$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/42F359D22DE211F0A991F83DC4F9AE02.roa File: 42F359D22DE211F0A991F83DC4F9AE02.roa (raw, json) Hash identifier: GS7VGsIuP00slQDLOowlxynsnmpTUaLEp1HD+LKtTww= Subject key identifier: 11:D7:8C:38:9C:6C:5D:DB:45:B0:0E:D9:04:14:B6:8D:D9:03:67:58 Certificate issuer: /CN=A91F7537/serialNumber=DF5FE21B7C955215934471794D8B070663D2B34E Certificate serial: 65 Authority key identifier: DF:5F:E2:1B:7C:95:52:15:93:44:71:79:4D:8B:07:06:63:D2:B3:4E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/42F359D22DE211F0A991F83DC4F9AE02.roa Signing time: Sat 10 May 2025 21:03:46 +0000 ROA not before: Sat 10 May 2025 21:03:46 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 139780 IP address blocks: 160.250.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.crl rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 06:18:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 101 (0x65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7537, serialNumber=DF5FE21B7C955215934471794D8B070663D2B34E Validity Not Before: May 10 21:03:46 2025 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=681fbf32-412f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:41:70:5a:34:23:09:ea:cf:cc:03:fd:31:3b: 32:bd:50:ab:8b:d5:d6:22:32:b9:73:7a:2a:59:b8: 09:4d:78:36:f7:b2:c3:0f:d6:b4:e6:e5:95:37:13: cf:65:69:48:23:70:6b:d9:fa:65:e0:12:d7:29:1f: 2b:d6:5a:fe:58:c5:1c:38:1c:0d:27:f7:e4:10:fd: 99:58:db:f2:11:98:b2:a4:8e:1c:91:d8:3b:b0:59: 8c:f0:07:ed:b5:18:af:9f:33:27:27:24:34:2d:df: 9f:79:3a:00:14:9d:1b:17:7c:51:b2:b9:45:cb:d0: 93:f8:15:a1:03:98:9e:ff:f4:3e:69:b3:2d:1f:60: c1:2e:b0:9d:d5:b1:13:84:e6:21:de:06:cb:c3:9b: 60:13:fa:d6:44:46:f0:a3:cb:c5:32:aa:c1:8d:d2: 23:c1:91:0c:19:d6:dc:ea:39:6a:b5:ba:37:d8:62: 17:27:82:1c:52:b0:d4:40:e4:53:83:01:9e:b6:99: 67:4e:d4:84:d9:82:fd:ff:86:1e:77:b7:f5:6f:a4: 91:c3:96:c0:e3:a5:25:f0:6e:8f:89:5d:64:45:d3: 97:1f:e2:bb:53:cb:fa:4b:4b:f6:9b:20:ed:fb:2a: da:6a:96:5d:4d:04:78:f3:a6:42:1a:80:1c:23:70: 6a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:D7:8C:38:9C:6C:5D:DB:45:B0:0E:D9:04:14:B6:8D:D9:03:67:58 X509v3 Authority Key Identifier: keyid:DF:5F:E2:1B:7C:95:52:15:93:44:71:79:4D:8B:07:06:63:D2:B3:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/42F359D22DE211F0A991F83DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.250.9.