$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/C244E42E217311F0B1300933C4F9AE02.roa File: C244E42E217311F0B1300933C4F9AE02.roa (raw, json) Hash identifier: 86O9ffvZ+lAdP3fKWPb/eFdPAnDvj653nudTKYYyhaU= Subject key identifier: 71:AF:B2:3A:BA:02:23:B7:DE:AD:BE:16:2E:47:A0:E7:B7:BD:C4:D2 Certificate issuer: /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138 Certificate serial: 0323 Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/C244E42E217311F0B1300933C4F9AE02.roa Signing time: Fri 25 Apr 2025 01:22:31 +0000 ROA not before: Fri 25 Apr 2025 01:22:31 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 834 IP address blocks: 202.155.137.0/24 maxlen: 24 202.155.142.0/24 maxlen: 24 218.33.80.0/22 maxlen: 24 218.33.92.0/22 maxlen: 24 218.33.100.0/22 maxlen: 24 218.33.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:51:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 803 (0x323) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192C18, serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138 Validity Not Before: Apr 25 01:22:31 2025 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=680ae3d7-f2f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:86:4a:cc:6b:f2:46:e0:3d:12:68:25:ce:88: 83:5c:5d:19:54:89:62:a9:4e:68:e1:91:ed:a9:65: 36:94:24:b4:e8:4a:2b:c8:0f:60:bc:89:af:85:b7: b8:34:f6:da:5e:de:ef:c3:46:7a:53:a8:fb:df:6e: 82:2c:9b:1f:c4:27:54:88:ed:e9:40:01:e2:22:92: 60:39:3b:1d:9d:4a:35:21:74:97:92:92:4f:5e:e5: a2:e9:bc:85:77:6f:52:b5:5c:d2:d0:a7:b6:5a:d0: f1:ac:70:d1:be:2c:3d:01:fc:76:d5:17:38:7d:19: fa:21:d7:1e:69:81:fb:1b:36:d6:01:1f:5a:c3:59: 8f:d5:03:98:b5:93:aa:6a:3e:2e:3b:82:d6:73:f7: 80:2d:b0:b8:de:cd:26:a5:5d:dc:3d:f9:49:3d:6c: 32:4c:cb:76:8b:b3:b4:40:52:f9:50:a9:c9:43:6e: be:87:89:be:f4:51:a1:de:e6:c5:fa:ed:b2:3c:c8: 4b:ee:59:52:95:12:f4:b4:26:54:5f:38:16:2e:4e: 15:87:ec:a0:96:7e:91:76:39:94:22:b3:39:54:90: 92:19:36:c5:5c:1e:48:d7:09:8b:23:74:f7:0a:3d: b6:a9:01:70:ef:01:08:10:1f:4e:2a:ee:01:48:3f: a9:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:AF:B2:3A:BA:02:23:B7:DE:AD:BE:16:2E:47:A0:E7:B7:BD:C4:D2 X509v3 Authority Key Identifier: keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/C244E42E217311F0B1300933C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.155.137.0/24 202.155.142.0/24 218.33.80.0/22 218.33.92.0/22 218.33.100.0/22 218.33.124.0/22 Signature Algorithm: sha256WithRSAEncryption 35:96:ab:25:a1:31:64:ca:31:00:ad:59:cd:59:76:8f:98:68: 