$ rpki-client -vvf rpki.apnic.net/member_repository/A914A0CB/E5C3AE9C5A1911E681B8C10FC4F9AE02/7CB48FB0EA9411EAB77B1C69C4F9AE02.roa File: 7CB48FB0EA9411EAB77B1C69C4F9AE02.roa (raw, json) Hash identifier: Sa6ldNBoTeND2ToHXPhf3nbtng663wb8wohGeUYEVNI= Subject key identifier: BC:65:7E:46:54:23:5C:9C:F9:86:20:F3:CC:38:93:66:BF:CE:83:20 Certificate issuer: /CN=A914A0CB/serialNumber=18056DEB580E3574F1483E669C5AA42E584ECEBB Certificate serial: 1ECF Authority key identifier: 18:05:6D:EB:58:0E:35:74:F1:48:3E:66:9C:5A:A4:2E:58:4E:CE:BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAVt61gONXTxSD5mnFqkLlhOzrs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A0CB/E5C3AE9C5A1911E681B8C10FC4F9AE02/7CB48FB0EA9411EAB77B1C69C4F9AE02.roa Signing time: Thu 16 Jan 2025 16:23:26 +0000 ROA not before: Thu 16 Jan 2025 16:23:25 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 17423 IP address blocks: 202.131.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A0CB/E5C3AE9C5A1911E681B8C10FC4F9AE02/GAVt61gONXTxSD5mnFqkLlhOzrs.crl rsync://rpki.apnic.net/member_repository/A914A0CB/E5C3AE9C5A1911E681B8C10FC4F9AE02/GAVt61gONXTxSD5mnFqkLlhOzrs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAVt61gONXTxSD5mnFqkLlhOzrs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 16:05:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7887 (0x1ecf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A0CB Validity Not Before: Jan 16 16:23:25 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=6789327d-41cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:27:56:0a:11:b1:97:04:33:77:bf:ce:8f:86: 51:b3:e8:10:c2:40:f1:ef:5f:8e:4b:9a:f4:18:c4: 7b:d3:48:48:71:83:d4:22:47:c5:c6:86:5c:0a:46: 6e:58:6f:61:a4:ec:e0:00:d6:0c:bd:5f:19:e2:26: 69:9e:23:4c:ed:00:71:e6:3f:4a:92:6a:74:a0:70: c5:0c:f9:de:a4:5d:76:6e:31:49:14:c2:92:da:bd: eb:29:9b:9b:e6:10:bd:0a:b2:a8:62:d4:96:ac:27: 26:d7:2c:90:00:b2:d4:a9:20:89:e0:40:21:b5:cc: e3:a5:2c:70:f8:9d:74:1c:70:f9:2e:df:5f:f2:31: fc:3f:a6:a8:d8:dd:20:e4:98:a9:0b:d6:eb:5a:1f: 40:65:0e:9f:40:75:32:1a:33:10:af:6c:2a:37:a7: 5f:e9:5e:33:b9:f1:cf:a0:cd:08:62:09:ee:67:fd: c9:55:2c:29:d4:1b:59:e3:32:30:ac:f0:1c:c5:61: 94:a0:23:f9:95:ba:d4:e8:24:75:ac:98:55:2c:af: 99:bd:3c:bb:38:44:e4:cc:36:44:76:8b:81:b1:97: 31:48:82:59:e8:ba:b2:6d:18:af:d1:fe:74:0b:59: 4d:70:26:e6:5e:12:31:38:58:33:a0:fd:fc:d1:ee: ec:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:65:7E:46:54:23:5C:9C:F9:86:20:F3:CC:38:93:66:BF:CE:83:20 X509v3 Authority Key Identifier: keyid:18:05:6D:EB:58:0E:35:74:F1:48:3E:66:9C:5A:A4:2E:58:4E:CE:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A0CB/E5C3AE9C5A1911E681B8C10FC4F9AE02/GAVt61gONXTxSD5mnFqkLlhOzrs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAVt61gONXTxSD5mnFqkLlhOzrs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A0CB/E5C3AE9C5A1911E681B8C10FC4F9AE02/7CB48FB0EA9411EAB77B1C69C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.131.127.0/24 