$ rpki-client -vvf rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/236C6906A73F11EBA1751E33C4F9AE02.roa File: 236C6906A73F11EBA1751E33C4F9AE02.roa (raw, json) Hash identifier: JyPetDHabfuANEcar/HU38MZvBtPYhC6A1gULHuakq8= Subject key identifier: FD:B4:2C:B3:38:4C:00:5F:15:D0:32:6D:2E:52:66:F5:2F:EE:7C:DB Certificate issuer: /CN=A91324D4/serialNumber=BF74E7E614D4B22E4B7FE40B6BECEFD1705ACFC1 Certificate serial: 0600 Authority key identifier: BF:74:E7:E6:14:D4:B2:2E:4B:7F:E4:0B:6B:EC:EF:D1:70:5A:CF:C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/236C6906A73F11EBA1751E33C4F9AE02.roa Signing time: Thu 13 Feb 2025 00:31:40 +0000 ROA not before: Thu 13 Feb 2025 00:31:40 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 17787 IP address blocks: 203.215.160.0/24 maxlen: 24 203.215.161.0/24 maxlen: 24 203.215.162.0/24 maxlen: 24 203.215.164.0/24 maxlen: 24 203.215.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.crl rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 23:04:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1536 (0x600) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91324D4 Validity Not Before: Feb 13 00:31:40 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67ad3d6c-a1db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:99:df:f0:c3:d1:44:b3:1f:fa:d7:c5:3a:68: 51:6c:39:de:d4:d5:19:c4:f3:01:1d:f9:dc:17:b0: cb:40:8d:57:7c:f4:e6:3a:e1:b6:71:77:e6:71:80: 2e:f1:77:c2:89:1f:5d:a4:9c:2e:e6:2b:d3:2d:86: 93:1f:6c:1b:3e:fe:87:ca:8a:4a:cd:ab:d1:60:5a: 31:d6:e2:02:e8:18:12:d4:00:b9:f5:d7:be:9c:b6: 37:a9:bc:63:90:1a:fb:12:e3:e7:20:4f:b0:9a:19: f8:d7:bf:19:2b:17:c8:ef:bb:8a:fd:0f:3b:30:86: 3d:b8:2a:f7:00:02:b8:20:a9:44:c0:70:d0:85:f7: 8f:17:5a:66:46:77:4b:0b:17:5c:e0:7d:7f:84:89: 47:b7:c2:76:ff:55:ec:99:7e:56:66:48:0d:a7:90: 6e:82:36:7e:26:d5:aa:8f:ca:d1:cc:01:7c:23:e6: 69:86:91:af:4b:3e:71:03:b8:98:56:80:91:9c:7f: f6:12:7b:ca:29:30:0e:09:b4:4c:1b:c2:9c:25:bb: 4b:0d:60:6c:5a:cc:25:d0:49:78:3e:88:89:4f:5f: ae:29:28:a1:55:dc:b1:b1:42:35:f6:d7:03:3d:d9: f7:98:a3:47:dd:26:28:c3:0c:9d:1c:99:58:60:27: ed:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:B4:2C:B3:38:4C:00:5F:15:D0:32:6D:2E:52:66:F5:2F:EE:7C:DB X509v3 Authority Key Identifier: keyid:BF:74:E7:E6:14:D4:B2:2E:4B:7F:E4:0B:6B:EC:EF:D1:70:5A:CF:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/236C6906A73F11EBA1751E33C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.215.160.0-203.215.162.255 203.215.164.0/24 203.215.172.0/24 Signature Algorithm: sha256WithRSAEncryption