$ rpki-client -vvf rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/8AA99B52FEC511EABAAE7814C4F9AE02.roa File: 8AA99B52FEC511EABAAE7814C4F9AE02.roa (raw, json) Hash identifier: y0/7k6ouKuD5b2Rsia/V+SeGipZyoSrwqk1Fd3WmbbM= Subject key identifier: 86:2C:A8:4D:23:55:F1:69:45:70:0C:68:7E:B6:FF:DB:72:5D:67:00 Certificate issuer: /CN=A911784E/serialNumber=7E7E3BE889370A71E5521557BB03A00F1B39BFD8 Certificate serial: 0788 Authority key identifier: 7E:7E:3B:E8:89:37:0A:71:E5:52:15:57:BB:03:A0:0F:1B:39:BF:D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fn476Ik3CnHlUhVXuwOgDxs5v9g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/8AA99B52FEC511EABAAE7814C4F9AE02.roa Signing time: Fri 14 Feb 2025 22:39:41 +0000 ROA not before: Fri 14 Feb 2025 22:39:41 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 4826 IP address blocks: 203.30.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.crl rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fn476Ik3CnHlUhVXuwOgDxs5v9g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:04:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1928 (0x788) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911784E, serialNumber=7E7E3BE889370A71E5521557BB03A00F1B39BFD8 Validity Not Before: Feb 14 22:39:41 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67afc62d-684a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:27:a2:fa:84:f8:9e:0f:c9:04:fc:66:91:30: e4:00:b9:6f:58:08:f0:ef:ec:cc:41:91:64:14:d2: d3:4e:2b:8b:14:a0:fc:aa:b0:8e:6c:bb:e4:2c:b7: 87:74:e1:34:25:a3:db:8d:9b:3d:9a:ed:89:28:e6: 9d:b5:7a:2b:85:55:57:4e:ae:83:f1:ae:53:90:6a: 54:ef:d2:d3:ab:50:19:49:c2:fa:8b:ce:57:ab:70: 52:c2:6a:b9:fe:f9:44:fe:54:7d:1a:69:f2:e3:85: 95:4d:a2:23:b8:d6:57:96:9f:55:53:e9:69:b2:08: 67:0b:38:11:73:f3:5a:f1:a9:79:42:a9:29:38:15: 64:e4:ef:c4:66:26:db:34:06:71:e6:4b:37:31:d0: 6d:66:b8:30:d6:d1:91:8a:f0:51:da:17:82:e5:7f: 3a:4f:5f:32:e6:d9:c6:34:b5:ba:40:92:0b:46:c0: 36:62:7f:42:ac:a8:5f:5b:c0:74:7b:75:81:ac:61: e8:d5:76:1f:9a:4e:5c:23:e0:ad:40:fc:d9:8f:67: f8:df:e7:9a:ea:a0:8b:29:d8:4f:1e:d0:c8:85:c4: ed:49:ee:68:bd:6d:a2:06:81:37:c3:b0:3f:1a:07: c8:6e:a5:8c:88:4f:c5:80:b7:ee:30:e9:6b:e9:da: 4f:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:2C:A8:4D:23:55:F1:69:45:70:0C:68:7E:B6:FF:DB:72:5D:67:00 X509v3 Authority Key Identifier: keyid:7E:7E:3B:E8:89:37:0A:71:E5:52:15:57:BB:03:A0:0F:1B:39:BF:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fn476Ik3CnHlUhVXuwOgDxs5v9g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/8AA99B52FEC511EABAAE7814C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.30.229.0/24 