$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/03BA8B36824411EF94479387C4F9AE02.roa File: 03BA8B36824411EF94479387C4F9AE02.roa (raw, json) Hash identifier: J+iY4JEtmySFwOCqaP72SvJVDZLPvNEiLKvI7NyNzmE= Subject key identifier: 3B:09:32:FE:19:7D:47:24:31:79:AA:57:9D:B0:AE:E9:33:F0:D2:8E Certificate issuer: /CN=A9157D7A/serialNumber=401B429906C90EA03ECFC61B15BA4EF123903379 Certificate serial: 0779 Authority key identifier: 40:1B:42:99:06:C9:0E:A0:3E:CF:C6:1B:15:BA:4E:F1:23:90:33:79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/03BA8B36824411EF94479387C4F9AE02.roa Signing time: Wed 28 May 2025 10:13:00 +0000 ROA not before: Wed 28 May 2025 10:13:00 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 55740 IP address blocks: 14.195.78.0/24 maxlen: 24 14.195.79.0/24 maxlen: 24 14.195.91.0/24 maxlen: 24 14.195.124.0/24 maxlen: 24 27.107.200.0/24 maxlen: 24 27.107.201.0/24 maxlen: 24 27.107.202.0/24 maxlen: 24 49.249.1.0/24 maxlen: 24 49.249.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 22:33:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1913 (0x779) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157D7A, serialNumber=401B429906C90EA03ECFC61B15BA4EF123903379 Validity Not Before: May 28 10:13:00 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=6836e1ac-264d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:e6:54:70:b1:65:9d:bf:fc:88:ca:0a:46:f7: af:7a:ee:77:3a:05:5b:55:9e:05:61:19:fc:c5:9e: be:a3:1a:da:13:3b:59:f7:32:f1:7b:c9:c3:9a:a6: 93:85:96:4d:83:c4:a1:82:a0:64:75:eb:3f:b1:2b: 2b:8b:37:54:54:7e:a7:1e:4e:0f:12:d9:88:22:c1: ad:f0:af:4d:58:f2:4b:cd:4a:a8:36:7c:45:ae:61: 25:1f:8d:6d:f0:ac:28:4d:5e:76:71:8d:35:04:09: 64:f3:58:c6:0e:71:b0:30:62:5e:58:82:07:73:00: e0:0c:16:70:26:c0:49:df:85:cd:a5:6c:f1:2c:c8: 14:62:73:bb:44:6b:23:33:8d:6e:8b:79:36:ca:ed: 29:a6:2d:9d:17:f0:39:d7:ba:92:64:f4:a3:b0:9c: 71:3f:99:93:8e:da:2b:95:e9:a2:52:8d:c2:18:e4: 96:a3:b9:1d:f1:8e:66:74:c5:a8:00:08:b3:bf:a7: 0f:4e:78:8c:ef:fe:5e:d3:fe:bc:cf:ed:ab:1a:91: a5:55:46:d2:5b:7d:c7:c7:96:c5:cb:ab:d2:ac:e4: bb:d7:8b:75:9e:01:a4:39:1b:8e:14:21:2b:e9:3a: 44:68:40:4f:6b:0a:d7:b7:b4:c8:33:6b:81:c3:56: 83:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:09:32:FE:19:7D:47:24:31:79:AA:57:9D:B0:AE:E9:33:F0:D2:8E X509v3 Authority Key Identifier: keyid:40:1B:42:99:06:C9:0E:A0:3E:CF:C6:1B:15:BA:4E:F1:23:90:33:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/03BA8B36824411EF94479387C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 14.195.78.0/23 14.195.91.0/24 14.195.124.0/24 27.107.200.0-27.107.202.255 49.249.1.0/24 49.249.27.0/24 