$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/61CC010AE4BA11EE8037FD6DC4F9AE02.roa File: 61CC010AE4BA11EE8037FD6DC4F9AE02.roa (raw, json) Hash identifier: lFYxSl2pOGkakLM+J9NHER06FELZm5NAXjqBVUZYCW4= Subject key identifier: B7:8A:DB:F5:B2:20:E2:C2:9F:2F:F7:E8:C4:87:59:9D:DE:7D:98:54 Certificate issuer: /CN=A91F2B47/serialNumber=17D5FE323EBFD9A8D344E77B73799A8E75624352 Certificate serial: 0222 Authority key identifier: 17:D5:FE:32:3E:BF:D9:A8:D3:44:E7:7B:73:79:9A:8E:75:62:43:52 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/61CC010AE4BA11EE8037FD6DC4F9AE02.roa Signing time: Wed 05 Mar 2025 03:48:07 +0000 ROA not before: Wed 05 Mar 2025 03:48:07 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 140217 IP address blocks: 166.120.192.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.crl rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 May 2025 02:40:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 546 (0x222) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2B47, serialNumber=17D5FE323EBFD9A8D344E77B73799A8E75624352 Validity Not Before: Mar 5 03:48:07 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67c7c977-de0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:8f:b8:85:48:af:20:ef:ba:76:48:ad:41:82: 05:cb:93:3b:47:33:5c:88:53:7d:fa:ac:48:3d:d4: 6c:4a:5a:5c:df:f3:66:67:e3:ea:e2:fa:4d:af:85: 97:80:a8:8a:ea:b8:a3:8f:4d:c0:77:06:82:31:2d: f3:ee:7d:48:84:c8:da:3b:89:7a:cf:46:07:fa:51: 63:9f:4a:0b:75:45:9d:57:8d:13:7d:d8:52:79:5c: 5e:f4:cb:d6:c2:17:40:35:ad:35:5a:fa:44:bc:df: 01:32:4a:27:3e:2f:43:34:d3:36:54:3d:a9:0b:ed: e9:53:c9:9b:5c:a4:82:a1:a3:bc:9f:c0:2d:99:ef: 91:fc:20:2d:79:2c:e9:de:f9:40:5b:3f:79:b3:2b: 49:73:4f:66:38:fe:e4:12:07:50:bb:06:74:66:51: fe:8b:b2:9e:a3:d2:b5:e9:af:d7:a2:80:53:13:1b: 56:7b:c9:5b:2f:e3:83:90:1f:ca:df:86:f5:42:bb: b5:3d:9c:28:0e:b1:a9:99:b4:6f:dc:c5:f7:c6:b4: 28:b7:97:10:1e:51:b7:6e:53:37:59:82:34:15:88: 40:b7:76:4a:2d:64:8a:dd:a9:73:bb:8c:a5:fc:83: d8:67:79:03:02:59:73:1a:c6:b0:87:3c:b5:68:0e: e7:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:8A:DB:F5:B2:20:E2:C2:9F:2F:F7:E8:C4:87:59:9D:DE:7D:98:54 X509v3 Authority Key Identifier: keyid:17:D5:FE:32:3E:BF:D9:A8:D3:44:E7:7B:73:79:9A:8E:75:62:43:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/61CC010AE4BA11EE8037FD6DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 166.120.192.0/22 Signature Algorithm: sha256WithRSAEncryption 