$ rpki-client -vvf rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/3A304DB4F54411EE8FF34627C4F9AE02.roa File: 3A304DB4F54411EE8FF34627C4F9AE02.roa (raw, json) Hash identifier: Zl4gUZhHt66LNUFLaLmernm+th1hHU0/5O3LszjxBds= Subject key identifier: 6E:C0:3E:7B:52:1E:DD:D4:79:1D:DF:50:83:04:DE:8B:29:5B:71:A5 Certificate issuer: /CN=A9170304/serialNumber=5FC2792CF440B857839D688A70B60F0762ABAB35 Certificate serial: 3470 Authority key identifier: 5F:C2:79:2C:F4:40:B8:57:83:9D:68:8A:70:B6:0F:07:62:AB:AB:35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/3A304DB4F54411EE8FF34627C4F9AE02.roa Signing time: Tue 18 Mar 2025 15:00:51 +0000 ROA not before: Tue 18 Mar 2025 15:00:51 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 198949 IP address blocks: 202.7.8.0/21 maxlen: 21 203.5.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.crl rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 14:38:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13424 (0x3470) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170304, serialNumber=5FC2792CF440B857839D688A70B60F0762ABAB35 Validity Not Before: Mar 18 15:00:51 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67d98aa3-b2f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:60:26:6e:05:17:fc:bd:84:40:3c:80:30:f0: 65:e2:77:d8:73:eb:b3:d1:1f:44:35:cc:db:59:65: d2:bb:26:fb:72:84:e7:c0:02:72:4c:07:10:77:87: 24:11:3c:03:ed:ef:02:4f:9d:2d:fd:58:cc:1d:18: 4a:1e:bb:a5:e2:5d:7c:9f:1a:86:8f:32:1c:85:17: 23:bc:2b:19:31:05:50:71:cb:e5:e7:3a:d0:79:18: cd:55:27:7b:5d:75:31:31:33:06:27:2a:05:5e:bd: 4a:e0:63:f6:a8:2f:57:2f:50:9a:32:dd:5c:83:f0: 8c:64:02:f5:95:8f:79:bc:6f:9f:07:f5:80:54:94: 1b:e3:ec:b7:10:74:fe:b2:53:28:ff:7b:a6:5b:26: f5:3a:fa:6c:aa:82:9b:17:65:28:55:ac:26:58:f0: 04:83:6d:1e:c0:eb:76:14:ce:60:e5:72:2d:c2:3b: 0b:01:06:d2:67:6f:28:3b:eb:92:9f:8d:fc:be:c8: 4c:50:98:19:0b:67:1f:11:06:bd:b6:c5:f5:17:29: d5:0c:30:fb:43:81:2c:b7:a7:e0:41:f1:95:4d:2b: e5:3b:28:18:71:be:8b:ec:be:6c:5e:09:47:06:2a: 0e:22:a3:56:6c:86:76:87:51:12:f8:df:f0:71:c0: 63:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:C0:3E:7B:52:1E:DD:D4:79:1D:DF:50:83:04:DE:8B:29:5B:71:A5 X509v3 Authority Key Identifier: keyid:5F:C2:79:2C:F4:40:B8:57:83:9D:68:8A:70:B6:0F:07:62:AB:AB:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/3A304DB4F54411EE8FF34627C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.7.8.0/21 203.5.121.0/24 Signature Algorithm: sha256WithRSAEncryption 