$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/2C1ADE1A35C811EEB06D6E4FC4F9AE02.roa File: 2C1ADE1A35C811EEB06D6E4FC4F9AE02.roa (raw, json) Hash identifier: Kb65CgSbpk+g+27O3L9YO/NalEccXczxBWE1egLtaM4= Subject key identifier: F8:5D:26:64:58:73:08:26:8D:20:F1:B4:10:19:73:62:C6:79:94:9D Certificate issuer: /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206 Certificate serial: 37B0 Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/2C1ADE1A35C811EEB06D6E4FC4F9AE02.roa Signing time: Fri 18 Apr 2025 14:50:40 +0000 ROA not before: Fri 18 Apr 2025 14:50:40 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 141023 IP address blocks: 115.186.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 14:30:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14256 (0x37b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206 Validity Not Before: Apr 18 14:50:40 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=680266c0-b14a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:e0:de:b9:9a:d5:cd:71:93:6f:4f:7f:33:c4: 34:5c:8d:a5:4f:a2:55:75:2a:46:b2:d5:91:be:0f: a5:6c:4a:78:8e:df:48:4e:ba:fe:27:d8:1f:ea:8a: dd:85:9b:db:50:67:a7:b8:96:a3:23:bf:c6:28:90: fe:eb:01:1d:e0:b8:70:47:2f:dc:cf:0a:4c:ba:84: 4a:49:9a:e3:ff:35:ed:e2:b4:14:1a:0d:79:c1:fb: c4:30:f4:18:17:28:00:94:ea:64:2f:7c:6a:0c:f9: 82:67:2e:32:08:98:55:68:24:5a:6f:29:09:e3:76: 62:73:3b:cc:40:71:dc:c1:16:ea:1f:92:a8:be:59: c0:45:a9:68:20:60:15:74:68:93:cd:ce:49:3f:f1: ec:77:b2:b0:6f:33:77:23:10:00:cf:97:1b:06:e5: 75:27:62:3e:74:1a:7d:fd:e7:be:0b:66:6d:47:88: 26:4e:db:a2:b0:76:c1:78:ea:6d:80:34:33:67:2c: b5:ea:9f:0d:ff:40:d6:64:08:08:af:e7:6a:7b:37: b4:f8:10:98:66:16:58:00:09:f9:c3:52:82:46:4e: 85:c8:18:aa:72:bf:15:3e:bb:96:5d:91:de:25:52: 81:18:49:00:99:04:d2:e2:c6:7c:82:4c:75:b7:87: d7:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:5D:26:64:58:73:08:26:8D:20:F1:B4:10:19:73:62:C6:79:94:9D X509v3 Authority Key Identifier: keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/2C1ADE1A35C811EEB06D6E4FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 115.186.44.0/22 Signature Algorithm: sha256WithRSAEncryption 11:78:19:3c:06:a3:c8:43:29:db:17:7b:b0:47:d0:bc:e1:e6: 5a:7a:8e:3e:b1:c5:52:88:f9:93:04:15:89:5e:a9:96:a3:6e: d8:d7:17:37:30:e5:ca:33:6c:d2:ab:24:78:2b:31:e0:b5:2e: b8:7e:fc:d7:58:8d:c4:73:60:e4:2e:5b:91:f4:1d:b8:1d:c9: 47:8f:5c:c0:14:ae:47:c8:45:a4:fe:e0:94:5e:5a:69:eb:83: 35:ff:95:8f:94:97:5a:57:05:5a:11:d4:87:94:44:09:be:0c: dc:f7:10:9e:94:ae:21:3d:34:32:b5:f1:1f:5e:46:2f:0f:d1: fc:cd:54:8d:eb:4d:8e:46:f8:13:73:af:54:4c:a4:3f:92:a0: 10:06:48:54:23:8a:68:a3:2a:67:24:98:0a:43:b0:55:ed:a0: 06:44:83:4f:7e:14:13:a9:25:08:54:f2:b7:aa:e8:7c:49:2c: 1a:af:d8:bf:03:1c:fc:14:8d:51:76:c3:02:7d:c2:ff:fc:01: 55:a8:60:14:8b:e8:f0:c9:63:ca:54:b9:a6:9c:3e:2d:af:69: 54:88:fb:93:1a:30:5e:34:aa:0c:8c:71:3d:4f:b3:20:ab:0e: f4:b3:f4:3c:da:49:cb:ea:ff:59:ed:d7:0c:fc:12:e6:6b:d2: e0:9f:af:a5 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICN7AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM4M0IxMTAvBgNVBAUTKEU3NkVCMjU2QzBGQ0IwN0UyOTA3OTc4MzQzRTlBRDlE RDIxRkUyMDYwHhcNMjUwNDE4MTQ1MDQwWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODAyNjZjMC1iMTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2+DeuZrVzXGTb09/M8Q0XI2lT6JVdSpGstWRvg+lbEp4jt9ITrr+J9gf6ord hZvbUGenuJajI7/GKJD+6wEd4LhwRy/czwpMuoRKSZrj/zXt4rQUGg15wfvEMPQY FygAlOpkL3xqDPmCZy4yCJhVaCRabykJ43ZiczvMQHHcwRbqH5KovlnARaloIGAV dGiTzc5JP/Hsd7KwbzN3IxAAz5cbBuV1J2I+dBp9/ee+C2ZtR4gmTtuisHbBeOpt gDQzZyy16p8N/0DWZAgIr+dqeze0+BCYZhZYAAn5w1KCRk6FyBiqcr8VPruWXZHe JVKBGEkAmQTS4sZ8gkx1t4fXSwIDAQABo4IClTCCApEwHQYDVR0OBBYEFPhdJmRY cwgmjSDxtBAZc2LGeZSdMB8GA1UdIwQYMBaAFOduslbA/LB+KQeXg0PprZ3SH+IG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzgzQi9FNEUxMEI0QTFE ODgxMUUyQTAxMkNCRTEwOEIwMkNEMi81MjZ5VnNEOHNINHBCNWVEUS1tdG5kSWY0 Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzUyNnlWc0Q4c0g0cEI1ZURRLW10bmRJZjRnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkM4M0IvRTRFMTBCNEExRDg4MTFFMkEwMTJDQkUxMDhCMDJDRDIvMkMxQURFMUEz NUM4MTFFRUIwNkQ2RTRGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJzuiwwDQYJKoZIhvcNAQELBQADggEBABF4GTwGo8hDKdsX e7BH0Lzh5lp6jj6xxVKI+ZMEFYleqZajbtjXFzcw5cozbNKrJHgrMeC1Lrh+/NdY jcRzYOQuW5H0HbgdyUePXMAUrkfIRaT+4JReWmnrgzX/lY+Ul1pXBVoR1IeURAm+ DNz3EJ6UriE9NDK18R9eRi8P0fzNVI3rTY5G+BNzr1RMpD+SoBAGSFQjimijKmck mApDsFXtoAZEg09+FBOpJQhU8req6HxJLBqv2L8DHPwUjVF2wwJ9wv/8AVWoYBSL 6PDJY8pUuaacPi2vaVSI+5MaMF40qgyMcT1PsyCrDvSz9DzaScvq/1nt1wz8EuZr 0uCfr6U= -----END CERTIFICATE-----Generated at Sat Apr 26 12:24:45 2025 by rpki-client