$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/2B6A4C480CDC11F0BAA65183C4F9AE02.roa File: 2B6A4C480CDC11F0BAA65183C4F9AE02.roa (raw, json) Hash identifier: BqSp/Te9KMd8YfouUPeFKU/cx03YQIHgdt5+594sWOw= Subject key identifier: D5:E2:EE:91:9B:3E:86:C8:14:7D:22:23:C2:8B:BF:78:D5:AA:9F:E4 Certificate issuer: /CN=A91E5EEA/serialNumber=D60C30B1A9F59C959AD4967F2F6D572ACB75299C Certificate serial: 28 Authority key identifier: D6:0C:30:B1:A9:F5:9C:95:9A:D4:96:7F:2F:6D:57:2A:CB:75:29:9C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1gwwsan1nJWa1JZ_L21XKst1KZw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/2B6A4C480CDC11F0BAA65183C4F9AE02.roa Signing time: Sat 29 Mar 2025 20:27:01 +0000 ROA not before: Sat 29 Mar 2025 20:27:01 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 153340 IP address blocks: 160.187.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.crl rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1gwwsan1nJWa1JZ_L21XKst1KZw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:36:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5EEA, serialNumber=D60C30B1A9F59C959AD4967F2F6D572ACB75299C Validity Not Before: Mar 29 20:27:01 2025 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=67e85795-0784 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:94:0c:8a:4a:fa:02:e9:aa:f1:ff:79:bd:94: 64:dd:8a:9d:37:26:4d:92:b2:e1:50:97:bc:48:79: c4:61:f0:65:24:21:21:40:92:fe:60:39:0c:24:92: 75:40:d3:a2:6c:bd:43:f5:d6:fb:12:53:7d:24:ad: 9c:f5:46:89:bd:cc:1b:e7:2f:cb:63:6b:6e:6c:46: 4b:fa:ba:63:ba:b2:2f:52:c3:1d:92:b9:9a:24:cf: ea:9c:c7:c1:b6:b5:8b:02:f2:9b:ac:b0:46:1d:d1: f2:13:45:3b:cc:c2:f9:fd:5e:06:c0:dd:d1:94:f9: ba:70:43:17:78:24:4a:e0:60:2e:3b:fc:25:fb:e7: 01:76:ad:df:cd:31:c5:fb:16:ac:9a:63:97:51:88: 97:b6:8f:41:a1:9d:d8:60:e8:37:8a:21:73:48:37: 43:2c:a4:43:13:08:ff:49:62:88:68:b6:6c:9e:02: a5:0f:1c:09:de:8d:a9:58:9d:da:f7:24:d8:41:44: 24:f1:57:aa:96:51:f3:b8:54:f7:cd:97:83:d2:eb: 32:de:56:5f:a4:bc:04:f4:a5:ee:9f:bd:ef:73:eb: 0b:a8:03:ef:6c:b4:d2:fc:a0:e5:54:92:ff:a2:94: d9:b2:d9:d1:dd:8e:8a:2f:45:c2:79:52:e7:71:83: a4:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:E2:EE:91:9B:3E:86:C8:14:7D:22:23:C2:8B:BF:78:D5:AA:9F:E4 X509v3 Authority Key Identifier: keyid:D6:0C:30:B1:A9:F5:9C:95:9A:D4:96:7F:2F:6D:57:2A:CB:75:29:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1gwwsan1nJWa1JZ_L21XKst1KZw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/2B6A4C480CDC11F0BAA65183C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.187.127.