$ rpki-client -vvf rpki.apnic.net/member_repository/A9122373/2C006BB82B2D11ECB84E7273C4F9AE02/A64296622BAA11EC9618D864C4F9AE02.roa File: A64296622BAA11EC9618D864C4F9AE02.roa (raw, json) Hash identifier: OMr4Dz07a9K+JRAHryD2B9Vl/J9RaoHPdVjAOTh62ZI= Subject key identifier: 8C:97:D6:93:76:20:EA:D3:8F:10:78:1C:82:7D:A9:05:16:24:05:FC Certificate issuer: /CN=A9122373/serialNumber=4A28651A94AC639F6AB132474D31EB0DFCE6DC79 Certificate serial: 04A6 Authority key identifier: 4A:28:65:1A:94:AC:63:9F:6A:B1:32:47:4D:31:EB:0D:FC:E6:DC:79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SihlGpSsY59qsTJHTTHrDfzm3Hk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122373/2C006BB82B2D11ECB84E7273C4F9AE02/A64296622BAA11EC9618D864C4F9AE02.roa Signing time: Thu 06 Mar 2025 23:45:00 +0000 ROA not before: Thu 06 Mar 2025 23:45:00 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 209242 IP address blocks: 202.45.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122373/2C006BB82B2D11ECB84E7273C4F9AE02/SihlGpSsY59qsTJHTTHrDfzm3Hk.crl rsync://rpki.apnic.net/member_repository/A9122373/2C006BB82B2D11ECB84E7273C4F9AE02/SihlGpSsY59qsTJHTTHrDfzm3Hk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SihlGpSsY59qsTJHTTHrDfzm3Hk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 00:02:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1190 (0x4a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122373 Validity Not Before: Mar 6 23:45:00 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67ca337b-ce4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:61:7a:33:81:f6:f9:18:8f:f0:90:57:e8:13: b8:0a:ef:86:f7:b4:7e:a1:9d:13:7f:fd:a5:4b:ac: fb:22:b4:b3:97:11:6d:d0:55:ae:df:ca:c4:a7:65: 87:4f:5d:85:0a:25:83:06:c5:36:a5:3f:ee:e1:a1: 1e:79:a4:33:62:78:8f:7d:0f:8f:d5:f5:53:1e:36: 41:79:2d:41:06:86:7f:83:14:b6:d0:87:7b:7d:34: e5:ea:e4:07:f6:27:40:b3:b1:1d:f5:53:2d:af:0d: 51:a7:e7:ba:3f:be:f0:e0:4b:46:c9:fc:71:d7:1f: 18:ff:ce:86:d0:28:57:5e:b8:a9:fb:33:51:6b:b5: 70:05:44:1a:d2:3d:31:5c:dd:f7:c1:9f:21:f5:8e: 6b:ab:ce:9f:c5:93:0a:cb:c6:d2:1f:5b:c8:d8:41: ee:ac:bd:6a:87:5c:de:be:5a:1a:b4:38:b0:51:a3: 9b:0c:42:f5:cf:a3:29:79:c4:02:2b:d8:d1:78:c6: 60:d6:98:d1:58:ef:87:cd:4e:93:0e:41:7b:d0:ef: 9c:4a:3f:61:41:51:a8:ad:c4:d3:6f:ff:0e:05:89: fe:02:ed:cd:65:a5:9a:5f:2c:ea:fa:27:56:73:98: 49:66:51:e4:db:68:2c:ca:f6:5a:c6:35:2d:62:33: 65:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:97:D6:93:76:20:EA:D3:8F:10:78:1C:82:7D:A9:05:16:24:05:FC X509v3 Authority Key Identifier: keyid:4A:28:65:1A:94:AC:63:9F:6A:B1:32:47:4D:31:EB:0D:FC:E6:DC:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122373/2C006BB82B2D11ECB84E7273C4F9AE02/SihlGpSsY59qsTJHTTHrDfzm3Hk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SihlGpSsY59qsTJHTTHrDfzm3Hk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122373/2C006BB82B2D11ECB84E7273C4F9AE02/A64296622BAA11EC9618D864C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.45.130.0/24 Signature Algorithm: sha256WithRSAEncryption 74:a9:6e:d6:10:72:be:1b:2e:12:dd:a1:53:d0:4c:16:b1:38: d8:75:19:90:a2:8c:82:fc:8b:2c:3d:90:5f:fb:15:df:62:e0: 92:a7:e8:85:3b:ea:72:74:e0:63:a6:77:95:c7:68:2e:a3:68: 18:e1:6b:0e:52:3a:64:e7:34:f7:ab:89:ea:34:23:f8:16:82: 54:c6:b7:7c:a1:51:15:52:85:54:a3:0b:a2:cb:f5:4e:9b:11: e0:ee:3e:ee:22:ef:b3:39:7a:57:dd:39:e4:ce:27:be:5b:13: 07:bb:6c:de:23:30:d1:d2:fc:33:54:9e:04:95:39:14:45:7e: 8b:0d:e4:f0:bd:71:ad:a0:79:40:8f:4c:e1:8e:e6:44:48:1b: f6:63:69:c6:01:21:31:47:5e:83:b7:d5:6e:bd:75:f4:e0:0d: 85:1e:56:8c:bd:21:19:72:0d:3d:71:a3:33:6c:b5:44:66:f1: 79:69:ce:a3:b6:d8:a8:a4:3f:5f:ae:a1:0c:9d:03:24:67:9f: 6e:27:18:4a:47:7d:d2:5c:93:b6:dd:06:9b:b1:dc:e6:68:9f: 0d:c9:00:ce:c5:3f:67:7f:90:34:6d:77:11:19:f0:00:f1:17: 45:76:e1:f8:ef:91:ac:79:3b:ca:ee:bc:2b:6b:81:3b:03:e2: 61:5c:10:ef -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjIzNzMxMTAvBgNVBAUTKDRBMjg2NTFBOTRBQzYzOUY2QUIxMzI0NzREMzFFQjBE RkNFNkRDNzkwHhcNMjUwMzA2MjM0NTAwWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2NhMzM3Yi1jZTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzmF6M4H2+RiP8JBX6BO4Cu+G97R+oZ0Tf/2lS6z7IrSzlxFt0FWu38rEp2WH T12FCiWDBsU2pT/u4aEeeaQzYniPfQ+P1fVTHjZBeS1BBoZ/gxS20Id7fTTl6uQH 9idAs7Ed9VMtrw1Rp+e6P77w4EtGyfxx1x8Y/86G0ChXXrip+zNRa7VwBUQa0j0x XN33wZ8h9Y5rq86fxZMKy8bSH1vI2EHurL1qh1zevloatDiwUaObDEL1z6MpecQC K9jReMZg1pjRWO+HzU6TDkF70O+cSj9hQVGorcTTb/8OBYn+Au3NZaWaXyzq+idW c5hJZlHk22gsyvZaxjUtYjNl1QIDAQABo4IClTCCApEwHQYDVR0OBBYEFIyX1pN2 IOrTjxB4HIJ9qQUWJAX8MB8GA1UdIwQYMBaAFEooZRqUrGOfarEyR00x6w385tx5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjM3My8yQzAwNkJCODJC MkQxMUVDQjg0RTcyNzNDNEY5QUUwMi9TaWhsR3BTc1k1OXFzVEpIVFRIckRmem0z SGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NpaGxHcFNzWTU5cXNUSkhUVEhyRGZ6bTNIay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjIzNzMvMkMwMDZCQjgyQjJEMTFFQ0I4NEU3MjczQzRGOUFFMDIvQTY0Mjk2NjIy QkFBMTFFQzk2MThEODY0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADKLYIwDQYJKoZIhvcNAQELBQADggEBAHSpbtYQcr4bLhLd oVPQTBaxONh1GZCijIL8iyw9kF/7Fd9i4JKn6IU76nJ04GOmd5XHaC6jaBjhaw5S OmTnNPerieo0I/gWglTGt3yhURVShVSjC6LL9U6bEeDuPu4i77M5elfdOeTOJ75b Ewe7bN4jMNHS/DNUngSVORRFfosN5PC9ca2geUCPTOGO5kRIG/ZjacYBITFHXoO3 1W69dfTgDYUeVoy9IRlyDT1xozNstURm8XlpzqO22KikP1+uoQydAyRnn24nGEpH fdJck7bdBpux3OZonw3JAM7FP2d/kDRtdxEZ8ADxF0V24fjvkax5O8ruvCtrgTsD 4mFcEO8= -----END CERTIFICATE-----Generated at Sat Apr 5 07:19:31 2025 by rpki-client