$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/2A1AAEF2CA7711EF9ED1D782C4F9AE02.roa File: 2A1AAEF2CA7711EF9ED1D782C4F9AE02.roa (raw, json) Hash identifier: U22myChDK0J4NLA39gSglrY/Ph9QMALivvjc+F5pl5Y= Subject key identifier: 1D:DC:93:F7:0F:74:2F:13:EE:BC:EF:93:40:48:A7:1A:9F:58:E4:B6 Certificate issuer: /CN=A9185D79/serialNumber=7A3D7D3748C78986C2C5E50B5013BEB60AB47ADC Certificate serial: 01F7 Authority key identifier: 7A:3D:7D:37:48:C7:89:86:C2:C5:E5:0B:50:13:BE:B6:0A:B4:7A:DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ej19N0jHiYbCxeULUBO-tgq0etw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/2A1AAEF2CA7711EF9ED1D782C4F9AE02.roa Signing time: Sat 04 Jan 2025 08:37:43 +0000 ROA not before: Sat 04 Jan 2025 08:37:43 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 202662 IP address blocks: 202.179.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/ej19N0jHiYbCxeULUBO-tgq0etw.crl rsync://rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/ej19N0jHiYbCxeULUBO-tgq0etw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ej19N0jHiYbCxeULUBO-tgq0etw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:43:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 503 (0x1f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185D79, serialNumber=7A3D7D3748C78986C2C5E50B5013BEB60AB47ADC Validity Not Before: Jan 4 08:37:43 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=6778f357-405f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f7:9c:98:42:ff:4f:a7:48:f2:91:f5:64:63: 97:d0:2a:ab:76:21:d6:86:8e:cd:20:84:29:4f:96: ea:dd:56:1e:53:78:a7:1b:c2:c1:e8:94:b9:23:40: 01:a8:fd:b8:a8:88:70:cd:c9:f3:8c:0e:da:48:6f: 86:8e:cb:f1:37:ca:9c:49:bb:d5:75:d0:3d:f5:ab: 4e:0f:4b:94:38:9e:c6:90:43:2b:3d:d7:f6:d6:7b: c7:a6:89:13:69:14:dd:ca:93:32:15:9c:c6:f1:06: 14:61:fd:9e:24:cc:8c:35:4a:13:48:ba:36:a1:af: 16:d6:09:30:ae:7e:22:f7:da:de:32:a8:ed:f0:3f: 59:81:37:c6:3a:54:1d:da:cd:c0:e0:bb:d1:90:a5: 98:f6:b9:a6:7e:97:58:30:98:6a:bf:60:4e:89:dc: bf:c7:62:cd:d0:b2:de:33:cc:a9:3d:01:cf:b8:e5: cd:2a:52:07:bf:21:f3:f6:90:71:a0:25:c8:0b:be: 6e:40:e5:ab:1b:a3:41:aa:1d:5b:9b:d5:bd:95:b0: c0:f3:58:66:0e:99:55:81:18:2f:db:84:8b:58:93: 66:db:9c:20:67:84:8c:14:f2:db:49:da:72:f3:20: 02:29:17:55:80:e7:7f:06:90:72:c4:69:8f:0c:d3: 56:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:DC:93:F7:0F:74:2F:13:EE:BC:EF:93:40:48:A7:1A:9F:58:E4:B6 X509v3 Authority Key Identifier: keyid:7A:3D:7D:37:48:C7:89:86:C2:C5:E5:0B:50:13:BE:B6:0A:B4:7A:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/ej19N0jHiYbCxeULUBO-tgq0etw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ej19N0jHiYbCxeULUBO-tgq0etw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/2A1AAEF2CA7711EF9ED1D782C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.179.155.0/24 