$ rpki-client -vvf rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/502A4A36AAA611EE998EEF3AC4F9AE02.roa File: 502A4A36AAA611EE998EEF3AC4F9AE02.roa (raw, json) Hash identifier: QGLpro3Wg9RRxiV3dBB3mLGl9CU0O3EMGlKK9vOKA6w= Subject key identifier: C6:27:07:71:97:6D:20:91:46:F0:4F:1F:12:45:80:D5:DA:AF:ED:2F Certificate issuer: /CN=A914781A/serialNumber=4D723955243AE88D552439AF8E4E0A09C8F6590D Certificate serial: 34BB Authority key identifier: 4D:72:39:55:24:3A:E8:8D:55:24:39:AF:8E:4E:0A:09:C8:F6:59:0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/502A4A36AAA611EE998EEF3AC4F9AE02.roa Signing time: Tue 04 Mar 2025 15:30:58 +0000 ROA not before: Tue 04 Mar 2025 15:30:58 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 24378 IP address blocks: 203.156.106.0/24 maxlen: 24 203.156.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 14:59:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13499 (0x34bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914781A Validity Not Before: Mar 4 15:30:58 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67c71cb2-e99c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:cb:dc:23:33:f7:8b:83:5d:db:7c:31:b0:61: e9:d6:70:5e:24:4f:fb:4f:ff:68:18:99:50:0b:37: 5a:6e:a5:a3:f8:07:ec:0f:36:01:56:66:00:a9:49: 67:6b:bf:be:62:64:40:7c:76:1e:80:20:16:ed:86: 74:9b:bf:cd:03:7d:44:58:15:82:c3:3b:e1:5c:43: c3:b1:01:c4:2b:7d:10:90:91:01:24:de:c2:0d:de: 50:c6:b8:5d:f6:ce:48:0e:60:5b:86:4d:7d:a4:5f: cb:b9:59:f8:71:e8:a4:91:5b:24:0b:fa:5c:a1:7e: 71:30:b7:b2:de:37:0e:23:dc:71:05:14:1d:ca:84: 22:39:35:29:ce:19:e5:a7:ff:91:27:f3:73:23:6c: 43:59:9c:ed:b7:99:51:0f:5f:b8:af:b9:eb:0e:87: 3d:5a:bc:3f:39:f1:a2:1d:01:44:5d:03:21:80:a9: b0:f6:73:b1:8d:bf:27:5f:9a:77:c1:79:b8:71:b5: 6d:fe:99:1b:48:b6:61:78:e9:90:38:8f:4b:35:87: e9:f6:78:26:37:1e:7f:cf:96:66:de:75:5e:a8:06: 9a:d9:6f:88:09:3f:8d:c5:18:59:3c:09:7f:82:96: c3:26:21:1d:24:20:e2:bf:75:da:a3:f6:01:3a:94: a5:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:27:07:71:97:6D:20:91:46:F0:4F:1F:12:45:80:D5:DA:AF:ED:2F X509v3 Authority Key Identifier: keyid:4D:72:39:55:24:3A:E8:8D:55:24:39:AF:8E:4E:0A:09:C8:F6:59:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/502A4A36AAA611EE998EEF3AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.156.106.0/23 Signature Algorithm: sha256WithRSAEncryption d0:e3:2d:6d:52:83:14:db:97:68:b9:a4:c0:4f:fd:c4:77:34: