$ rpki-client -vvf rpki.apnic.net/member_repository/A9143336/8EE7FC1E085311E4B0239E61C4F9AE02/5452AC309B4911EB9952394CC4F9AE02.roa File: 5452AC309B4911EB9952394CC4F9AE02.roa (raw, json) Hash identifier: 3EBZNTlM2pSnC9HcQ0kJddDB9AhHcVhBduQrWy64qKQ= Subject key identifier: 22:83:5C:91:B8:F6:EB:AB:31:31:89:DB:2F:FA:56:43:3F:04:A2:57 Certificate issuer: /CN=A9143336/serialNumber=E442F99559AC1BA87EE1348B2FC7AF0A22FFB261 Certificate serial: 2AF0 Authority key identifier: E4:42:F9:95:59:AC:1B:A8:7E:E1:34:8B:2F:C7:AF:0A:22:FF:B2:61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5EL5lVmsG6h-4TSLL8evCiL_smE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143336/8EE7FC1E085311E4B0239E61C4F9AE02/5452AC309B4911EB9952394CC4F9AE02.roa Signing time: Wed 28 May 2025 15:43:00 +0000 ROA not before: Wed 28 May 2025 15:43:00 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 45671 IP address blocks: 203.132.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143336/8EE7FC1E085311E4B0239E61C4F9AE02/5EL5lVmsG6h-4TSLL8evCiL_smE.crl rsync://rpki.apnic.net/member_repository/A9143336/8EE7FC1E085311E4B0239E61C4F9AE02/5EL5lVmsG6h-4TSLL8evCiL_smE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5EL5lVmsG6h-4TSLL8evCiL_smE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 15:32:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10992 (0x2af0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143336, serialNumber=E442F99559AC1BA87EE1348B2FC7AF0A22FFB261 Validity Not Before: May 28 15:43:00 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=68372f03-63a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:70:be:99:be:0c:5d:cb:ab:d1:ee:d8:7f:95: 1a:ba:5e:77:25:a0:9b:4e:05:af:c5:37:d2:30:63: 61:86:5e:0c:91:e8:30:5e:62:1d:7b:ff:71:28:4d: 10:9b:a1:ab:ad:a6:e4:82:e5:54:b8:07:5d:30:09: 21:4d:e9:ae:93:2d:61:51:ed:77:ea:4e:1d:8a:fe: 5d:52:4c:7c:53:fc:4b:0a:c5:76:5b:33:ac:c3:00: 5b:1e:be:44:48:72:c1:1b:f0:5a:96:00:55:70:a3: 6a:03:fc:ef:af:e6:03:b5:a6:15:e6:a8:40:09:20: 8a:76:2e:0d:81:92:dd:e7:35:9d:9f:e9:86:b2:39: bf:f6:a7:57:7d:8f:90:be:65:4e:68:fe:fe:39:55: fb:a6:8e:4c:81:de:d0:42:f9:d7:ee:f8:43:c2:ea: 28:76:21:4d:b1:69:32:da:5b:13:a2:6d:90:47:fc: 73:ad:ed:b3:55:0c:6b:d1:ad:09:09:9c:e4:3e:53: 6e:20:ec:d7:79:92:51:56:1b:99:ab:14:9c:67:36: d5:a4:d2:58:4e:5f:3e:4a:39:33:f3:43:1a:6f:50: 68:1f:2e:44:a8:b8:cb:f6:3a:56:d2:0d:75:2d:65: 35:ea:1e:0e:a1:6a:84:ff:70:95:09:5e:8b:5f:d6: e5:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:83:5C:91:B8:F6:EB:AB:31:31:89:DB:2F:FA:56:43:3F:04:A2:57 X509v3 Authority Key Identifier: