$ rpki-client -vvf rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/31554CBC1D8A11EA8ECDAA75C4F9AE02.roa File: 31554CBC1D8A11EA8ECDAA75C4F9AE02.roa (raw, json) Hash identifier: uM9esMnbJemVTDXSBi0eBdZiTFnt+Mq64Yuw7Vo5ff8= Subject key identifier: 8F:AF:A7:03:1C:0A:A6:79:0F:4D:B9:4E:5D:51:F6:D1:ED:E2:40:B8 Certificate issuer: /CN=A9152D08/serialNumber=34DC20129EAD6F41A7CA2D99C9BD3E7E6033CB88 Certificate serial: 0C52 Authority key identifier: 34:DC:20:12:9E:AD:6F:41:A7:CA:2D:99:C9:BD:3E:7E:60:33:CB:88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/31554CBC1D8A11EA8ECDAA75C4F9AE02.roa Signing time: Fri 14 Mar 2025 19:19:11 +0000 ROA not before: Fri 14 Mar 2025 19:19:11 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 55639 IP address blocks: 111.90.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3154 (0xc52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152D08, serialNumber=34DC20129EAD6F41A7CA2D99C9BD3E7E6033CB88 Validity Not Before: Mar 14 19:19:11 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67d4812e-5941 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:01:73:4b:c5:ad:4c:29:dd:5a:7b:e4:b9:c1: c6:b3:1f:89:83:0b:6f:75:2e:f9:12:69:43:4c:4f: 0a:e5:ff:13:49:08:75:89:45:7a:b5:25:b0:80:9b: 10:13:f3:4f:c0:7e:71:ba:2c:8a:3b:03:32:26:70: a2:2b:f1:5d:b4:75:b2:ec:16:e5:7f:55:74:74:bd: 4f:02:65:58:82:59:4c:a2:19:c6:56:55:8d:04:0a: db:8a:1f:c6:2a:d3:54:2c:94:a8:83:a3:55:66:cd: ed:12:b8:79:48:1b:d1:b1:9e:db:ab:78:53:ec:9a: dd:e1:02:25:ea:71:f0:70:be:44:1c:7e:66:dd:f6: 4b:6a:28:c5:a8:c8:3a:8e:b2:3f:e8:9c:bb:80:e5: 65:eb:52:87:18:72:9a:3f:23:22:c9:09:74:f4:a1: 8f:16:83:7f:ba:a4:53:d9:c9:6f:62:53:9c:60:52: ac:80:58:12:a4:e1:e1:66:68:3c:98:d7:67:0c:e2: a0:64:c3:ff:8b:00:bf:bc:ce:e4:f9:02:08:64:26: fb:9c:17:dc:a0:03:d4:f7:81:5e:51:5e:d9:cd:41: f7:8f:7c:93:cf:d8:07:a1:79:be:f8:ab:8e:5e:66: 37:83:15:40:a9:9e:65:c6:ce:2d:08:93:34:b0:c9: 28:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:AF:A7:03:1C:0A:A6:79:0F:4D:B9:4E:5D:51:F6:D1:ED:E2:40:B8 X509v3 Authority Key Identifier: keyid:34:DC:20:12:9E:AD:6F:41:A7:CA:2D:99:C9:BD:3E:7E:60:33:CB:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/31554CBC1D8A11EA8ECDAA75C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 111.90.157.0/24 Signature Algorithm: sha256WithRSAEncryption 55:18:a7:7f:ff:97:36:39:92:87:f2:6c:02:77:df:e8:f2:0b: c9:4f:97:a7:60:9b:4d:36:b9:16:e6:94:04:35:67:a6:90:55: e3:a0:68:32:f2:39:e2:1e:5b:79:a9:6e:a2:a0:98:e6:52:71: c3:5a:c4:dd:47:bb:28:14:50:b0:a7:c4:0f:08:a1:24:a1:c8: f6:5b:29:bc:79:75:ca:a9:7f:af:2a:8f:39:aa:d9:3d:01:60: 85:0c:43:6d:49:90:1c:ba:41:f5:0e:87:c0:61:16:8e:af:91: 27:66:3e:46:f1:96:4e:ff:f9:33:de:af:07:b5:6c:59:77:4c: 37:a9:47:45:26:66:b3:b5:dc:ea:04:83:bf:09:78:f1:ee:03: bb:2b:aa:51:52:58:60:38:9a:fc:87:40:73:dd:68:34:a2:ad: 93:02:12:ad:de:d6:73:a8:41:55:47:42:21:f5:9e:6a:4a:2e: 4a:03:3b:32:dd:19:1c:68:69:35:5a:87:94:52:f6:f6:4f:8d: 0c:ee:27:4d:e0:73:ce:1e:91:75:b5:f8:09:46:2c:fb:24:2d: d6:f8:60:30:3b:f8:19:31:7f:fe:b7:b6:53:ff:d6:4b:13:c0: dc:ae:b4:e7:96:e5:ac:94:2c:e5:d7:22:22:97:78:90:6b:62: 60:f7:74:37 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDFIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJEMDgxMTAvBgNVBAUTKDM0REMyMDEyOUVBRDZGNDFBN0NBMkQ5OUM5QkQzRTdF NjAzM0NCODgwHhcNMjUwMzE0MTkxOTExWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2Q0ODEyZS01OTQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqgFzS8WtTCndWnvkucHGsx+JgwtvdS75EmlDTE8K5f8TSQh1iUV6tSWwgJsQ E/NPwH5xuiyKOwMyJnCiK/FdtHWy7Bblf1V0dL1PAmVYgllMohnGVlWNBArbih/G KtNULJSog6NVZs3tErh5SBvRsZ7bq3hT7Jrd4QIl6nHwcL5EHH5m3fZLaijFqMg6 jrI/6Jy7gOVl61KHGHKaPyMiyQl09KGPFoN/uqRT2clvYlOcYFKsgFgSpOHhZmg8 mNdnDOKgZMP/iwC/vM7k+QIIZCb7nBfcoAPU94FeUV7ZzUH3j3yTz9gHoXm++KuO XmY3gxVAqZ5lxs4tCJM0sMkoPQIDAQABo4IClTCCApEwHQYDVR0OBBYEFI+vpwMc CqZ5D025Tl1R9tHt4kC4MB8GA1UdIwQYMBaAFDTcIBKerW9Bp8otmcm9Pn5gM8uI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkQwOC9GOUMzMzM5MjFE ODcxMUVBQTlDNUIxNzBDNEY5QUUwMi9OTndnRXA2dGIwR255aTJaeWIwLWZtQXp5 NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05Od2dFcDZ0YjBHbnlpMlp5YjAtZm1Benk0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTJEMDgvRjlDMzMzOTIxRDg3MTFFQUE5QzVCMTcwQzRGOUFFMDIvMzE1NTRDQkMx RDhBMTFFQThFQ0RBQTc1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABvWp0wDQYJKoZIhvcNAQELBQADggEBAFUYp3//lzY5kofy bAJ33+jyC8lPl6dgm002uRbmlAQ1Z6aQVeOgaDLyOeIeW3mpbqKgmOZSccNaxN1H uygUULCnxA8IoSShyPZbKbx5dcqpf68qjzmq2T0BYIUMQ21JkBy6QfUOh8BhFo6v kSdmPkbxlk7/+TPerwe1bFl3TDepR0UmZrO13OoEg78JePHuA7srqlFSWGA4mvyH QHPdaDSirZMCEq3e1nOoQVVHQiH1nmpKLkoDOzLdGRxoaTVah5RS9vZPjQzuJ03g c84ekXW1+AlGLPskLdb4YDA7+Bkxf/63tlP/1ksTwNyutOeW5ayULOXXIiKXeJBr YmD3dDc= -----END CERTIFICATE-----Generated at Sat Apr 26 09:29:49 2025 by rpki-client