$ rpki-client -vvf rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/794C43721A5F11F080409056C4F9AE02.roa File: 794C43721A5F11F080409056C4F9AE02.roa (raw, json) Hash identifier: tliF6bTq6KTU3ampYuLl3Y31z/FfmmETEltl1u+bSdc= Subject key identifier: 38:45:FE:75:DD:90:19:6C:09:CD:17:C4:9F:88:AF:5A:C4:40:1E:12 Certificate issuer: /CN=A918C661/serialNumber=8BF7E2930CFC6EEB916E7390F893E0100BA93B32 Certificate serial: 09EE Authority key identifier: 8B:F7:E2:93:0C:FC:6E:EB:91:6E:73:90:F8:93:E0:10:0B:A9:3B:32 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/794C43721A5F11F080409056C4F9AE02.roa Signing time: Wed 16 Apr 2025 01:09:41 +0000 ROA not before: Wed 16 Apr 2025 01:09:41 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 51847 IP address blocks: 137.220.150.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.crl rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:54:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2542 (0x9ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C661, serialNumber=8BF7E2930CFC6EEB916E7390F893E0100BA93B32 Validity Not Before: Apr 16 01:09:41 2025 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=67ff0355-7c2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:62:c4:a6:38:25:07:2c:46:cb:d8:5a:da:e5: 41:63:17:8b:54:0e:d2:fc:28:c6:af:3a:56:d2:2d: c0:2d:b0:c1:42:bb:cb:2d:b5:d3:94:6a:8f:01:84: 9a:d8:5d:f4:0b:46:ae:e9:d8:83:28:da:3b:3e:20: d6:18:c4:22:ee:44:48:4b:f3:be:56:b4:0a:9c:d4: b0:de:5e:2c:35:75:b8:cd:fa:4c:cf:86:90:8a:19: 9d:3e:ce:d6:03:2b:9c:91:3f:77:61:52:e2:87:02: 3c:5a:5a:a8:77:1f:57:20:53:b7:e3:6a:ef:c8:9e: 60:19:d4:b4:34:6b:87:c0:24:d6:0f:dc:3e:0c:af: cc:3b:0e:f7:2c:0f:63:47:d4:aa:0a:ad:f7:d0:b6: 9c:b4:d4:1d:08:7d:d3:5a:05:c8:3c:85:45:98:e3: 7d:43:ff:19:08:47:49:af:c6:62:13:43:d1:7e:3e: 21:39:b0:6d:05:e0:89:2c:a3:b2:af:8f:b6:0a:d7: 5e:ea:85:8e:91:04:37:98:42:79:a5:fa:37:4f:48: 8c:26:70:2f:c4:ee:7c:e4:4f:d9:5b:81:76:58:39: d8:74:01:85:6f:d0:48:9c:22:be:6d:6f:d0:cb:ba: ee:12:ab:5f:0f:f8:34:68:e2:ad:34:5d:c5:62:61: 01:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:45:FE:75:DD:90:19:6C:09:CD:17:C4:9F:88:AF:5A:C4:40:1E:12 X509v3 Authority Key Identifier: keyid:8B:F7:E2:93:0C:FC:6E:EB:91:6E:73:90:F8:93:E0:10:0B:A9:3B:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/794C43721A5F11F080409056C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 137.220.150.0/23 Signature Algorithm: sha256WithRSAEncryption 