$ rpki-client -vvf rpki.apnic.net/member_repository/A911C53D/84B58F668CFB11EB9DC62C3BC4F9AE02/45FE96F6A5F611EFA16E4B2FC4F9AE02.roa File: 45FE96F6A5F611EFA16E4B2FC4F9AE02.roa (raw, json) Hash identifier: QKxHtK6gPEt6tq1AwAFxqNPlRptJP4WLysqBYZDRn14= Subject key identifier: 36:61:27:BB:FB:64:0E:84:CA:EF:A9:28:7C:30:2D:B4:4E:B4:FD:9E Certificate issuer: /CN=A911C53D/serialNumber=A5C763E8A95F6B9AB24113601DA8153A159126EE Certificate serial: 064D Authority key identifier: A5:C7:63:E8:A9:5F:6B:9A:B2:41:13:60:1D:A8:15:3A:15:91:26:EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcdj6Klfa5qyQRNgHagVOhWRJu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C53D/84B58F668CFB11EB9DC62C3BC4F9AE02/45FE96F6A5F611EFA16E4B2FC4F9AE02.roa Signing time: Wed 09 Apr 2025 02:36:55 +0000 ROA not before: Wed 09 Apr 2025 02:36:55 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 141749 IP address blocks: 202.14.152.0/24 maxlen: 24 203.20.94.0/24 maxlen: 24 203.24.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C53D/84B58F668CFB11EB9DC62C3BC4F9AE02/pcdj6Klfa5qyQRNgHagVOhWRJu4.crl rsync://rpki.apnic.net/member_repository/A911C53D/84B58F668CFB11EB9DC62C3BC4F9AE02/pcdj6Klfa5qyQRNgHagVOhWRJu4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcdj6Klfa5qyQRNgHagVOhWRJu4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:25:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1613 (0x64d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C53D, serialNumber=A5C763E8A95F6B9AB24113601DA8153A159126EE Validity Not Before: Apr 9 02:36:55 2025 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=67f5dd47-5c78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:45:40:1c:15:eb:cd:38:7c:a3:c3:d6:8e:2f: 47:a7:7e:4d:d4:0f:79:b4:86:8b:ba:ba:a0:0d:35: 13:16:f6:13:f6:2c:63:38:4e:da:88:ec:f5:e1:2a: fa:7c:bc:d4:14:ac:ee:b0:60:a5:10:96:68:7c:c1: 0c:48:27:65:2c:43:c8:a3:bc:26:72:d5:6f:11:94: 09:56:3e:b3:99:e1:36:f6:1c:a7:13:ca:68:03:31: 78:b6:22:32:d6:39:eb:28:0e:0e:1a:bb:0e:e1:2f: b5:a2:d8:16:a0:a6:f2:ec:ea:32:75:d4:af:66:6f: 4e:14:11:32:da:2a:fd:e9:d1:b4:11:a9:28:e7:77: 42:35:d4:e6:de:4f:6c:06:c1:fc:2b:65:70:90:af: 57:92:36:95:7f:f4:e9:cd:1b:0c:86:d0:74:29:58: 2c:17:42:78:00:04:96:33:f5:55:2d:73:31:c5:ad: 79:1f:4c:e9:96:7e:4d:15:09:ba:ec:a0:0b:0d:52: 15:fe:91:29:26:5b:b9:89:3c:4f:aa:72:ef:8f:6e: 62:7e:b1:26:66:90:b2:51:1d:f8:8b:61:b4:5e:cb: 3e:9b:e9:b0:84:4d:1b:74:07:43:7e:01:cc:f2:42: ff:8a:f8:5b:aa:dd:60:9a:75:19:a0:be:84:28:cc: 43:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:61:27:BB:FB:64:0E:84:CA:EF:A9:28:7C:30:2D:B4:4E:B4:FD:9E X509v3 Authority Key Identifier: keyid:A5:C7:63:E8:A9:5F:6B:9A:B2:41:13:60:1D:A8:15:3A:15:91:26:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C53D/84B58F668CFB11EB9DC62C3BC4F9AE02/pcdj6Klfa5qyQRNgHagVOhWRJu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcdj6Klfa5qyQRNgHagVOhWRJu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C53D/84B58F668CFB11EB9DC62C3BC4F9AE02/45FE96F6A5F611EFA16E4B2FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.14.152.0/24 203.20.94.0/24 203.24.48.