$ rpki-client -vvf rpki.apnic.net/member_repository/A9140917/A5AF8E68F56311EF9FABCB41C4F9AE02/54438BB2150A11F08FAB4D29C4F9AE02.roa File: 54438BB2150A11F08FAB4D29C4F9AE02.roa (raw, json) Hash identifier: r8SLoRG8SXGaAZWU9T2J59auaPISPmv3ENFtshrZJ94= Subject key identifier: B7:DB:FE:53:8D:BA:7B:FF:EC:88:8C:3C:48:15:9F:2F:E6:2E:D0:27 Certificate issuer: /CN=A9140917/serialNumber=F72E88006BE8885B6F34A67D6F5B84209AD996C8 Certificate serial: 1E Authority key identifier: F7:2E:88:00:6B:E8:88:5B:6F:34:A6:7D:6F:5B:84:20:9A:D9:96:C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140917/A5AF8E68F56311EF9FABCB41C4F9AE02/54438BB2150A11F08FAB4D29C4F9AE02.roa Signing time: Wed 09 Apr 2025 06:17:36 +0000 ROA not before: Wed 09 Apr 2025 06:17:36 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 153642 IP address blocks: 203.13.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140917/A5AF8E68F56311EF9FABCB41C4F9AE02/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.crl rsync://rpki.apnic.net/member_repository/A9140917/A5AF8E68F56311EF9FABCB41C4F9AE02/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 06:41:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30 (0x1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140917, serialNumber=F72E88006BE8885B6F34A67D6F5B84209AD996C8 Validity Not Before: Apr 9 06:17:36 2025 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=67f610ff-8e2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3e:cb:e1:ca:ac:aa:fe:c9:5d:89:fa:b2:db: d4:56:8c:6e:6b:08:78:c3:98:84:8b:3e:02:f7:b4: fe:9d:fc:40:ad:93:ac:6c:5f:c6:f8:9f:1e:56:5a: 1b:f3:2e:46:9e:98:96:b3:f0:f5:22:ea:18:9f:9a: 54:ee:63:14:d4:93:f5:b8:c9:09:b1:33:dc:8c:a9: ec:f0:6a:17:2f:33:b7:ff:b1:a7:4e:69:70:5e:f0: 7c:70:ee:de:a9:9e:54:d1:86:e5:30:bb:ea:c1:70: 17:6e:25:c6:c9:86:7a:de:71:e6:f3:5e:eb:7b:86: 71:5a:de:96:32:2f:69:1c:54:f0:88:f0:a6:07:9f: f1:3e:39:e4:d5:6d:a8:9c:bf:98:0f:bd:0b:f2:cf: ac:33:50:02:86:c5:b8:ab:05:7c:a5:0b:fb:4a:9f: 07:b1:2f:a8:d7:60:91:16:eb:fb:d5:fd:f5:11:01: dc:89:a1:1d:9a:5a:e6:6c:dd:a6:07:83:91:3d:5d: 5b:33:12:d7:e0:ca:be:b7:ed:7a:89:0e:c1:5c:4c: 8b:19:5f:1a:2a:0b:f1:af:f3:dc:62:50:f5:10:56: e7:35:07:91:8b:7c:2e:1f:d9:a0:d4:6b:b3:32:38: 30:04:6d:1f:77:58:93:3f:dd:75:0b:e3:a6:02:d2: 5e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:DB:FE:53:8D:BA:7B:FF:EC:88:8C:3C:48:15:9F:2F:E6:2E:D0:27 X509v3 Authority Key Identifier: keyid:F7:2E:88:00:6B:E8:88:5B:6F:34:A6:7D:6F:5B:84:20:9A:D9:96:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140917/A5AF8E68F56311EF9FABCB41C4F9AE02/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140917/A5AF8E68F56311EF9FABCB41C4F9AE02/54438BB2150A11F08FAB4D29C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.13.67.0/24 