$ rpki-client -vvf rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/1DD85DA2386311EFB10A6A1CC4F9AE02.roa File: 1DD85DA2386311EFB10A6A1CC4F9AE02.roa (raw, json) Hash identifier: wZz+OlqUMy/mBTlpV+JPL6/+u7+0FBG8gjwEC4u2wAU= Subject key identifier: 69:BD:34:E7:7E:2C:B9:6D:29:34:FD:2A:31:8F:D2:2E:A3:79:EF:70 Certificate issuer: /CN=A9178EA7/serialNumber=22A62C14D2BD32E3E596D8A3E62BBC3274468F99 Certificate serial: 7A Authority key identifier: 22:A6:2C:14:D2:BD:32:E3:E5:96:D8:A3:E6:2B:BC:32:74:46:8F:99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IqYsFNK9MuPlltij5iu8MnRGj5k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/1DD85DA2386311EFB10A6A1CC4F9AE02.roa Signing time: Tue 11 Feb 2025 05:58:48 +0000 ROA not before: Tue 11 Feb 2025 05:58:48 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 9466 IP address blocks: 202.1.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/IqYsFNK9MuPlltij5iu8MnRGj5k.crl rsync://rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/IqYsFNK9MuPlltij5iu8MnRGj5k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IqYsFNK9MuPlltij5iu8MnRGj5k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:18:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 122 (0x7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178EA7, serialNumber=22A62C14D2BD32E3E596D8A3E62BBC3274468F99 Validity Not Before: Feb 11 05:58:48 2025 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=67aae718-745b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:42:d2:86:9b:5f:72:c8:05:0c:83:b4:48:41: 5a:28:80:b6:e6:8f:3d:56:d5:d5:35:bb:59:cb:e9: 98:ca:a5:11:53:45:41:34:22:e3:4c:b9:ec:e9:31: 49:c6:aa:22:32:fb:49:15:69:ff:00:bb:8b:ca:ec: 33:a4:57:db:f2:15:ab:56:74:7e:2a:84:f9:2b:70: 77:56:be:dd:ef:15:dd:15:cd:20:c2:45:16:12:ff: 10:b0:7b:d5:35:1c:48:63:00:e9:0c:b9:4d:bc:7d: 99:be:a3:8f:ba:61:82:d6:3f:74:fb:ae:ae:ad:99: b7:40:84:30:bd:a3:32:15:ab:1b:9e:58:e0:c6:f6: 75:ee:f4:88:41:b9:1d:6e:2e:be:e7:6f:f3:66:17: 40:37:af:82:47:4c:16:7c:44:93:55:1a:50:63:02: f1:7d:68:2f:d3:08:c6:8b:04:00:ef:06:9e:d4:84: 26:4e:bb:fd:68:41:3b:cf:34:88:9d:03:66:e2:3e: ad:e8:1b:0c:23:11:ef:fe:c5:d1:7b:5d:5c:76:0e: f1:51:34:e7:da:90:f5:d1:24:40:b1:42:b9:6c:e8: 59:5b:a9:79:7d:08:52:ea:32:f6:30:c6:19:16:8b: 93:df:91:46:66:f7:0a:1a:02:ab:4b:d1:26:2f:ce: 91:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:BD:34:E7:7E:2C:B9:6D:29:34:FD:2A:31:8F:D2:2E:A3:79:EF:70 X509v3 Authority Key Identifier: keyid:22:A6:2C:14:D2:BD:32:E3:E5:96:D8:A3:E6:2B:BC:32:74:46:8F:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/IqYsFNK9MuPlltij5iu8MnRGj5k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IqYsFNK9MuPlltij5iu8MnRGj5k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/1DD85DA2386311EFB10A6A1CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.1.128.0/19 