$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/83ECD7C40CCA11ED97820077C4F9AE02.roa File: 83ECD7C40CCA11ED97820077C4F9AE02.roa (raw, json) Hash identifier: tsWCAJh3hDUuF0jt3mDhnNo48pJ1cTxWnbkE+ZQXBxw= Subject key identifier: A3:E9:BD:31:AB:62:DF:79:43:0F:2C:98:90:87:C4:03:B2:36:DF:67 Certificate issuer: /CN=A91CFFA0/serialNumber=05433C3AEA8A49702C9A82EEC95D16B5503CEA60 Certificate serial: 0D09 Authority key identifier: 05:43:3C:3A:EA:8A:49:70:2C:9A:82:EE:C9:5D:16:B5:50:3C:EA:60 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BUM8OuqKSXAsmoLuyV0WtVA86mA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/83ECD7C40CCA11ED97820077C4F9AE02.roa Signing time: Tue 14 Jan 2025 18:16:07 +0000 ROA not before: Tue 14 Jan 2025 18:16:07 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 133772 IP address blocks: 134.159.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/BUM8OuqKSXAsmoLuyV0WtVA86mA.crl rsync://rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/BUM8OuqKSXAsmoLuyV0WtVA86mA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BUM8OuqKSXAsmoLuyV0WtVA86mA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3337 (0xd09) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFFA0, serialNumber=05433C3AEA8A49702C9A82EEC95D16B5503CEA60 Validity Not Before: Jan 14 18:16:07 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=6786a9e7-d25c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:01:4f:89:b3:29:26:c3:87:82:7a:3d:54:40: 83:fb:70:b0:d2:10:68:3f:9d:c3:32:3c:0f:39:07: 9f:a7:89:0f:52:81:51:14:ab:5d:fe:9e:37:02:55: 84:a5:f4:b0:d2:07:ba:84:62:59:82:da:3e:0c:74: c9:c1:8e:90:55:a2:bd:bc:d1:36:eb:92:43:9a:ef: ba:3e:aa:3c:a3:3d:39:ae:65:2b:98:5d:4c:c0:83: 87:6a:44:d1:45:52:44:6b:a2:80:ed:49:31:76:9a: da:aa:63:4b:54:e0:8d:60:76:b1:0b:88:5c:97:be: 5d:2d:32:90:af:3d:38:0b:25:6f:b6:11:c7:fc:02: 62:5b:6c:83:45:e2:86:f6:61:db:7c:ea:b2:0a:bb: 01:88:41:22:b2:3d:7a:2c:33:f1:a9:a4:63:73:cd: 68:53:96:9e:9a:74:ac:e3:1d:40:d9:f2:d4:1a:a4: 35:b4:b5:ca:58:43:ae:e2:b5:58:b8:1c:ee:62:14: db:93:6b:9c:77:b5:3a:0b:f8:99:2e:1e:a4:44:83: 22:19:92:15:3b:7a:71:80:7d:ef:17:f2:11:ed:90: 78:c0:65:9c:5b:41:99:aa:a5:c1:e6:34:1f:1a:32: 3a:c1:be:d4:9e:6f:b1:0d:77:51:36:7b:80:d0:bd: 43:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:E9:BD:31:AB:62:DF:79:43:0F:2C:98:90:87:C4:03:B2:36:DF:67 X509v3 Authority Key Identifier: keyid:05:43:3C:3A:EA:8A:49:70:2C:9A:82:EE:C9:5D:16:B5:50:3C:EA:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/BUM8OuqKSXAsmoLuyV0WtVA86mA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BUM8OuqKSXAsmoLuyV0WtVA86mA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/83ECD7C40CCA11ED97820077C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 