$ rpki-client -vvf rpki.apnic.net/member_repository/A915A803/546ED73A533411E8B4FC6B19C4F9AE02/4967F6B8533511E8A678701BC4F9AE02.roa File: 4967F6B8533511E8A678701BC4F9AE02.roa (raw, json) Hash identifier: 1riiNEo45WZ6XH/Os//x78+gBRpcFmxijL/HJsGk51k= Subject key identifier: 4E:37:DE:2F:FB:D5:D8:6D:F9:55:1D:CF:40:7F:42:AA:F2:79:55:A6 Certificate issuer: /CN=A915A803/serialNumber=3DDADB0126025050F5E8566C461D9AB73E49E54A Certificate serial: 149A Authority key identifier: 3D:DA:DB:01:26:02:50:50:F5:E8:56:6C:46:1D:9A:B7:3E:49:E5:4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdrbASYCUFD16FZsRh2atz5J5Uo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A803/546ED73A533411E8B4FC6B19C4F9AE02/4967F6B8533511E8A678701BC4F9AE02.roa Signing time: Fri 20 Dec 2024 16:54:29 +0000 ROA not before: Fri 20 Dec 2024 16:54:29 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 133787 IP address blocks: 203.0.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A803/546ED73A533411E8B4FC6B19C4F9AE02/PdrbASYCUFD16FZsRh2atz5J5Uo.crl rsync://rpki.apnic.net/member_repository/A915A803/546ED73A533411E8B4FC6B19C4F9AE02/PdrbASYCUFD16FZsRh2atz5J5Uo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdrbASYCUFD16FZsRh2atz5J5Uo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:51:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5274 (0x149a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A803, serialNumber=3DDADB0126025050F5E8566C461D9AB73E49E54A Validity Not Before: Dec 20 16:54:29 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=6765a145-6397 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:40:d6:d1:89:57:f9:4c:79:3a:56:f4:e2:8b: bb:d6:31:45:41:3d:3c:ed:2a:59:a1:c5:33:62:54: 29:c7:54:12:ef:38:c1:eb:82:85:db:69:fa:3d:71: 13:86:36:55:39:3d:ca:6d:4f:b2:04:7c:90:95:b7: ac:13:71:8e:a5:a7:13:0a:22:ec:0e:ca:97:8d:b7: 0c:33:f0:c5:4f:7d:5d:cc:cc:89:ec:c7:63:07:b4: 67:8e:44:69:0d:cf:f4:0c:6c:7b:67:41:c4:da:89: 8a:de:24:f7:37:85:51:94:07:b9:99:5d:7e:21:ee: 42:ed:11:ab:98:c6:6b:d5:67:90:94:46:9e:98:84: 37:f6:34:09:8a:b2:08:c0:d9:a1:30:92:7f:33:08: 69:1c:7e:f4:48:b5:c5:a4:c2:5a:fa:fe:ad:c5:23: 9c:9c:a8:cf:e4:fb:c4:51:a7:e8:e0:59:56:73:6e: 71:1c:54:fb:5d:57:58:2e:27:1a:a9:42:16:0b:09: 1f:1f:54:7b:b3:d6:0f:fd:ba:bf:52:89:a2:ac:04: af:a7:74:67:3a:85:99:1e:ae:9c:8e:85:43:9d:f9: b7:35:a7:df:9a:90:27:07:67:23:a9:b7:61:78:9c: db:4e:ec:14:09:d6:fd:1d:5a:e3:3a:64:0b:e7:35: 07:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:37:DE:2F:FB:D5:D8:6D:F9:55:1D:CF:40:7F:42:AA:F2:79:55:A6 X509v3 Authority Key Identifier: keyid:3D:DA:DB:01:26:02:50:50:F5:E8:56:6C:46:1D:9A:B7:3E:49:E5:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A803/546ED73A533411E8B4FC6B19C4F9AE02/PdrbASYCUFD16FZsRh2atz5J5Uo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdrbASYCUFD16FZsRh2atz5J5Uo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A803/546ED73A533411E8B4FC6B19C4F9AE02/4967F6B8533511E8A678701BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.0.229.