keyid:E4:42:F9:95:59:AC:1B:A8:7E:E1:34:8B:2F:C7:AF:0A:22:FF:B2:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143336/8EE7FC1E085311E4B0239E61C4F9AE02/5EL5lVmsG6h-4TSLL8evCiL_smE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5EL5lVmsG6h-4TSLL8evCiL_smE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143336/8EE7FC1E085311E4B0239E61C4F9AE02/5452AC309B4911EB9952394CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.132.0.0/22 Signature Algorithm: sha256WithRSAEncryption 51:85:ca:3d:3d:31:72:17:64:7a:68:c7:05:3e:08:a3:90:b3: 59:0b:1f:82:20:b6:71:97:6c:1d:29:11:ef:63:4e:f2:39:c1: 35:0c:f8:fb:8e:80:f9:82:71:90:6a:b8:b4:f2:f7:24:cf:6a: da:c7:58:8b:96:23:25:55:69:7a:d2:34:41:c3:2d:bc:22:84: a5:2e:62:1c:ee:92:e1:51:c9:f2:19:a3:16:f1:c2:10:48:6e: 86:68:c4:67:8e:80:23:9c:c0:fe:b0:bd:da:23:14:14:9d:48: 82:ec:4e:82:fa:4c:9e:4c:0a:8a:72:5c:af:02:76:63:76:f0: df:b7:38:1c:3b:db:06:d0:2f:e4:99:c6:2e:fb:bd:15:07:0b: 03:02:58:30:df:34:b2:62:ea:b6:72:67:9e:53:cb:79:6c:d2: 74:ce:84:a9:41:88:94:1e:1c:24:ee:4b:35:82:64:ca:c2:bc: 2d:14:a8:a8:5a:60:5f:e7:30:bf:bf:dc:97:93:d6:6f:42:99: c7:3c:d6:5e:46:7e:a5:29:cb:ef:e7:55:d6:82:45:79:5a:54: 3a:1d:5e:21:8e:63:18:ee:21:cd:9e:a2:e7:c7:1a:4d:a0:bc: 51:f1:74:a5:a1:d8:be:7c:17:9b:d5:00:5e:68:47:20:02:90: 03:ff:39:f9 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICKvAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDMzMzYxMTAvBgNVBAUTKEU0NDJGOTk1NTlBQzFCQTg3RUUxMzQ4QjJGQzdBRjBB MjJGRkIyNjEwHhcNMjUwNTI4MTU0MzAwWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODM3MmYwMy02M2E2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx3C+mb4MXcur0e7Yf5Uaul53JaCbTgWvxTfSMGNhhl4MkegwXmIde/9xKE0Q m6GrrabkguVUuAddMAkhTemuky1hUe136k4div5dUkx8U/xLCsV2WzOswwBbHr5E SHLBG/BalgBVcKNqA/zvr+YDtaYV5qhACSCKdi4NgZLd5zWdn+mGsjm/9qdXfY+Q vmVOaP7+OVX7po5Mgd7QQvnX7vhDwuoodiFNsWky2lsTom2QR/xzre2zVQxr0a0J CZzkPlNuIOzXeZJRVhuZqxScZzbVpNJYTl8+Sjkz80Mab1BoHy5EqLjL9jpW0g11 LWU16h4OoWqE/3CVCV6LX9blmQIDAQABo4IClTCCApEwHQYDVR0OBBYEFCKDXJG4 9uurMTGJ2y/6VkM/BKJXMB8GA1UdIwQYMBaAFORC+ZVZrBuofuE0iy/Hrwoi/7Jh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzMzNi84RUU3RkMxRTA4 NTMxMUU0QjAyMzlFNjFDNEY5QUUwMi81RUw1bFZtc0c2aC00VFNMTDhldkNpTF9z bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVFTDVsVm1zRzZoLTRUU0xMOGV2Q2lMX3NtRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDMzMzYvOEVFN0ZDMUUwODUzMTFFNEIwMjM5RTYxQzRGOUFFMDIvNTQ1MkFDMzA5 QjQ5MTFFQjk5NTIzOTRDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBALLhAAwDQYJKoZIhvcNAQELBQADggEBAFGFyj09MXIXZHpo xwU+CKOQs1kLH4IgtnGXbB0pEe9jTvI5wTUM+PuOgPmCcZBquLTy9yTPatrHWIuW IyVVaXrSNEHDLbwihKUuYhzukuFRyfIZoxbxwhBIboZoxGeOgCOcwP6wvdojFBSd SILsToL6TJ5MCopyXK8CdmN28N+3OBw72wbQL+SZxi77vRUHCwMCWDDfNLJi6rZy Z55Ty3ls0nTOhKlBiJQeHCTuSzWCZMrCvC0UqKhaYF/nML+/3JeT1m9Cmcc81l5G fqUpy+/nVdaCRXlaVDodXiGOYxjuIc2eoufHGk2gvFHxdKWh2L58F5vVAF5oRyAC kAP/Ofk= -----END CERTIFICATE-----Generated at Thu Jun 19 05:25:19 2025 by rpki-client