$ rpki-client -vvf rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/4B65B208288F11EFB3C88742C4F9AE02.roa File: 4B65B208288F11EFB3C88742C4F9AE02.roa (raw, json) Hash identifier: r2GAe+G1s6g34WU+Ia+gD4xaBN9kiFwzFN+koW6QJQs= Subject key identifier: D4:C9:C2:DE:1F:0A:52:30:D3:08:73:B5:88:8D:8F:CD:6B:7B:1D:CB Certificate issuer: /CN=A916A447/serialNumber=1F68258C526C5DBC715434357D380020146440EF Certificate serial: 287A Authority key identifier: 1F:68:25:8C:52:6C:5D:BC:71:54:34:35:7D:38:00:20:14:64:40:EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2gljFJsXbxxVDQ1fTgAIBRkQO8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/4B65B208288F11EFB3C88742C4F9AE02.roa Signing time: Thu 06 Mar 2025 16:02:30 +0000 ROA not before: Thu 06 Mar 2025 16:02:30 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 17770 IP address blocks: 182.161.0.0/19 maxlen: 19 202.124.160.0/21 maxlen: 21 2402:4000:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.crl rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2gljFJsXbxxVDQ1fTgAIBRkQO8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:38:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10362 (0x287a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A447, serialNumber=1F68258C526C5DBC715434357D380020146440EF Validity Not Before: Mar 6 16:02:30 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=67c9c715-b369 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b5:3c:bd:61:f4:c1:2a:ab:5e:d1:56:09:90: 1c:6b:16:18:09:dc:d6:0c:9b:18:2e:af:b2:d9:ce: 78:6f:5c:27:be:49:7f:c0:1e:df:34:f1:4c:a3:15: ea:37:24:d0:ec:4f:a8:e9:7b:52:58:66:d5:1f:28: 49:29:11:d0:88:f4:66:67:98:b8:ee:ca:db:cc:cd: 36:1b:70:51:d3:3e:7a:56:47:c2:f4:8e:d6:31:18: da:f6:b5:54:f0:12:76:81:24:c3:6e:da:68:8a:17: b9:57:e0:b4:b4:2a:1c:ca:5f:b9:2b:e9:21:4f:34: ee:44:17:55:37:01:7e:63:c7:69:91:99:f3:35:66: f9:75:ce:c2:9d:4a:00:c0:49:42:74:00:e4:95:1f: 35:67:47:9d:5a:0f:20:c3:98:f7:49:51:25:5b:40: a9:08:04:40:2a:32:a1:df:8d:21:fa:0e:f5:f2:f3: b6:37:06:23:d1:5d:92:8c:fa:88:57:c4:9d:2f:22: 7e:7e:3d:1d:74:b8:4d:9d:1c:c4:95:55:62:7d:63: 9f:a0:39:41:69:8d:54:d9:65:d5:e8:3b:a3:da:b8: b6:a3:7a:ed:49:6e:de:2b:49:8b:5d:a6:f1:4b:78: d6:31:8b:67:f4:b6:ec:dc:c3:3a:40:d4:96:e0:84: b7:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:C9:C2:DE:1F:0A:52:30:D3:08:73:B5:88:8D:8F:CD:6B:7B:1D:CB X509v3 Authority Key Identifier: keyid:1F:68:25:8C:52:6C:5D:BC:71:54:34:35:7D:38:00:20:14:64:40:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2gljFJsXbxxVDQ1fTgAIBRkQO8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/4B65B208288F11EFB3C88742C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 