Signature Algorithm: sha256WithRSAEncryption 73:df:63:7a:e8:90:8b:2a:f4:d0:a5:ef:33:39:04:55:78:71: c2:6c:d8:c3:67:01:bf:de:21:8f:f9:0a:8d:55:bf:5d:d8:80: 00:f7:37:b2:a3:b7:20:46:b4:02:e4:87:24:ff:7f:a6:75:21: 60:e9:e8:40:a4:ed:40:ba:a5:f1:3e:0d:04:bc:18:01:c8:e4: 9d:be:fe:11:e3:56:c1:a2:a1:10:7c:2c:31:63:24:ad:b3:e2: 4c:08:84:6c:8c:7c:2d:6f:2a:43:e9:79:bd:8f:8e:b3:58:ae: c0:f2:33:2d:58:8a:1b:27:cd:2c:f8:83:d8:06:6b:29:ca:be: 55:81:0a:67:ad:43:39:52:6c:be:69:e4:b7:e9:0e:b4:36:27: ca:28:d3:6b:6e:71:b1:56:15:4e:a2:71:bb:b0:ec:45:26:ae: 4b:b0:d6:85:fd:84:76:fb:94:0b:d3:8f:5a:70:c7:97:3f:6a: eb:fa:4b:26:34:84:9f:b1:5d:0f:65:83:34:13:6d:73:2a:90: aa:cc:05:87:5b:65:3a:81:38:b2:8f:0c:82:f1:60:7a:14:43: 32:33:cb:3b:f8:d0:dc:ce:ae:d8:26:8d:ce:e3:8f:68:8c:b6: 14:26:a8:64:b7:56:ce:67:85:e5:5d:6f:a8:1a:9c:76:6d:c2: 18:7a:d7:9d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB4gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc4NEUxMTAvBgNVBAUTKDdFN0UzQkU4ODkzNzBBNzFFNTUyMTU1N0JCMDNBMDBG MUIzOUJGRDgwHhcNMjUwMjE0MjIzOTQxWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2FmYzYyZC02ODRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Sei+oT4ng/JBPxmkTDkALlvWAjw7+zMQZFkFNLTTiuLFKD8qrCObLvkLLeH dOE0JaPbjZs9mu2JKOadtXorhVVXTq6D8a5TkGpU79LTq1AZScL6i85Xq3BSwmq5 /vlE/lR9Gmny44WVTaIjuNZXlp9VU+lpsghnCzgRc/Na8al5QqkpOBVk5O/EZibb NAZx5ks3MdBtZrgw1tGRivBR2heC5X86T18y5tnGNLW6QJILRsA2Yn9CrKhfW8B0 e3WBrGHo1XYfmk5cI+CtQPzZj2f43+ea6qCLKdhPHtDIhcTtSe5ovW2iBoE3w7A/ GgfIbqWMiE/FgLfuMOlr6dpPxQIDAQABo4IClTCCApEwHQYDVR0OBBYEFIYsqE0j VfFpRXAMaH62/9tyXWcAMB8GA1UdIwQYMBaAFH5+O+iJNwpx5VIVV7sDoA8bOb/Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzg0RS82QjU0RDlDOEZF QzExMUVBOUU3MzMzNzVDNEY5QUUwMi9mbjQ3NklrM0NuSGxVaFZYdXdPZ0R4czV2 OWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZuNDc2SWszQ25IbFVoVlh1d09nRHhzNXY5Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTc4NEUvNkI1NEQ5QzhGRUMxMTFFQTlFNzMzMzc1QzRGOUFFMDIvOEFBOTlCNTJG RUM1MTFFQUJBQUU3ODE0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADLHuUwDQYJKoZIhvcNAQELBQADggEBAHPfY3rokIsq9NCl 7zM5BFV4ccJs2MNnAb/eIY/5Co1Vv13YgAD3N7KjtyBGtALkhyT/f6Z1IWDp6ECk 7UC6pfE+DQS8GAHI5J2+/hHjVsGioRB8LDFjJK2z4kwIhGyMfC1vKkPpeb2PjrNY rsDyMy1YihsnzSz4g9gGaynKvlWBCmetQzlSbL5p5LfpDrQ2J8oo02tucbFWFU6i cbuw7EUmrkuw1oX9hHb7lAvTj1pwx5c/auv6SyY0hJ+xXQ9lgzQTbXMqkKrMBYdb ZTqBOLKPDILxYHoUQzIzyzv40NzOrtgmjc7jj2iMthQmqGS3Vs5nheVdb6ganHZt whh6150= -----END CERTIFICATE-----Generated at Sat Apr 26 07:58:19 2025 by rpki-client