$ rpki-client -vvf rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/09106CCCAD3E11ED8B645C39C4F9AE02.roa File: 09106CCCAD3E11ED8B645C39C4F9AE02.roa (raw, json) Hash identifier: KQKk/DHVyq0W7ysUvHn8rqByRNsv/bL8qIPiVwD7k8E= Subject key identifier: 5F:03:04:24:09:5B:8D:78:A0:6F:8E:A4:8C:C8:28:AA:FE:09:97:48 Certificate issuer: /CN=A918F00E/serialNumber=18E1F732EFA53C3973A1ACD22C1368A5E1F2CA52 Certificate serial: 017C Authority key identifier: 18:E1:F7:32:EF:A5:3C:39:73:A1:AC:D2:2C:13:68:A5:E1:F2:CA:52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOH3Mu-lPDlzoazSLBNopeHyylI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/09106CCCAD3E11ED8B645C39C4F9AE02.roa Signing time: Wed 05 Feb 2025 02:28:19 +0000 ROA not before: Wed 05 Feb 2025 02:28:19 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 45577 IP address blocks: 203.20.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.crl rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOH3Mu-lPDlzoazSLBNopeHyylI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:31:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 380 (0x17c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F00E, serialNumber=18E1F732EFA53C3973A1ACD22C1368A5E1F2CA52 Validity Not Before: Feb 5 02:28:19 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67a2ccc2-f524 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f2:8e:d4:47:28:40:7b:15:cd:20:c6:7d:72: 3c:6e:16:a9:8c:ed:f3:f9:fc:ff:72:b8:1d:7f:af: 12:df:01:9f:ca:81:96:40:d3:b6:68:9e:42:fe:77: 6f:c2:e4:de:c8:ad:58:2b:a7:39:90:6b:5d:57:bb: 54:b6:ee:70:60:83:42:7c:62:17:20:61:18:fa:87: 19:b6:9f:76:cd:76:bb:6d:31:9e:c0:fc:25:1f:1c: ff:33:5e:be:53:71:c4:a7:94:47:ae:56:3b:ae:47: 75:2b:cb:5a:10:35:0b:7c:1c:35:39:05:21:11:25: de:c0:71:ca:e4:85:80:92:90:c6:04:49:e0:f2:b4: ab:0b:cf:7d:38:d9:0f:43:84:9c:6e:78:be:77:cc: c7:1e:66:36:65:7f:a4:8c:36:9c:83:1c:a5:a9:0c: 62:95:0e:79:a3:38:11:a8:e5:a5:c7:22:c9:58:c2: 8b:40:5e:a5:c6:7a:64:45:3a:c8:d9:44:fd:79:cd: 6e:c8:d6:d7:41:48:bc:73:38:54:fd:85:af:37:34: fe:38:ba:7d:cb:95:a1:9e:84:be:29:14:1c:02:41: 4b:64:c7:3e:1d:11:e4:30:dd:2e:4f:90:a0:42:fd: fc:3a:2a:07:b9:f4:3f:b7:e3:0b:ce:d7:d4:9e:c6: 0c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:03:04:24:09:5B:8D:78:A0:6F:8E:A4:8C:C8:28:AA:FE:09:97:48 X509v3 Authority Key Identifier: keyid:18:E1:F7:32:EF:A5:3C:39:73:A1:AC:D2:2C:13:68:A5:E1:F2:CA:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOH3Mu-lPDlzoazSLBNopeHyylI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/09106CCCAD3E11ED8B645C39C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.20.68.0/24 