$ rpki-client -vvf rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/C7E21B026AED11ED97121F2BC4F9AE02.roa File: C7E21B026AED11ED97121F2BC4F9AE02.roa (raw, json) Hash identifier: qsaIGRiFRWstbJ88ir6bwAs/8uMjkIf/J02kliFht7Q= Subject key identifier: 0A:8F:E3:01:70:C7:0D:46:3C:EC:0B:2A:25:8A:CC:8E:C2:66:AA:F7 Certificate issuer: /CN=A9135395/serialNumber=F3A0D72D6330D72156A00D9F46EAB0C9FC93BC8C Certificate serial: 01B3 Authority key identifier: F3:A0:D7:2D:63:30:D7:21:56:A0:0D:9F:46:EA:B0:C9:FC:93:BC:8C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/86DXLWMw1yFWoA2fRuqwyfyTvIw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/C7E21B026AED11ED97121F2BC4F9AE02.roa Signing time: Thu 13 Mar 2025 02:28:29 +0000 ROA not before: Thu 13 Mar 2025 02:28:29 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 7545 IP address blocks: 203.24.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.crl rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/86DXLWMw1yFWoA2fRuqwyfyTvIw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 02:30:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 435 (0x1b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135395 Validity Not Before: Mar 13 02:28:29 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67d242cd-73a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:bb:bd:81:72:76:ce:0d:53:6d:2f:e1:b0:06: 88:c7:a4:40:b1:8c:27:3f:9a:54:72:42:26:df:62: f7:e5:d3:d8:e7:1e:9c:62:9c:d2:b3:81:50:73:b4: 0c:ab:93:43:27:6f:da:5e:04:b0:93:89:b4:9a:b2: 88:c3:20:fb:1a:30:cc:2c:22:ba:f9:27:29:0d:77: b1:ca:f3:a8:10:37:c3:6c:23:b8:6e:90:8d:fc:36: 58:21:d6:c3:e3:40:a4:e9:1d:e5:1f:1b:9a:f7:8f: 89:49:ac:20:bf:e3:0a:19:ba:05:af:cc:55:8c:1a: 65:65:b6:e9:d5:d2:44:01:2a:80:8c:ee:4c:de:9a: 79:bd:b0:76:b3:f8:4a:9f:1f:3d:71:49:cd:25:68: 46:8c:8d:c6:4d:10:28:ac:62:bd:fe:e7:4c:9e:0c: 70:a6:ad:52:7f:ea:cf:1a:95:dc:c6:c2:31:95:b7: 3e:46:92:92:7f:00:6f:0f:5d:b1:cf:fb:d1:bd:7c: d1:cc:ce:75:40:25:f6:2b:00:0c:db:bd:e1:62:68: bb:89:2d:c2:d7:34:e2:b7:7b:6a:69:64:d0:a0:fc: 4e:a1:a4:a8:9a:74:be:52:73:80:15:8b:2d:70:95: 13:1b:a1:f5:e4:dd:28:3c:70:b8:7c:92:d5:b4:3f: 0a:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:8F:E3:01:70:C7:0D:46:3C:EC:0B:2A:25:8A:CC:8E:C2:66:AA:F7 X509v3 Authority Key Identifier: keyid:F3:A0:D7:2D:63:30:D7:21:56:A0:0D:9F:46:EA:B0:C9:FC:93:BC:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/86DXLWMw1yFWoA2fRuqwyfyTvIw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/C7E21B026AED11ED97121F2BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.24.35.