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:2b:22:ac:11:10:78:e0:c7:4a:c5:dd:f7:04:51:ad:f5:d2: 11:fd:7b:c7:eb:e2:42:92:88:03:c8:ab:6d:70:34:ef:58:03: 2e:b7:70:f7:b1:23:80:ba:74:54:5a:b5:a3:36:ad:bc:b0:86: df:15:68:0a:9d:19:3b:f7:1b:61:e0:ef:81:99:c9:e6:7b:f6: 8a:a6:d7:86:b6:8a:54:b5:6d:60:e2:97:b1:06:74:a8:45:da: b4:a8:05:e0:93:6d:61:8d:b4:fa:97:4a:cb:7a:f0:c5:a8:38: 49:0c:5e:b2:d7:d2:75:ab:d7:72:34:a8:ce:41:78:29:4f:69: 4c:a0:2e:79:a6:c7:41:25:bb:66:f6:e5:10:e6:a4:f5:48:21: 42:12:d6:6d:67:53:d5:e7:c0:68:e2:05:74:b5:eb:89:f6:2f: d8:91:b6:21:62:59:11:e1:13:0b:8d:c2:05:d2:43:40:6f:43: 91:21:40:92:81:42:f2:e8:9b:fb:61:d2:81:c8:99:eb:51:a3: b3:89:8d:23:60:3f:c4:61:08:77:9c:53:a0:79:85:3b:3f:0d: 29:fe:c2:55:71:15:34:c0:95:ea:80:59:4d:d1:9b:ec:c8:22: 6d:6c:8a:24:db:0b:69:70:ec:52:79:3e:3e:34:00:54:48:54: 2e:c9:d7:1d -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICBk0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM1M0QxMTAvBgNVBAUTKEE1Qzc2M0U4QTk1RjZCOUFCMjQxMTM2MDFEQTgxNTNB MTU5MTI2RUUwHhcNMjUwNDA5MDIzNjU1WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02N2Y1ZGQ0Ny01Yzc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3kVAHBXrzTh8o8PWji9Hp35N1A95tIaLurqgDTUTFvYT9ixjOE7aiOz14Sr6 fLzUFKzusGClEJZofMEMSCdlLEPIo7wmctVvEZQJVj6zmeE29hynE8poAzF4tiIy 1jnrKA4OGrsO4S+1otgWoKby7OoyddSvZm9OFBEy2ir96dG0Eako53dCNdTm3k9s BsH8K2VwkK9XkjaVf/TpzRsMhtB0KVgsF0J4AASWM/VVLXMxxa15H0zpln5NFQm6 7KALDVIV/pEpJlu5iTxPqnLvj25ifrEmZpCyUR34i2G0Xss+m+mwhE0bdAdDfgHM 8kL/ivhbqt1gmnUZoL6EKMxDdQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFDZhJ7v7 ZA6Eyu+pKHwwLbROtP2eMB8GA1UdIwQYMBaAFKXHY+ipX2uaskETYB2oFToVkSbu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzUzRC84NEI1OEY2NjhD RkIxMUVCOURDNjJDM0JDNEY5QUUwMi9wY2RqNktsZmE1cXlRUk5nSGFnVk9oV1JK dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BjZGo2S2xmYTVxeVFSTmdIYWdWT2hXUkp1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUM1M0QvODRCNThGNjY4Q0ZCMTFFQjlEQzYyQzNCQzRGOUFFMDIvNDVGRTk2RjZB NUY2MTFFRkExNkU0QjJGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBADKDpgDBADLFF4DBADLGDAwDQYJKoZIhvcNAQELBQADggEB AH4rIqwREHjgx0rF3fcEUa310hH9e8fr4kKSiAPIq21wNO9YAy63cPexI4C6dFRa taM2rbywht8VaAqdGTv3G2Hg74GZyeZ79oqm14a2ilS1bWDil7EGdKhF2rSoBeCT bWGNtPqXSst68MWoOEkMXrLX0nWr13I0qM5BeClPaUygLnmmx0Elu2b25RDmpPVI IUIS1m1nU9XnwGjiBXS164n2L9iRtiFiWRHhEwuNwgXSQ0BvQ5EhQJKBQvLom/th 0oHImetRo7OJjSNgP8RhCHecU6B5hTs/DSn+wlVxFTTAleqAWU3Rm+zIIm1siiTb C2lw7FJ5Pj40AFRIVC7J1x0= -----END CERTIFICATE-----Generated at Sat Apr 26 05:58:32 2025 by rpki-client