Signature Algorithm: sha256WithRSAEncryption 15:d9:4c:2b:d7:79:6a:29:84:5e:a9:ba:e3:88:cc:5e:a5:e0: d4:a9:79:e7:8b:c3:9f:bf:85:81:0b:fb:94:27:96:40:17:ae: fe:58:12:bf:13:e0:25:34:bb:84:74:ee:ae:77:f8:99:10:29: 00:c4:eb:a4:39:1e:63:aa:09:57:b9:78:2f:41:58:c9:c5:2a: 12:74:7f:10:91:31:f4:4f:09:e5:e8:c2:5a:99:d3:bb:8d:2c: db:dc:27:65:2c:f7:e5:c8:5a:0f:99:28:ce:f9:a8:15:e0:eb: 44:ce:a4:07:00:05:1a:7e:df:d0:d0:02:2d:32:83:7c:c4:3c: 02:ea:85:71:0f:59:99:c1:35:ed:08:22:10:59:16:e0:6d:07: fa:4b:ec:a4:5a:02:62:3e:a2:7b:85:e8:0c:9b:d5:b8:11:38: e4:03:f2:d5:76:14:b3:73:dc:08:2a:9a:1d:e0:52:80:45:14: 54:ee:1a:9e:2d:98:3b:1b:93:04:bf:a7:40:b7:3f:56:e0:1e: 17:f1:c8:95:69:92:9c:c5:62:a7:76:e3:88:6a:82:9b:31:ae: 35:67:8c:20:93:55:65:df:cf:9a:f7:fb:75:2c:c2:7c:51:0b: d8:77:72:fd:50:2b:f9:f5:86:ce:0f:f1:5b:b9:d8:b2:6e:f3: d7:da:82:eb -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgICB3kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdEN0ExMTAvBgNVBAUTKDQwMUI0Mjk5MDZDOTBFQTAzRUNGQzYxQjE1QkE0RUYx MjM5MDMzNzkwHhcNMjUwNTI4MTAxMzAwWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02ODM2ZTFhYy0yNjRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2+ZUcLFlnb/8iMoKRveveu53OgVbVZ4FYRn8xZ6+oxraEztZ9zLxe8nDmqaT hZZNg8ShgqBkdes/sSsrizdUVH6nHk4PEtmIIsGt8K9NWPJLzUqoNnxFrmElH41t 8KwoTV52cY01BAlk81jGDnGwMGJeWIIHcwDgDBZwJsBJ34XNpWzxLMgUYnO7RGsj M41ui3k2yu0ppi2dF/A517qSZPSjsJxxP5mTjtorlemiUo3CGOSWo7kd8Y5mdMWo AAizv6cPTniM7/5e0/68z+2rGpGlVUbSW33Hx5bFy6vSrOS714t1ngGkORuOFCEr 6TpEaEBPawrXt7TIM2uBw1aDwwIDAQABo4ICuzCCArcwHQYDVR0OBBYEFDsJMv4Z fUckMXmqV52wrukz8NKOMB8GA1UdIwQYMBaAFEAbQpkGyQ6gPs/GGxW6TvEjkDN5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0Q3QS81RERDQ0NDNjk5 MTUxMUVCOTY3MjcyNDNDNEY5QUUwMi9RQnRDbVFiSkRxQS16OFliRmJwTzhTT1FN M2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FCdENtUWJKRHFBLXo4WWJGYnBPOFNPUU0zay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTdEN0EvNUREQ0NDQzY5OTE1MTFFQjk2NzI3MjQzQzRGOUFFMDIvMDNCQThCMzY4 MjQ0MTFFRjk0NDc5Mzg3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRQYIKwYBBQUHAQcBAf8E NjA0MDIEAgABMCwDBAEOw04DBAAOw1sDBAAOw3wwDAMEAxtryAMEABtrygMEADH5 AQMEADH5GzANBgkqhkiG9w0BAQsFAAOCAQEAFdlMK9d5aimEXqm644jMXqXg1Kl5 54vDn7+FgQv7lCeWQBeu/lgSvxPgJTS7hHTurnf4mRApAMTrpDkeY6oJV7l4L0FY ycUqEnR/EJEx9E8J5ejCWpnTu40s29wnZSz35chaD5kozvmoFeDrRM6kBwAFGn7f 0NACLTKDfMQ8AuqFcQ9ZmcE17QgiEFkW4G0H+kvspFoCYj6ie4XoDJvVuBE45APy 1XYUs3PcCCqaHeBSgEUUVO4ani2YOxuTBL+nQLc/VuAeF/HIlWmSnMVip3bjiGqC mzGuNWeMIJNVZd/Pmvf7dSzCfFEL2Hdy/VAr+fWGzg/xW7nYsm7z19qC6w== -----END CERTIFICATE-----Generated at Fri Jun 20 16:44:09 2025 by rpki-client