$ rpki-client -vvf rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/C7001B70E45E11EFA2243E47C4F9AE02.roa File: C7001B70E45E11EFA2243E47C4F9AE02.roa (raw, json) Hash identifier: wGQDHFlAfYrGUZehEya3kdO0mpkCJUDStwU2YZOiDKI= Subject key identifier: 4A:F6:16:FF:8B:7C:E1:54:84:75:B8:0E:39:99:B3:B6:B2:FB:37:49 Certificate issuer: /CN=A91836DB/serialNumber=BB505DFF32ECD492BF1EFF7FE394F12890AA6734 Certificate serial: 02 Authority key identifier: BB:50:5D:FF:32:EC:D4:92:BF:1E:FF:7F:E3:94:F1:28:90:AA:67:34 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/C7001B70E45E11EFA2243E47C4F9AE02.roa Signing time: Thu 06 Feb 2025 07:48:39 +0000 ROA not before: Thu 06 Feb 2025 07:48:39 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 4907 IP address blocks: 161.248.14.0/23 maxlen: 23 161.248.14.0/24 maxlen: 24 161.248.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.crl rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:55:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91836DB, serialNumber=BB505DFF32ECD492BF1EFF7FE394F12890AA6734 Validity Not Before: Feb 6 07:48:39 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=67a46957-93ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:97:62:a7:d7:38:bd:89:d6:2f:72:f0:4d:38: 73:0c:5c:b5:9d:91:2d:fe:e9:0f:36:bd:2a:6e:93: fb:fc:44:26:27:82:6c:1e:b7:42:0c:38:26:8c:fc: e9:29:29:18:3b:68:08:21:08:84:5e:95:10:da:c2: 14:cb:66:97:0a:b8:cb:2f:a6:ed:03:bb:88:47:89: a7:ca:d2:f2:ea:59:51:68:19:9a:73:49:a9:46:5b: af:b4:a4:5a:00:b3:b0:15:a4:02:f8:ee:e9:4e:6a: b3:98:ff:16:f4:eb:e7:be:4c:bc:c4:e6:8b:af:50: 08:64:79:7a:63:bd:65:78:1a:3b:93:f2:3b:8c:ab: 84:09:42:7b:5b:a6:25:cc:20:74:4d:ea:21:8e:83: 94:3d:38:b4:fb:f6:53:32:0d:77:bd:e7:a7:f6:0a: 1f:11:86:ed:ac:01:c4:46:26:3a:66:dd:b4:fb:e3: a0:56:d6:48:e9:e1:f8:60:cb:62:e5:4e:53:72:80: 16:90:35:41:1a:ab:9a:8b:fc:09:43:3f:64:8f:a5: 5f:35:72:d6:6c:d6:10:a9:c6:19:2b:02:01:7d:a1: a8:82:35:2e:c9:00:c0:cc:5f:1f:e3:88:1d:c7:e7: 16:4a:62:0f:78:1f:4d:6d:94:88:db:f7:97:78:b5: 69:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:F6:16:FF:8B:7C:E1:54:84:75:B8:0E:39:99:B3:B6:B2:FB:37:49 X509v3 Authority Key Identifier: keyid:BB:50:5D:FF:32:EC:D4:92:BF:1E:FF:7F:E3:94:F1:28:90:AA:67:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/C7001B70E45E11EFA2243E47C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 161.248.14.0/23 Signature Algorithm: sha256WithRSAEncryption 