Signature Algorithm: sha256WithRSAEncryption 89:46:9a:3e:a6:f0:41:5e:09:ca:3a:84:35:3d:85:e5:91:d2: 5e:eb:30:d0:22:ca:b7:4c:10:9f:67:0f:06:63:11:23:8e:17: de:16:5d:1c:34:db:a3:8c:ae:3b:d1:a4:0d:27:59:23:ae:38: bc:42:88:aa:c7:fd:35:87:df:f0:6c:50:9f:80:16:bc:a0:35: 28:5a:ac:f6:96:b5:2c:e7:1f:2e:c5:e8:7c:6f:73:e4:ec:d1: a0:58:22:56:60:a3:b7:df:67:64:5d:c6:6e:04:d6:15:53:c8: c2:69:90:70:ea:3c:ea:c6:68:83:4b:ef:ae:a6:51:38:9e:2d: b2:17:49:9f:68:1b:10:be:ea:37:f1:e8:de:ef:9a:8b:4a:f0: 7c:55:7d:93:17:d2:9a:b1:d1:17:24:fc:79:3e:74:8c:3d:47: 7c:93:85:7e:5e:bd:b1:d6:a7:df:b8:e1:5a:a8:6a:82:53:a1: ed:7c:ce:9b:9f:72:e5:f9:1d:04:77:db:6e:7a:b7:35:21:c6: 27:3f:87:d9:8c:65:2a:ca:6c:9f:99:9e:d2:06:80:a7:27:10: 95:2a:b8:d0:fd:16:09:f1:60:e2:96:dd:9d:24:85:36:fb:d7: 2d:c7:c5:bb:cb:da:c6:42:6e:91:70:1b:d5:3d:e6:1a:0a:a4: 75:2d:74:63 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAfcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVENzkxMTAvBgNVBAUTKDdBM0Q3RDM3NDhDNzg5ODZDMkM1RTUwQjUwMTNCRUI2 MEFCNDdBREMwHhcNMjUwMTA0MDgzNzQzWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02Nzc4ZjM1Ny00MDVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnvecmEL/T6dI8pH1ZGOX0CqrdiHWho7NIIQpT5bq3VYeU3inG8LB6JS5I0AB qP24qIhwzcnzjA7aSG+GjsvxN8qcSbvVddA99atOD0uUOJ7GkEMrPdf21nvHpokT aRTdypMyFZzG8QYUYf2eJMyMNUoTSLo2oa8W1gkwrn4i99reMqjt8D9ZgTfGOlQd 2s3A4LvRkKWY9rmmfpdYMJhqv2BOidy/x2LN0LLeM8ypPQHPuOXNKlIHvyHz9pBx oCXIC75uQOWrG6NBqh1bm9W9lbDA81hmDplVgRgv24SLWJNm25wgZ4SMFPLbSdpy 8yACKRdVgOd/BpByxGmPDNNWiwIDAQABo4IClTCCApEwHQYDVR0OBBYEFB3ck/cP dC8T7rzvk0BIpxqfWOS2MB8GA1UdIwQYMBaAFHo9fTdIx4mGwsXlC1ATvrYKtHrc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUQ3OS9CRjE5NEQ4MDI4 M0QxMUVEQTk0NDczM0RDNEY5QUUwMi9lajE5TjBqSGlZYkN4ZVVMVUJPLXRncTBl dHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VqMTlOMGpIaVliQ3hlVUxVQk8tdGdxMGV0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODVENzkvQkYxOTREODAyODNEMTFFREE5NDQ3MzNEQzRGOUFFMDIvMkExQUFFRjJD QTc3MTFFRjlFRDFENzgyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADKs5swDQYJKoZIhvcNAQELBQADggEBAIlGmj6m8EFeCco6 hDU9heWR0l7rMNAiyrdMEJ9nDwZjESOOF94WXRw026OMrjvRpA0nWSOuOLxCiKrH /TWH3/BsUJ+AFrygNSharPaWtSznHy7F6Hxvc+Ts0aBYIlZgo7ffZ2Rdxm4E1hVT yMJpkHDqPOrGaINL766mUTieLbIXSZ9oGxC+6jfx6N7vmotK8HxVfZMX0pqx0Rck /Hk+dIw9R3yThX5evbHWp9+44VqoaoJToe18zpufcuX5HQR32256tzUhxic/h9mM ZSrKbJ+ZntIGgKcnEJUquND9FgnxYOKW3Z0khTb71y3HxbvL2sZCbpFwG9U95hoK pHUtdGM= -----END CERTIFICATE-----Generated at Sat Apr 26 09:31:17 2025 by rpki-client