$ rpki-client -vvf rpki.apnic.net/member_repository/A916FEAF/DD60D4A4967511EA86022A1EC4F9AE02/8247E286967711EA81018623C4F9AE02.roa File: 8247E286967711EA81018623C4F9AE02.roa (raw, json) Hash identifier: y10qCt7Fl6t2oez7PlUi3bvenEnmvPzgsBbQMTuv47I= Subject key identifier: 5B:67:2A:70:59:81:AB:47:89:EB:26:B1:E6:46:02:D6:14:19:5F:02 Certificate issuer: /CN=A916FEAF/serialNumber=559F51EC8B258E7E90629D8562E1DB956BC0FF37 Certificate serial: 0940 Authority key identifier: 55:9F:51:EC:8B:25:8E:7E:90:62:9D:85:62:E1:DB:95:6B:C0:FF:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VZ9R7Isljn6QYp2FYuHblWvA_zc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916FEAF/DD60D4A4967511EA86022A1EC4F9AE02/8247E286967711EA81018623C4F9AE02.roa Signing time: Fri 04 Apr 2025 20:33:05 +0000 ROA not before: Fri 04 Apr 2025 20:33:05 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 38084 IP address blocks: 203.92.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916FEAF/DD60D4A4967511EA86022A1EC4F9AE02/VZ9R7Isljn6QYp2FYuHblWvA_zc.crl rsync://rpki.apnic.net/member_repository/A916FEAF/DD60D4A4967511EA86022A1EC4F9AE02/VZ9R7Isljn6QYp2FYuHblWvA_zc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VZ9R7Isljn6QYp2FYuHblWvA_zc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2368 (0x940) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916FEAF, serialNumber=559F51EC8B258E7E90629D8562E1DB956BC0FF37 Validity Not Before: Apr 4 20:33:05 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67f04201-a6c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:80:d7:1f:c8:30:8a:94:1a:46:34:89:19:6a: 8d:91:83:9a:8a:b2:96:60:e9:f5:09:66:e7:4f:f7: e1:12:22:fd:e5:c9:c1:20:8e:9f:3c:41:13:7f:67: ff:8c:0a:44:c9:97:37:36:95:b0:79:04:0d:a8:3e: f3:d4:6b:7d:ea:b9:22:ee:dd:ad:18:a4:44:0a:48: 78:ff:08:a2:c4:7d:57:b3:6b:28:c7:37:30:21:b5: 8e:60:d3:54:8e:f6:8d:b5:a0:fe:40:95:5d:81:f5: 2c:23:f0:c8:11:b5:25:52:fa:0c:c3:6e:14:3b:27: 09:07:61:fd:2a:93:0b:bf:26:e1:bc:97:3b:e6:6f: 73:a3:f7:f7:4e:4c:e5:62:d6:16:0e:a2:80:0b:0a: 39:7e:71:cb:00:51:ab:f8:37:83:e8:47:d0:db:2c: c7:04:2d:f1:83:57:b1:3b:b8:1e:7d:a0:4c:59:24: cd:01:ac:b5:66:56:d8:5f:6a:88:0d:89:97:57:8c: 24:72:cc:f2:65:ac:ee:4d:27:e8:99:4f:ec:0b:a4: bb:b6:b6:10:04:a4:5d:9e:6b:c4:0c:37:ba:dd:f4: 05:88:20:21:6d:24:af:21:ae:68:88:37:83:92:ae: 5b:34:65:db:b8:a8:38:43:63:84:3d:69:39:31:86: 89:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:67:2A:70:59:81:AB:47:89:EB:26:B1:E6:46:02:D6:14:19:5F:02 X509v3 Authority Key Identifier: keyid:55:9F:51:EC:8B:25:8E:7E:90:62:9D:85:62:E1:DB:95:6B:C0:FF:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916FEAF/DD60D4A4967511EA86022A1EC4F9AE02/VZ9R7Isljn6QYp2FYuHblWvA_zc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VZ9R7Isljn6QYp2FYuHblWvA_zc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FEAF/DD60D4A4967511EA86022A1EC4F9AE02/8247E286967711EA81018623C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.92.26.0/24 Signature Algorithm: sha256WithRSAEncryption 22:02:cf:9b:18:12:5f:1d:42:17:63:35:d9:da:72:bc:dc:02: d9:d9:7c:72:d8:7b:8f:8d:0f:7c:41:ce:58:1d:fc:58:a2:f3: 9c:db:50:59:ef:1c:15:8f:94:6d:42:05:71:b2:30:f6:7a:da: c1:f7:63:29:00:df:b5:58:ea:47:41:6f:39:9a:aa:b6:b9:d3: a5:33:f8:4b:9c:81:3e:1b:ae:48:fe:49:e6:89:74:25:8a:58: 92:8e:7b:4d:f4:bd:da:cb:f7:83:5f:ca:69:39:2c:20:47:15: e2:26:81:69:40:4f:f9:39:4e:ec:38:8c:88:a4:9c:74:8f:d5: 15:68:3f:22:b1:be:17:92:66:89:52:26:c8:3f:3a:32:3f:c7: cf:76:85:5e:86:16:2a:56:c4:2e:08:05:93:65:8d:7e:83:d0: ca:65:eb:25:1c:64:f3:15:f0:b3:ea:56:75:03:95:41:d2:c8: 3b:d1:cf:b1:87:b2:f8:24:fd:d4:79:8f:9d:47:5c:31:ff:b5: 16:35:e3:bc:c8:ed:82:49:16:27:52:8e:b2:0f:8e:17:88:03: c5:d5:dc:9b:c0:5d:f4:50:d0:80:d6:a3:b8:9a:c9:e6:af:7a: 7f:d6:42:33:9a:b6:69:c9:70:b2:f9:21:8d:16:02:09:6a:ff: 8b:f2:d8:65 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkZFQUYxMTAvBgNVBAUTKDU1OUY1MUVDOEIyNThFN0U5MDYyOUQ4NTYyRTFEQjk1 NkJDMEZGMzcwHhcNMjUwNDA0MjAzMzA1WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2YwNDIwMS1hNmMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5YDXH8gwipQaRjSJGWqNkYOairKWYOn1CWbnT/fhEiL95cnBII6fPEETf2f/ jApEyZc3NpWweQQNqD7z1Gt96rki7t2tGKRECkh4/wiixH1Xs2soxzcwIbWOYNNU jvaNtaD+QJVdgfUsI/DIEbUlUvoMw24UOycJB2H9KpMLvybhvJc75m9zo/f3Tkzl YtYWDqKACwo5fnHLAFGr+DeD6EfQ2yzHBC3xg1exO7gefaBMWSTNAay1ZlbYX2qI DYmXV4wkcszyZazuTSfomU/sC6S7trYQBKRdnmvEDDe63fQFiCAhbSSvIa5oiDeD kq5bNGXbuKg4Q2OEPWk5MYaJPwIDAQABo4IClTCCApEwHQYDVR0OBBYEFFtnKnBZ gatHiesmseZGAtYUGV8CMB8GA1UdIwQYMBaAFFWfUeyLJY5+kGKdhWLh25VrwP83 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RkVBRi9ERDYwRDRBNDk2 NzUxMUVBODYwMjJBMUVDNEY5QUUwMi9WWjlSN0lzbGpuNlFZcDJGWXVIYmxXdkFf emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZaOVI3SXNsam42UVlwMkZZdUhibFd2QV96Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkZFQUYvREQ2MEQ0QTQ5Njc1MTFFQTg2MDIyQTFFQzRGOUFFMDIvODI0N0UyODY5 Njc3MTFFQTgxMDE4NjIzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADLXBowDQYJKoZIhvcNAQELBQADggEBACICz5sYEl8dQhdj NdnacrzcAtnZfHLYe4+ND3xBzlgd/Fii85zbUFnvHBWPlG1CBXGyMPZ62sH3YykA 37VY6kdBbzmaqra506Uz+EucgT4brkj+SeaJdCWKWJKOe030vdrL94Nfymk5LCBH FeImgWlAT/k5Tuw4jIiknHSP1RVoPyKxvheSZolSJsg/OjI/x892hV6GFipWxC4I BZNljX6D0Mpl6yUcZPMV8LPqVnUDlUHSyDvRz7GHsvgk/dR5j51HXDH/tRY147zI 7YJJFidSjrIPjheIA8XV3JvAXfRQ0IDWo7iayeaven/WQjOatmnJcLL5IY0WAglq /4vy2GU= -----END CERTIFICATE-----Generated at Sat Apr 26 19:39:48 2025 by rpki-client