$ rpki-client -vvf rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/FAEA8E38E41911EFA96DA35FC4F9AE02.roa File: FAEA8E38E41911EFA96DA35FC4F9AE02.roa (raw, json) Hash identifier: RxRZ1dH5JkRHUJw1N/ksvTcKPSxp60O8KTnJFH3sluU= Subject key identifier: 82:7A:E8:35:61:DF:30:74:7D:56:9A:24:3B:87:64:8E:79:2C:20:C8 Certificate issuer: /CN=A9142037/serialNumber=3761212A1670A5719AB71FA203B92EC686F21177 Certificate serial: 04 Authority key identifier: 37:61:21:2A:16:70:A5:71:9A:B7:1F:A2:03:B9:2E:C6:86:F2:11:77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2EhKhZwpXGatx-iA7kuxobyEXc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/FAEA8E38E41911EFA96DA35FC4F9AE02.roa Signing time: Wed 05 Feb 2025 23:36:11 +0000 ROA not before: Wed 05 Feb 2025 23:36:11 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 132584 IP address blocks: 203.14.54.0/24 maxlen: 24 203.14.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.crl rsync://rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2EhKhZwpXGatx-iA7kuxobyEXc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:42:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142037, serialNumber=3761212A1670A5719AB71FA203B92EC686F21177 Validity Not Before: Feb 5 23:36:11 2025 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=67a3f5ea-98dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:96:87:e6:5a:32:b9:ec:8a:44:7f:53:dd:ce: a6:b9:cf:35:b6:4f:2f:36:67:b1:9b:e2:a9:c3:28: 03:1e:cb:0d:26:a3:4c:c5:a4:b1:e3:1b:ea:13:53: 03:37:41:7b:17:9e:aa:20:74:6c:78:2f:1e:e2:8b: ef:1e:c0:5e:1a:09:ba:41:a0:21:50:1e:9e:82:58: a6:e7:b0:db:9e:49:31:cb:ab:79:cf:d2:39:f8:cc: f8:5e:90:a7:20:fb:c0:e2:b1:58:87:c3:f2:05:20: 1a:3d:4c:73:43:ce:a5:27:d0:47:c9:9b:db:c7:f5: a8:07:21:c4:ee:76:74:39:ee:a5:27:6a:49:e5:77: 6d:4a:4a:34:77:b4:46:5a:1a:22:29:47:34:04:44: 50:4d:71:3d:b8:2a:14:5b:6a:76:9a:94:6b:80:2b: 02:10:45:d5:44:a2:a4:30:09:0f:50:f7:7c:ad:22: 09:97:07:22:c4:0a:b2:f9:2b:7e:1a:06:a0:a7:8d: 46:76:d8:af:0c:4c:3b:75:ca:7d:34:82:cb:ac:0c: b0:44:3e:23:e2:32:12:30:15:b0:3d:79:d2:89:10: 2d:d3:99:a8:12:05:50:88:f0:f8:a2:00:ab:c7:97: d4:83:b2:45:01:1e:10:cf:83:db:77:80:b3:87:15: 64:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:7A:E8:35:61:DF:30:74:7D:56:9A:24:3B:87:64:8E:79:2C:20:C8 X509v3 Authority Key Identifier: keyid:37:61:21:2A:16:70:A5:71:9A:B7:1F:A2:03:B9:2E:C6:86:F2:11:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2EhKhZwpXGatx-iA7kuxobyEXc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/FAEA8E38E41911EFA96DA35FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.14.54.0/24 