$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/96D29A2220E011F086D75E5CC4F9AE02.roa File: 96D29A2220E011F086D75E5CC4F9AE02.roa (raw, json) Hash identifier: KRy0P5JWQx6Y2V5q4Ftt2uIQCI1mbwGMxyDRESmryUU= Subject key identifier: CA:45:07:DE:8E:C4:3C:0B:34:87:9C:9F:D0:42:7E:5D:9C:B1:EC:D9 Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264 Certificate serial: 0D29 Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/96D29A2220E011F086D75E5CC4F9AE02.roa Signing time: Thu 24 Apr 2025 07:49:02 +0000 ROA not before: Thu 24 Apr 2025 07:49:02 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 4766 IP address blocks: 111.92.131.0/24 maxlen: 24 111.92.133.0/24 maxlen: 24 111.92.134.0/24 maxlen: 24 111.92.139.0/24 maxlen: 24 111.92.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:59:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3369 (0xd29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264 Validity Not Before: Apr 24 07:49:02 2025 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=6809ecee-b024 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:3c:bb:c1:81:9a:5a:b5:b3:75:5a:a7:d7:d3: 2b:52:6e:dc:1f:ba:71:08:65:39:c8:64:e5:62:f1: 2d:93:ea:1e:8d:a2:e8:e5:17:4b:23:d8:4d:09:a4: 2f:8f:5d:c9:d2:d3:00:64:98:52:70:21:81:2d:52: 16:d8:42:40:8c:1a:44:fe:42:56:f5:2c:71:65:1f: 09:2e:9e:d3:42:9d:88:32:b0:ce:7d:56:e1:12:24: aa:57:60:3c:ea:4b:6c:85:33:7b:b6:2b:3e:61:13: be:e0:2e:78:d7:51:79:48:6c:5a:86:4e:81:c2:b1: 22:5e:34:4e:1e:d3:85:28:17:e7:43:a2:01:95:6b: ab:1f:98:4e:48:05:ee:9c:8e:9e:1e:0a:c7:86:98: e9:c0:fd:fd:92:35:2c:cb:b6:33:d2:a7:0b:3e:07: 77:c8:22:2c:b0:fa:7e:fa:5c:5d:ff:4b:82:e0:55: 96:80:92:27:43:86:96:de:56:60:1c:48:32:73:c8: 79:4d:4b:71:b9:f8:52:c9:dd:38:24:87:1f:56:43: 84:17:4f:04:64:80:7d:b5:fb:fd:c3:98:ee:f8:6f: 92:c9:50:48:ef:41:de:46:0e:31:01:11:35:6b:05: 36:ed:dc:fd:d4:12:90:8c:00:b9:a9:29:6e:58:22: 8c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:45:07:DE:8E:C4:3C:0B:34:87:9C:9F:D0:42:7E:5D:9C:B1:EC:D9 X509v3 Authority Key Identifier: keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/96D29A2220E011F086D75E5CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 111.92.131.0/24 111.92.133.0-111.92.134.255 111.92.139.0/24 111.92.142.0/24 Signature Algorithm: sha256WithRSAEncryption b7:2e:f4:14:49:99:d0:20:3e:79:fa:2a:51:6c:c3:4f:56:bf: 34:98:eb:75:80:a3:5e:79:0f:de:ba:8c:c0:fb:8f:e9:e2:4b: d8:db:e9:f0:e4:f0:16:aa:7a:d0:37:a9:2b:02:e6:29:f7:db: 9e:f4:79:d1:e6:26:21:70:51:c0:77:9a:22:fb:b1:d4:f9:97: ef:30:44:b4:cd:f2:d8:96:f7:bf:29:51:c6:7b:85:07:be:45: 5e:0f:78:c8:d0:53:1c:fe:ad:46:39:78:f0:ff:68:40:d5:ec: 50:47:bb:a8:92:27:69:78:ac:a1:3e:45:32:3c:60:85:a7:20: 47:b6:ad:ab:73:9d:8e:93:9e:28:a9:3f:c7:07:d1:04:df:94: ab:93:73:d8:b0:51:d5:dd:0e:0c:70:7b:80:93:34:51:65:52: a9:18:bc:e9:ba:80:b0:d0:1f:b2:b9:b3:94:9e:17:d6:78:9d: a3:fa:84:6d:02:5b:24:f1:cf:c5:f5:05:cb:b5:41:73:f2:a4: 8c:19:19:8f:7d:85:dd:11:31:40:92:5f:e7:55:26:ea:16:fa: 51:75:9b:d0:41:a7:70:d1:f9:8b:39:91:b7:f4:0a:fe:67:7d: 17:b9:9c:d5:da:fb:6e:d9:e1:eb:82:7e:49:0d:f9:c3:b3:4a: 77:b5:45:0a -----BEGIN CERTIFICATE----- MIIFizCCBHOgAwIBAgICDSkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEwQ0QxMTAvBgNVBAUTKDM4MTkzNzIwODIxRTA3RDY5MThFM0E3OUZCRTA4MjND NjczMkUyNjQwHhcNMjUwNDI0MDc0OTAyWhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODA5ZWNlZS1iMDI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0jy7wYGaWrWzdVqn19MrUm7cH7pxCGU5yGTlYvEtk+oejaLo5RdLI9hNCaQv j13J0tMAZJhScCGBLVIW2EJAjBpE/kJW9SxxZR8JLp7TQp2IMrDOfVbhEiSqV2A8 6ktshTN7tis+YRO+4C5411F5SGxahk6BwrEiXjROHtOFKBfnQ6IBlWurH5hOSAXu nI6eHgrHhpjpwP39kjUsy7Yz0qcLPgd3yCIssPp++lxd/0uC4FWWgJInQ4aW3lZg HEgyc8h5TUtxufhSyd04JIcfVkOEF08EZIB9tfv9w5ju+G+SyVBI70HeRg4xARE1 awU27dz91BKQjAC5qSluWCKM7QIDAQABo4ICrzCCAqswHQYDVR0OBBYEFMpFB96O xDwLNIecn9BCfl2csezZMB8GA1UdIwQYMBaAFDgZNyCCHgfWkY46efvggjxnMuJk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBDRC80NjcyM0YxRTg5 RUMxMUVBODFDMDRGMUVDNEY5QUUwMi9PQmszSUlJZUI5YVJqanA1LS1DQ1BHY3k0 bVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09CazNJSUllQjlhUmpqcDUtLUNDUEdjeTRtUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUEwQ0QvNDY3MjNGMUU4OUVDMTFFQTgxQzA0RjFFQzRGOUFFMDIvOTZEMjlBMjIy MEUwMTFGMDg2RDc1RTVDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOQYIKwYBBQUHAQcBAf8E KjAoMCYEAgABMCADBABvXIMwDAMEAG9chQMEAG9chgMEAG9ciwMEAG9cjjANBgkq hkiG9w0BAQsFAAOCAQEAty70FEmZ0CA+efoqUWzDT1a/NJjrdYCjXnkP3rqMwPuP 6eJL2Nvp8OTwFqp60DepKwLmKffbnvR50eYmIXBRwHeaIvux1PmX7zBEtM3y2Jb3 vylRxnuFB75FXg94yNBTHP6tRjl48P9oQNXsUEe7qJInaXisoT5FMjxghacgR7at q3OdjpOeKKk/xwfRBN+Uq5Nz2LBR1d0ODHB7gJM0UWVSqRi86bqAsNAfsrmzlJ4X 1nido/qEbQJbJPHPxfUFy7VBc/KkjBkZj32F3RExQJJf51Um6hb6UXWb0EGncNH5 izmRt/QK/md9F7mc1dr7btnh64J+SQ35w7NKd7VFCg== -----END CERTIFICATE-----Generated at Sat Apr 26 08:08:58 2025 by rpki-client