$ rpki-client -vvf rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6492D4985B9011EF8DB48C24C4F9AE02.roa File: 6492D4985B9011EF8DB48C24C4F9AE02.roa (raw, json) Hash identifier: 839PtDlknFxmB3zgVp3xI06k2fZt9x7Vqucm5KUUEiA= Subject key identifier: 03:E1:4B:5A:48:A2:AE:2F:D8:BA:FC:55:7B:FA:2A:3A:97:E7:86:C6 Certificate issuer: /CN=A911C362/serialNumber=EA83AF4A21CBC2071F56956E5DDD584C7638FA5B Certificate serial: B4 Authority key identifier: EA:83:AF:4A:21:CB:C2:07:1F:56:95:6E:5D:DD:58:4C:76:38:FA:5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6oOvSiHLwgcfVpVuXd1YTHY4-ls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6492D4985B9011EF8DB48C24C4F9AE02.roa Signing time: Mon 10 Feb 2025 05:02:38 +0000 ROA not before: Mon 10 Feb 2025 05:02:38 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 146943 IP address blocks: 43.230.203.0/24 maxlen: 24 45.113.224.0/24 maxlen: 24 45.113.226.0/24 maxlen: 24 45.113.227.0/24 maxlen: 24 45.120.137.0/24 maxlen: 24 45.120.138.0/24 maxlen: 24 157.119.41.0/24 maxlen: 24 157.119.42.0/24 maxlen: 24 157.119.43.0/24 maxlen: 24 2405:7140:2::/48 maxlen: 48 2405:7140:4::/48 maxlen: 48 2405:7140:5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.crl rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6oOvSiHLwgcfVpVuXd1YTHY4-ls.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 05:33:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 180 (0xb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C362 Validity Not Before: Feb 10 05:02:38 2025 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=67a9886d-3358 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:53:20:f6:cf:fa:60:db:69:26:a9:3b:0a:4d: ee:5e:b5:93:96:30:af:c3:71:c0:27:15:81:46:4f: 43:dd:2d:fd:68:fe:78:d0:16:01:c1:c7:45:8d:2d: be:50:62:8c:03:d0:33:9f:c7:06:12:9c:40:2c:0a: 0e:6e:01:13:32:27:34:fe:5a:b3:90:10:ea:2a:8c: c1:b2:fa:9f:70:de:32:d1:07:76:51:bd:40:6c:f7: 50:8d:c6:d9:8c:60:19:20:95:76:31:ec:8a:bb:45: ee:b6:94:32:bb:cf:d0:b3:9a:f7:89:95:e1:ab:4a: 06:61:90:5c:2a:ed:9b:9a:9b:e5:3a:f3:71:56:80: dd:ae:8b:df:3c:ec:f6:16:82:c0:70:d6:4d:7a:15: 6c:0d:73:35:68:9a:9b:dc:25:fc:f5:26:95:57:25: c5:e6:ca:5e:44:af:a8:75:87:09:20:34:b6:ee:f0: b8:c2:e7:3b:a7:f8:73:99:38:d0:f5:12:63:77:92: 44:21:de:cd:8a:6c:00:df:b2:55:38:c6:58:31:7b: bd:ec:66:3d:c6:08:7f:47:92:82:e9:62:31:ec:0f: 68:a5:a3:85:aa:aa:4e:77:95:b2:29:43:32:2c:6f: 67:77:89:69:2c:ce:3b:53:50:72:3c:aa:6c:e8:73: e0:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:E1:4B:5A:48:A2:AE:2F:D8:BA:FC:55:7B:FA:2A:3A:97:E7:86:C6 X509v3 Authority Key Identifier: keyid:EA:83:AF:4A:21:CB:C2:07:1F:56:95:6E:5D:DD:58:4C:76:38:FA:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6oOvSiHLwgcfVpVuXd1YTHY4-ls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6492D4985B9011EF8DB48C24C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.230.203.0/24 