$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5BCC/B1181B10CE7811EF80EF4D44C4F9AE02/5FEB0DA8E90611EFA74B611DC4F9AE02.roa File: 5FEB0DA8E90611EFA74B611DC4F9AE02.roa (raw, json) Hash identifier: hwuul9zOvXSQLDdgabC6PgRyfpY9SzpmngkkmJxvu+k= Subject key identifier: 98:5F:85:33:52:0D:34:A7:41:B7:7E:6A:8E:A8:72:56:A9:C6:EB:ED Certificate issuer: /CN=A91F5BCC/serialNumber=B3A1EA607A3F75FE78AA842EB89092599110FDC6 Certificate serial: 16 Authority key identifier: B3:A1:EA:60:7A:3F:75:FE:78:AA:84:2E:B8:90:92:59:91:10:FD:C6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s6HqYHo_df54qoQuuJCSWZEQ_cY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5BCC/B1181B10CE7811EF80EF4D44C4F9AE02/5FEB0DA8E90611EFA74B611DC4F9AE02.roa Signing time: Thu 13 Feb 2025 06:40:58 +0000 ROA not before: Thu 13 Feb 2025 06:40:58 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 153493 IP address blocks: 161.248.122.0/23 maxlen: 23 161.248.122.0/24 maxlen: 24 161.248.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5BCC/B1181B10CE7811EF80EF4D44C4F9AE02/s6HqYHo_df54qoQuuJCSWZEQ_cY.crl rsync://rpki.apnic.net/member_repository/A91F5BCC/B1181B10CE7811EF80EF4D44C4F9AE02/s6HqYHo_df54qoQuuJCSWZEQ_cY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s6HqYHo_df54qoQuuJCSWZEQ_cY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:32:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5BCC, serialNumber=B3A1EA607A3F75FE78AA842EB89092599110FDC6 Validity Not Before: Feb 13 06:40:58 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=67ad93fa-50b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:5b:45:7b:f5:82:c6:aa:b1:40:14:28:b8:05: 06:fa:63:d9:e5:fc:e6:6f:c5:00:e9:61:df:80:67: 4e:4c:81:80:94:7d:c8:8a:69:04:8c:a2:6a:83:e7: f1:c9:ab:15:98:30:46:2e:5d:17:d7:15:ca:03:80: a0:cf:44:c4:f6:58:4b:67:11:63:83:85:1b:13:69: 5a:0b:fa:9a:f4:ae:47:86:5e:75:1e:4b:23:08:71: 7c:49:3b:f9:71:42:4a:13:8a:06:30:cf:95:50:1b: cc:66:d9:12:3e:c7:63:c2:68:ef:fa:aa:a1:70:cf: 93:4c:d1:0f:5a:be:d6:1c:e3:0c:da:08:d0:72:84: 42:34:0c:11:14:19:fe:b1:9b:67:9d:f5:89:6a:de: cf:5c:fd:6c:f2:29:5a:e4:42:d2:4b:4a:b7:22:6d: df:83:09:89:89:88:02:b2:ca:8a:9d:1c:55:14:53: 59:17:1c:2b:ac:25:28:e9:5f:22:77:72:c8:d5:c7: a1:30:6d:2b:0f:d8:8c:6d:e2:f9:92:6f:ad:1c:e2: 4e:6b:a0:15:ba:1a:ca:6c:5d:15:fb:1a:85:2e:97: 41:32:c3:07:de:48:dc:cb:13:93:a9:d8:b0:8f:91: 58:55:b8:c3:30:43:c2:56:2c:15:f4:85:0f:8a:40: e4:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:5F:85:33:52:0D:34:A7:41:B7:7E:6A:8E:A8:72:56:A9:C6:EB:ED X509v3 Authority Key Identifier: keyid:B3:A1:EA:60:7A:3F:75:FE:78:AA:84:2E:B8:90:92:59:91:10:FD:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5BCC/B1181B10CE7811EF80EF4D44C4F9AE02/s6HqYHo_df54qoQuuJCSWZEQ_cY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s6HqYHo_df54qoQuuJCSWZEQ_cY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5BCC/B1181B10CE7811EF80EF4D44C4F9AE02/5FEB0DA8E90611EFA74B611DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 161.248.122.0/23 Signature Algorithm: sha256WithRSAEncryption 89:ba:3d:2f:8c:ed:d7:d0:59:1a:7a:1e:c5:33:88:26:a8:05: 98:30:1d:97:69:a4:5a:17:eb:77:2d:eb:a1:30:d1:8f:71:81: 46:00:7b:60:9c:de:ba:bc:d8:7a:34:ce:a8:13:78:14:2b:a0: 56:6d:56:5e:e2:dd:cb:0f:50:63:cb:b8:3b:9c:1e:f5:2b:47: bb:9a:b6:8d:df:f6:34:e0:db:3e:95:ae:86:c3:da:43:20:f9: 88:88:1d:6e:b5:58:b2:3a:b0:f1:55:63:dd:cf:a5:23:c8:3d: 9b:e4:df:e3:4f:bc:0e:8c:fd:c9:4f:89:9d:62:e5:e8:93:51: 98:9a:4f:92:8c:63:46:0c:5e:c6:a5:77:f1:08:f6:82:8a:a8: ad:45:e0:d8:95:96:f6:23:de:83:02:14:51:0a:2a:6a:39:4e: 36:26:b2:4d:45:6b:4e:ce:22:cd:c6:e6:3b:3e:dd:2a:4c:b7: d6:f4:d6:da:de:5e:57:73:59:95:17:e7:e6:f2:2b:87:78:ea: 9f:d8:43:9d:ff:85:26:2a:27:de:b4:e9:a7:6d:7b:78:0d:c6: 15:e2:5c:06:4f:d1:c3:d0:3b:56:8c:e8:91:33:4b:ca:a5:32: 9a:7d:78:27:ec:77:3e:00:2e:fa:6d:d8:ff:d2:bf:59:c7:c4: 81:46:8f:6b -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NUJDQzExMC8GA1UEBRMoQjNBMUVBNjA3QTNGNzVGRTc4QUE4NDJFQjg5MDkyNTk5 MTEwRkRDNjAeFw0yNTAyMTMwNjQwNThaFw0yNjAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3YWQ5M2ZhLTUwYjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDTW0V79YLGqrFAFCi4BQb6Y9nl/OZvxQDpYd+AZ05MgYCUfciKaQSMomqD5/HJ qxWYMEYuXRfXFcoDgKDPRMT2WEtnEWODhRsTaVoL+pr0rkeGXnUeSyMIcXxJO/lx QkoTigYwz5VQG8xm2RI+x2PCaO/6qqFwz5NM0Q9avtYc4wzaCNByhEI0DBEUGf6x m2ed9Ylq3s9c/WzyKVrkQtJLSrcibd+DCYmJiAKyyoqdHFUUU1kXHCusJSjpXyJ3 csjVx6EwbSsP2Ixt4vmSb60c4k5roBW6GspsXRX7GoUul0EywwfeSNzLE5Op2LCP kVhVuMMwQ8JWLBX0hQ+KQOT1AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUmF+FM1IN NKdBt35qjqhyVqnG6+0wHwYDVR0jBBgwFoAUs6HqYHo/df54qoQuuJCSWZEQ/cYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1QkNDL0IxMTgxQjEwQ0U3 ODExRUY4MEVGNEQ0NEM0RjlBRTAyL3M2SHFZSG9fZGY1NHFvUXV1SkNTV1pFUV9j WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvczZIcVlIb19kZjU0cW9RdXVKQ1NXWkVRX2NZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NUJDQy9CMTE4MUIxMENFNzgxMUVGODBFRjRENDRDNEY5QUUwMi81RkVCMERBOEU5 MDYxMUVGQTc0QjYxMURDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaH4ejANBgkqhkiG9w0BAQsFAAOCAQEAibo9L4zt19BZGnoe xTOIJqgFmDAdl2mkWhfrdy3roTDRj3GBRgB7YJzeurzYejTOqBN4FCugVm1WXuLd yw9QY8u4O5we9StHu5q2jd/2NODbPpWuhsPaQyD5iIgdbrVYsjqw8VVj3c+lI8g9 m+Tf40+8Doz9yU+JnWLl6JNRmJpPkoxjRgxexqV38Qj2goqorUXg2JWW9iPegwIU UQoqajlONiayTUVrTs4izcbmOz7dKky31vTW2t5eV3NZlRfn5vIrh3jqn9hDnf+F Jion3rTpp217eA3GFeJcBk/Rw9A7VozokTNLyqUymn14J+x3PgAu+m3Y/9K/WcfE gUaPaw== -----END CERTIFICATE-----Generated at Sat Apr 26 14:01:41 2025 by rpki-client