:b8:47:92:29:35:02:e3:89:cc: 53:7b:85:85:7d:a8:d6:d3:af:1f:f1:59:ef:d6:d8: 84:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:5B:74:20:1D:FE:C4:5C:ED:C2:E3:53:EF:0C:F7:88:75:8D:D6:10 X509v3 Authority Key Identifier: keyid:34:80:C5:65:23:34:8D:DA:BA:30:3E:31:F2:2D:FA:36:3F:88:7E:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C779D/460D1C5AE2AE11EE86F33C1EC4F9AE02/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NIDFZSM0jdq6MD4x8i36Nj-Ifo8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C779D/460D1C5AE2AE11EE86F33C1EC4F9AE02/0BBBE2B2E2B211EEACBA3341C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.15.6.0/23 Signature Algorithm: sha256WithRSAEncryption 3c:4c:b8:1e:f5:92:77:1f:cb:0a:d3:0e:67:b5:a2:7f:9f:fe: 94:25:76:f9:6a:ae:f2:fd:36:c4:18:2a:48:9c:9a:71:c1:52: 85:00:55:d0:73:ef:ee:2b:3f:25:a8:e1:cb:ae:50:5f:7b:ff: 33:62:ac:5f:34:7d:14:dc:92:57:eb:c0:76:cf:a9:6c:8a:9a: 98:f2:52:1c:2d:01:a1:8d:f4:cd:c1:95:14:ce:00:65:86:8a: 59:87:18:20:70:f7:ed:e1:72:d6:0d:ca:f4:6d:13:76:14:aa: 84:65:97:12:9a:8a:b8:1e:a9:d8:7f:1e:71:6e:0e:2e:5e:0e: 5c:e1:dd:8c:da:ee:3f:b6:ff:28:31:7b:ba:51:88:b3:b4:f9: f9:50:18:5f:3d:69:80:74:df:1c:e4:c1:4a:03:db:34:8d:ab: 30:ff:af:52:39:71:e2:19:53:e2:f9:55:b6:4e:2c:0d:0d:fd: 17:ef:d4:b7:fb:5e:65:2b:f2:4d:05:c4:e9:c0:d5:2f:0e:c3: fc:70:4f:22:0d:b4:25:e8:e9:9a:63:ab:01:be:59:61:ea:22: 7e:a1:b8:af:99:9c:68:d9:07:88:be:cb:a4:1f:64:09:d6:a4: 6d:67:b2:68:35:bc:d8:12:11:61:3b:1a:51:3f:98:76:d4:8a: 7c:fa:e3:52 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc3OUQxMTAvBgNVBAUTKDM0ODBDNTY1MjMzNDhEREFCQTMwM0UzMUYyMkRGQTM2 M0Y4ODdFOEYwHhcNMjUwMjA1MDUwNzMwWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2EyZjIxMS0wZjc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo5h3MfUROamv/3qK8zmtJKmfVD41Xth6AF0q5+E+2sWxmn6yfrThAc0g3E0/ kyC6zYmpGnuXAT+QWwjuiQ0Ay6Xld+EpS6kkWssWIHddX7GRmG3CTmM54zrE96FQ 6efVCvurhh9wdtXZSw8+Xj8uTwLaFOcEwgD4hwuXq6J0WcWdZzW1UKIHi0/hhjiD E3cRb8FzxFVb+flKDIZ4iy0fxgqyNN6tbgbt9V2/71nUsy4GJ2h1Y72q+kdCEvkB EkMkjY9f/6Zj5AcLnIU84DM1bWLx7lpOIMsC4fIS6A383GBcSIOGIJq4R5IpNQLj icxTe4WFfajW068f8Vnv1tiEawIDAQABo4IClTCCApEwHQYDVR0OBBYEFI1bdCAd /sRc7cLjU+8M94h1jdYQMB8GA1UdIwQYMBaAFDSAxWUjNI3aujA+MfIt+jY/iH6P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzc5RC80NjBEMUM1QUUy QUUxMUVFODZGMzNDMUVDNEY5QUUwMi9OSURGWlNNMGpkcTZNRDR4OGkzNk5qLUlm bzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL05JREZaU00wamRxNk1ENHg4aTM2TmotSWZvOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Qzc3OUQvNDYwRDFDNUFFMkFFMTFFRTg2RjMzQzFFQzRGOUFFMDIvMEJCQkUyQjJF MkIyMTFFRUFDQkEzMzQxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGdDwYwDQYJKoZIhvcNAQELBQADggEBADxMuB71kncfywrT Dme1on+f/pQldvlqrvL9NsQYKkicmnHBUoUAVdBz7+4rPyWo4cuuUF97/zNirF80 fRTcklfrwHbPqWyKmpjyUhwtAaGN9M3BlRTOAGWGilmHGCBw9+3hctYNyvRtE3YU qoRllxKairgeqdh/HnFuDi5eDlzh3Yza7j+2/ygxe7pRiLO0+flQGF89aYB03xzk wUoD2zSNqzD/r1I5ceIZU+L5VbZOLA0N/Rfv1Lf7XmUr8k0FxOnA1S8Ow/xwTyIN tCXo6ZpjqwG+WWHqIn6huK+ZnGjZB4i+y6QfZAnWpG1nsmg1vNgSEWE7GlE/mHbU inz641I= -----END CERTIFICATE-----Generated at Sat Apr 26 15:01:51 2025 by rpki-client