$ rpki-client -vvf rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/04AB29D8DFEE11E7B0E71D1CC4F9AE02.roa File: 04AB29D8DFEE11E7B0E71D1CC4F9AE02.roa (raw, json) Hash identifier: 28BPEKV85FSPKq/CUsjxZqA9dsNxiffYXaIe9r8e36E= Subject key identifier: E4:87:70:6A:4E:79:67:56:0C:4F:33:7E:09:32:4A:F4:E4:01:EF:5E Certificate issuer: /CN=A918495F/serialNumber=0C5A542A1E9B3FB5C8E49686EBEBCFC050CCE4A5 Certificate serial: 1755 Authority key identifier: 0C:5A:54:2A:1E:9B:3F:B5:C8:E4:96:86:EB:EB:CF:C0:50:CC:E4:A5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/04AB29D8DFEE11E7B0E71D1CC4F9AE02.roa Signing time: Thu 08 May 2025 17:17:40 +0000 ROA not before: Thu 08 May 2025 17:17:40 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 135146 IP address blocks: 168.70.150.0/24 maxlen: 24 168.70.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.crl rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 16:31:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5973 (0x1755) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918495F, serialNumber=0C5A542A1E9B3FB5C8E49686EBEBCFC050CCE4A5 Validity Not Before: May 8 17:17:40 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=681ce734-b6ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7a:cb:de:d9:ba:20:f0:6d:e4:4b:f6:29:f3: 89:5b:c8:0c:3c:a1:8b:4b:d2:82:9c:6a:b9:ac:45: d7:35:2c:7b:6d:d3:43:0c:60:38:63:ae:31:d9:ad: 52:4a:c4:ef:28:e4:76:b5:ce:15:70:b8:13:d8:f7: 14:41:26:f7:db:d1:aa:cf:86:29:96:1d:9e:8b:29: 0d:d9:86:26:ca:8f:82:5c:a7:b8:d5:c1:1e:38:3b: 17:54:fe:0c:25:49:1a:18:91:8e:3e:14:82:c3:e1: 4f:ae:c8:e7:5d:39:b0:b5:8f:e3:09:40:f1:b7:50: 44:bc:5d:3f:99:24:70:ed:87:07:e7:81:9c:1f:5a: 33:2f:80:ea:c9:e5:35:0a:07:43:c5:d0:44:64:74: 89:b2:a0:c9:32:ad:25:20:e5:a3:71:b4:87:44:40: 2f:4e:c7:2f:7a:d4:43:5b:63:5c:15:8a:c0:05:d8: 1b:fb:89:37:22:ee:89:b4:1f:75:ea:b9:4a:0a:cd: 76:ec:4d:94:90:ee:5c:c9:8f:41:ad:56:e8:3a:17: 92:19:6f:55:b8:d4:a8:4b:b1:4d:78:19:29:23:7b: d0:47:77:08:9d:00:3a:f1:df:78:ec:94:b8:90:97: 47:53:01:c1:9b:d5:cf:6e:53:a4:20:10:75:7d:25: 6d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:87:70:6A:4E:79:67:56:0C:4F:33:7E:09:32:4A:F4:E4:01:EF:5E X509v3 Authority Key Identifier: keyid:0C:5A:54:2A:1E:9B:3F:B5:C8:E4:96:86:EB:EB:CF:C0:50:CC:E4:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/04AB29D8DFEE11E7B0E71D1CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 168.70.150.0/24 168.70.171.0/24 Signature Algorithm: sha256WithRSAEncryption 