$ rpki-client -vvf rpki.apnic.net/member_repository/A918196D/6202AA3E411011EC9939C00FC4F9AE02/2E971452411311EC88F4A813C4F9AE02.roa File: 2E971452411311EC88F4A813C4F9AE02.roa (raw, json) Hash identifier: IHzWbo+P0xMAUj8Y7qcnkYwJZ7MRPNKo7bVzwYfeGIo= Subject key identifier: D5:A7:2E:B3:AF:7E:11:EE:4F:7F:72:C0:3F:DF:A1:7F:99:96:44:19 Certificate issuer: /CN=A918196D/serialNumber=68511981FCB9DAFAD8E3D30304BB41A96FB9A76F Certificate serial: 045B Authority key identifier: 68:51:19:81:FC:B9:DA:FA:D8:E3:D3:03:04:BB:41:A9:6F:B9:A7:6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFEZgfy52vrY49MDBLtBqW-5p28.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918196D/6202AA3E411011EC9939C00FC4F9AE02/2E971452411311EC88F4A813C4F9AE02.roa Signing time: Mon 03 Feb 2025 00:03:33 +0000 ROA not before: Mon 03 Feb 2025 00:03:33 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 147051 IP address blocks: 203.33.188.0/24 maxlen: 24 2400:1360:c000::/34 maxlen: 34 2400:1360:c000::/48 maxlen: 48 2400:1360:c001::/48 maxlen: 48 2400:1360:c002::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918196D/6202AA3E411011EC9939C00FC4F9AE02/aFEZgfy52vrY49MDBLtBqW-5p28.crl rsync://rpki.apnic.net/member_repository/A918196D/6202AA3E411011EC9939C00FC4F9AE02/aFEZgfy52vrY49MDBLtBqW-5p28.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFEZgfy52vrY49MDBLtBqW-5p28.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:52:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1115 (0x45b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918196D, serialNumber=68511981FCB9DAFAD8E3D30304BB41A96FB9A76F Validity Not Before: Feb 3 00:03:33 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=67a007d4-4c20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:af:b1:7e:b8:30:a2:b9:09:ac:0a:98:01:be: b1:12:73:4f:7f:9c:72:be:2a:17:11:5e:0f:33:cd: c8:93:2a:ca:06:b4:d3:f1:c6:f4:44:69:8c:74:eb: 57:d3:97:f6:fd:c3:a4:d3:17:3a:c3:35:05:7a:02: dc:d0:69:71:24:2c:80:cf:5b:29:e4:dc:91:ac:09: a6:ca:0d:05:2c:b7:62:7f:b2:0d:51:78:c3:86:a3: cf:ed:34:59:f3:9d:09:b3:dc:e9:b9:86:bf:fd:3d: b3:3d:06:df:8c:15:e4:8b:ee:1a:d6:7d:e7:cc:f4: b3:ae:f8:2f:24:58:f7:6a:fd:05:15:b8:07:ae:48: a9:a9:70:7a:71:62:b5:f6:70:c3:46:34:4d:c6:b1: ce:83:04:cc:cd:f5:67:94:07:7f:f8:26:45:d7:87: 47:52:d5:d1:ba:01:af:35:44:ab:c9:95:7e:12:28: c2:ed:a0:35:f1:18:3c:ae:ed:49:1f:f7:3e:c6:bd: af:2e:7f:71:eb:84:31:60:e1:2c:bb:f7:a5:c8:ee: 39:53:6f:0b:1e:0a:88:38:41:f3:4c:77:53:df:ec: a4:1a:3e:dc:47:a9:2b:46:ef:30:56:fe:12:80:81: d5:4a:a1:46:6e:92:07:a8:a0:10:d5:6c:4d:33:de: dd:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:A7:2E:B3:AF:7E:11:EE:4F:7F:72:C0:3F:DF:A1:7F:99:96:44:19 X509v3 Authority Key Identifier: keyid:68:51:19:81:FC:B9:DA:FA:D8:E3:D3:03:04:BB:41:A9:6F:B9:A7:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918196D/6202AA3E411011EC9939C00FC4F9AE02/aFEZgfy52vrY49MDBLtBqW-5p28.