$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/833193B0203111F087083F1BC4F9AE02.roa File: 833193B0203111F087083F1BC4F9AE02.roa (raw, json) Hash identifier: Ka9YOPLM5vx+Co1l50A05tBQXMru7K5J+LEJI580pHk= Subject key identifier: 7D:7A:E8:FE:23:7C:7D:5F:61:87:CF:97:A0:0C:35:B4:50:45:20:1D Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93 Certificate serial: 2822 Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/833193B0203111F087083F1BC4F9AE02.roa Signing time: Wed 23 Apr 2025 10:55:47 +0000 ROA not before: Wed 23 Apr 2025 10:55:47 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 7489 IP address blocks: 27.100.36.0/23 maxlen: 24 45.124.64.0/22 maxlen: 24 103.192.176.0/22 maxlen: 24 103.196.20.0/23 maxlen: 24 103.217.252.0/22 maxlen: 22 103.217.253.0/24 maxlen: 24 2402:9e80::/48 maxlen: 48 2402:9e80:1::/48 maxlen: 48 2402:9e80:5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:47:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10274 (0x2822) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93 Validity Not Before: Apr 23 10:55:47 2025 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=6808c733-5f24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:f2:96:d8:ca:8a:c2:be:c7:e7:9c:ba:38:d2: 0c:0d:f2:01:12:bb:d4:f4:46:21:a6:25:75:8d:7a: 2e:81:a8:dc:1a:dd:50:af:a8:2e:d2:b6:6b:eb:83: 1d:4a:c1:b9:17:2c:99:75:55:38:38:b5:51:d2:3a: 0c:c2:2d:bb:f2:fd:d1:d0:b5:a9:02:d5:85:cf:32: 51:db:9f:28:77:bf:39:4d:a2:30:01:dc:11:5e:18: c0:d4:e3:6f:b1:6e:14:dc:d0:ae:bc:b3:ae:f8:8c: d8:49:f7:c0:b9:b7:60:ec:7a:da:15:e4:5c:4b:a0: 74:ed:83:61:9e:f6:08:d3:88:07:75:3f:86:a3:b4: 69:c1:7b:dc:59:10:74:d2:cc:13:f4:dd:55:c8:d5: 2e:c3:10:18:c3:14:fc:33:e4:2c:a8:00:7b:cb:70: 1e:24:e8:5e:76:36:7b:d1:b1:c5:86:5e:0e:ec:35: 2b:9a:c5:ae:98:62:63:3d:24:e5:e4:00:3b:2c:2e: ec:ad:91:4f:e0:4f:22:81:19:c8:8c:d8:ec:8b:ee: e6:7d:3c:9c:cd:e1:c6:11:8c:d2:1c:e7:84:84:00: 3a:11:28:97:ee:b2:a0:fd:39:18:30:c1:24:19:21: 5e:0f:d9:26:00:30:92:63:5d:aa:14:70:2d:06:8c: 6c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:7A:E8:FE:23:7C:7D:5F:61:87:CF:97:A0:0C:35:B4:50:45:20:1D X509v3 Authority Key Identifier: keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/833193B0203111F087083F1BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.100.36.0/23 45.124.64.0/22 103.192.176.0/22 103.196.20.0/23 103.217.252.0/22 IPv6: 2402:9e80::/47 2402:9e80:5::/48 Signature Algorithm: sha256WithRSAEncryption 9f:7d:d6:b7:44:f6:d9:74:59:1c:b6:6f:48:f5:6b:3e:a5:53: c3:d0:93:69:94:e1:36:2d:a5:2b:c7:85:51:42:b5:3e:2a:07: 2a:bf:9f:79:0c:45:48:58:fe:12:61:1c:e4:17:35:4b:c2:02: 45:95:6c:35:b7:56:6a:b4:ea:91:26:46:fa:aa:d6:a2:09:8b: d4:ae:99:40:eb:5a:43:62:85:b0:76:91:84:23:f6:35:94:b0: d3:ef:82:75:f5:65:77:3e:f5:3b:3e:11:5c:da:c6:90:49:5f: e3:62:8f:db:3a:b0:ed:10:2d:e5:0e:a9:f9:fb:67:b5:fb:95: 99:cf:fb:26:6c:2e:7c:7d:09:94:4f:4b:ea:06:14:a4:74:fb: 99:b7:b0:c6:cc:62:49:99:20:d2:d1:53:81:ce:84:39:c7:96: a1:22:b6:87:87:65:f8:a0:62:00:c9:3c:13:0a:4d:d1:4d:d9: 74:f2:c0:2c:1a:b3:cb:38:7e:77:6c:6d:7e:76:af:99:68:de: 42:8f:10:9e:3f:1f:b3:ae:a3:00:0d:45:9d:9a:15:c0:e1:70: 3e:50:5a:b4:1a:cc:26:04:ba:d8:f1:ed:7b:47:44:3b:52:35: b7:5d:55:09:49:6b:f0:91:00:6e:59:d4:af:e3:48:50:14:b1: 18:9c:92:74 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgICKCIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMyOEQxMTAvBgNVBAUTKDk5REZCNkJGNzk1MEU2QjQwMTk1QTU5MDI0RjRCNzUw ODYzRDNEOTMwHhcNMjUwNDIzMTA1NTQ3WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODA4YzczMy01ZjI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk/KW2MqKwr7H55y6ONIMDfIBErvU9EYhpiV1jXougajcGt1Qr6gu0rZr64Md SsG5FyyZdVU4OLVR0joMwi278v3R0LWpAtWFzzJR258od785TaIwAdwRXhjA1ONv sW4U3NCuvLOu+IzYSffAubdg7HraFeRcS6B07YNhnvYI04gHdT+Go7RpwXvcWRB0 0swT9N1VyNUuwxAYwxT8M+QsqAB7y3AeJOhedjZ70bHFhl4O7DUrmsWumGJjPSTl 5AA7LC7srZFP4E8igRnIjNjsi+7mfTyczeHGEYzSHOeEhAA6ESiX7rKg/TkYMMEk GSFeD9kmADCSY12qFHAtBoxsDwIDAQABo4ICxzCCAsMwHQYDVR0OBBYEFH166P4j fH1fYYfPl6AMNbRQRSAdMB8GA1UdIwQYMBaAFJnftr95UOa0AZWlkCT0t1CGPT2T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzI4RC9CREFCNjdGNjNB ODAxMUU1QUUzOTAxNTVDNEY5QUUwMi9tZC0ydjNsUTVyUUJsYVdRSlBTM1VJWTlQ Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21kLTJ2M2xRNXJRQmxhV1FKUFMzVUlZOVBaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUMyOEQvQkRBQjY3RjYzQTgwMTFFNUFFMzkwMTU1QzRGOUFFMDIvODMzMTkzQjAy MDMxMTFGMDg3MDgzRjFCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwUQYIKwYBBQUHAQcBAf8E QjBAMCQEAgABMB4DBAEbZCQDBAItfEADBAJnwLADBAFnxBQDBAJn2fwwGAQCAAIw EgMHASQCnoAAAAMHACQCnoAABTANBgkqhkiG9w0BAQsFAAOCAQEAn33Wt0T22XRZ HLZvSPVrPqVTw9CTaZThNi2lK8eFUUK1PioHKr+feQxFSFj+EmEc5Bc1S8ICRZVs NbdWarTqkSZG+qrWogmL1K6ZQOtaQ2KFsHaRhCP2NZSw0++CdfVldz71Oz4RXNrG kElf42KP2zqw7RAt5Q6p+ftntfuVmc/7JmwufH0JlE9L6gYUpHT7mbewxsxiSZkg 0tFTgc6EOceWoSK2h4dl+KBiAMk8EwpN0U3ZdPLALBqzyzh+d2xtfnavmWjeQo8Q nj8fs66jAA1FnZoVwOFwPlBatBrMJgS62PHte0dEO1I1t11VCUlr8JEAblnUr+NI UBSxGJySdA== -----END CERTIFICATE-----Generated at Sat Apr 26 07:43:50 2025 by rpki-client