45.113.224.0/24 45.113.226.0/23 45.120.137.0-45.120.138.255 157.119.41.0-157.119.43.255 IPv6: 2405:7140:2::/48 2405:7140:4::/47 Signature Algorithm: sha256WithRSAEncryption 7f:8e:3d:97:cd:7d:e9:0f:f8:2c:d9:3c:c0:dc:a4:da:40:ad: a7:e8:44:52:0c:a9:16:33:03:54:a5:ef:0d:70:10:74:8b:9f: b4:86:28:20:0c:fd:95:78:5b:f9:71:b4:71:3a:c0:95:b1:c6: 93:5f:4c:da:ed:97:60:1c:69:fc:4f:a0:c6:97:f7:6b:09:a4: 7b:93:07:d6:ba:27:c9:2e:06:f8:6c:aa:89:8e:b9:dc:96:77: 20:b2:db:a2:30:75:c9:0f:45:a6:6a:08:94:73:fe:74:fb:b8: 60:d7:3f:4d:a2:43:9c:f1:59:84:35:54:a1:bb:d9:0e:54:0e: 36:df:6b:fa:1d:ec:80:71:c0:b2:b9:98:de:68:16:9e:31:11: 7b:35:5e:b4:de:54:97:38:3d:9e:97:bb:28:4a:0a:8c:2a:1f: 5d:3f:37:b7:52:7b:fc:6c:c3:a9:fe:3c:41:61:01:f5:a9:bc: e5:d5:e1:97:f4:8a:5b:c8:bf:01:4e:d8:d1:82:34:7e:0b:ec: 7f:a1:0f:bd:96:9e:c0:11:78:c3:b0:7b:6d:f7:31:c5:4a:0b: bc:7b:81:75:97:57:54:79:f5:c8:20:8f:f4:29:5c:fd:99:c2: ad:4c:1e:ab:34:81:47:c3:a1:68:5a:d4:bb:53:14:3a:87:be: 0d:62:a3:a2 -----BEGIN CERTIFICATE----- MIIFszCCBJugAwIBAgICALQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMzNjIxMTAvBgNVBAUTKEVBODNBRjRBMjFDQkMyMDcxRjU2OTU2RTVEREQ1ODRD NzYzOEZBNUIwHhcNMjUwMjEwMDUwMjM4WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2E5ODg2ZC0zMzU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4lMg9s/6YNtpJqk7Ck3uXrWTljCvw3HAJxWBRk9D3S39aP540BYBwcdFjS2+ UGKMA9Azn8cGEpxALAoObgETMic0/lqzkBDqKozBsvqfcN4y0Qd2Ub1AbPdQjcbZ jGAZIJV2MeyKu0XutpQyu8/Qs5r3iZXhq0oGYZBcKu2bmpvlOvNxVoDdrovfPOz2 FoLAcNZNehVsDXM1aJqb3CX89SaVVyXF5speRK+odYcJIDS27vC4wuc7p/hzmTjQ 9RJjd5JEId7NimwA37JVOMZYMXu97GY9xgh/R5KC6WIx7A9opaOFqqpOd5WyKUMy LG9nd4lpLM47U1ByPKps6HPgNQIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFAPhS1pI oq4v2Lr8VXv6KjqX54bGMB8GA1UdIwQYMBaAFOqDr0ohy8IHH1aVbl3dWEx2OPpb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzM2Mi82QTA4RjQ5MjI1 NzcxMUVGQkIwQjgyNTFDNEY5QUUwMi82b092U2lITHdnY2ZWcFZ1WGQxWVRIWTQt bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZvT3ZTaUhMd2djZlZwVnVYZDFZVEhZNC1scy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUMzNjIvNkEwOEY0OTIyNTc3MTFFRkJCMEI4MjUxQzRGOUFFMDIvNjQ5MkQ0OTg1 QjkwMTFFRjhEQjQ4QzI0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwYQYIKwYBBQUHAQcBAf8E UjBQMDQEAgABMC4DBAAr5ssDBAAtceADBAEtceIwDAMEAC14iQMEAC14ijAMAwQA nXcpAwQCnXcoMBgEAgACMBIDBwAkBXFAAAIDBwEkBXFAAAQwDQYJKoZIhvcNAQEL BQADggEBAH+OPZfNfekP+CzZPMDcpNpArafoRFIMqRYzA1Sl7w1wEHSLn7SGKCAM /ZV4W/lxtHE6wJWxxpNfTNrtl2AcafxPoMaX92sJpHuTB9a6J8kuBvhsqomOudyW dyCy26IwdckPRaZqCJRz/nT7uGDXP02iQ5zxWYQ1VKG72Q5UDjbfa/od7IBxwLK5 mN5oFp4xEXs1XrTeVJc4PZ6XuyhKCowqH10/N7dSe/xsw6n+PEFhAfWpvOXV4Zf0 ilvIvwFO2NGCNH4L7H+hD72WnsAReMOwe233McVKC7x7gXWXV1R59cggj/QpXP2Z wq1MHqs0gUfDoWha1LtTFDqHvg1io6I= -----END CERTIFICATE-----Generated at Sat Apr 5 03:32:37 2025 by rpki-client