50:e2:3e:a3:99:d9:7c:fc:ba:20:df:e9:0f:70:2a:8f:66:8e: de:10:7f:14:62:79:9f:c1:ff:c1:ed:23:65:b1:43:1a:1f:eb: bf:1f:5a:0c:a1:92:2f:1b:bf:b8:2d:90:71:56:40:68:ba:4e: 4e:a2:c0:ac:02:54:4e:6d:ef:64:8f:db:3d:f6:96:ea:0c:00: a1:c1:91:b3:cf:53:09:cf:b3:98:06:75:c5:92:8e:25:df:8c: 7c:7f:ad:4c:d1:0c:c7:47:de:28:84:55:0f:2d:bf:60:d1:92: 3d:43:33:65:10:1c:26:0b:23:fb:a1:26:f9:94:e4:8c:3d:3c: a6:3f:c8:cd:90:58:5e:24:46:97:2b:77:ad:a1:2f:4f:88:42: 6d:14:14:59:b9:d8:39:b7:35:94:b7:d0:fb:d5:52:63:38:1f: 5c:bb:f0:9d:7b:f8:1a:b1:bb:b1:86:f1:00:82:1b:5a:6f:9a: 20:34:4f:3f:e1:1a:0b:cf:37:ae:da:50:cc:5c:71:3e:51:a3: fc:fb:e7:e5:2e:30:1e:a4:e7:6e:fb:fa:ef:9f:5a:bb:14:3f: c8:fd:d0:30:1f:44:c7:60:2e:29:3e:8f:f1:e8:0e:7a:03:b2: c1:68:64:22:79:25:e1:d9:80:1d:39:99:37:30:6e:af:6b:f1: 67:8b:78:f7 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICNHAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzAzMDQxMTAvBgNVBAUTKDVGQzI3OTJDRjQ0MEI4NTc4MzlENjg4QTcwQjYwRjA3 NjJBQkFCMzUwHhcNMjUwMzE4MTUwMDUxWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2Q5OGFhMy1iMmYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0WAmbgUX/L2EQDyAMPBl4nfYc+uz0R9ENczbWWXSuyb7coTnwAJyTAcQd4ck ETwD7e8CT50t/VjMHRhKHrul4l18nxqGjzIchRcjvCsZMQVQccvl5zrQeRjNVSd7 XXUxMTMGJyoFXr1K4GP2qC9XL1CaMt1cg/CMZAL1lY95vG+fB/WAVJQb4+y3EHT+ slMo/3umWyb1OvpsqoKbF2UoVawmWPAEg20ewOt2FM5g5XItwjsLAQbSZ28oO+uS n438vshMUJgZC2cfEQa9tsX1FynVDDD7Q4Est6fgQfGVTSvlOygYcb6L7L5sXglH BioOIqNWbIZ2h1ES+N/wccBjHwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFG7APntS Ht3UeR3fUIME3ospW3GlMB8GA1UdIwQYMBaAFF/CeSz0QLhXg51oinC2Dwdiq6s1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDMwNC9BQjgyNDlCMjFE OEUxMUUyQjE4MjI2RUQwOEIwMkNEMi9YOEo1TFBSQXVGZURuV2lLY0xZUEIyS3Jx elUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1g4SjVMUFJBdUZlRG5XaUtjTFlQQjJLcnF6VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzAzMDQvQUI4MjQ5QjIxRDhFMTFFMkIxODIyNkVEMDhCMDJDRDIvM0EzMDREQjRG NTQ0MTFFRThGRjM0NjI3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAPKBwgDBADLBXkwDQYJKoZIhvcNAQELBQADggEBAFDiPqOZ 2Xz8uiDf6Q9wKo9mjt4QfxRieZ/B/8HtI2WxQxof678fWgyhki8bv7gtkHFWQGi6 Tk6iwKwCVE5t72SP2z32luoMAKHBkbPPUwnPs5gGdcWSjiXfjHx/rUzRDMdH3iiE VQ8tv2DRkj1DM2UQHCYLI/uhJvmU5Iw9PKY/yM2QWF4kRpcrd62hL0+IQm0UFFm5 2Dm3NZS30PvVUmM4H1y78J17+Bqxu7GG8QCCG1pvmiA0Tz/hGgvPN67aUMxccT5R o/z75+UuMB6k5277+u+fWrsUP8j90DAfRMdgLik+j/HoDnoDssFoZCJ5JeHZgB05 mTcwbq9r8WeLePc= -----END CERTIFICATE-----Generated at Sat Apr 26 13:11:28 2025 by rpki-client