Signature Algorithm: sha256WithRSAEncryption 4f:83:e6:30:af:54:72:21:9c:a4:ce:0a:83:43:27:bd:2b:68: e6:74:90:17:a9:9c:3b:ac:b9:fa:bb:f0:97:c3:bf:9b:55:6d: bc:7a:59:cf:9c:49:fa:6b:e7:08:aa:03:bd:e9:f6:c3:71:24: 2c:15:a6:94:de:0c:f1:3f:70:93:fd:69:11:e7:02:a3:0b:63: b8:e0:e2:2f:3b:18:79:83:e5:e9:a2:74:e4:bc:7f:08:9b:12: 91:02:c6:3b:77:00:5d:09:f0:94:fb:7a:5f:d6:7d:aa:47:e6: 68:94:24:02:74:9c:66:0d:94:ac:0a:dc:c6:07:b5:50:c9:e8: 44:5a:98:6c:99:2f:87:00:ce:29:6e:11:22:78:fe:f4:96:f8: 96:a6:d3:b7:a0:79:71:46:e8:7c:c1:69:aa:11:7d:ad:a2:f0: 94:23:ec:c8:1e:52:ba:c1:83:dc:3d:c8:60:14:7b:60:4f:f0: 18:8e:55:87:b2:bc:a9:5c:b8:d6:e6:35:6c:ae:0a:25:e0:b1: 43:4f:b5:3e:19:31:86:e3:bf:e8:e4:b3:f5:d7:1c:b0:a8:fd: 82:69:be:fe:a3:32:36:3a:08:ca:7a:12:74:59:5f:c3:be:76: 09:dc:4f:ba:40:60:92:d2:9f:8f:f1:d3:0b:3e:c0:5c:c7:2c: 41:98:34:d5 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBejANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 OEVBNzExMC8GA1UEBRMoMjJBNjJDMTREMkJEMzJFM0U1OTZEOEEzRTYyQkJDMzI3 NDQ2OEY5OTAeFw0yNTAyMTEwNTU4NDhaFw0yNTEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY3YWFlNzE4LTc0NWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6QtKGm19yyAUMg7RIQVoogLbmjz1W1dU1u1nL6ZjKpRFTRUE0IuNMuezpMUnG qiIy+0kVaf8Au4vK7DOkV9vyFatWdH4qhPkrcHdWvt3vFd0VzSDCRRYS/xCwe9U1 HEhjAOkMuU28fZm+o4+6YYLWP3T7rq6tmbdAhDC9ozIVqxueWODG9nXu9IhBuR1u Lr7nb/NmF0A3r4JHTBZ8RJNVGlBjAvF9aC/TCMaLBADvBp7UhCZOu/1oQTvPNIid A2biPq3oGwwjEe/+xdF7XVx2DvFRNOfakPXRJECxQrls6FlbqXl9CFLqMvYwxhkW i5PfkUZm9woaAqtL0SYvzpElAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUab00534s uW0pNP0qMY/SLqN573AwHwYDVR0jBBgwFoAUIqYsFNK9MuPlltij5iu8MnRGj5kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc4RUE3L0IxQjNFMkQ2Mzg2 MjExRUY5RTE3RTg2RkM0RjlBRTAyL0lxWXNGTks5TXVQbGx0aWo1aXU4TW5SR2o1 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSXFZc0ZOSzlNdVBsbHRpajVpdThNblJHajVrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEVBNy9CMUIzRTJENjM4NjIxMUVGOUUxN0U4NkZDNEY5QUUwMi8xREQ4NURBMjM4 NjMxMUVGQjEwQTZBMUNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEBcoBgDANBgkqhkiG9w0BAQsFAAOCAQEAT4PmMK9UciGcpM4K g0MnvSto5nSQF6mcO6y5+rvwl8O/m1VtvHpZz5xJ+mvnCKoDven2w3EkLBWmlN4M 8T9wk/1pEecCowtjuODiLzsYeYPl6aJ05Lx/CJsSkQLGO3cAXQnwlPt6X9Z9qkfm aJQkAnScZg2UrArcxge1UMnoRFqYbJkvhwDOKW4RInj+9Jb4lqbTt6B5cUbofMFp qhF9raLwlCPsyB5SusGD3D3IYBR7YE/wGI5Vh7K8qVy41uY1bK4KJeCxQ0+1Phkx huO/6OSz9dccsKj9gmm+/qMyNjoIynoSdFlfw752CdxPukBgktKfj/HTCz7AXMcs QZg01Q== -----END CERTIFICATE-----Generated at Sat Apr 26 18:17:48 2025 by rpki-client