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:ec:de:59:db:9e:eb:9a:60:7c:c7:0f:66:83:a8:a2:27:10: 1d:f7:3b:7e:bf:ca:8a:28:34:63:93:1e:01:5d:75:4c:ff:c1: 46:5e:79:89:87:15:cf:bf:c9:a2:86:c6:08:ab:c2:4b:9a:66: fb:3f:f1:a4:d9:13:9e:a4:99:07:79:f5:25:2c:a1:91:ee:e0: fc:ec:e0:5b:a4:30:f4:cd:aa:45:44:af:10:33:92:37:08:22: 4c:af:e4:d0:20:14:49:39:67:f2:1f:49:53:c1:5a:13:cb:84: 6a:c1:de:6f:ab:f5:fa:21:ca:ff:57:75:39:4c:6b:01:06:23: ac:cc:64:b3:01:b6:a9:f2:e1:06:2c:7a:86:8c:4f:76:9b:c4: 9a:52:10:76:d3:16:3b:a7:8e:74:32:7e:94:4b:67:af:f8:6f: 19:60:01:89:31:99:53:a8:19:c2:6f:76:59:3c:1c:28:74:9e: ae:d7:51:85:5e:93:7c:16:d3:07:1c:e9:0d:8c:e1:36:9c:c9: c0:43:5b:ce:b7:88:da:4a:12:b9:aa:3a:89:f6:3e:ab:f8:7f: 45:12:45:dd:58:bc:d6:dc:04:e1:76:a6:7c:46:e1:4f:cc:80: 60:1c:bf:dc:67:e5:49:a1:62:20:de:33:df:88:22:23:6d:bf: 02:81:8f:c0 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICFJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUE4MDMxMTAvBgNVBAUTKDNEREFEQjAxMjYwMjUwNTBGNUU4NTY2QzQ2MUQ5QUI3 M0U0OUU1NEEwHhcNMjQxMjIwMTY1NDI5WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzY1YTE0NS02Mzk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvEDW0YlX+Ux5Olb04ou71jFFQT087SpZocUzYlQpx1QS7zjB64KF22n6PXET hjZVOT3KbU+yBHyQlbesE3GOpacTCiLsDsqXjbcMM/DFT31dzMyJ7MdjB7RnjkRp Dc/0DGx7Z0HE2omK3iT3N4VRlAe5mV1+Ie5C7RGrmMZr1WeQlEaemIQ39jQJirII wNmhMJJ/MwhpHH70SLXFpMJa+v6txSOcnKjP5PvEUafo4FlWc25xHFT7XVdYLica qUIWCwkfH1R7s9YP/bq/UomirASvp3RnOoWZHq6cjoVDnfm3NaffmpAnB2cjqbdh eJzbTuwUCdb9HVrjOmQL5zUHCwIDAQABo4IClTCCApEwHQYDVR0OBBYEFE433i/7 1dht+VUdz0B/QqryeVWmMB8GA1UdIwQYMBaAFD3a2wEmAlBQ9ehWbEYdmrc+SeVK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTgwMy81NDZFRDczQTUz MzQxMUU4QjRGQzZCMTlDNEY5QUUwMi9QZHJiQVNZQ1VGRDE2RlpzUmgyYXR6NUo1 VW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BkcmJBU1lDVUZEMTZGWnNSaDJhdHo1SjVVby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUE4MDMvNTQ2RUQ3M0E1MzM0MTFFOEI0RkM2QjE5QzRGOUFFMDIvNDk2N0Y2Qjg1 MzM1MTFFOEE2Nzg3MDFCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADLAOUwDQYJKoZIhvcNAQELBQADggEBACvs3lnbnuuaYHzH D2aDqKInEB33O36/yoooNGOTHgFddUz/wUZeeYmHFc+/yaKGxgirwkuaZvs/8aTZ E56kmQd59SUsoZHu4Pzs4FukMPTNqkVErxAzkjcIIkyv5NAgFEk5Z/IfSVPBWhPL hGrB3m+r9fohyv9XdTlMawEGI6zMZLMBtqny4QYseoaMT3abxJpSEHbTFjunjnQy fpRLZ6/4bxlgAYkxmVOoGcJvdlk8HCh0nq7XUYVek3wW0wcc6Q2M4TacycBDW863 iNpKErmqOon2Pqv4f0USRd1YvNbcBOF2pnxG4U/MgGAcv9xn5UmhYiDeM9+IIiNt vwKBj8A= -----END CERTIFICATE-----Generated at Sat Apr 26 15:25:08 2025 by rpki-client