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:ac:bf:40:54:c3:af:97:da:b6:db:75:81:c9:e8:12:5b:98: fa:11:25:5c:12:a5:9b:69:1a:0c:09:1f:5f:cc:b8:a4:d5:09: 73:f1:f2:d0:20:5c:0a:f2:08:06:05:8d:98:40:ba:42:a0:15: 92:c4:64:b1:96:0b:98:14:ee:8c:3c:f5:f3:b7:c5:1a:25:25: 36:02:7c:d8:60:d4:77:14:cd:cf:98:3c:f5:ad:be:d5:23:e9: ab:e3:12:ae:62:82:60:09:27:73:e1:d1:dc:c5:55:0d:40:7a: 03:8a:0e:15:dd:eb:4c:e3:2d:0e:25:60:09:24:04:67:e8:7e: ec:ae:3e:f6:27:38:a5:52:26:1f:93:a7:1e:4f:c2:e9:39:21: 54:c9:b3:b1:45:49:33:a6:c4:a2:51:53:8d:40:9c:6f:c2:fa: 25:22:62:d2:d3:0e:5d:1a:a5:8e:a6:e3:eb:e6:2b:2a:49:79: 64:c2:c4:49:ae:92:ac:7e:00:92:60:4f:4c:db:cc:76:b3:06: 42:42:34:98:31:70:9d:6e:dd:1d:4b:f1:48:e6:c9:b4:73:40: ad:e7:12:cf:f9:16:5d:65:08:8e:b6:32:29:13:a0:a7:2c:ad: 15:6a:86:de:d6:a6:34:60:34:08:cc:73:1d:e8:99:95:a1:65: 4c:55:e7:99 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NUVFQTExMC8GA1UEBRMoRDYwQzMwQjFBOUY1OUM5NTlBRDQ5NjdGMkY2RDU3MkFD Qjc1Mjk5QzAeFw0yNTAzMjkyMDI3MDFaFw0yNTEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY3ZTg1Nzk1LTA3ODQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD8lAyKSvoC6arx/3m9lGTdip03Jk2SsuFQl7xIecRh8GUkISFAkv5gOQwkknVA 06JsvUP11vsSU30krZz1Rom9zBvnL8tja25sRkv6umO6si9Swx2SuZokz+qcx8G2 tYsC8pussEYd0fITRTvMwvn9XgbA3dGU+bpwQxd4JErgYC47/CX75wF2rd/NMcX7 FqyaY5dRiJe2j0Ghndhg6DeKIXNIN0MspEMTCP9JYohotmyeAqUPHAnejalYndr3 JNhBRCTxV6qWUfO4VPfNl4PS6zLeVl+kvAT0pe6fve9z6wuoA+9stNL8oOVUkv+i lNmy2dHdjoovRcJ5Uudxg6TvAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU1eLukZs+ hsgUfSIjwou/eNWqn+QwHwYDVR0jBBgwFoAU1gwwsan1nJWa1JZ/L21XKst1KZww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1RUVBL0UzRkNEMTQ0RDRD RjExRUY5OERGOTgyQkM0RjlBRTAyLzFnd3dzYW4xbkpXYTFKWl9MMjFYS3N0MUta dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMWd3d3NhbjFuSldhMUpaX0wyMVhLc3QxS1p3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUVFQS9FM0ZDRDE0NEQ0Q0YxMUVGOThERjk4MkJDNEY5QUUwMi8yQjZBNEM0ODBD REMxMUYwQkFBNjUxODNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAKC7fzANBgkqhkiG9w0BAQsFAAOCAQEADay/QFTDr5fattt1 gcnoEluY+hElXBKlm2kaDAkfX8y4pNUJc/Hy0CBcCvIIBgWNmEC6QqAVksRksZYL mBTujDz187fFGiUlNgJ82GDUdxTNz5g89a2+1SPpq+MSrmKCYAknc+HR3MVVDUB6 A4oOFd3rTOMtDiVgCSQEZ+h+7K4+9ic4pVImH5OnHk/C6TkhVMmzsUVJM6bEolFT jUCcb8L6JSJi0tMOXRqljqbj6+YrKkl5ZMLESa6SrH4AkmBPTNvMdrMGQkI0mDFw nW7dHUvxSObJtHNArecSz/kWXWUIjrYyKROgpyytFWqG3tamNGA0CMxzHeiZlaFl TFXnmQ== -----END CERTIFICATE-----Generated at Sat Apr 26 14:57:30 2025 by rpki-client