$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/168AD09A04EF11EA9060B76BC4F9AE02.roa File: 168AD09A04EF11EA9060B76BC4F9AE02.roa (raw, json) Hash identifier: s3U0q40HWyXJCTwtjWa8KKHr421/tnOx6JMPLRqROA8= Subject key identifier: 32:9A:6E:D8:0B:9C:41:BF:97:98:64:39:3D:24:9E:70:8E:5A:54:87 Certificate issuer: /CN=A91D8EAF/serialNumber=F1D20471AE318936D793B46DB4482207D972458B Certificate serial: 0C11 Authority key identifier: F1:D2:04:71:AE:31:89:36:D7:93:B4:6D:B4:48:22:07:D9:72:45:8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8dIEca4xiTbXk7RttEgiB9lyRYs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/168AD09A04EF11EA9060B76BC4F9AE02.roa Signing time: Tue 24 Dec 2024 18:36:36 +0000 ROA not before: Tue 24 Dec 2024 18:36:36 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 139360 IP address blocks: 202.47.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.crl rsync://rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8dIEca4xiTbXk7RttEgiB9lyRYs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:22:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3089 (0xc11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8EAF, serialNumber=F1D20471AE318936D793B46DB4482207D972458B Validity Not Before: Dec 24 18:36:36 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=676aff34-170f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:ce:83:69:6a:27:0a:3a:44:21:3f:7a:69:bd: 2f:cf:75:72:a5:b9:52:c1:ac:bc:ec:46:51:77:35: 89:99:c5:ab:5b:60:a2:e0:e9:6a:c6:46:af:bd:1e: c5:bd:78:52:dc:23:82:55:e9:1c:f9:d6:d3:2f:de: 23:98:58:b8:37:28:f3:af:bd:f5:61:45:4c:74:bf: ef:5a:1f:6b:34:7f:67:b7:74:8a:a6:63:c6:78:6c: 06:ee:c2:8b:ea:aa:d3:4d:4e:37:1e:1f:6a:91:c0: c6:17:34:fa:68:a6:14:0b:70:96:38:b0:ca:a1:a7: 4f:fa:12:25:03:89:cf:a9:f8:b4:21:41:10:0a:88: ca:dc:95:3b:a4:f5:c8:a5:75:80:47:43:d8:81:ef: 9a:b8:80:d7:12:79:e8:ea:b7:e8:c6:85:64:f7:a2: 74:14:9b:cc:30:24:51:9b:1f:cf:17:61:8b:30:a2: 5d:92:d7:33:bf:49:a3:2d:d2:de:46:6c:26:1a:79: a6:2e:ef:d8:b2:de:73:bf:ff:c8:3f:dc:23:a8:78: ca:4a:fa:77:0e:87:08:f9:e1:9e:ce:0e:63:80:07: d3:dd:73:c7:e8:ed:91:b9:f1:01:89:01:32:21:e2: 5e:1c:61:eb:1b:22:46:8e:93:2b:1e:1c:71:68:67: 8d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:9A:6E:D8:0B:9C:41:BF:97:98:64:39:3D:24:9E:70:8E:5A:54:87 X509v3 Authority Key Identifier: keyid:F1:D2:04:71:AE:31:89:36:D7:93:B4:6D:B4:48:22:07:D9:72:45:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8dIEca4xiTbXk7RttEgiB9lyRYs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/168AD09A04EF11EA9060B76BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.47.124.0/24 