$ rpki-client -vvf rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/2FA57B9A97B611EDAE9D4381C4F9AE02.roa File: 2FA57B9A97B611EDAE9D4381C4F9AE02.roa (raw, json) Hash identifier: O+j9Zx5sSnGiEmDp3bX6jlKG4hSKXF0a15C+swghh6w= Subject key identifier: 68:14:4A:40:98:5C:16:6A:EA:A0:D1:A3:54:20:F1:6C:7A:E0:15:11 Certificate issuer: /CN=A9117E4D/serialNumber=AE107F3C2977717A1CD3571D183748FD07D9FC5F Certificate serial: 3476 Authority key identifier: AE:10:7F:3C:29:77:71:7A:1C:D3:57:1D:18:37:48:FD:07:D9:FC:5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/2FA57B9A97B611EDAE9D4381C4F9AE02.roa Signing time: Mon 10 Mar 2025 08:33:16 +0000 ROA not before: Mon 10 Mar 2025 08:33:16 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 7545 IP address blocks: 14.202.192.0/24 maxlen: 24 60.241.61.0/24 maxlen: 24 203.219.48.0/22 maxlen: 22 220.240.122.0/24 maxlen: 24 220.245.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.crl rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 14:26:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13430 (0x3476) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117E4D Validity Not Before: Mar 10 08:33:16 2025 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=67cea3cc-f29f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:7f:0a:bc:5c:2e:1f:08:37:ae:63:41:d8:ee: a9:72:81:de:6a:e4:28:04:76:33:72:3c:bf:95:9a: 2a:81:b4:ce:be:11:63:9d:2a:5f:56:37:33:f6:6c: ad:b6:d0:57:77:3e:7e:f5:4e:7e:a3:a3:7f:a6:bb: 66:89:38:df:8c:f2:0e:6e:75:45:c9:30:9c:48:10: fa:83:b6:bb:a2:e7:d9:8c:f1:23:bc:48:92:7f:0f: 21:31:0d:03:f6:00:52:39:d0:bf:cf:6e:96:b7:20: b7:08:ad:97:71:38:6d:63:7b:8c:59:84:e9:52:bc: 8f:d2:91:aa:66:bf:d2:19:53:8d:fe:d0:6e:1e:ba: 79:b5:a5:ff:57:e0:d7:f5:12:6c:84:30:72:99:59: 46:d6:ec:5f:18:af:ed:3a:d3:8b:93:a4:53:10:26: ec:9d:1c:95:e4:4a:67:b3:cf:ce:17:78:d6:c2:7c: ab:25:70:5e:51:1f:7a:3e:b8:61:b8:48:c0:b1:1b: 06:6b:1c:e9:ba:f2:1d:d2:df:b0:bf:30:8a:b1:46: ed:19:d5:43:50:41:79:19:ac:16:30:49:fd:17:37: 42:8d:13:8a:37:1b:a1:fa:7e:d3:ec:4f:55:48:ec: 04:2f:d9:7e:49:4d:55:7d:1e:a1:9c:2e:ca:bf:1d: a1:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:14:4A:40:98:5C:16:6A:EA:A0:D1:A3:54:20:F1:6C:7A:E0:15:11 X509v3 Authority Key Identifier: keyid:AE:10:7F:3C:29:77:71:7A:1C:D3:57:1D:18:37:48:FD:07:D9:FC:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/2FA57B9A97B611EDAE9D4381C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 14.202.192.0/24 60.241.61.0/24 203.219.48.0/22 220.240.122.0/24 220.245.124.0/22 Signature Algorithm: sha256WithRSAEncryption 