203.14.213.0/24 Signature Algorithm: sha256WithRSAEncryption cd:a5:95:93:53:65:ea:07:0a:f7:d9:af:20:cb:cf:a3:30:88: ec:56:b5:8e:5b:58:70:63:33:a3:d5:34:ce:f7:58:35:cb:e7: 6c:69:13:41:60:51:e8:39:86:08:30:7c:25:bd:49:b5:fd:49: 4c:34:33:8d:90:3c:26:86:62:99:7e:bc:c3:b9:12:7f:9a:51: 8d:de:51:47:94:34:ff:18:5b:48:ed:85:0b:46:45:cf:fc:77: 1f:f2:15:51:fd:18:81:1e:69:fb:3f:02:15:d0:3f:31:97:ad: cf:64:2d:5c:db:11:80:c0:8a:e0:2a:06:a2:f2:b9:c1:6b:66: 9d:7e:2d:f8:80:df:86:cc:63:f1:1e:cd:17:b1:4a:a6:ac:20: b8:01:a6:32:b2:f8:d9:4b:ef:dc:41:57:de:ae:8c:de:db:83: 9c:49:58:75:29:a6:56:93:28:12:65:a2:b6:86:00:50:2b:21: 72:bf:2f:2a:f1:a2:20:da:ec:b5:51:cd:7b:62:f9:8c:e1:1c: 1d:a1:32:07:2c:ac:7b:75:b3:1c:50:08:c7:31:48:44:bd:05: 52:9d:5d:0a:39:c8:e6:1c:fc:66:6a:f4:e9:63:53:31:0d:43: d0:bb:9b:6b:ea:ae:e6:78:b4:a1:c2:0a:0a:f7:9d:e6:29:b2: 38:e9:db:73 -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MjAzNzExMC8GA1UEBRMoMzc2MTIxMkExNjcwQTU3MTlBQjcxRkEyMDNCOTJFQzY4 NkYyMTE3NzAeFw0yNTAyMDUyMzM2MTFaFw0yNTEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY3YTNmNWVhLTk4ZGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4lofmWjK57IpEf1Pdzqa5zzW2Ty82Z7Gb4qnDKAMeyw0mo0zFpLHjG+oTUwM3 QXsXnqogdGx4Lx7ii+8ewF4aCbpBoCFQHp6CWKbnsNueSTHLq3nP0jn4zPhekKcg +8DisViHw/IFIBo9THNDzqUn0EfJm9vH9agHIcTudnQ57qUnaknld21KSjR3tEZa GiIpRzQERFBNcT24KhRbanaalGuAKwIQRdVEoqQwCQ9Q93ytIgmXByLECrL5K34a BqCnjUZ22K8MTDt1yn00gsusDLBEPiPiMhIwFbA9edKJEC3TmagSBVCI8PiiAKvH l9SDskUBHhDPg9t3gLOHFWTPAgMBAAGjggKbMIIClzAdBgNVHQ4EFgQUgnroNWHf MHR9VpokO4dkjnksIMgwHwYDVR0jBBgwFoAUN2EhKhZwpXGatx+iA7kuxobyEXcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyMDM3LzVDMDVDMEM4RTQx NzExRUY5NkUyRkYzOEM0RjlBRTAyL04yRWhLaFp3cFhHYXR4LWlBN2t1eG9ieUVY Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTjJFaEtoWndwWEdhdHgtaUE3a3V4b2J5RVhjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjAzNy81QzA1QzBDOEU0MTcxMUVGOTZFMkZGMzhDNEY5QUUwMi9GQUVBOEUzOEU0 MTkxMUVGQTk2REEzNUZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQW MBQwEgQCAAEwDAMEAMsONgMEAMsO1TANBgkqhkiG9w0BAQsFAAOCAQEAzaWVk1Nl 6gcK99mvIMvPozCI7Fa1jltYcGMzo9U0zvdYNcvnbGkTQWBR6DmGCDB8Jb1Jtf1J TDQzjZA8JoZimX68w7kSf5pRjd5RR5Q0/xhbSO2FC0ZFz/x3H/IVUf0YgR5p+z8C FdA/MZetz2QtXNsRgMCK4CoGovK5wWtmnX4t+IDfhsxj8R7NF7FKpqwguAGmMrL4 2Uvv3EFX3q6M3tuDnElYdSmmVpMoEmWitoYAUCshcr8vKvGiINrstVHNe2L5jOEc HaEyByyse3WzHFAIxzFIRL0FUp1dCjnI5hz8Zmr06WNTMQ1D0Luba+qu5ni0ocIK Cved5imyOOnbcw== -----END CERTIFICATE-----Generated at Sat Apr 26 15:22:56 2025 by rpki-client