134.159.80.0/24 Signature Algorithm: sha256WithRSAEncryption 11:f0:63:aa:60:16:d5:99:1a:f2:7b:d0:06:83:14:c7:33:f5: e0:a2:4d:f7:e8:6e:b9:30:10:10:d7:f2:2b:28:8e:a4:17:07: 0f:c3:e9:3a:ec:5c:65:72:0c:22:b1:5e:81:a0:e0:a4:bb:68: 12:dc:c5:2a:aa:c5:bd:56:a4:95:9e:4d:36:d1:06:e1:3a:72: a1:85:8a:17:97:38:8c:90:65:c3:41:e9:72:15:9a:61:e5:9b: c3:e6:ff:b7:a2:dc:d5:05:bf:e8:f8:fe:5f:63:c2:12:de:86: 34:b9:ea:19:5f:04:82:23:4e:26:1e:f7:dd:47:52:0c:f8:a9: 43:d3:86:7f:ce:13:da:71:1e:4b:00:91:d6:14:8b:6d:21:dd: 1a:ef:2b:7f:e6:83:3e:dc:15:2e:33:ce:9b:71:31:a8:6b:95: da:43:3f:3b:cf:4c:7d:fe:f3:e4:bb:1d:b2:1f:cb:8c:e3:f7: 6c:6c:b5:d0:f4:4f:0b:e3:2c:cc:19:6d:f8:82:36:5a:6d:7d: eb:1f:f5:26:e3:4a:c2:df:46:f2:3f:c6:dc:58:fb:db:87:18: d3:52:dd:45:24:9f:0e:fd:0c:2e:a6:e3:10:e3:c2:76:08:4c: 9c:10:75:fc:81:7f:5a:fc:88:ff:c6:55:32:57:c6:10:3b:7c: b6:ef:da:ca -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZGQTAxMTAvBgNVBAUTKDA1NDMzQzNBRUE4QTQ5NzAyQzlBODJFRUM5NUQxNkI1 NTAzQ0VBNjAwHhcNMjUwMTE0MTgxNjA3WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02Nzg2YTllNy1kMjVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtAFPibMpJsOHgno9VECD+3Cw0hBoP53DMjwPOQefp4kPUoFRFKtd/p43AlWE pfSw0ge6hGJZgto+DHTJwY6QVaK9vNE265JDmu+6Pqo8oz05rmUrmF1MwIOHakTR RVJEa6KA7UkxdpraqmNLVOCNYHaxC4hcl75dLTKQrz04CyVvthHH/AJiW2yDReKG 9mHbfOqyCrsBiEEisj16LDPxqaRjc81oU5aemnSs4x1A2fLUGqQ1tLXKWEOu4rVY uBzuYhTbk2ucd7U6C/iZLh6kRIMiGZIVO3pxgH3vF/IR7ZB4wGWcW0GZqqXB5jQf GjI6wb7Unm+xDXdRNnuA0L1DKQIDAQABo4IClTCCApEwHQYDVR0OBBYEFKPpvTGr Yt95Qw8smJCHxAOyNt9nMB8GA1UdIwQYMBaAFAVDPDrqiklwLJqC7sldFrVQPOpg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkZBMC8xNTBCRjY5MEQ4 Q0IxMUU5QkFFMjREMjFDNEY5QUUwMi9CVU04T3VxS1NYQXNtb0x1eVYwV3RWQTg2 bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0JVTThPdXFLU1hBc21vTHV5VjBXdFZBODZtQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0ZGQTAvMTUwQkY2OTBEOENCMTFFOUJBRTI0RDIxQzRGOUFFMDIvODNFQ0Q3QzQw Q0NBMTFFRDk3ODIwMDc3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBACGn1AwDQYJKoZIhvcNAQELBQADggEBABHwY6pgFtWZGvJ7 0AaDFMcz9eCiTffobrkwEBDX8isojqQXBw/D6TrsXGVyDCKxXoGg4KS7aBLcxSqq xb1WpJWeTTbRBuE6cqGFiheXOIyQZcNB6XIVmmHlm8Pm/7ei3NUFv+j4/l9jwhLe hjS56hlfBIIjTiYe991HUgz4qUPThn/OE9pxHksAkdYUi20h3RrvK3/mgz7cFS4z zptxMahrldpDPzvPTH3+8+S7HbIfy4zj92xstdD0TwvjLMwZbfiCNlptfesf9Sbj SsLfRvI/xtxY+9uHGNNS3UUknw79DC6m4xDjwnYITJwQdfyBf1r8iP/GVTJXxhA7 fLbv2so= -----END CERTIFICATE-----Generated at Sat Apr 26 12:35:58 2025 by rpki-client