$ rpki-client -vvf rpki.apnic.net/member_repository/A915EBC8/6262F6D6EF0211ED8C2DD91FC4F9AE02/C662FB52399511EFA72CB43DC4F9AE02.roa File: C662FB52399511EFA72CB43DC4F9AE02.roa (raw, json) Hash identifier: n0lrvV9LdsTtg9FYUMIkAD1IjJU4/BMbBirBGY0gChs= Subject key identifier: 5E:87:D0:74:81:74:26:D1:D5:76:DA:0D:43:3E:50:EA:0E:4B:E0:83 Certificate issuer: /CN=A915EBC8/serialNumber=23F0DA697CAA1D9247A669DF8781BA30137D7A59 Certificate serial: 0172 Authority key identifier: 23:F0:DA:69:7C:AA:1D:92:47:A6:69:DF:87:81:BA:30:13:7D:7A:59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_DaaXyqHZJHpmnfh4G6MBN9elk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915EBC8/6262F6D6EF0211ED8C2DD91FC4F9AE02/C662FB52399511EFA72CB43DC4F9AE02.roa Signing time: Fri 11 Apr 2025 03:39:01 +0000 ROA not before: Fri 11 Apr 2025 03:39:01 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 10235 IP address blocks: 203.8.32.0/19 maxlen: 19 203.57.240.0/24 maxlen: 24 203.57.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915EBC8/6262F6D6EF0211ED8C2DD91FC4F9AE02/I_DaaXyqHZJHpmnfh4G6MBN9elk.crl rsync://rpki.apnic.net/member_repository/A915EBC8/6262F6D6EF0211ED8C2DD91FC4F9AE02/I_DaaXyqHZJHpmnfh4G6MBN9elk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_DaaXyqHZJHpmnfh4G6MBN9elk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 370 (0x172) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915EBC8, serialNumber=23F0DA697CAA1D9247A669DF8781BA30137D7A59 Validity Not Before: Apr 11 03:39:01 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=67f88ed5-63fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1c:cc:0d:e3:61:e8:d9:fb:11:cb:93:a0:95: a7:d1:14:90:39:a0:75:75:e5:d0:de:12:3a:1c:a8: 9d:a6:1d:26:c6:92:bb:9a:36:ec:5a:15:44:e7:08: 3c:9e:a6:4e:81:93:35:b9:08:2e:46:40:e2:e3:2a: a6:84:05:67:e2:a6:ca:bf:14:07:c4:c4:62:1c:55: ee:8b:be:3b:3d:30:21:af:8f:45:e5:2e:37:65:6d: bc:69:cd:e0:0a:55:4c:e7:2f:a1:bd:2d:e2:af:63: ef:fc:b6:e6:52:06:cd:c8:25:10:e2:fb:b0:ed:8f: 98:76:1b:a8:83:2c:cb:ed:e1:b1:7d:6d:36:8d:ed: aa:e3:32:d2:ee:02:0b:54:a6:51:e5:f4:0a:57:38: 40:67:fd:a3:0b:3e:f7:4e:9f:d1:ac:23:40:10:11: 6e:94:50:7d:2a:b9:4f:f5:0d:99:5f:d8:b6:4d:a9: 2e:f8:e3:ca:c2:20:8c:13:bd:62:22:6c:74:7f:ff: 46:bf:b1:f2:3d:92:cb:2d:16:40:78:db:cd:aa:21: 21:c3:cc:96:d0:00:40:9a:94:ac:91:45:85:cc:15: f5:8b:8c:63:31:25:ad:e7:17:62:56:31:a7:d0:bb: 44:55:e9:be:a4:94:d7:a6:be:32:84:5c:3d:83:d8: aa:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:87:D0:74:81:74:26:D1:D5:76:DA:0D:43:3E:50:EA:0E:4B:E0:83 X509v3 Authority Key Identifier: keyid:23:F0:DA:69:7C:AA:1D:92:47:A6:69:DF:87:81:BA:30:13:7D:7A:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915EBC8/6262F6D6EF0211ED8C2DD91FC4F9AE02/I_DaaXyqHZJHpmnfh4G6MBN9elk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_DaaXyqHZJHpmnfh4G6MBN9elk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EBC8/6262F6D6EF0211ED8C2DD91FC4F9AE02/C662FB52399511EFA72CB43DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.8.32.0/19 203.57.240.0/23 Signature Algorithm: sha256WithRSAEncryption 05:57:17:e2:4a:c6:61:12:4f:77:0e:43:9b:b5:36:7e:73:e9: f3:c7:eb:e4:e6:50:2c:01:c4:a7:c8:22:45:03:d8:4f:a1:1c: d2:70:f7:b2:be:ee:9f:37:3f:f0:6d:56:87:1e:2d:6c:3d:6b: 26:8f:f3:64:db:3a:33:d3:73:d9:d8:14:33:36:73:95:34:2d: 68:17:a0:87:59:bc:a9:5c:d7:72:a4:7d:00:0c:4e:03:90:3e: 5b:f0:9d:1a:09:08:65:e4:4b:98:de:02:f4:78:f2:40:c4:ce: ed:60:f7:dd:3f:8e:20:2f:9e:de:d3:8a:74:8b:be:ea:18:a1: 16:18:53:0d:53:4d:fb:b3:fb:46:fe:df:05:3e:3e:2e:88:bf: a5:5f:99:6a:aa:a6:76:ab:81:18:be:7d:c0:9a:2c:fa:3b:80: d1:23:56:c4:d3:c8:79:ea:c4:e2:26:a6:80:82:fc:1f:35:e7: 5b:63:e1:d7:db:59:af:49:26:4d:fd:9f:7a:75:68:9d:e1:4e: 07:95:a5:7d:3d:94:66:0a:96:9e:c9:ef:c2:af:90:7f:23:d0: f0:ba:51:00:0f:e9:91:02:2e:86:36:ea:65:f5:cb:ad:f9:89: 4f:98:5f:4c:dc:71:55:11:06:a3:53:7e:db:45:ca:c0:8a:f9: 72:1e:a9:3b -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUVCQzgxMTAvBgNVBAUTKDIzRjBEQTY5N0NBQTFEOTI0N0E2NjlERjg3ODFCQTMw MTM3RDdBNTkwHhcNMjUwNDExMDMzOTAxWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2Y4OGVkNS02M2ZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArxzMDeNh6Nn7EcuToJWn0RSQOaB1deXQ3hI6HKidph0mxpK7mjbsWhVE5wg8 nqZOgZM1uQguRkDi4yqmhAVn4qbKvxQHxMRiHFXui747PTAhr49F5S43ZW28ac3g ClVM5y+hvS3ir2Pv/LbmUgbNyCUQ4vuw7Y+YdhuogyzL7eGxfW02je2q4zLS7gIL VKZR5fQKVzhAZ/2jCz73Tp/RrCNAEBFulFB9KrlP9Q2ZX9i2Taku+OPKwiCME71i Imx0f/9Gv7HyPZLLLRZAeNvNqiEhw8yW0ABAmpSskUWFzBX1i4xjMSWt5xdiVjGn 0LtEVem+pJTXpr4yhFw9g9iqKQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFF6H0HSB dCbR1XbaDUM+UOoOS+CDMB8GA1UdIwQYMBaAFCPw2ml8qh2SR6Zp34eBujATfXpZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUJDOC82MjYyRjZENkVG MDIxMUVEOEMyREQ5MUZDNEY5QUUwMi9JX0RhYVh5cUhaSkhwbW5maDRHNk1CTjll bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lfRGFhWHlxSFpKSHBtbmZoNEc2TUJOOWVsay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUVCQzgvNjI2MkY2RDZFRjAyMTFFRDhDMkREOTFGQzRGOUFFMDIvQzY2MkZCNTIz OTk1MTFFRkE3MkNCNDNEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAXLCCADBAHLOfAwDQYJKoZIhvcNAQELBQADggEBAAVXF+JK xmEST3cOQ5u1Nn5z6fPH6+TmUCwBxKfIIkUD2E+hHNJw97K+7p83P/BtVoceLWw9 ayaP82TbOjPTc9nYFDM2c5U0LWgXoIdZvKlc13KkfQAMTgOQPlvwnRoJCGXkS5je AvR48kDEzu1g990/jiAvnt7TinSLvuoYoRYYUw1TTfuz+0b+3wU+Pi6Iv6VfmWqq pnargRi+fcCaLPo7gNEjVsTTyHnqxOImpoCC/B8151tj4dfbWa9JJk39n3p1aJ3h TgeVpX09lGYKlp7J78KvkH8j0PC6UQAP6ZECLoY26mX1y635iU+YX0zccVURBqNT fttFysCK+XIeqTs= -----END CERTIFICATE-----Generated at Sat Apr 26 12:32:09 2025 by rpki-client