$ rpki-client -vvf rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/DCC31BA8182F11EE82A0FC48C4F9AE02.roa File: DCC31BA8182F11EE82A0FC48C4F9AE02.roa (raw, json) Hash identifier: CrmsjWdSH1dRX4gtIVoZxCTBPv++0Trwf39jICU/c/M= Subject key identifier: FF:D7:1D:52:F0:80:48:4F:40:15:A9:18:9F:6C:DF:76:CD:5F:DD:C9 Certificate issuer: /CN=A915D0AC/serialNumber=86CAEF96739EF49A514FE9F90B6FE9509D3CC953 Certificate serial: 017C Authority key identifier: 86:CA:EF:96:73:9E:F4:9A:51:4F:E9:F9:0B:6F:E9:50:9D:3C:C9:53 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hsrvlnOe9JpRT-n5C2_pUJ08yVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/DCC31BA8182F11EE82A0FC48C4F9AE02.roa Signing time: Fri 06 Jun 2025 14:05:25 +0000 ROA not before: Fri 06 Jun 2025 14:05:25 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 17161 IP address blocks: 168.168.150.0/24 maxlen: 24 168.168.200.0/24 maxlen: 24 168.168.254.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.crl rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hsrvlnOe9JpRT-n5C2_pUJ08yVM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 380 (0x17c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D0AC, serialNumber=86CAEF96739EF49A514FE9F90B6FE9509D3CC953 Validity Not Before: Jun 6 14:05:25 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=6842f5a5-4526 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:22:62:b2:78:ab:34:17:16:a8:85:86:36:44: 58:ce:2f:cc:08:26:f1:f9:b8:a3:f5:9d:c5:15:a6: e1:5e:15:4c:07:85:c4:bb:fd:ae:a8:e5:d1:2b:00: 16:a7:bf:33:61:2b:78:e6:7c:f6:dd:9c:85:f7:34: 08:b3:95:4d:b8:98:24:73:bb:1c:96:92:ca:5e:fe: 35:6f:bc:fa:ea:21:8e:18:c1:ee:b0:a1:aa:e4:c3: 08:d4:3a:4e:9e:c3:21:c2:75:5c:90:13:b6:dc:03: 65:f2:35:e8:ee:d3:91:1c:bc:4e:05:c4:fa:d0:4b: 9f:8d:e5:00:b9:48:4d:f1:6f:f7:96:d4:43:f4:01: fb:d0:de:4d:56:f5:1b:33:53:d0:15:ed:a4:cd:32: 18:c6:43:4c:d9:4f:8f:54:5c:12:68:2a:ec:1d:ea: ff:6d:6d:bb:d2:7d:cf:4c:1e:66:ee:21:21:c2:20: e1:73:23:a9:f5:f8:4a:e2:b2:f8:17:ee:0c:8a:a6: e5:72:31:21:8b:6f:fc:ca:6f:a5:36:9e:0c:91:ea: 0c:dd:92:92:01:04:b9:af:1e:53:ae:0f:2d:f9:8c: 43:1f:c1:92:28:52:5d:49:d1:91:f4:34:c6:40:37: cb:7b:ba:e0:d1:91:cb:20:37:0f:5d:2c:ee:db:c3: 8f:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:D7:1D:52:F0:80:48:4F:40:15:A9:18:9F:6C:DF:76:CD:5F:DD:C9 X509v3 Authority Key Identifier: keyid:86:CA:EF:96:73:9E:F4:9A:51:4F:E9:F9:0B:6F:E9:50:9D:3C:C9:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hsrvlnOe9JpRT-n5C2_pUJ08yVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/DCC31BA8182F11EE82A0FC48C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 