86:46:a0:cc:d3:22:ef:3e:ea:2f:a2:60:79:1a:97:cc:2b:64: 62:fd:d8:e0:be:36:3b:11:34:4d:96:ad:ce:24:10:fe:2c:d7: 0f:a0:65:20:4d:b4:c3:27:c9:20:5e:de:66:eb:de:73:04:84: b0:e4:01:ff:9b:30:a3:70:c9:b0:47:df:da:07:9c:8a:d5:2f: 90:b3:43:39:dc:56:08:70:65:bc:fa:fd:e5:4e:49:3c:51:84: 8f:96:da:91:f3:a6:f4:7f:03:70:5e:c2:44:9c:d6:08:12:1c: bb:de:5d:03:40:63:e3:26:07:1b:91:00:53:45:48:8f:93:b1: e6:2e:d7:32:e4:06:b1:16:f6:8f:51:2f:ae:b9:64:01:99:8f: 25:da:4c:35:0b:01:21:e4:1a:aa:55:c8:05:92:dd:93:66:36: 63:fe:b3:d9:f8:32:f4:a7:6e:19:63:2d:1e:08:c6:69:ca:41: 26:8c:2b:fe:cc:ec:da:1c:dc:6a:31:97:2c:77:1b:76:7c:bb: 66:4a:6a:95:d2:c3:fc:30:af:5b:30:98:26:4a:65:9e:84:aa: f7:81:ce:b1:44:3b:cb:13:71:e5:73:a6:45:8c:e5:19:90:14: 2f:6c:5b:7c:dd:e4:78:e2:80:6e:9d:2f:11:be:fa:da:c8:6e: 1b:06:cf:ab -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgICNHYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTdFNEQxMTAvBgNVBAUTKEFFMTA3RjNDMjk3NzcxN0ExQ0QzNTcxRDE4Mzc0OEZE MDdEOUZDNUYwHhcNMjUwMzEwMDgzMzE2WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02N2NlYTNjYy1mMjlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwH8KvFwuHwg3rmNB2O6pcoHeauQoBHYzcjy/lZoqgbTOvhFjnSpfVjcz9myt ttBXdz5+9U5+o6N/prtmiTjfjPIObnVFyTCcSBD6g7a7oufZjPEjvEiSfw8hMQ0D 9gBSOdC/z26WtyC3CK2XcThtY3uMWYTpUryP0pGqZr/SGVON/tBuHrp5taX/V+DX 9RJshDBymVlG1uxfGK/tOtOLk6RTECbsnRyV5Epns8/OF3jWwnyrJXBeUR96Prhh uEjAsRsGaxzpuvId0t+wvzCKsUbtGdVDUEF5GawWMEn9FzdCjROKNxuh+n7T7E9V SOwEL9l+SU1VfR6hnC7Kvx2hrQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFGgUSkCY XBZq6qDRo1Qg8Wx64BURMB8GA1UdIwQYMBaAFK4Qfzwpd3F6HNNXHRg3SP0H2fxf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExN0U0RC9FQTFCMUQ2QTFE ODUxMUUyOTc5RkU3REMwOEIwMkNEMi9yaEJfUENsM2NYb2MwMWNkR0RkSV9RZlpf RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JoQl9QQ2wzY1hvYzAxY2RHRGRJX1FmWl9GOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTdFNEQvRUExQjFENkExRDg1MTFFMjk3OUZFN0RDMDhCMDJDRDIvMkZBNTdCOUE5 N0I2MTFFREFFOUQ0MzgxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNwYIKwYBBQUHAQcBAf8E KDAmMCQEAgABMB4DBAAOysADBAA88T0DBALL2zADBADc8HoDBALc9XwwDQYJKoZI hvcNAQELBQADggEBAIZGoMzTIu8+6i+iYHkal8wrZGL92OC+NjsRNE2Wrc4kEP4s 1w+gZSBNtMMnySBe3mbr3nMEhLDkAf+bMKNwybBH39oHnIrVL5CzQzncVghwZbz6 /eVOSTxRhI+W2pHzpvR/A3BewkSc1ggSHLveXQNAY+MmBxuRAFNFSI+TseYu1zLk BrEW9o9RL665ZAGZjyXaTDULASHkGqpVyAWS3ZNmNmP+s9n4MvSnbhljLR4IxmnK QSaMK/7M7Noc3Goxlyx3G3Z8u2ZKapXSw/wwr1swmCZKZZ6EqveBzrFEO8sTceVz pkWM5RmQFC9sW3zd5HjigG6dLxG++trIbhsGz6s= -----END CERTIFICATE-----Generated at Sat Apr 5 00:50:02 2025 by rpki-client