$ rpki-client -vvf rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/593888C40AB811EE97CC7A32C4F9AE02.roa File: 593888C40AB811EE97CC7A32C4F9AE02.roa (raw, json) Hash identifier: Hgvy/rbsLEaWAnrB/PMoMX/RB2XdkdZAeykYpDBMbDc= Subject key identifier: E4:63:43:4B:B4:7C:F1:C7:5C:10:76:C4:A8:6B:83:F1:B0:3A:3A:44 Certificate issuer: /CN=A916423B/serialNumber=F80A17E18E3F3A12F75233672E8AC67F80E52FDF Certificate serial: 014D Authority key identifier: F8:0A:17:E1:8E:3F:3A:12:F7:52:33:67:2E:8A:C6:7F:80:E5:2F:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AoX4Y4_OhL3UjNnLorGf4DlL98.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/593888C40AB811EE97CC7A32C4F9AE02.roa Signing time: Wed 19 Mar 2025 03:19:50 +0000 ROA not before: Wed 19 Mar 2025 03:19:50 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 53871 IP address blocks: 203.28.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.crl rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AoX4Y4_OhL3UjNnLorGf4DlL98.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:09:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 333 (0x14d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916423B, serialNumber=F80A17E18E3F3A12F75233672E8AC67F80E52FDF Validity Not Before: Mar 19 03:19:50 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67da37d6-2d75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:bd:7d:70:3c:c6:1c:33:98:51:7f:66:6f:a5: ba:e5:c1:93:56:c9:1f:fe:0b:6d:77:31:87:d9:95: be:a3:61:2e:21:2c:ee:13:c0:93:df:b5:e4:76:4f: ff:c8:78:41:24:fd:66:31:23:97:f2:84:c2:f7:cd: c5:1e:cc:c3:81:5a:43:95:c9:74:fa:b4:d1:dd:71: 8a:5e:3c:f1:7a:00:6f:dd:0a:65:f5:e4:cc:82:0a: cf:45:cc:92:e2:d5:ec:73:1a:6e:7e:34:17:ad:23: 64:1f:24:9c:ee:5a:31:d3:3b:d7:bd:3f:65:60:54: 41:d1:de:78:e9:5f:c2:c6:f9:2d:9b:ca:cb:2a:f7: 06:4e:0c:2e:21:3c:81:93:ee:3d:8e:b1:03:5e:ed: ac:7b:1a:bf:54:5b:14:b1:12:65:09:7e:e0:f3:80: eb:8a:ae:b2:8b:f6:91:2f:d8:b8:4c:cd:b7:31:c9: 47:25:d7:63:5d:73:81:dd:fc:73:84:33:c8:40:9b: 8f:ca:73:9a:da:ad:8c:01:d2:a3:8d:39:0f:03:99: f3:80:ef:2e:60:88:35:4f:ae:33:0e:ac:2b:36:df: fb:8c:02:36:44:46:ef:5f:6e:3f:18:83:99:1d:48: a2:91:90:f2:81:84:6d:3c:6f:2e:10:ad:b6:9f:20: 75:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:63:43:4B:B4:7C:F1:C7:5C:10:76:C4:A8:6B:83:F1:B0:3A:3A:44 X509v3 Authority Key Identifier: keyid:F8:0A:17:E1:8E:3F:3A:12:F7:52:33:67:2E:8A:C6:7F:80:E5:2F:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AoX4Y4_OhL3UjNnLorGf4DlL98.