b9:d3:e2:02:17:2a:96:01:21:36:0d:07:8b:bb:2e:3b:52:bf: 1e:c2:72:58:76:86:29:40:71:76:a8:c2:8e:4b:37:70:e8:bb: f2:3c:73:9c:80:a6:02:5a:42:a4:78:78:b6:66:52:23:ca:c7: 47:d6:1d:b3:d4:66:bf:4d:41:04:06:c1:1b:18:13:22:47:db: 25:8f:43:f6:c6:22:b9:8a:c3:aa:8a:e1:27:c6:75:88:86:36: da:b6:fd:f2:c0:09:33:e1:bf:a0:71:c7:d1:07:2c:09:cd:fa: 41:f5:d5:b8:a3:f6:cf:e6:b9:83:44:d2:a6:fd:ed:5b:74:1f: 91:04:5c:7a:71:42:94:33:6c:47:4b:a8:f1:2d:a6:09:10:c3: ac:1c:14:41:bf:9d:c5:22:56:7d:42:10:4c:47:a9:41:37:fe: 48:a1:d0:30:76:5a:a5:58:30:e8:59:6e:f8:e1:04:d7:8f:0d: b4:c7:0f:5a:34:e0:fd:40:72:e6:49:47:db:19:ea:f3:a4:65: 38:3d:15:87:10:8d:be:ae:58:83:bb:9a:c9:e1:a6:b3:bd:bb: 90:99:69:2e:10:a7:25:f8:74:a6:00:e0:f4:1e:32:7e:ac:a0: 5d:30:4c:ae:c6:f2:1f:03:1d:10:a3:a2:f7:f1:ce:55:a7:b5: 4f:30:d2:e9 -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgICBgAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI0RDQxMTAvBgNVBAUTKEJGNzRFN0U2MTRENEIyMkU0QjdGRTQwQjZCRUNFRkQx NzA1QUNGQzEwHhcNMjUwMjEzMDAzMTQwWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2FkM2Q2Yy1hMWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyZnf8MPRRLMf+tfFOmhRbDne1NUZxPMBHfncF7DLQI1XfPTmOuG2cXfmcYAu 8XfCiR9dpJwu5ivTLYaTH2wbPv6HyopKzavRYFox1uIC6BgS1AC59de+nLY3qbxj kBr7EuPnIE+wmhn4178ZKxfI77uK/Q87MIY9uCr3AAK4IKlEwHDQhfePF1pmRndL Cxdc4H1/hIlHt8J2/1XsmX5WZkgNp5BugjZ+JtWqj8rRzAF8I+ZphpGvSz5xA7iY VoCRnH/2EnvKKTAOCbRMG8KcJbtLDWBsWswl0El4PoiJT1+uKSihVdyxsUI19tcD Pdn3mKNH3SYowwydHJlYYCft7wIDAQABo4ICqTCCAqUwHQYDVR0OBBYEFP20LLM4 TABfFdAybS5SZvUv7nzbMB8GA1UdIwQYMBaAFL905+YU1LIuS3/kC2vs79FwWs/B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjRENC8xQTZFNzUxQ0E3 MUYxMUVCODQ4QUYwMzBDNEY5QUUwMi92M1RuNWhUVXNpNUxmLVFMYS16djBYQmF6 OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3YzVG41aFRVc2k1TGYtUUxhLXp2MFhCYXo4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzI0RDQvMUE2RTc1MUNBNzFGMTFFQjg0OEFGMDMwQzRGOUFFMDIvMjM2QzY5MDZB NzNGMTFFQkExNzUxRTMzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMwYIKwYBBQUHAQcBAf8E JDAiMCAEAgABMBowDAMEBcvXoAMEAMvXogMEAMvXpAMEAMvXrDANBgkqhkiG9w0B AQsFAAOCAQEAudPiAhcqlgEhNg0Hi7suO1K/HsJyWHaGKUBxdqjCjks3cOi78jxz nICmAlpCpHh4tmZSI8rHR9Yds9Rmv01BBAbBGxgTIkfbJY9D9sYiuYrDqorhJ8Z1 iIY22rb98sAJM+G/oHHH0QcsCc36QfXVuKP2z+a5g0TSpv3tW3QfkQRcenFClDNs R0uo8S2mCRDDrBwUQb+dxSJWfUIQTEepQTf+SKHQMHZapVgw6Flu+OEE148NtMcP WjTg/UBy5klH2xnq86RlOD0VhxCNvq5Yg7uayeGms727kJlpLhCnJfh0pgDg9B4y fqygXTBMrsbyHwMdEKOi9/HOVae1TzDS6Q== -----END CERTIFICATE-----Generated at Sat Apr 5 07:08:20 2025 by rpki-client