88:08:13:c5:fb:eb:c2:1e:1e:1b:54:9e:b2:92:20:35:29:40: 53:9f:4f:b2:2a:b4:26:92:36:a8:96:c6:69:c7:ec:8f:f7:eb: 55:59:3b:6a:b0:0b:9c:83:cd:28:14:0c:06:78:b3:72:8d:7f: 82:89:4e:d5:e6:23:f9:9d:21:f0:3f:53:af:79:60:73:80:81: 0a:6f:ad:7e:6e:d3:49:f7:31:e5:87:40:df:30:d1:83:d9:67: 3a:23:07:f2:47:13:51:7a:3f:f6:83:2a:18:49:36:01:57:cf: 04:76:5d:b8:53:11:c0:e3:18:de:c9:9a:17:e0:52:2d:85:7f: 73:1f:da:4a:36:4d:19:98:b4:53:ee:a3:ad:3f:b2:9c:e4:b2: 38:7c:2c:29:c5:51:33:67:59:dd:7c:88:7f:20:b0:b4:63:0d: d0:8e:8d:22:0b:06:9d:18:7d:b3:92:15:0d:80:59:e0:25:10: 78:dc:87:c8:30:da:07:a2:cd:f1:c3:fe:03:76:1f:ec:88:26: f7:19:45:af:55:7e:47:b6:48:c7:bb:60:9a:4d:1c:98:25:fe: d9:d1:9e:31:e7:f5:47:fb:c7:2b:5e:71:dc:3d:e3:ec:e6:1d: ed:fe:c1:ae:74:18:79:79:52:0e:dd:d5:1d:41:74:2f:ad:ce: 18:3c:72:dc -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAiIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJCNDcxMTAvBgNVBAUTKDE3RDVGRTMyM0VCRkQ5QThEMzQ0RTc3QjczNzk5QThF NzU2MjQzNTIwHhcNMjUwMzA1MDM0ODA3WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2M3Yzk3Ny1kZTBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw4+4hUivIO+6dkitQYIFy5M7RzNciFN9+qxIPdRsSlpc3/NmZ+Pq4vpNr4WX gKiK6rijj03AdwaCMS3z7n1IhMjaO4l6z0YH+lFjn0oLdUWdV40TfdhSeVxe9MvW whdANa01WvpEvN8BMkonPi9DNNM2VD2pC+3pU8mbXKSCoaO8n8Atme+R/CAteSzp 3vlAWz95sytJc09mOP7kEgdQuwZ0ZlH+i7Keo9K16a/XooBTExtWe8lbL+ODkB/K 34b1Qru1PZwoDrGpmbRv3MX3xrQot5cQHlG3blM3WYI0FYhAt3ZKLWSK3alzu4yl /IPYZ3kDAllzGsawhzy1aA7nEwIDAQABo4IClTCCApEwHQYDVR0OBBYEFLeK2/Wy IOLCny/36MSHWZ3efZhUMB8GA1UdIwQYMBaAFBfV/jI+v9mo00Tne3N5mo51YkNS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkI0Ny9FODhFOUM3RTMz QUYxMUVEQjYxMDc0MzRDNEY5QUUwMi9GOVgtTWo2XzJhalRST2Q3YzNtYWpuVmlR MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0Y5WC1NajZfMmFqVFJPZDdjM21ham5WaVExSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjJCNDcvRTg4RTlDN0UzM0FGMTFFREI2MTA3NDM0QzRGOUFFMDIvNjFDQzAxMEFF NEJBMTFFRTgwMzdGRDZEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAKmeMAwDQYJKoZIhvcNAQELBQADggEBAIgIE8X768IeHhtU nrKSIDUpQFOfT7IqtCaSNqiWxmnH7I/361VZO2qwC5yDzSgUDAZ4s3KNf4KJTtXm I/mdIfA/U695YHOAgQpvrX5u00n3MeWHQN8w0YPZZzojB/JHE1F6P/aDKhhJNgFX zwR2XbhTEcDjGN7JmhfgUi2Ff3Mf2ko2TRmYtFPuo60/spzksjh8LCnFUTNnWd18 iH8gsLRjDdCOjSILBp0YfbOSFQ2AWeAlEHjch8gw2geizfHD/gN2H+yIJvcZRa9V fke2SMe7YJpNHJgl/tnRnjHn9Uf7xytecdw94+zmHe3+wa50GHl5Ug7d1R1BdC+t zhg8ctw= -----END CERTIFICATE-----Generated at Tue Apr 29 19:57:15 2025 by rpki-client