$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/FF233C70E62111EFACA87766C4F9AE02.roa File: FF233C70E62111EFACA87766C4F9AE02.roa (raw, json) Hash identifier: J5BMXPUW8m7K2bOF3471IMNvup3jPF22uZ9URvu627E= Subject key identifier: 61:9B:34:97:6F:DF:81:5C:18:C5:02:88:C6:69:2F:BE:6D:52:F0:CF Certificate issuer: /CN=A91CEAE0/serialNumber=9DF4FEDFF92A9E7F6E02BFC054AD339853D9DD32 Certificate serial: B8 Authority key identifier: 9D:F4:FE:DF:F9:2A:9E:7F:6E:02:BF:C0:54:AD:33:98:53:D9:DD:32 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/FF233C70E62111EFACA87766C4F9AE02.roa Signing time: Sat 08 Feb 2025 13:38:36 +0000 ROA not before: Sat 08 Feb 2025 13:38:36 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 214189 IP address blocks: 160.22.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.crl rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:04:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 184 (0xb8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEAE0, serialNumber=9DF4FEDFF92A9E7F6E02BFC054AD339853D9DD32 Validity Not Before: Feb 8 13:38:36 2025 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=67a75e5c-1ed4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d5:94:57:28:40:f4:be:7a:a0:79:65:38:6f: ed:f8:8e:4a:c8:0d:24:25:94:b0:c1:8e:f7:65:4f: 69:81:52:16:33:93:c8:29:d9:41:6c:d4:c1:7f:d1: 9f:e5:99:d6:69:5f:91:99:0d:5f:18:19:a0:c0:ea: 33:e6:03:09:53:97:90:8a:c7:01:a2:3c:99:ec:60: 07:f9:c0:6d:e4:99:36:2d:de:09:d4:08:47:3f:37: 7c:64:fb:67:61:59:a0:c0:ca:5c:f6:58:91:58:d9: e8:34:0c:53:46:98:85:b9:06:15:a5:7c:7d:b7:d5: 56:2a:02:d8:19:94:17:81:72:9e:d7:40:b1:df:67: 77:ad:18:e2:8e:99:59:65:47:6a:77:fc:90:6a:1c: ff:ae:6c:49:dd:34:72:4b:0a:33:d3:c3:57:e3:1d: 43:3f:c1:b3:94:4a:81:78:2c:78:77:0b:c0:84:7e: 5b:db:87:e2:85:50:4d:c9:87:a8:e9:f5:36:4e:05: be:38:eb:6d:81:95:3b:d2:c9:ee:6c:47:fb:bc:46: 3f:94:dc:75:f7:48:a1:38:f3:0b:e9:85:fe:f5:53: e5:a6:a9:f3:9c:bf:8f:89:b9:7c:04:96:bf:4d:ac: f5:71:e4:d1:67:80:b7:0d:e1:ab:c7:c3:fe:ac:99: 47:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:9B:34:97:6F:DF:81:5C:18:C5:02:88:C6:69:2F:BE:6D:52:F0:CF X509v3 Authority Key Identifier: keyid:9D:F4:FE:DF:F9:2A:9E:7F:6E:02:BF:C0:54:AD:33:98:53:D9:DD:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/FF233C70E62111EFACA87766C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.22.155.0/24 Signature Algorithm: sha256WithRSAEncryption 98:19:d1:cf:b1:3d:91:d8:80:e1:e3:0b:7c:62:fe:a8:4f:f7: c1:19:55:3d:8d:98:2f:aa:1d:f6:4f:49:36:eb:5e:7c:3c:3c: b3:b2:03:4b:53:ea:41:98:1e:8c:16:4e:1d:51:61:be:7b:6e: 34:63:c9:25:55:48:f8:19:7d:ef:98:90:62:03:d8:67:eb:71: 1d:f4:b5:be:bd:79:3b:cc:f6:23:77:bf:d9:f8:90:64:cb:56: a3:1a:fb:57:11:c5:b1:5c:50:47:ec:28:7a:fa:a7:06:98:dd: a8:0e:b8:cf:5a:a0:0d:99:c8:04:a8:de:13:40:37:28:a3:42: a3:06:19:f4:fc:fd:7c:54:bd:3c:e7:b8:60:e1:d1:76:a1:06: 87:2a:6f:96:ec:55:d0:f3:4b:b0:bc:bd:99:47:3f:c4:e9:a9: 75:1a:53:db:bd:96:55:96:bf:5f:c9:23:af:63:9c:1c:e6:94: 09:d4:b9:bb:42:c0:76:59:a2:e0:83:ae:47:0b:6d:7f:07:ae: 87:0c:0f:9c:97:96:5d:08:a4:5d:5a:0c:cb:45:27:9c:91:b4: 37:22:88:b7:3c:00:b9:7f:41:b2:0b:d6:47:cc:9d:22:1c:ea: cd:a1:71:83:f6:67:bd:9a:c2:56:13:e3:e2:df:30:e6:b9:6e: 74:7b:b9:7e -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICALgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VBRTAxMTAvBgNVBAUTKDlERjRGRURGRjkyQTlFN0Y2RTAyQkZDMDU0QUQzMzk4 NTNEOUREMzIwHhcNMjUwMjA4MTMzODM2WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2E3NWU1Yy0xZWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvtWUVyhA9L56oHllOG/t+I5KyA0kJZSwwY73ZU9pgVIWM5PIKdlBbNTBf9Gf 5ZnWaV+RmQ1fGBmgwOoz5gMJU5eQiscBojyZ7GAH+cBt5Jk2Ld4J1AhHPzd8ZPtn YVmgwMpc9liRWNnoNAxTRpiFuQYVpXx9t9VWKgLYGZQXgXKe10Cx32d3rRjijplZ ZUdqd/yQahz/rmxJ3TRySwoz08NX4x1DP8GzlEqBeCx4dwvAhH5b24fihVBNyYeo 6fU2TgW+OOttgZU70snubEf7vEY/lNx190ihOPML6YX+9VPlpqnznL+Pibl8BJa/ Taz1ceTRZ4C3DeGrx8P+rJlHAwIDAQABo4IClTCCApEwHQYDVR0OBBYEFGGbNJdv 34FcGMUCiMZpL75tUvDPMB8GA1UdIwQYMBaAFJ30/t/5Kp5/bgK/wFStM5hT2d0y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUFFMC9BRUY2Mzc2MDE5 NjgxMUVGOEZGN0JFNkZDNEY5QUUwMi9uZlQtM19rcW5uOXVBcl9BVkswem1GUFoz VEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL25mVC0zX2txbm45dUFyX0FWSzB6bUZQWjNUSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0VBRTAvQUVGNjM3NjAxOTY4MTFFRjhGRjdCRTZGQzRGOUFFMDIvRkYyMzNDNzBF NjIxMTFFRkFDQTg3NzY2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBACgFpswDQYJKoZIhvcNAQELBQADggEBAJgZ0c+xPZHYgOHj C3xi/qhP98EZVT2NmC+qHfZPSTbrXnw8PLOyA0tT6kGYHowWTh1RYb57bjRjySVV SPgZfe+YkGID2GfrcR30tb69eTvM9iN3v9n4kGTLVqMa+1cRxbFcUEfsKHr6pwaY 3agOuM9aoA2ZyASo3hNANyijQqMGGfT8/XxUvTznuGDh0XahBocqb5bsVdDzS7C8 vZlHP8TpqXUaU9u9llWWv1/JI69jnBzmlAnUubtCwHZZouCDrkcLbX8HrocMD5yX ll0IpF1aDMtFJ5yRtDciiLc8ALl/QbIL1kfMnSIc6s2hcYP2Z72awlYT4+LfMOa5 bnR7uX4= -----END CERTIFICATE-----Generated at Sat Apr 26 14:05:50 2025 by rpki-client