Signature Algorithm: sha256WithRSAEncryption a5:b0:c5:88:ae:3f:d1:39:91:46:f7:12:d9:f8:0e:86:d3:22: 0e:28:3e:ed:97:a5:06:3d:b5:4d:ff:75:6e:9b:e2:bc:94:0c: ae:4a:ae:00:d2:c1:5a:2f:b5:37:58:e9:b7:15:c6:5d:88:04: 3a:ba:51:df:11:89:5c:2b:17:d4:e2:38:71:ec:03:0d:1e:84: 51:10:4d:17:a9:a8:00:c8:31:87:48:ad:42:15:79:c2:b9:d8: 7b:e4:e9:2d:21:49:5e:2b:d4:a1:3c:67:09:d1:13:65:e7:c2: ef:44:47:59:47:bd:84:c0:6e:a6:0f:bf:3b:45:0e:77:18:e4: 55:a5:a1:5f:22:5b:d7:e3:c0:1b:64:a6:d2:51:db:0c:65:1b: 23:88:fc:e4:c0:d3:31:f2:6a:ed:b4:d5:2c:5f:f5:eb:3e:0d: de:97:df:04:0d:b7:31:95:6d:3a:21:b9:b0:37:eb:64:09:81: fd:85:dc:e8:95:54:7b:af:fc:07:e1:40:e9:52:88:01:fe:49: fd:c4:6f:42:4e:af:ec:05:48:cd:a5:ef:11:66:ee:29:3a:f5: 84:d7:f9:16:eb:be:65:30:0e:fd:4f:37:5f:d1:d3:6b:47:76: cd:5c:14:ab:1a:10:a2:60:f2:8f:db:61:9c:79:73:c4:6d:4c: 4b:3b:72:6c -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAXwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEYwMEUxMTAvBgNVBAUTKDE4RTFGNzMyRUZBNTNDMzk3M0ExQUNEMjJDMTM2OEE1 RTFGMkNBNTIwHhcNMjUwMjA1MDIyODE5WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2EyY2NjMi1mNTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx/KO1EcoQHsVzSDGfXI8bhapjO3z+fz/crgdf68S3wGfyoGWQNO2aJ5C/ndv wuTeyK1YK6c5kGtdV7tUtu5wYINCfGIXIGEY+ocZtp92zXa7bTGewPwlHxz/M16+ U3HEp5RHrlY7rkd1K8taEDULfBw1OQUhESXewHHK5IWAkpDGBEng8rSrC899ONkP Q4Scbni+d8zHHmY2ZX+kjDacgxylqQxilQ55ozgRqOWlxyLJWMKLQF6lxnpkRTrI 2UT9ec1uyNbXQUi8czhU/YWvNzT+OLp9y5WhnoS+KRQcAkFLZMc+HRHkMN0uT5Cg Qv38OioHufQ/t+MLztfUnsYMxwIDAQABo4IClTCCApEwHQYDVR0OBBYEFF8DBCQJ W414oG+OpIzIKKr+CZdIMB8GA1UdIwQYMBaAFBjh9zLvpTw5c6Gs0iwTaKXh8spS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjAwRS81QUExODIyRUFE MzkxMUVEQTBCOUI4M0NDNEY5QUUwMi9HT0gzTXUtbFBEbHpvYXpTTEJOb3BlSHl5 bEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dPSDNNdS1sUERsem9helNMQk5vcGVIeXlsSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEYwMEUvNUFBMTgyMkVBRDM5MTFFREEwQjlCODNDQzRGOUFFMDIvMDkxMDZDQ0NB RDNFMTFFRDhCNjQ1QzM5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADLFEQwDQYJKoZIhvcNAQELBQADggEBAKWwxYiuP9E5kUb3 Etn4DobTIg4oPu2XpQY9tU3/dW6b4ryUDK5KrgDSwVovtTdY6bcVxl2IBDq6Ud8R iVwrF9TiOHHsAw0ehFEQTRepqADIMYdIrUIVecK52Hvk6S0hSV4r1KE8ZwnRE2Xn wu9ER1lHvYTAbqYPvztFDncY5FWloV8iW9fjwBtkptJR2wxlGyOI/OTA0zHyau20 1Sxf9es+Dd6X3wQNtzGVbTohubA362QJgf2F3OiVVHuv/AfhQOlSiAH+Sf3Eb0JO r+wFSM2l7xFm7ik69YTX+RbrvmUwDv1PN1/R02tHds1cFKsaEKJg8o/bYZx5c8Rt TEs7cmw= -----END CERTIFICATE-----Generated at Sat Apr 26 08:05:38 2025 by rpki-client