23:64:bd:15:de:55:4f:09:a6:cd:05:ec:a4:48:53:6b:46:92: 13:0c:1e:80:9d:a4:16:6e:13:54:7e:f0:db:67:eb:18:99:37: 7f:58:be:f5:73:73:34:7f:65:ad:b7:3d:25:bc:6d:92:f4:ef: 12:32:ca:59:89:d8:2c:bb:c2:07:95:6e:b3:dd:b8:d6:7d:97: 78:2f:28:66:11:a9:de:4f:8c:6e:87:23:03:50:b7:7c:ea:c4: 1c:a2:ee:cc:59:42:e0:21:33:7a:9e:99:98:8b:4f:f5:cc:1a: d2:3c:57:7a:1a:02:3e:87:20:a3:02:f8:63:21:99:ad:c6:56: 45:fa:c2:67:4d:04:20:21:67:a7:4d:a3:ff:36:26:93:91:ab: e3:04:a5:ff:06:d7:81:21:d8:04:85:41:ed:45:2e:c0:60:89: 8e:06:90:f1:04:64:27:8e:7c:4c:92:e0:9b:72:2b:f1:8b:87: 31:72:52:52:05:b1:db:14:37:e9:88:5c:16:eb:90:5d:5c:15: bd:6a:9a:34:1f:81:61:f9:7c:b9:5d:5c:c4:ae:84:4b:58:6d: 3e:e7:c8:3e:b6:45:02:4e:37:73:0a:f2:96:76:d7:a3:34:29: 36:61:47:cb:ca:a5:56:b1:7c:f7:d1:70:b1:93:92:13:8e:d9: 95:58:fe:87 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MzZEQjExMC8GA1UEBRMoQkI1MDVERkYzMkVDRDQ5MkJGMUVGRjdGRTM5NEYxMjg5 MEFBNjczNDAeFw0yNTAyMDYwNzQ4MzlaFw0yNjAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3YTQ2OTU3LTkzY2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDol2Kn1zi9idYvcvBNOHMMXLWdkS3+6Q82vSpuk/v8RCYngmwet0IMOCaM/Okp KRg7aAghCIRelRDawhTLZpcKuMsvpu0Du4hHiafK0vLqWVFoGZpzSalGW6+0pFoA s7AVpAL47ulOarOY/xb06+e+TLzE5ouvUAhkeXpjvWV4GjuT8juMq4QJQntbpiXM IHRN6iGOg5Q9OLT79lMyDXe956f2Ch8Rhu2sAcRGJjpm3bT746BW1kjp4fhgy2Ll TlNygBaQNUEaq5qL/AlDP2SPpV81ctZs1hCpxhkrAgF9oaiCNS7JAMDMXx/jiB3H 5xZKYg94H01tlIjb95d4tWlbAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUSvYW/4t8 4VSEdbgOOZmztrL7N0kwHwYDVR0jBBgwFoAUu1Bd/zLs1JK/Hv9/45TxKJCqZzQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgzNkRCLzUxQkUwMTI0RTQ1 RTExRUZBMTU2Mjg0NkM0RjlBRTAyL3UxQmRfekxzMUpLX0h2OV80NVR4S0pDcVp6 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdTFCZF96THMxSktfSHY5XzQ1VHhLSkNxWnpRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzZEQi81MUJFMDEyNEU0NUUxMUVGQTE1NjI4NDZDNEY5QUUwMi9DNzAwMUI3MEU0 NUUxMUVGQTIyNDNFNDdDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaH4DjANBgkqhkiG9w0BAQsFAAOCAQEAI2S9Fd5VTwmmzQXs pEhTa0aSEwwegJ2kFm4TVH7w22frGJk3f1i+9XNzNH9lrbc9JbxtkvTvEjLKWYnY LLvCB5Vus9241n2XeC8oZhGp3k+MbocjA1C3fOrEHKLuzFlC4CEzep6ZmItP9cwa 0jxXehoCPocgowL4YyGZrcZWRfrCZ00EICFnp02j/zYmk5Gr4wSl/wbXgSHYBIVB 7UUuwGCJjgaQ8QRkJ458TJLgm3Ir8YuHMXJSUgWx2xQ36YhcFuuQXVwVvWqaNB+B Yfl8uV1cxK6ES1htPufIPrZFAk43cwrylnbXozQpNmFHy8qlVrF899FwsZOSE47Z lVj+hw== -----END CERTIFICATE-----Generated at Mon Oct 20 19:11:21 2025 by rpki-client