Signature Algorithm: sha256WithRSAEncryption 98:18:31:46:22:c9:04:e3:2b:38:19:d9:2d:6c:c9:06:08:b0: 99:70:31:48:62:be:1b:c9:cc:af:72:89:ad:d0:45:f2:2b:85: e2:01:26:e2:07:3c:5c:ba:7b:46:59:62:6c:f1:46:2d:3f:10: dd:7c:50:6c:6e:9c:05:14:58:f1:05:d1:48:78:42:fa:d0:e2: 4c:85:fc:0d:85:b0:10:77:4a:60:e0:7d:94:54:e6:4c:38:a5: a9:db:43:75:96:23:3e:e3:a2:cd:7a:72:bd:e2:13:da:6b:27: 7a:66:e6:a3:64:42:8e:e0:21:99:be:ac:98:89:61:3e:df:ae: a9:78:96:02:5a:82:1c:0f:74:06:ad:01:29:f8:58:4f:8a:fd: cb:db:da:37:dc:1b:53:b1:b2:00:36:78:a6:88:fb:b7:d5:1a: 06:7a:6f:c5:32:a8:f3:10:8b:8a:33:af:59:55:b3:31:7d:b7: 99:71:3a:ee:db:e7:3a:a2:74:d3:ea:3f:63:d6:86:4e:6a:2f: 49:f0:ef:49:1d:09:53:c0:41:bf:03:19:90:3d:52:16:b6:6a: 5f:b8:72:39:6e:b0:8c:fe:a5:b6:f0:3f:c4:d7:07:fe:aa:f5: 1a:86:0e:c9:cd:36:ac:ba:09:fa:46:dc:b8:29:e9:af:8d:0d: 16:44:57:5f -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBHjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MDkxNzExMC8GA1UEBRMoRjcyRTg4MDA2QkU4ODg1QjZGMzRBNjdENkY1Qjg0MjA5 QUQ5OTZDODAeFw0yNTA0MDkwNjE3MzZaFw0yNTA3MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3ZjYxMGZmLThlMmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHPsvhyqyq/sldifqy29RWjG5rCHjDmISLPgL3tP6d/ECtk6xsX8b4nx5WWhvz LkaemJaz8PUi6hifmlTuYxTUk/W4yQmxM9yMqezwahcvM7f/sadOaXBe8Hxw7t6p nlTRhuUwu+rBcBduJcbJhnrecebzXut7hnFa3pYyL2kcVPCI8KYHn/E+OeTVbaic v5gPvQvyz6wzUAKGxbirBXylC/tKnwexL6jXYJEW6/vV/fURAdyJoR2aWuZs3aYH g5E9XVszEtfgyr637XqJDsFcTIsZXxoqC/Gv89xiUPUQVuc1B5GLfC4f2aDUa7My ODAEbR93WJM/3XUL46YC0l4tAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUt9v+U426 e//siIw8SBWfL+Yu0CcwHwYDVR0jBBgwFoAU9y6IAGvoiFtvNKZ9b1uEIJrZlsgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQwOTE3L0E1QUY4RTY4RjU2 MzExRUY5RkFCQ0I0MUM0RjlBRTAyLzl5NklBR3ZvaUZ0dk5LWjliMXVFSUpyWmxz Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOXk2SUFHdm9pRnR2TktaOWIxdUVJSnJabHNnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDkxNy9BNUFGOEU2OEY1NjMxMUVGOUZBQkNCNDFDNEY5QUUwMi81NDQzOEJCMjE1 MEExMUYwOEZBQjREMjlDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAMsNQzANBgkqhkiG9w0BAQsFAAOCAQEAmBgxRiLJBOMrOBnZ LWzJBgiwmXAxSGK+G8nMr3KJrdBF8iuF4gEm4gc8XLp7RllibPFGLT8Q3XxQbG6c BRRY8QXRSHhC+tDiTIX8DYWwEHdKYOB9lFTmTDilqdtDdZYjPuOizXpyveIT2msn embmo2RCjuAhmb6smIlhPt+uqXiWAlqCHA90Bq0BKfhYT4r9y9vaN9wbU7GyADZ4 poj7t9UaBnpvxTKo8xCLijOvWVWzMX23mXE67tvnOqJ00+o/Y9aGTmovSfDvSR0J U8BBvwMZkD1SFrZqX7hyOW6wjP6ltvA/xNcH/qr1GoYOyc02rLoJ+kbcuCnpr40N FkRXXw== -----END CERTIFICATE-----Generated at Tue Apr 15 19:12:07 2025 by rpki-client