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFEZgfy52vrY49MDBLtBqW-5p28.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918196D/6202AA3E411011EC9939C00FC4F9AE02/2E971452411311EC88F4A813C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.33.188.0/24 IPv6: 2400:1360:c000::/34 Signature Algorithm: sha256WithRSAEncryption 1c:a6:67:e8:0f:50:e0:d2:99:31:d1:89:12:7b:4e:87:8a:67: 80:cc:e5:de:d8:9d:d8:43:db:2b:ac:ba:77:c4:05:d4:49:6a: bd:bc:ec:93:32:66:45:f1:f5:8e:e8:79:ff:26:57:50:3b:a6: ad:48:74:4b:16:37:44:40:71:02:6a:91:4c:68:44:f3:c0:a4: 20:48:f1:37:b4:3f:09:4f:b6:ae:b9:e5:8c:8c:7f:9d:d2:b4: f6:69:1d:39:00:b4:46:24:80:8d:9d:48:7a:cc:83:fa:66:6d: 33:21:a3:00:dc:8d:b8:7e:8d:51:9f:51:cb:01:46:3c:39:19: aa:f4:01:81:32:c1:87:c0:db:78:60:d2:b4:9f:78:52:6f:9c: d2:c1:a0:e8:16:09:f3:85:86:27:28:4d:29:3a:7b:6a:9d:fb: c6:cd:7e:29:47:79:ca:4f:6f:c7:4e:19:55:75:18:77:c8:63: 7c:a8:de:6f:22:f2:6e:15:20:0b:85:be:9f:cb:e8:cf:91:bb: 27:8e:44:41:2d:69:de:c0:45:d0:4a:26:56:97:4c:e4:af:0d: 68:b2:97:30:53:ab:f0:fd:1c:c5:cd:51:49:d3:ce:cc:7f:6c: 50:40:76:2f:52:2d:51:7c:65:d8:37:2b:37:c3:d6:74:39:12: 75:fa:e3:a3 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgICBFswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODE5NkQxMTAvBgNVBAUTKDY4NTExOTgxRkNCOURBRkFEOEUzRDMwMzA0QkI0MUE5 NkZCOUE3NkYwHhcNMjUwMjAzMDAwMzMzWhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2EwMDdkNC00YzIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsK+xfrgworkJrAqYAb6xEnNPf5xyvioXEV4PM83IkyrKBrTT8cb0RGmMdOtX 05f2/cOk0xc6wzUFegLc0GlxJCyAz1sp5NyRrAmmyg0FLLdif7INUXjDhqPP7TRZ 850Js9zpuYa//T2zPQbfjBXki+4a1n3nzPSzrvgvJFj3av0FFbgHrkipqXB6cWK1 9nDDRjRNxrHOgwTMzfVnlAd/+CZF14dHUtXRugGvNUSryZV+EijC7aA18Rg8ru1J H/c+xr2vLn9x64QxYOEsu/elyO45U28LHgqIOEHzTHdT3+ykGj7cR6krRu8wVv4S gIHVSqFGbpIHqKAQ1WxNM97dZwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNWnLrOv fhHuT39ywD/foX+ZlkQZMB8GA1UdIwQYMBaAFGhRGYH8udr62OPTAwS7Qalvuadv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTk2RC82MjAyQUEzRTQx MTAxMUVDOTkzOUMwMEZDNEY5QUUwMi9hRkVaZ2Z5NTJ2clk0OU1EQkx0QnFXLTVw MjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FGRVpnZnk1MnZyWTQ5TURCTHRCcVctNXAyOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODE5NkQvNjIwMkFBM0U0MTEwMTFFQzk5MzlDMDBGQzRGOUFFMDIvMkU5NzE0NTI0 MTEzMTFFQzg4RjRBODEzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLwYIKwYBBQUHAQcBAf8E IDAeMAwEAgABMAYDBADLIbwwDgQCAAIwCAMGBiQAE2DAMA0GCSqGSIb3DQEBCwUA A4IBAQAcpmfoD1Dg0pkx0YkSe06HimeAzOXe2J3YQ9srrLp3xAXUSWq9vOyTMmZF 8fWO6Hn/JldQO6atSHRLFjdEQHECapFMaETzwKQgSPE3tD8JT7auueWMjH+d0rT2 aR05ALRGJICNnUh6zIP6Zm0zIaMA3I24fo1Rn1HLAUY8ORmq9AGBMsGHwNt4YNK0 n3hSb5zSwaDoFgnzhYYnKE0pOntqnfvGzX4pR3nKT2/HThlVdRh3yGN8qN5vIvJu FSALhb6fy+jPkbsnjkRBLWnewEXQSiZWl0zkrw1ospcwU6vw/RzFzVFJ087Mf2xQ QHYvUi1RfGXYNys3w9Z0ORJ1+uOj -----END CERTIFICATE-----Generated at Sat Apr 26 08:05:02 2025 by rpki-client