$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/E88FA9C050EC11EDA7DA9346C4F9AE02.roa File: E88FA9C050EC11EDA7DA9346C4F9AE02.roa (raw, json) Hash identifier: d5k8mBEvQfUgZFSJDf+SsljLPzLne0iAQgk3UuEZ4sE= Subject key identifier: 6A:F0:B6:A0:4F:2A:27:AC:46:02:5A:F9:43:AA:A1:E9:AB:9C:7B:31 Certificate issuer: /CN=A9146207/serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B Certificate serial: 24FC Authority key identifier: 9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/E88FA9C050EC11EDA7DA9346C4F9AE02.roa Signing time: Tue 08 Apr 2025 06:29:51 +0000 ROA not before: Tue 08 Apr 2025 06:29:51 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 14499 IP address blocks: 112.198.24.0/24 maxlen: 24 112.198.25.0/24 maxlen: 24 222.127.107.0/24 maxlen: 24 222.127.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:58:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9468 (0x24fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146207, serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B Validity Not Before: Apr 8 06:29:51 2025 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=67f4c25f-875d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:a1:4e:69:db:b3:d9:f8:40:d1:11:33:21:27: 14:cd:9b:3c:43:67:7d:19:f0:37:42:c9:65:6b:75: 93:fb:ce:cf:bf:f5:3b:c8:72:1b:de:2d:8c:95:76: e9:45:70:e3:4e:59:98:42:5b:b2:3a:a5:0b:ff:a2: b7:ba:5b:21:e3:5b:f7:50:cb:4a:d0:fd:46:63:0a: a7:f1:d5:bd:00:2a:0b:cd:84:58:13:97:ea:bb:d8: bb:44:e4:37:7f:22:30:40:fe:85:57:d7:ce:06:17: 65:ca:d0:d4:5e:e8:bd:cd:d5:54:91:93:ca:3c:f5: 2e:d8:17:41:7b:8b:18:9e:98:88:13:a1:eb:7a:e9: 62:15:d4:65:9e:c1:50:c6:80:5f:4f:b6:c6:58:12: 79:54:e8:9f:e0:a3:95:44:04:4f:d4:8a:55:e2:71: 1b:2f:c1:0c:f5:30:0d:73:c9:e0:b3:59:51:fd:ef: f8:c1:83:db:85:e6:af:22:44:2e:0f:3c:ce:dd:a1: 2b:e2:df:68:19:6e:f2:0a:e2:d0:c8:91:74:bf:9a: fa:79:28:d7:27:bb:b7:9a:7d:9c:30:47:d4:95:f1: c4:c2:c7:8e:5f:72:81:4d:a5:81:33:af:bd:3c:4d: 53:13:1a:90:01:62:8b:c9:0c:4a:f0:ce:33:c7:a8: 74:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:F0:B6:A0:4F:2A:27:AC:46:02:5A:F9:43:AA:A1:E9:AB:9C:7B:31 X509v3 Authority Key Identifier: keyid:9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/E88FA9C050EC11EDA7DA9346C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 112.198.24.0/23 222.127.107.0/24 222.127.141.0/24 Signature Algorithm: sha256WithRSAEncryption a8:6d:cf:91:e2:26:76:e7:71:53:fc:29:ab:c8:be:77:16:5d: 3c:60:b7:d5:54:4b:34:28:50:80:18:bd:03:e0:dc:3e:a7:c9: 88:4a:c8:c1:6d:c8:18:47:54:79:6a:ca:ea:8d:a8:9f:37:c5: b4:37:70:a0:73:8c:fc:98:20:0e:b3:24:6a:a4:3f:f2:13:84: 92:be:97:5d:31:54:f4:5b:7c:b2:c6:da:09:06:93:7a:3b:09: 45:bc:94:5f:d9:ff:ed:9e:04:02:b3:20:61:ab:75:dd:7a:21: 2a:1c:74:ce:15:99:83:fb:bb:04:f1:89:29:6c:eb:c9:14:c3: 69:75:c3:21:3b:79:4e:11:dd:57:2b:b3:bf:22:db:75:39:0b: ac:5f:2d:83:a8:a3:f5:f2:22:e1:5d:32:db:34:4d:15:ac:05: f5:bc:77:15:f4:d4:bd:b8:63:3e:11:a8:68:0c:3a:3f:44:1a: d3:ac:d2:de:81:4b:69:e1:37:85:97:9e:01:99:28:4c:2f:a9: 3a:e0:05:ba:e0:93:1e:94:16:24:8f:72:45:88:77:ad:48:aa: 46:9b:d4:ba:1d:0d:5c:b5:31:5d:42:2f:03:e0:8b:f3:4d:ad: 66:69:8f:9e:d0:c2:15:30:02:aa:7d:12:5c:30:03:cd:b2:af: b2:0a:56:2b -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICJPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYyMDcxMTAvBgNVBAUTKDlFNjY4RTZFNjdCQUQwQUNGOTQwQTIyOEM0QkMwOTNC OEIyNDAwMkIwHhcNMjUwNDA4MDYyOTUxWhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02N2Y0YzI1Zi04NzVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3aFOaduz2fhA0REzIScUzZs8Q2d9GfA3Qslla3WT+87Pv/U7yHIb3i2MlXbp RXDjTlmYQluyOqUL/6K3ulsh41v3UMtK0P1GYwqn8dW9ACoLzYRYE5fqu9i7ROQ3 fyIwQP6FV9fOBhdlytDUXui9zdVUkZPKPPUu2BdBe4sYnpiIE6HreuliFdRlnsFQ xoBfT7bGWBJ5VOif4KOVRARP1IpV4nEbL8EM9TANc8ngs1lR/e/4wYPbheavIkQu DzzO3aEr4t9oGW7yCuLQyJF0v5r6eSjXJ7u3mn2cMEfUlfHEwseOX3KBTaWBM6+9 PE1TExqQAWKLyQxK8M4zx6h0TQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFGrwtqBP KiesRgJa+UOqoemrnHsxMB8GA1UdIwQYMBaAFJ5mjm5nutCs+UCiKMS8CTuLJAAr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjIwNy9GRTc1NjM0MDAy Q0IxMUU2ODY1QjhGM0JDNEY5QUUwMi9ubWFPYm1lNjBLejVRS0lveEx3Sk80c2tB Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25tYU9ibWU2MEt6NVFLSW94THdKTzRza0FDcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDYyMDcvRkU3NTYzNDAwMkNCMTFFNjg2NUI4RjNCQzRGOUFFMDIvRTg4RkE5QzA1 MEVDMTFFREE3REE5MzQ2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAFwxhgDBADef2sDBADef40wDQYJKoZIhvcNAQELBQADggEB AKhtz5HiJnbncVP8KavIvncWXTxgt9VUSzQoUIAYvQPg3D6nyYhKyMFtyBhHVHlq yuqNqJ83xbQ3cKBzjPyYIA6zJGqkP/IThJK+l10xVPRbfLLG2gkGk3o7CUW8lF/Z /+2eBAKzIGGrdd16ISocdM4VmYP7uwTxiSls68kUw2l1wyE7eU4R3Vcrs78i23U5 C6xfLYOoo/XyIuFdMts0TRWsBfW8dxX01L24Yz4RqGgMOj9EGtOs0t6BS2nhN4WX ngGZKEwvqTrgBbrgkx6UFiSPckWId61Iqkab1LodDVy1MV1CLwPgi/NNrWZpj57Q whUwAqp9ElwwA82yr7IKVis= -----END CERTIFICATE-----Generated at Sat Apr 26 08:04:56 2025 by rpki-client