$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/E77278DCCE6311EFA284E23EC4F9AE02.roa File: E77278DCCE6311EFA284E23EC4F9AE02.roa (raw, json) Hash identifier: DpN2zcLRAjgpftEu2Dp5lPwXsj2XxFGFEx1c1E4KncU= Subject key identifier: 30:8B:C9:EE:F5:0E:5C:E7:FB:44:C0:22:FD:B3:A9:A5:BB:58:B0:67 Certificate issuer: /CN=A91F7537/serialNumber=DF5FE21B7C955215934471794D8B070663D2B34E Certificate serial: 22 Authority key identifier: DF:5F:E2:1B:7C:95:52:15:93:44:71:79:4D:8B:07:06:63:D2:B3:4E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/E77278DCCE6311EFA284E23EC4F9AE02.roa Signing time: Thu 09 Jan 2025 08:29:55 +0000 ROA not before: Thu 09 Jan 2025 08:29:55 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 137868 IP address blocks: 160.250.8.0/24 maxlen: 24 160.250.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.crl rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:12:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7537, serialNumber=DF5FE21B7C955215934471794D8B070663D2B34E Validity Not Before: Jan 9 08:29:55 2025 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=677f8903-f456 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:9a:f5:e5:91:94:0c:56:02:a6:06:59:a6:3a: 8a:ad:4d:c0:39:6e:2b:19:03:e4:8d:99:07:e3:f4: 5b:e1:86:6e:3d:3e:76:3b:25:bd:53:4f:25:e6:1c: c0:6a:28:d3:53:1e:bb:58:b9:48:53:ee:8b:87:25: 73:56:c8:be:1e:a4:49:89:19:75:c9:86:74:99:3c: 23:d2:80:71:68:53:80:81:62:d0:69:e1:2f:9c:21: e1:c1:8c:c5:4d:87:d2:b7:80:c0:58:4d:02:9f:d9: 5d:e5:4f:64:dc:09:93:40:0a:46:8d:66:bf:db:2d: b2:3e:4d:a1:2f:dc:4f:1b:16:ca:c0:de:7b:2c:bb: 2d:4a:b5:86:d8:d3:41:5e:88:59:95:a7:1c:b6:ec: de:7f:08:71:a3:50:b1:29:66:9d:81:d8:a6:66:51: fa:69:23:94:75:48:5a:ab:cf:23:f3:21:19:d5:fd: 11:2f:3a:26:81:e6:83:96:b7:df:81:bf:19:11:8d: 29:a2:d1:11:8b:1f:0d:45:71:c9:8d:35:7b:25:2e: 06:76:64:2e:5d:a6:d3:38:9c:d9:bb:c9:16:29:47: 71:23:9f:f8:2a:90:a7:e2:13:9a:78:cd:43:be:87: 9f:56:62:6f:16:7d:4d:a4:92:36:46:d8:b3:51:7a: bf:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:8B:C9:EE:F5:0E:5C:E7:FB:44:C0:22:FD:B3:A9:A5:BB:58:B0:67 X509v3 Authority Key Identifier: keyid:DF:5F:E2:1B:7C:95:52:15:93:44:71:79:4D:8B:07:06:63:D2:B3:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/E77278DCCE6311EFA284E23EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.250.8.0/23 Signature Algorithm: sha256WithRSAEncryption 63:6a:0d:8c:30:30:70:77:7c:e3:57:b3:63:0d:93:ce:f0:32: c7:7e:37:d6:68:ba:56:de:b8:b1:8c:7b:5a:0f:cb:32:86:c5: ff:f9:8e:a0:c9:19:96:d9:40:3e:4a:fe:7d:a0:20:cd:ba:0b: a5:df:bb:0b:d5:ed:c9:fd:2f:73:e4:93:f0:3b:7e:76:a7:bf: 3f:c3:95:92:f9:a0:98:5e:a4:ba:9a:9b:32:95:1d:b9:be:74: 5b:d3:e0:0d:30:86:ca:2b:18:50:02:36:7f:74:44:b1:3b:23: 67:ea:df:39:17:4a:57:b8:d2:c6:40:e2:1b:a4:af:c3:b1:2f: 90:83:c5:20:d9:86:78:9b:a9:3f:49:f6:fa:9e:71:02:97:a3: ad:15:cf:d9:c5:b3:6e:dc:09:2d:c6:3b:ab:ae:e9:ff:49:4d: 85:47:fc:93:f1:84:bb:b5:da:ca:61:09:e5:cd:e9:1b:b5:b8: 2c:80:0e:d3:1a:67:1d:7b:a0:b5:af:e5:bb:21:96:3d:a7:36: f2:6d:fe:23:51:a8:14:04:35:24:e5:f6:df:13:42:4e:02:36: f0:18:b6:bf:a5:4e:12:64:35:1e:4a:0e:6f:39:47:57:d8:2b: 29:97:1d:03:71:c6:b2:c5:f8:e2:59:cf:50:f2:51:03:bb:a2: f5:d8:8f:22 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NzUzNzExMC8GA1UEBRMoREY1RkUyMUI3Qzk1NTIxNTkzNDQ3MTc5NEQ4QjA3MDY2 M0QyQjM0RTAeFw0yNTAxMDkwODI5NTVaFw0yNjAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3N2Y4OTAzLWY0NTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQmvXlkZQMVgKmBlmmOoqtTcA5bisZA+SNmQfj9Fvhhm49PnY7Jb1TTyXmHMBq KNNTHrtYuUhT7ouHJXNWyL4epEmJGXXJhnSZPCPSgHFoU4CBYtBp4S+cIeHBjMVN h9K3gMBYTQKf2V3lT2TcCZNACkaNZr/bLbI+TaEv3E8bFsrA3nssuy1KtYbY00Fe iFmVpxy27N5/CHGjULEpZp2B2KZmUfppI5R1SFqrzyPzIRnV/REvOiaB5oOWt9+B vxkRjSmi0RGLHw1FccmNNXslLgZ2ZC5dptM4nNm7yRYpR3Ejn/gqkKfiE5p4zUO+ h59WYm8WfU2kkjZG2LNRer8fAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUMIvJ7vUO XOf7RMAi/bOppbtYsGcwHwYDVR0jBBgwFoAU31/iG3yVUhWTRHF5TYsHBmPSs04w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY3NTM3LzgwMkFFNjQ2QTI3 MTExRUZBMzkyRjA3OUM0RjlBRTAyLzMxX2lHM3lWVWhXVFJIRjVUWXNIQm1QU3Mw NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMzFfaUczeVZVaFdUUkhGNVRZc0hCbVBTczA0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzUzNy84MDJBRTY0NkEyNzExMUVGQTM5MkYwNzlDNEY5QUUwMi9FNzcyNzhEQ0NF NjMxMUVGQTI4NEUyM0VDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaD6CDANBgkqhkiG9w0BAQsFAAOCAQEAY2oNjDAwcHd841ez Yw2TzvAyx3431mi6Vt64sYx7Wg/LMobF//mOoMkZltlAPkr+faAgzboLpd+7C9Xt yf0vc+ST8Dt+dqe/P8OVkvmgmF6kupqbMpUdub50W9PgDTCGyisYUAI2f3REsTsj Z+rfORdKV7jSxkDiG6Svw7EvkIPFINmGeJupP0n2+p5xApejrRXP2cWzbtwJLcY7 q67p/0lNhUf8k/GEu7XaymEJ5c3pG7W4LIAO0xpnHXugta/luyGWPac28m3+I1Go FAQ1JOX23xNCTgI28Bi2v6VOEmQ1HkoObzlHV9grKZcdA3HGssX44lnPUPJRA7ui 9diPIg== -----END CERTIFICATE-----Generated at Sat Apr 26 14:10:37 2025 by rpki-client