Signature Algorithm: sha256WithRSAEncryption 69:22:fa:f5:64:e7:ac:7d:46:0f:6c:6f:88:ef:10:e6:70:d7: 5e:6d:a3:5b:68:50:b2:d7:69:32:21:ca:3e:b5:df:0e:74:a6: aa:fb:36:0e:7b:c9:d3:2e:16:a6:6c:69:24:00:58:47:19:b3: 68:95:51:a2:6d:ee:4b:dc:d5:79:f9:23:76:af:ec:58:ec:e7: b2:6c:09:9f:c8:ec:f8:b9:fa:c6:fc:ca:09:82:3b:40:1d:dc: 9b:5e:ae:fc:4a:f2:c7:18:bf:18:06:5f:89:be:2f:36:6b:b1: ee:84:da:6d:d1:6d:e2:5f:e1:32:5e:9b:5e:46:6d:67:d3:d7: 35:3e:66:13:2c:3d:f2:5f:ab:e2:a3:e7:5d:7f:8e:d7:4e:cc: 5b:50:7f:12:44:5a:53:b6:03:4c:df:41:9a:7b:5c:e3:1c:43: 13:27:e7:cb:d5:a5:8f:51:fc:02:45:9e:aa:43:93:c6:8b:03: 09:43:7e:fd:aa:ba:2d:68:79:81:73:cf:e6:05:21:4b:13:61: 52:c4:3d:0a:2e:8f:04:12:36:9b:61:f0:a7:8c:e4:47:fd:fe: 7c:f8:0d:c1:4d:5a:df:34:44:58:17:1b:ef:75:92:0d:8a:41: 65:cc:8a:36:14:d3:4b:e1:5b:5f:44:39:ce:88:e9:bb:70:c3: fb:24:00:1f -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDBEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDhFQUYxMTAvBgNVBAUTKEYxRDIwNDcxQUUzMTg5MzZENzkzQjQ2REI0NDgyMjA3 RDk3MjQ1OEIwHhcNMjQxMjI0MTgzNjM2WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzZhZmYzNC0xNzBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8M6DaWonCjpEIT96ab0vz3VypblSway87EZRdzWJmcWrW2Ci4OlqxkavvR7F vXhS3COCVekc+dbTL94jmFi4Nyjzr731YUVMdL/vWh9rNH9nt3SKpmPGeGwG7sKL 6qrTTU43Hh9qkcDGFzT6aKYUC3CWOLDKoadP+hIlA4nPqfi0IUEQCojK3JU7pPXI pXWAR0PYge+auIDXEnno6rfoxoVk96J0FJvMMCRRmx/PF2GLMKJdktczv0mjLdLe RmwmGnmmLu/Yst5zv//IP9wjqHjKSvp3DocI+eGezg5jgAfT3XPH6O2RufEBiQEy IeJeHGHrGyJGjpMrHhxxaGeNYwIDAQABo4IClTCCApEwHQYDVR0OBBYEFDKabtgL nEG/l5hkOT0knnCOWlSHMB8GA1UdIwQYMBaAFPHSBHGuMYk215O0bbRIIgfZckWL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEVBRi8xMEIwRTNEMDA0 RUExMUVBQkVEQzgxNjFDNEY5QUUwMi84ZElFY2E0eGlUYlhrN1J0dEVnaUI5bHlS WXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhkSUVjYTR4aVRiWGs3UnR0RWdpQjlseVJZcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDhFQUYvMTBCMEUzRDAwNEVBMTFFQUJFREM4MTYxQzRGOUFFMDIvMTY4QUQwOUEw NEVGMTFFQTkwNjBCNzZCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADKL3wwDQYJKoZIhvcNAQELBQADggEBAGki+vVk56x9Rg9s b4jvEOZw115to1toULLXaTIhyj613w50pqr7Ng57ydMuFqZsaSQAWEcZs2iVUaJt 7kvc1Xn5I3av7Fjs57JsCZ/I7Pi5+sb8ygmCO0Ad3JtervxK8scYvxgGX4m+LzZr se6E2m3RbeJf4TJem15GbWfT1zU+ZhMsPfJfq+Kj511/jtdOzFtQfxJEWlO2A0zf QZp7XOMcQxMn58vVpY9R/AJFnqpDk8aLAwlDfv2qui1oeYFzz+YFIUsTYVLEPQou jwQSNpth8KeM5Ef9/nz4DcFNWt80RFgXG+91kg2KQWXMijYU00vhW19EOc6I6btw w/skAB8= -----END CERTIFICATE-----Generated at Sat Apr 26 08:09:39 2025 by rpki-client