168.168.150.0/24 168.168.200.0/24 168.168.254.0/23 Signature Algorithm: sha256WithRSAEncryption 77:55:24:78:ab:7e:87:11:ad:83:79:23:07:db:3f:79:c8:23: 51:91:f5:98:d9:7e:40:94:eb:19:6f:82:e8:9a:69:b5:ef:36: 8d:e0:ef:c0:cc:f7:b6:9a:0a:ee:6e:95:34:36:dc:0e:3a:80: e8:6a:51:cc:37:3d:16:88:74:77:62:3a:9e:90:e5:2d:c1:61: b1:3c:70:e6:03:8c:ea:09:4a:18:63:57:9b:11:ee:2d:95:65: 99:c2:62:6d:38:ff:90:e8:44:ce:3a:a2:cb:1d:12:6e:e3:72: df:cc:50:c0:5c:62:7b:f3:ef:cd:e0:d3:90:5e:fa:a7:65:7f: c9:7c:40:ce:e5:17:0b:15:99:2a:a2:a7:21:22:30:51:57:98: 4b:cd:f5:96:d4:59:92:d8:7b:be:a5:3d:30:db:8c:21:aa:91: 90:50:83:e0:28:b0:49:db:f9:e6:7b:ce:ac:b8:52:91:7c:ce: 8d:2b:c7:55:dd:7b:46:e6:8b:4c:95:34:72:a9:60:ed:0d:7f: 97:08:14:cd:a7:21:29:68:c8:8a:2e:dc:3a:d2:f3:c6:51:dc: 26:27:e4:33:cf:9a:84:56:72:1e:fe:81:b1:fa:6a:92:92:93: 65:be:45:43:71:b3:2a:97:e7:fa:5e:30:0d:66:b2:28:76:71: 2d:6a:25:e5 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICAXwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQwQUMxMTAvBgNVBAUTKDg2Q0FFRjk2NzM5RUY0OUE1MTRGRTlGOTBCNkZFOTUw OUQzQ0M5NTMwHhcNMjUwNjA2MTQwNTI1WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02ODQyZjVhNS00NTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3yJisnirNBcWqIWGNkRYzi/MCCbx+bij9Z3FFabhXhVMB4XEu/2uqOXRKwAW p78zYSt45nz23ZyF9zQIs5VNuJgkc7sclpLKXv41b7z66iGOGMHusKGq5MMI1DpO nsMhwnVckBO23ANl8jXo7tORHLxOBcT60EufjeUAuUhN8W/3ltRD9AH70N5NVvUb M1PQFe2kzTIYxkNM2U+PVFwSaCrsHer/bW270n3PTB5m7iEhwiDhcyOp9fhK4rL4 F+4MiqblcjEhi2/8ym+lNp4MkeoM3ZKSAQS5rx5Trg8t+YxDH8GSKFJdSdGR9DTG QDfLe7rg0ZHLIDcPXSzu28OPiQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFP/XHVLw gEhPQBWpGJ9s33bNX93JMB8GA1UdIwQYMBaAFIbK75ZznvSaUU/p+Qtv6VCdPMlT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDBBQy85QTVGMEUxQTE1 MjQxMUVFOUQ3MEM5NjhDNEY5QUUwMi9oc3J2bG5PZTlKcFJULW41QzJfcFVKMDh5 Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2hzcnZsbk9lOUpwUlQtbjVDMl9wVUowOHlWTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUQwQUMvOUE1RjBFMUExNTI0MTFFRTlENzBDOTY4QzRGOUFFMDIvRENDMzFCQTgx ODJGMTFFRTgyQTBGQzQ4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBACoqJYDBACoqMgDBAGoqP4wDQYJKoZIhvcNAQELBQADggEB AHdVJHirfocRrYN5IwfbP3nII1GR9ZjZfkCU6xlvguiaabXvNo3g78DM97aaCu5u lTQ23A46gOhqUcw3PRaIdHdiOp6Q5S3BYbE8cOYDjOoJShhjV5sR7i2VZZnCYm04 /5DoRM46ossdEm7jct/MUMBcYnvz783g05Be+qdlf8l8QM7lFwsVmSqipyEiMFFX mEvN9ZbUWZLYe76lPTDbjCGqkZBQg+AosEnb+eZ7zqy4UpF8zo0rx1Xde0bmi0yV NHKpYO0Nf5cIFM2nISloyIou3DrS88ZR3CYn5DPPmoRWch7+gbH6apKSk2W+RUNx syqX5/peMA1msih2cS1qJeU= -----END CERTIFICATE-----Generated at Thu Jun 19 05:58:37 2025 by rpki-client