Signature Algorithm: sha256WithRSAEncryption 19:58:20:1a:b2:70:e6:7b:90:71:09:c1:f5:17:65:85:87:a5: f6:b9:31:b3:5a:6d:da:cb:20:f3:a3:b7:35:50:52:8d:fd:88: 5f:5b:6e:6c:6a:43:89:27:fd:03:b2:9d:2e:90:6f:05:6f:e4: 0e:c9:2d:c3:52:85:a3:73:83:a3:5a:a8:66:b3:18:29:27:26: 24:fb:01:da:d9:db:f0:a0:cf:f1:b3:f5:31:d4:48:f4:6c:56: f1:a2:3d:f8:2b:83:d8:55:77:dc:b2:90:af:3b:b0:1e:fe:b3: e8:82:a7:43:c8:b9:9f:0e:3b:c9:35:50:df:0d:f5:20:f8:36: 72:b4:68:c5:67:19:4b:0a:97:45:a0:5f:65:fb:b9:92:d6:a3: 4c:8b:6a:65:aa:e4:e8:48:5e:8f:c9:ad:41:e6:3f:34:e3:d1: d1:8d:6d:a4:d0:da:7d:13:f7:74:92:aa:1c:ce:0f:32:e9:4d: 5d:97:f0:67:4d:93:81:5d:b9:12:23:cd:b1:06:cc:8b:2f:3b: 49:00:46:28:17:8d:e1:a2:90:ab:4a:9c:0d:46:81:7d:e4:40: 4f:17:36:c5:af:29:1f:8e:da:44:bf:42:b7:e8:c5:1d:22:71: f8:7d:6d:20:8e:d2:5c:b9:fe:a8:96:03:51:ea:97:47:d9:42: fd:d9:92:50 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICHs8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEEwQ0IxMTAvBgNVBAUTKDE4MDU2REVCNTgwRTM1NzRGMTQ4M0U2NjlDNUFBNDJF NTg0RUNFQkIwHhcNMjUwMTE2MTYyMzI1WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02Nzg5MzI3ZC00MWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxSdWChGxlwQzd7/Oj4ZRs+gQwkDx71+OS5r0GMR700hIcYPUIkfFxoZcCkZu WG9hpOzgANYMvV8Z4iZpniNM7QBx5j9Kkmp0oHDFDPnepF12bjFJFMKS2r3rKZub 5hC9CrKoYtSWrCcm1yyQALLUqSCJ4EAhtczjpSxw+J10HHD5Lt9f8jH8P6ao2N0g 5JipC9brWh9AZQ6fQHUyGjMQr2wqN6df6V4zufHPoM0IYgnuZ/3JVSwp1BtZ4zIw rPAcxWGUoCP5lbrU6CR1rJhVLK+ZvTy7OETkzDZEdouBsZcxSIJZ6LqybRiv0f50 C1lNcCbmXhIxOFgzoP380e7sPQIDAQABo4IClTCCApEwHQYDVR0OBBYEFLxlfkZU I1yc+YYg88w4k2a/zoMgMB8GA1UdIwQYMBaAFBgFbetYDjV08Ug+ZpxapC5YTs67 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTBDQi9FNUMzQUU5QzVB MTkxMUU2ODFCOEMxMEZDNEY5QUUwMi9HQVZ0NjFnT05YVHhTRDVtbkZxa0xsaE96 cnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dBVnQ2MWdPTlhUeFNENW1uRnFrTGxoT3pycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEEwQ0IvRTVDM0FFOUM1QTE5MTFFNjgxQjhDMTBGQzRGOUFFMDIvN0NCNDhGQjBF QTk0MTFFQUI3N0IxQzY5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADKg38wDQYJKoZIhvcNAQELBQADggEBABlYIBqycOZ7kHEJ wfUXZYWHpfa5MbNabdrLIPOjtzVQUo39iF9bbmxqQ4kn/QOynS6QbwVv5A7JLcNS haNzg6NaqGazGCknJiT7AdrZ2/Cgz/Gz9THUSPRsVvGiPfgrg9hVd9yykK87sB7+ s+iCp0PIuZ8OO8k1UN8N9SD4NnK0aMVnGUsKl0WgX2X7uZLWo0yLamWq5OhIXo/J rUHmPzTj0dGNbaTQ2n0T93SSqhzODzLpTV2X8GdNk4FduRIjzbEGzIsvO0kARigX jeGikKtKnA1GgX3kQE8XNsWvKR+O2kS/QrfoxR0icfh9bSCO0ly5/qiWA1Hql0fZ Qv3ZklA= -----END CERTIFICATE-----Generated at Sun Apr 6 12:21:59 2025 by rpki-client