$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/CF94F4D82B1F11F0A19F8C33C4F9AE02.roa File: CF94F4D82B1F11F0A19F8C33C4F9AE02.roa (raw, json) Hash identifier: g9rEomVyPUDHrjxggrNI3QvKP1WYZcgM0f2cXPefkxg= Subject key identifier: A9:DF:AE:3D:D2:BB:FC:97:E6:09:82:E5:DE:92:D9:86:A7:99:A1:C9 Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Certificate serial: 05B8 Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/CF94F4D82B1F11F0A19F8C33C4F9AE02.roa Signing time: Wed 07 May 2025 08:46:47 +0000 ROA not before: Wed 07 May 2025 08:46:47 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 149107 IP address blocks: 157.66.24.0/23 maxlen: 23 157.66.26.0/23 maxlen: 23 160.30.18.0/23 maxlen: 23 160.191.164.0/23 maxlen: 23 160.250.182.0/23 maxlen: 23 160.250.184.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 14:34:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1464 (0x5b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Validity Not Before: May 7 08:46:47 2025 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=681b1df7-b10b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:50:f6:ae:77:17:bd:80:08:ab:1c:34:9f:02: f7:41:0a:58:ae:38:00:90:a0:60:ad:e0:5d:f0:59: 33:04:2b:b9:86:ff:a3:ad:49:97:bf:f9:78:4b:88: 30:7c:99:4f:33:22:3d:bf:8d:d5:c9:f0:b0:10:b8: 87:a7:41:4f:de:be:33:cd:bb:a5:45:fc:8b:96:d7: c4:1e:48:7d:6f:b4:b7:fd:3f:10:a4:3f:5f:84:b0: f6:54:47:c8:1b:62:88:f1:58:b4:30:2c:5d:85:0a: 5c:d7:b4:1c:d6:6e:11:5e:c5:b2:30:d9:3c:6b:6b: 87:5e:04:bc:13:5f:ea:ac:31:fe:6c:76:c8:96:d7: da:ce:74:3a:eb:78:ce:48:f8:76:7f:a0:35:17:93: dc:99:d7:67:c4:e8:b6:0f:92:60:fc:14:dc:5b:5f: 55:c7:e6:e7:6f:27:32:d0:ce:07:56:0c:73:87:68: 83:8c:81:4d:23:bb:2d:fa:7d:de:b8:4c:bf:b9:0e: 90:f0:02:43:34:9d:18:be:27:31:fd:22:79:e7:db: 70:9a:04:a7:29:e2:1f:1a:68:be:2e:20:59:4b:f3: 2c:c3:0b:b3:a8:cf:8c:25:3d:15:8b:70:44:25:d0: 81:fa:47:76:da:2a:4c:6b:1c:74:27:43:0c:ed:36: 26:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:DF:AE:3D:D2:BB:FC:97:E6:09:82:E5:DE:92:D9:86:A7:99:A1:C9 X509v3 Authority Key Identifier: keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/CF94F4D82B1F11F0A19F8C33C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.66.24.0/22 160.30.18.0/23 160.191.164.0/23 160.250.182.0-160.250.185.255 Signature Algorithm: sha256WithRSAEncryption 8c:3b:14:0e:2f:64:96:e8:81:9e:42:13:c5:3b:70:5c:f4:fe: d3:33:dd:6c:ac:06:81:43:99:c9:6a:98:4e:f1:b4:31:48:cb: bb:c2:df:63:b3:5d:38:e9:f8:29:f2:91:9b:ab:82:a9:b1:a6: bd:63:c5:9a:dd:0c:df:b7:0b:cf:28:50:1a:ab:3d:f1:bc:62: 8c:a7:76:fb:79:0d:e2:f4:0f:be:ec:ba:66:20:6a:83:72:74: 43:51:08:0c:01:fc:32:9d:6d:04:b1:a4:d5:8f:1d:2f:31:43: c9:9b:5e:36:45:33:b1:e5:a9:80:a3:93:7b:af:e2:f2:6c:2d: 87:e7:a1:5c:b1:1a:20:4e:f3:30:cc:2d:60:26:b6:42:39:6e: dc:69:ae:78:06:0c:2c:2e:40:69:79:20:37:58:3b:bd:75:69: 33:78:21:ab:88:6e:76:78:19:43:da:b5:cb:93:8e:0f:58:84: 63:78:0a:29:da:09:01:20:9d:68:94:03:24:33:3a:b7:59:06: 67:dc:eb:bf:5b:db:25:c4:b5:20:9e:f0:de:88:2d:b6:51:8f: c1:5e:f2:71:0a:18:46:74:42:31:3e:74:ef:4d:f4:81:e1:68: af:2f:7b:e6:48:62:7b:a6:c0:1e:72:cc:4b:62:63:62:0b:ab: df:7d:30:8b -----BEGIN CERTIFICATE----- MIIFizCCBHOgAwIBAgICBbgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy ODRGODBFMTIwHhcNMjUwNTA3MDg0NjQ3WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFiMWRmNy1iMTBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8lD2rncXvYAIqxw0nwL3QQpYrjgAkKBgreBd8FkzBCu5hv+jrUmXv/l4S4gw fJlPMyI9v43VyfCwELiHp0FP3r4zzbulRfyLltfEHkh9b7S3/T8QpD9fhLD2VEfI G2KI8Vi0MCxdhQpc17Qc1m4RXsWyMNk8a2uHXgS8E1/qrDH+bHbIltfaznQ663jO SPh2f6A1F5PcmddnxOi2D5Jg/BTcW19Vx+bnbycy0M4HVgxzh2iDjIFNI7st+n3e uEy/uQ6Q8AJDNJ0Yvicx/SJ559twmgSnKeIfGmi+LiBZS/MswwuzqM+MJT0Vi3BE JdCB+kd22ipMaxx0J0MM7TYmIwIDAQABo4ICrzCCAqswHQYDVR0OBBYEFKnfrj3S u/yX5gmC5d6S2YanmaHJMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5 REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvQ0Y5NEY0RDgy QjFGMTFGMEExOUY4QzMzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOQYIKwYBBQUHAQcBAf8E KjAoMCYEAgABMCADBAKdQhgDBAGgHhIDBAGgv6QwDAMEAaD6tgMEAaD6uDANBgkq hkiG9w0BAQsFAAOCAQEAjDsUDi9kluiBnkITxTtwXPT+0zPdbKwGgUOZyWqYTvG0 MUjLu8LfY7NdOOn4KfKRm6uCqbGmvWPFmt0M37cLzyhQGqs98bxijKd2+3kN4vQP vuy6ZiBqg3J0Q1EIDAH8Mp1tBLGk1Y8dLzFDyZteNkUzseWpgKOTe6/i8mwth+eh XLEaIE7zMMwtYCa2Qjlu3GmueAYMLC5AaXkgN1g7vXVpM3ghq4hudngZQ9q1y5OO D1iEY3gKKdoJASCdaJQDJDM6t1kGZ9zrv1vbJcS1IJ7w3ogttlGPwV7ycQoYRnRC MT507030geFory975khie6bAHnLMS2JjYgur330wiw== -----END CERTIFICATE-----Generated at Wed May 14 18:19:10 2025 by rpki-client