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:f0:7e:c0:96:e9:62:6b:19:7f:86:79:02:c1:c9:99:a0:23: 0c:43:7c:1f:1c:ed:e5:69:93:13:19:3d:02:5a:bc:46:81:cd: de:1a:13:5b:7a:63:c4:73:f7:5d:cd:1c:0d:2a:14:8e:4e:0e: 81:5b:af:24:89:26:74:8d:7d:be:e3:24:eb:bf:11:a9:40:5f: 43:e8:3c:78:47:2d:87:45:2f:b6:e6:68:e3:b8:91:24:32:76: 36:d0:9c:28:db:58:5b:76:65:3b:fc:6d:97:62:d1:d2:0d:f7: 64:7c:d3:8e:b0:6b:97:6f:67:7d:8d:7b:51:12:49:30:2a:51: 24:ef:89:70:2e:17:8a:a0:ac:07:ed:a0:0d:79:fa:66:49:26: d9:37:ed:3d:b2:54:f8:e4:70:f1:86:82:6e:89:75:70:00:26: a8:df:f4:b9:c7:d0:06:a7:d1:96:2a:4c:e0:b9:1b:23:9c:dc: 4c:b4:90:bc:45:06:18:1b:ab:95:9f:d3:83:01:2e:07:42:c0: 85:e6:f5:a0:9e:7c:26:02:8c:a7:7c:b1:44:d7:7b:a7:1a:4f: 3b:6f:fe:31:22:8b:84:0b:20:5d:7b:7c:c7:dc:00:f6:2c:52: 6b:9a:9a:4f:91:cd:cb:b9:b1:5b:e5:70:75:cc:e8:cc:19:f5: 63:fa:81:15 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzUzOTUxMTAvBgNVBAUTKEYzQTBENzJENjMzMEQ3MjE1NkEwMEQ5RjQ2RUFCMEM5 RkM5M0JDOEMwHhcNMjUwMzEzMDIyODI5WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2QyNDJjZC03M2E3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwLu9gXJ2zg1TbS/hsAaIx6RAsYwnP5pUckIm32L35dPY5x6cYpzSs4FQc7QM q5NDJ2/aXgSwk4m0mrKIwyD7GjDMLCK6+ScpDXexyvOoEDfDbCO4bpCN/DZYIdbD 40Ck6R3lHxua94+JSawgv+MKGboFr8xVjBplZbbp1dJEASqAjO5M3pp5vbB2s/hK nx89cUnNJWhGjI3GTRAorGK9/udMngxwpq1Sf+rPGpXcxsIxlbc+RpKSfwBvD12x z/vRvXzRzM51QCX2KwAM273hYmi7iS3C1zTit3tqaWTQoPxOoaSomnS+UnOAFYst cJUTG6H15N0oPHC4fJLVtD8KDwIDAQABo4IClTCCApEwHQYDVR0OBBYEFAqP4wFw xw1GPOwLKiWKzI7CZqr3MB8GA1UdIwQYMBaAFPOg1y1jMNchVqANn0bqsMn8k7yM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTM5NS81N0UxRDE4NDZB RTkxMUVEQkNEQUFFMjJDNEY5QUUwMi84NkRYTFdNdzF5RldvQTJmUnVxd3lmeVR2 SXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg2RFhMV013MXlGV29BMmZSdXF3eWZ5VHZJdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzUzOTUvNTdFMUQxODQ2QUU5MTFFREJDREFBRTIyQzRGOUFFMDIvQzdFMjFCMDI2 QUVEMTFFRDk3MTIxRjJCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADLGCMwDQYJKoZIhvcNAQELBQADggEBAC3wfsCW6WJrGX+G eQLByZmgIwxDfB8c7eVpkxMZPQJavEaBzd4aE1t6Y8Rz913NHA0qFI5ODoFbrySJ JnSNfb7jJOu/EalAX0PoPHhHLYdFL7bmaOO4kSQydjbQnCjbWFt2ZTv8bZdi0dIN 92R8046wa5dvZ32Ne1ESSTAqUSTviXAuF4qgrAftoA15+mZJJtk37T2yVPjkcPGG gm6JdXAAJqjf9LnH0Aan0ZYqTOC5GyOc3Ey0kLxFBhgbq5Wf04MBLgdCwIXm9aCe fCYCjKd8sUTXe6caTztv/jEii4QLIF17fMfcAPYsUmuamk+Rzcu5sVvlcHXM6MwZ 9WP6gRU= -----END CERTIFICATE-----Generated at Sat Apr 5 15:17:38 2025 by rpki-client