18:36:f4:56:00:ea:bc:87:0d:9b:d3:31:6b:1d:85:61:bf:08: 3b:fb:8c:fd:0a:34:00:ce:6d:a0:7e:d1:40:f1:64:d7:46:f7: 69:4d:48:e6:dc:7b:90:f4:69:c5:80:7e:53:03:ff:56:96:e7: 82:e0:14:24:8a:02:30:9c:96:ee:d8:2d:91:b6:5c:90:f0:15: 67:86:3c:ac:ce:33:bd:83:9a:1f:82:eb:00:1e:22:f2:ec:84: 22:34:59:b1:2e:2c:bc:8e:97:56:10:63:9b:04:a6:a5:06:b3: c4:2b:ed:b5:88:b8:12:38:c4:a3:57:52:f1:0a:58:9d:2d:3f: 36:90:5a:5d:e8:1b:33:b1:82:e6:a5:e2:cc:a0:7d:f9:23:9d: fd:e1:92:0b:21:74:c9:29:0e:ef:99:37:89:ae:73:a8:13:c7: cf:71:8f:d5:3f:bd:95:8b:2f:e2:30:e3:bd:08:f5:23:e1:4d: 6f:9b:34:c3:f5:39:57:e9:78:ca:f6:c9:32:2a:01:d6:16:ed: e6:e7:22:57:da:83:d0:82:44:92:6c:bb:54:ef:24:a5:cd:c1: 4e:e6:28:28:bc:52:66:e4:1e:9d:d6:15:1b:fc:c2:e4:5d:77: 03:84:39:67:7b:35:2b:8a:b6:ef:db:bd:0c:ca:40:af:9b:4a: 68:48:df:ee -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICF1UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ5NUYxMTAvBgNVBAUTKDBDNUE1NDJBMUU5QjNGQjVDOEU0OTY4NkVCRUJDRkMw NTBDQ0U0QTUwHhcNMjUwNTA4MTcxNzQwWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFjZTczNC1iNmZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsHrL3tm6IPBt5Ev2KfOJW8gMPKGLS9KCnGq5rEXXNSx7bdNDDGA4Y64x2a1S SsTvKOR2tc4VcLgT2PcUQSb329Gqz4Yplh2eiykN2YYmyo+CXKe41cEeODsXVP4M JUkaGJGOPhSCw+FPrsjnXTmwtY/jCUDxt1BEvF0/mSRw7YcH54GcH1ozL4DqyeU1 CgdDxdBEZHSJsqDJMq0lIOWjcbSHREAvTscvetRDW2NcFYrABdgb+4k3Iu6JtB91 6rlKCs127E2UkO5cyY9BrVboOheSGW9VuNSoS7FNeBkpI3vQR3cInQA68d947JS4 kJdHUwHBm9XPblOkIBB1fSVtswIDAQABo4ICmzCCApcwHQYDVR0OBBYEFOSHcGpO eWdWDE8zfgkySvTkAe9eMB8GA1UdIwQYMBaAFAxaVCoemz+1yOSWhuvrz8BQzOSl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDk1Ri83OEQ1RDg5NkRG RUMxMUU3QTI3QTIyMTNDNEY5QUUwMi9ERnBVS2g2YlA3WEk1SmFHNi12UHdGRE01 S1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0RGcFVLaDZiUDdYSTVKYUc2LXZQd0ZETTVLVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODQ5NUYvNzhENUQ4OTZERkVDMTFFN0EyN0EyMjEzQzRGOUFFMDIvMDRBQjI5RDhE RkVFMTFFN0IwRTcxRDFDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBACoRpYDBACoRqswDQYJKoZIhvcNAQELBQADggEBABg29FYA 6ryHDZvTMWsdhWG/CDv7jP0KNADObaB+0UDxZNdG92lNSObce5D0acWAflMD/1aW 54LgFCSKAjCclu7YLZG2XJDwFWeGPKzOM72Dmh+C6wAeIvLshCI0WbEuLLyOl1YQ Y5sEpqUGs8Qr7bWIuBI4xKNXUvEKWJ0tPzaQWl3oGzOxgual4sygffkjnf3hkgsh dMkpDu+ZN4muc6gTx89xj9U/vZWLL+Iw470I9SPhTW+bNMP1OVfpeMr2yTIqAdYW 7ebnIlfag9CCRJJsu1TvJKXNwU7mKCi8UmbkHp3WFRv8wuRddwOEOWd7NSuKtu/b vQzKQK+bSmhI3+4= -----END CERTIFICATE-----Generated at Mon May 12 08:11:51 2025 by rpki-client