3a:77:ef:7c:b5:f6:77:b7:d4:1e:72:53:1d:fa:0a:40:be:43: af:fe:7a:04:d2:54:73:b6:5b:a3:6a:c2:fe:c8:7a:a6:c3:7d: f6:80:5c:f4:69:52:b1:79:67:79:32:cb:bf:a1:9a:88:2c:c7: e5:40:9d:3c:c5:f2:bc:88:60:88:9d:60:39:cc:1a:91:19:c6: f5:8e:1c:1a:f8:c5:9b:e4:06:ba:79:ba:3a:59:29:4e:3e:e4: 2d:5f:02:57:32:a8:bc:1d:52:11:59:5a:67:e3:c3:ff:07:77: 85:9e:7f:eb:cf:f6:c8:e8:55:2e:7c:12:2b:c3:9a:fe:74:b6: 4f:cd:c0:fb:0d:a4:00:2e:a8:20:3a:a0:8c:3b:45:b3:c4:4a: 91:75:9c:73:84:a8:93:6b:ac:14:28:f8:f8:d7:05:51:1c:c3: 0d:ed:5b:2b:85:66:28:fd:b1:c9:de:9e:2c:b3:cd:e1:09:3f: f9:d5:1f:04:73:1a:67:dc:1d:03:7a:ad:d7:ca:30:bf:05:96: 35:78:72:ca:f9:9c:cd:fa:4c:96:85:da:73:a3:a7:00:9c:b4: 7d:ef:59:db:72:6b:30:95:d4:0d:2a:90:27:aa:91:05:a3:48: 75:82:75:4f -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgICAyMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJDMTgxMTAvBgNVBAUTKEYxRkUwQzMyN0U3OUU1QUY0M0UxNUIwRTZGOENENjZD MDMyOUQxMzgwHhcNMjUwNDI1MDEyMjMxWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODBhZTNkNy1mMmYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq4ZKzGvyRuA9EmglzoiDXF0ZVIliqU5o4ZHtqWU2lCS06EoryA9gvImvhbe4 NPbaXt7vw0Z6U6j7326CLJsfxCdUiO3pQAHiIpJgOTsdnUo1IXSXkpJPXuWi6byF d29StVzS0Ke2WtDxrHDRviw9Afx21Rc4fRn6IdceaYH7GzbWAR9aw1mP1QOYtZOq aj4uO4LWc/eALbC43s0mpV3cPflJPWwyTMt2i7O0QFL5UKnJQ26+h4m+9FGh3ubF +u2yPMhL7llSlRL0tCZUXzgWLk4Vh+ygln6RdjmUIrM5VJCSGTbFXB5I1wmLI3T3 Cj22qQFw7wEIEB9OKu4BSD+pTwIDAQABo4ICszCCAq8wHQYDVR0OBBYEFHGvsjq6 AiO33q2+Fi5HoOe3vcTSMB8GA1UdIwQYMBaAFPH+DDJ+eeWvQ+FbDm+M1mwDKdE4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkMxOC85QTVFRUE4QzNE RjQxMUVEODA0MUY5MzBDNEY5QUUwMi84ZjRNTW41NTVhOUQ0VnNPYjR6V2JBTXAw VGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhmNE1NbjU1NWE5RDRWc09iNHpXYkFNcDBUZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTJDMTgvOUE1RUVBOEMzREY0MTFFRDgwNDFGOTMwQzRGOUFFMDIvQzI0NEU0MkUy MTczMTFGMEIxMzAwOTMzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPQYIKwYBBQUHAQcBAf8E LjAsMCoEAgABMCQDBADKm4kDBADKm44DBALaIVADBALaIVwDBALaIWQDBALaIXww DQYJKoZIhvcNAQELBQADggEBADWWqyWhMWTKMQCtWc1Zdo+YaDp373y19ne31B5y Ux36CkC+Q6/+egTSVHO2W6Nqwv7IeqbDffaAXPRpUrF5Z3kyy7+hmogsx+VAnTzF 8ryIYIidYDnMGpEZxvWOHBr4xZvkBrp5ujpZKU4+5C1fAlcyqLwdUhFZWmfjw/8H d4Wef+vP9sjoVS58EivDmv50tk/NwPsNpAAuqCA6oIw7RbPESpF1nHOEqJNrrBQo +PjXBVEcww3tWyuFZij9scneniyzzeEJP/nVHwRzGmfcHQN6rdfKML8FljV4csr5 nM36TJaF2nOjpwCctH3vWdtyazCV1A0qkCeqkQWjSHWCdU8= -----END CERTIFICATE-----Generated at Sat Apr 26 15:20:00 2025 by rpki-client