182.161.0.0/19 202.124.160.0/21 IPv6: 2402:4000:f000::/36 Signature Algorithm: sha256WithRSAEncryption 43:0f:9f:07:cf:41:19:02:19:2c:89:f4:e4:34:5d:94:0b:8d: 8d:d7:c0:de:c6:e9:d7:52:e4:f8:d3:52:65:1d:26:6d:c4:cd: a4:3b:b0:1d:8a:ac:ba:bd:bf:09:4c:44:a7:05:04:5c:1a:cb: 5d:1d:4d:05:32:9d:f5:b0:79:11:80:ca:cb:d1:f1:73:99:72: 42:b1:e7:00:d8:dc:de:00:87:3b:f8:f4:dc:da:26:31:98:e7: 41:f3:8a:a7:ea:c7:67:0d:09:dc:2d:a0:26:1c:c4:a8:d6:9c: 86:70:6f:59:1d:14:a3:d0:cf:42:a4:58:c9:2c:1d:77:b9:23: 4f:0a:91:ec:98:01:a2:7a:cd:a8:fb:2f:bc:19:51:43:a8:1e: f7:dd:f1:6a:d8:fe:8f:62:64:c7:8f:73:73:77:38:8b:7f:5d: 64:35:40:c6:2f:ad:f2:85:a8:f0:eb:00:d1:18:c5:69:93:d3: 0a:94:67:51:9d:ac:43:9a:4b:d4:3d:ff:9e:f0:49:f1:60:b5: 53:d8:53:8b:e8:4f:78:bd:b4:84:88:19:6f:37:65:2c:9e:e5: 59:a1:cb:ca:41:03:0c:07:a3:6a:93:5a:49:b7:92:7a:79:bb: 4c:d0:7e:43:6a:35:ba:4d:b0:2e:65:d9:e5:ed:3e:69:cd:12: 98:bf:b8:a3 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICKHowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE0NDcxMTAvBgNVBAUTKDFGNjgyNThDNTI2QzVEQkM3MTU0MzQzNTdEMzgwMDIw MTQ2NDQwRUYwHhcNMjUwMzA2MTYwMjMwWhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2M5YzcxNS1iMzY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAubU8vWH0wSqrXtFWCZAcaxYYCdzWDJsYLq+y2c54b1wnvkl/wB7fNPFMoxXq NyTQ7E+o6XtSWGbVHyhJKRHQiPRmZ5i47srbzM02G3BR0z56VkfC9I7WMRja9rVU 8BJ2gSTDbtpoihe5V+C0tCocyl+5K+khTzTuRBdVNwF+Y8dpkZnzNWb5dc7CnUoA wElCdADklR81Z0edWg8gw5j3SVElW0CpCARAKjKh340h+g718vO2NwYj0V2SjPqI V8SdLyJ+fj0ddLhNnRzElVVifWOfoDlBaY1U2WXV6Duj2ri2o3rtSW7eK0mLXabx S3jWMYtn9Lbs3MM6QNSW4IS3WQIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFNTJwt4f ClIw0whztYiNj81rex3LMB8GA1UdIwQYMBaAFB9oJYxSbF28cVQ0NX04ACAUZEDv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTQ0Ny9EMjA3NTgxNEEw OUMxMUU0QjUwRTdCMTVDNEY5QUUwMi9IMmdsakZKc1hieHhWRFExZlRnQUlCUmtR TzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0gyZ2xqRkpzWGJ4eFZEUTFmVGdBSUJSa1FPOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkE0NDcvRDIwNzU4MTRBMDlDMTFFNEI1MEU3QjE1QzRGOUFFMDIvNEI2NUIyMDgy ODhGMTFFRkIzQzg4NzQyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNQYIKwYBBQUHAQcBAf8E JjAkMBIEAgABMAwDBAW2oQADBAPKfKAwDgQCAAIwCAMGBCQCQADwMA0GCSqGSIb3 DQEBCwUAA4IBAQBDD58Hz0EZAhksifTkNF2UC42N18DexunXUuT401JlHSZtxM2k O7Adiqy6vb8JTESnBQRcGstdHU0FMp31sHkRgMrL0fFzmXJCsecA2NzeAIc7+PTc 2iYxmOdB84qn6sdnDQncLaAmHMSo1pyGcG9ZHRSj0M9CpFjJLB13uSNPCpHsmAGi es2o+y+8GVFDqB733fFq2P6PYmTHj3NzdziLf11kNUDGL63yhajw6wDRGMVpk9MK lGdRnaxDmkvUPf+e8EnxYLVT2FOL6E94vbSEiBlvN2UsnuVZocvKQQMMB6Nqk1pJ t5J6ebtM0H5DajW6TbAuZdnl7T5pzRKYv7ij -----END CERTIFICATE-----Generated at Sat Apr 26 09:37:23 2025 by rpki-client