86:17:24:78:70:2e:6a:7c:c8:6a:ee:6a:a8:31:ce:8a:bb:7b: 79:97:53:4b:98:be:ef:38:0d:32:f7:99:1c:42:f0:a3:7a:09: 52:a5:30:d2:95:19:98:3e:17:03:5c:81:e6:74:4d:ea:b8:62: 99:bc:12:56:c6:52:e3:61:b4:67:12:56:e2:0f:af:fb:ea:2e: 16:26:a9:c7:3a:f4:e2:78:0a:0a:89:81:d0:cd:a8:af:95:29: af:89:8c:eb:57:d3:3d:2f:05:08:f2:ad:9e:89:73:8b:c7:c4: 22:ec:3b:60:53:43:8c:cf:bc:6d:61:40:92:59:8d:5f:f1:c4: 94:53:f1:d3:2f:45:cd:b6:c5:45:42:f7:e9:03:04:81:1b:93: 9c:b7:4c:32:15:1a:05:ad:96:04:c7:16:ca:4c:c1:bf:b5:93: 65:56:d9:34:a2:21:36:f9:6f:2e:a0:27:42:49:bd:f7:5f:bc: 60:11:45:9b:98:49:59:39:7c:f0:71:81:8d:77:8e:63:93:f3: 7e:82:cb:ee:1c:8a:ec:36:65:c1:b4:07:8a:66:90:76:3c:0b: 37:33:bc:42:76:7a:18:c6:f0:80:5f:e8:97:e7:cc:95:e1:8d: 24:f6:86:ad:d9:17:ee:cd:d8:2a:3d:94:bf:dd:b4:10:b0:36: dc:0e:91:97 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCe4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM2NjExMTAvBgNVBAUTKDhCRjdFMjkzMENGQzZFRUI5MTZFNzM5MEY4OTNFMDEw MEJBOTNCMzIwHhcNMjUwNDE2MDEwOTQxWhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2ZmMDM1NS03YzJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4mLEpjglByxGy9ha2uVBYxeLVA7S/CjGrzpW0i3ALbDBQrvLLbXTlGqPAYSa 2F30C0au6diDKNo7PiDWGMQi7kRIS/O+VrQKnNSw3l4sNXW4zfpMz4aQihmdPs7W AyuckT93YVLihwI8Wlqodx9XIFO342rvyJ5gGdS0NGuHwCTWD9w+DK/MOw73LA9j R9SqCq330LactNQdCH3TWgXIPIVFmON9Q/8ZCEdJr8ZiE0PRfj4hObBtBeCJLKOy r4+2Ctde6oWOkQQ3mEJ5pfo3T0iMJnAvxO585E/ZW4F2WDnYdAGFb9BInCK+bW/Q y7ruEqtfD/g0aOKtNF3FYmEB2QIDAQABo4IClTCCApEwHQYDVR0OBBYEFDhF/nXd kBlsCc0XxJ+Ir1rEQB4SMB8GA1UdIwQYMBaAFIv34pMM/G7rkW5zkPiT4BALqTsy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzY2MS8wNEFBQjI5RTgz NkQxMUVBQjRBMkQ3NkRDNEY5QUUwMi9pX2Zpa3d6OGJ1dVJibk9RLUpQZ0VBdXBP ekkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lfZmlrd3o4YnV1UmJuT1EtSlBnRUF1cE96SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEM2NjEvMDRBQUIyOUU4MzZEMTFFQUI0QTJENzZEQzRGOUFFMDIvNzk0QzQzNzIx QTVGMTFGMDgwNDA5MDU2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGJ3JYwDQYJKoZIhvcNAQELBQADggEBAIYXJHhwLmp8yGru aqgxzoq7e3mXU0uYvu84DTL3mRxC8KN6CVKlMNKVGZg+FwNcgeZ0Teq4Ypm8ElbG UuNhtGcSVuIPr/vqLhYmqcc69OJ4CgqJgdDNqK+VKa+JjOtX0z0vBQjyrZ6Jc4vH xCLsO2BTQ4zPvG1hQJJZjV/xxJRT8dMvRc22xUVC9+kDBIEbk5y3TDIVGgWtlgTH FspMwb+1k2VW2TSiITb5by6gJ0JJvfdfvGARRZuYSVk5fPBxgY13jmOT836Cy+4c iuw2ZcG0B4pmkHY8CzczvEJ2ehjG8IBf6JfnzJXhjST2hq3ZF+7N2Co9lL/dtBCw NtwOkZc= -----END CERTIFICATE-----Generated at Sat Apr 26 14:24:53 2025 by rpki-client