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/593888C40AB811EE97CC7A32C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.28.155.0/24 Signature Algorithm: sha256WithRSAEncryption 70:d5:03:2b:68:b7:7a:25:45:51:40:56:6a:9c:08:c8:de:5c: 56:7e:fa:8a:78:b2:94:6c:75:a5:b8:e0:8e:87:c9:e2:71:7b: 57:c0:da:e0:0e:25:c4:53:39:ee:41:e5:47:88:27:7a:d9:01: cb:47:0b:c9:17:71:bc:b6:18:ba:58:64:0e:c2:1c:4c:0e:dd: ad:f6:eb:d0:9c:6a:64:34:d9:a5:4d:55:b2:92:dc:8e:34:30: a1:cc:f3:92:08:d5:c5:e2:cc:ed:f6:46:aa:5c:0e:19:90:a5: 63:f5:f4:5d:1b:41:28:06:22:75:29:81:09:f0:a2:0a:36:38: 09:01:4b:6a:e7:68:31:a2:71:5c:56:37:a4:1c:50:97:03:53: b6:50:11:a7:d9:1b:54:27:1a:8a:80:e4:70:df:82:18:3e:36: 8c:86:ec:91:9f:8b:0d:f4:19:a4:b6:10:fd:2d:55:01:8b:3c: 3b:bb:00:07:46:29:c4:87:d0:55:01:19:5c:4c:ea:11:a6:7a: e0:59:40:56:63:18:ee:3f:c6:25:d5:07:80:86:de:5d:86:ea: 4a:b3:f9:10:6e:ea:7f:b1:d0:65:ca:b6:fb:0f:90:99:da:20: a4:41:03:82:5a:b3:21:b0:1d:a1:21:4b:54:6c:f8:1d:38:83: 60:a7:ce:8f -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAU0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQyM0IxMTAvBgNVBAUTKEY4MEExN0UxOEUzRjNBMTJGNzUyMzM2NzJFOEFDNjdG ODBFNTJGREYwHhcNMjUwMzE5MDMxOTUwWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2RhMzdkNi0yZDc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArb19cDzGHDOYUX9mb6W65cGTVskf/gttdzGH2ZW+o2EuISzuE8CT37Xkdk// yHhBJP1mMSOX8oTC983FHszDgVpDlcl0+rTR3XGKXjzxegBv3Qpl9eTMggrPRcyS 4tXscxpufjQXrSNkHySc7lox0zvXvT9lYFRB0d546V/Cxvktm8rLKvcGTgwuITyB k+49jrEDXu2sexq/VFsUsRJlCX7g84Driq6yi/aRL9i4TM23MclHJddjXXOB3fxz hDPIQJuPynOa2q2MAdKjjTkPA5nzgO8uYIg1T64zDqwrNt/7jAI2REbvX24/GIOZ HUiikZDygYRtPG8uEK22nyB1mwIDAQABo4IClTCCApEwHQYDVR0OBBYEFORjQ0u0 fPHHXBB2xKhrg/GwOjpEMB8GA1UdIwQYMBaAFPgKF+GOPzoS91IzZy6Kxn+A5S/f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDIzQi9EQzQ5QTVGQTBB QjIxMUVFODBCMzU1MzdDNEY5QUUwMi8tQW9YNFk0X09oTDNVak5uTG9yR2Y0RGxM OTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1Bb1g0WTRfT2hMM1VqTm5Mb3JHZjREbEw5OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjQyM0IvREM0OUE1RkEwQUIyMTFFRTgwQjM1NTM3QzRGOUFFMDIvNTkzODg4QzQw QUI4MTFFRTk3Q0M3QTMyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADLHJswDQYJKoZIhvcNAQELBQADggEBAHDVAytot3olRVFA VmqcCMjeXFZ++op4spRsdaW44I6HyeJxe1fA2uAOJcRTOe5B5UeIJ3rZActHC8kX cby2GLpYZA7CHEwO3a3269CcamQ02aVNVbKS3I40MKHM85II1cXizO32RqpcDhmQ pWP19F0bQSgGInUpgQnwogo2OAkBS2rnaDGicVxWN6QcUJcDU7ZQEafZG1QnGoqA 5HDfghg+NoyG7JGfiw30GaS2EP0tVQGLPDu7AAdGKcSH0FUBGVxM6hGmeuBZQFZj GO4/xiXVB4CG3l2G6kqz+RBu6n+x0GXKtvsPkJnaIKRBA4JasyGwHaEhS1Rs+B04 g2Cnzo8= -----END CERTIFICATE-----Generated at Sat Apr 26 08:12:17 2025 by rpki-client