b4:eb:87:14:40:4a:a2:17:1b:31:af:c0:20:7b:6f:c1:4e:2e: 3e:5b:1d:94:6a:fb:f3:09:ec:c5:ad:3e:66:07:34:fa:a4:9a: 72:74:92:4b:b7:2c:47:39:17:84:af:39:48:ec:e7:a3:0f:bc: e7:61:5b:f2:f8:b0:ef:fd:b3:49:96:79:e5:49:b0:c6:a3:fb: bf:bd:74:25:9e:2f:ca:b6:80:87:bd:95:86:a1:38:42:62:6e: a9:33:94:05:de:70:e2:3b:c1:88:a2:6d:41:40:b8:f4:f6:de: 1e:2a:1a:f8:2a:55:59:9d:42:25:1c:f7:ef:b2:8c:51:ce:05: 13:23:11:26:16:49:34:ab:8d:84:82:e2:20:c6:4b:fb:44:60: eb:f5:22:bb:a8:68:c7:0e:b3:e5:cb:c1:e5:0e:cb:88:19:79: fe:3d:a1:dd:81:f3:71:ed:de:4d:c0:5b:82:47:e7:34:ff:4a: 48:58:d7:0e:58:67:c9:39:63:ac:e9:e4:f8:fc:b5:41:56:42: 02:54:56:76:c4:bb:1f:96:13:55:7e:39:2c:57:4c:38:6e:d2: 6d:d5:99:c3:64:88:bc:2b:4a:10:61:e8:6e:09:23:c7:18:93: 7f:92:72:e7 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNLswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc4MUExMTAvBgNVBAUTKDRENzIzOTU1MjQzQUU4OEQ1NTI0MzlBRjhFNEUwQTA5 QzhGNjU5MEQwHhcNMjUwMzA0MTUzMDU4WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2M3MWNiMi1lOTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx8vcIzP3i4Nd23wxsGHp1nBeJE/7T/9oGJlQCzdabqWj+AfsDzYBVmYAqUln a7++YmRAfHYegCAW7YZ0m7/NA31EWBWCwzvhXEPDsQHEK30QkJEBJN7CDd5Qxrhd 9s5IDmBbhk19pF/LuVn4ceikkVskC/pcoX5xMLey3jcOI9xxBRQdyoQiOTUpzhnl p/+RJ/NzI2xDWZztt5lRD1+4r7nrDoc9Wrw/OfGiHQFEXQMhgKmw9nOxjb8nX5p3 wXm4cbVt/pkbSLZheOmQOI9LNYfp9ngmNx5/z5Zm3nVeqAaa2W+ICT+NxRhZPAl/ gpbDJiEdJCDiv3Xao/YBOpSl1QIDAQABo4IClTCCApEwHQYDVR0OBBYEFMYnB3GX bSCRRvBPHxJFgNXar+0vMB8GA1UdIwQYMBaAFE1yOVUkOuiNVSQ5r45OCgnI9lkN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzgxQS9ENTIxNDI3MDFE OUIxMUUyQjgyMUZEODkwOEIwMkNEMi9UWEk1VlNRNjZJMVZKRG12ams0S0NjajJX UTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RYSTVWU1E2NkkxVkpEbXZqazRLQ2NqMldRMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDc4MUEvRDUyMTQyNzAxRDlCMTFFMkI4MjFGRDg5MDhCMDJDRDIvNTAyQTRBMzZB QUE2MTFFRTk5OEVFRjNBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAHLnGowDQYJKoZIhvcNAQELBQADggEBANDjLW1SgxTbl2i5 pMBP/cR3NLTrhxRASqIXGzGvwCB7b8FOLj5bHZRq+/MJ7MWtPmYHNPqkmnJ0kku3 LEc5F4SvOUjs56MPvOdhW/L4sO/9s0mWeeVJsMaj+7+9dCWeL8q2gIe9lYahOEJi bqkzlAXecOI7wYiibUFAuPT23h4qGvgqVVmdQiUc9++yjFHOBRMjESYWSTSrjYSC 4iDGS/tEYOv1IruoaMcOs+XLweUOy4gZef49od2B83Ht3k3AW4JH5zT/SkhY1w5Y Z8k5Y6zp5Pj8tUFWQgJUVnbEux+WE1V+OSxXTDhu0m3VmcNkiLwrShBh6G4JI8cY k3+Scuc= -----END CERTIFICATE-----Generated at Sat Apr 5 01:57:58 2025 by rpki-client