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:ad:22:8d:c3:9c:dc:ab:ad:d6:c5:88:fa:06:96:c0:c2:aa: 83:a3:98:76:03:30:cb:46:5f:81:e4:84:6b:44:ee:8c:fb:fd: fb:69:76:85:69:fe:4a:05:e5:96:c9:5d:c7:18:b3:e4:5c:82: 66:07:11:aa:ae:f2:6e:82:ad:c4:4c:52:38:9f:6f:20:4d:36: 73:c5:17:80:ac:f1:b2:d3:79:52:90:1c:9c:f7:a7:68:b7:0f: 4d:1a:8b:32:5c:52:ef:58:19:13:69:9b:0b:d9:20:5b:b3:0a: 78:fb:66:b9:f5:a1:39:71:26:8c:af:44:2d:4c:f0:67:7c:5b: 6d:43:7e:66:ec:b0:96:d7:b1:d7:77:49:50:99:81:e6:ef:3f: 79:57:d9:f0:51:a8:f3:f0:fb:2a:78:df:73:0f:0b:3c:bc:c6: c2:6d:84:7d:ea:67:00:ef:8e:52:62:08:49:11:19:2b:6f:ff: 43:f4:51:ba:3b:0f:7e:7c:f2:48:68:03:33:5c:58:0d:d9:49: 32:c6:b3:a8:0d:a5:75:51:1b:46:da:48:2d:21:42:49:36:2b: 31:05:4a:7e:34:74:a0:99:aa:9e:b4:9e:53:38:81:04:1a:68: 64:aa:c3:f3:ff:6f:99:3d:05:64:c7:bd:38:9a:e0:90:43:bc: e1:3b:8a:eb -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBZTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NzUzNzExMC8GA1UEBRMoREY1RkUyMUI3Qzk1NTIxNTkzNDQ3MTc5NEQ4QjA3MDY2 M0QyQjM0RTAeFw0yNTA1MTAyMTAzNDZaFw0yNjAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4MWZiZjMyLTQxMmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEQXBaNCMJ6s/MA/0xOzK9UKuL1dYiMrlzeipZuAlNeDb3ssMP1rTm5ZU3E89l aUgjcGvZ+mXgEtcpHyvWWv5YxRw4HA0n9+QQ/ZlY2/IRmLKkjhyR2DuwWYzwB+21 GK+fMycnJDQt3595OgAUnRsXfFGyuUXL0JP4FaEDmJ7/9D5psy0fYMEusJ3VsROE 5iHeBsvDm2AT+tZERvCjy8UyqsGN0iPBkQwZ1tzqOWq1ujfYYhcnghxSsNRA5FOD AZ62mWdO1ITZgv3/hh53t/VvpJHDlsDjpSXwbo+JXWRF05cf4rtTy/pLS/abIO37 Ktpqll1NBHjzpkIagBwjcGqvAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUEdeMOJxs XdtFsA7ZBBS2jdkDZ1gwHwYDVR0jBBgwFoAU31/iG3yVUhWTRHF5TYsHBmPSs04w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY3NTM3LzgwMkFFNjQ2QTI3 MTExRUZBMzkyRjA3OUM0RjlBRTAyLzMxX2lHM3lWVWhXVFJIRjVUWXNIQm1QU3Mw NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMzFfaUczeVZVaFdUUkhGNVRZc0hCbVBTczA0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzUzNy84MDJBRTY0NkEyNzExMUVGQTM5MkYwNzlDNEY5QUUwMi80MkYzNTlEMjJE RTIxMUYwQTk5MUY4M0RDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAKD6CTANBgkqhkiG9w0BAQsFAAOCAQEAPq0ijcOc3Kut1sWI +gaWwMKqg6OYdgMwy0ZfgeSEa0TujPv9+2l2hWn+SgXllsldxxiz5FyCZgcRqq7y boKtxExSOJ9vIE02c8UXgKzxstN5UpAcnPenaLcPTRqLMlxS71gZE2mbC9kgW7MK ePtmufWhOXEmjK9ELUzwZ3xbbUN+Zuywltex13dJUJmB5u8/eVfZ8FGo8/D7Knjf cw8LPLzGwm2EfepnAO+OUmIISREZK2//Q/RRujsPfnzySGgDM1xYDdlJMsazqA2l dVEbRtpILSFCSTYrMQVKfjR0oJmqnrSeUziBBBpoZKrD8/9vmT0FZMe9OJrgkEO8 4TuK6w== -----END CERTIFICATE-----Generated at Wed May 14 17:46:17 2025 by rpki-client