$ rpki-client -vvf rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/5F0436A08AAF11EE93D5E566C4F9AE02.roa File: 5F0436A08AAF11EE93D5E566C4F9AE02.roa (raw, json) Hash identifier: 7EvN151Z0cCWehOeO5V1tb71Wpww4FkgmZYoCsNNWOI= Subject key identifier: 39:BB:F3:AE:75:08:BF:02:53:CA:9A:72:21:FA:29:C1:A1:D3:70:8D Certificate issuer: /CN=A914DC5D/serialNumber=20F2531A7BA8212D2BB0900D576372D33F846928 Certificate serial: 0757 Authority key identifier: 20:F2:53:1A:7B:A8:21:2D:2B:B0:90:0D:57:63:72:D3:3F:84:69:28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/5F0436A08AAF11EE93D5E566C4F9AE02.roa Signing time: Tue 02 Jul 2024 23:11:16 +0000 ROA not before: Tue 02 Jul 2024 23:11:16 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 151959 IP address blocks: 203.151.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 21:56:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1879 (0x757) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DC5D Validity Not Before: Jul 2 23:11:16 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66848914-ad6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1c:a3:61:aa:94:55:29:4c:20:d9:31:58:31: 1e:13:20:e7:85:f1:fb:99:47:02:f3:22:07:73:b9: d5:45:a7:75:b5:80:bd:63:0a:a9:74:56:e4:3d:ec: 8d:a8:b3:00:68:0c:f9:20:d6:1e:7b:3e:d1:db:61: 81:59:63:da:8a:5e:2f:ca:ed:dd:14:5d:49:2a:56: c6:bd:4a:f5:29:45:aa:7c:f5:97:59:17:7e:6e:94: f7:86:a5:9c:be:8c:d1:18:36:5e:44:84:05:41:26: 31:97:bb:2c:38:93:4c:97:8c:cc:18:e2:99:1b:b4: 95:7a:b3:5d:17:44:2b:31:0d:f6:12:06:93:20:47: 7b:a4:bd:d3:f9:39:08:9d:a7:13:25:71:4c:2d:5f: cc:1b:d0:a2:ba:b7:c2:c9:11:7f:f7:3a:ea:18:50: b4:95:7d:b9:81:10:2a:2c:d5:ee:a0:d6:23:21:1a: 04:db:f5:b1:16:45:c1:32:1c:71:bf:cd:42:b1:0a: 3f:f6:84:ea:77:3d:48:b6:4e:35:ed:7d:dd:03:e4: 12:cf:3f:7e:c1:fb:f3:c9:df:fb:77:b8:a0:9f:92: 6e:24:c7:ca:28:d5:6d:11:da:88:ae:b9:4c:36:1f: ca:77:e5:d5:32:40:f0:8d:9c:5d:11:18:80:e9:fe: 2a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:BB:F3:AE:75:08:BF:02:53:CA:9A:72:21:FA:29:C1:A1:D3:70:8D X509v3 Authority Key Identifier: keyid:20:F2:53:1A:7B:A8:21:2D:2B:B0:90:0D:57:63:72:D3:3F:84:69:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/5F0436A08AAF11EE93D5E566C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.151.185.0/24 Signature Algorithm: sha256WithRSAEncryption b6:af:a4:43:f6:72:87:71:82:e7:a4:f5:eb:9c:c8:c4:6b:30: f6:a7:8a:bd:d9:87:d7:8f:c1:34:74:94:22:df:fa:80:36:8f: 3b:f9:0c:a7:1f:c0:5c:77:64:f0:39:eb:00:da:c2:8a:69:7f: d2:06:33:c5:cc:f3:fd:ec:0e:64:19:46:48:c0:12:ac:9f:e9: 3d:a3:d7:8f:12:e2:af:87:7f:9f:d7:c3:a0:87:a1:ba:a7:82: fa:92:96:ad:ee:2e:6b:96:3b:f4:56:01:1b:f4:b4:43:64:37: 08:1c:8d:7b:56:e0:62:09:02:17:cc:1c:36:3c:07:8b:e8:61: 1c:58:e1:a8:45:5f:76:cb:b0:62:83:76:ca:92:ad:aa:48:a5: 36:2c:7e:03:65:76:01:ed:22:92:a7:a6:68:79:59:13:cf:16: 9a:6e:79:26:49:fc:97:6d:fe:98:49:78:f9:75:a1:12:5e:11: 5d:fc:93:80:a1:f9:f0:c1:1d:1c:d2:f6:08:65:15:31:56:1a: 34:cc:ad:31:8d:2a:8c:46:b4:0e:73:8f:92:b6:ba:fd:76:87: 1a:dd:b0:29:63:44:f7:fb:87:2d:fb:38:ad:30:11:eb:e5:c3: f5:6f:90:09:c4:46:42:82:b0:0b:2c:c8:1c:80:da:eb:de:58: 13:0b:d0:1a -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB1cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NERDNUQxMTAvBgNVBAUTKDIwRjI1MzFBN0JBODIxMkQyQkIwOTAwRDU3NjM3MkQz M0Y4NDY5MjgwHhcNMjQwNzAyMjMxMTE2WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02Njg0ODkxNC1hZDZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyRyjYaqUVSlMINkxWDEeEyDnhfH7mUcC8yIHc7nVRad1tYC9YwqpdFbkPeyN qLMAaAz5INYeez7R22GBWWPail4vyu3dFF1JKlbGvUr1KUWqfPWXWRd+bpT3hqWc vozRGDZeRIQFQSYxl7ssOJNMl4zMGOKZG7SVerNdF0QrMQ32EgaTIEd7pL3T+TkI nacTJXFMLV/MG9CiurfCyRF/9zrqGFC0lX25gRAqLNXuoNYjIRoE2/WxFkXBMhxx v81CsQo/9oTqdz1Itk417X3dA+QSzz9+wfvzyd/7d7ign5JuJMfKKNVtEdqIrrlM Nh/Kd+XVMkDwjZxdERiA6f4qxwIDAQABo4IClTCCApEwHQYDVR0OBBYEFDm78651 CL8CU8qaciH6KcGh03CNMB8GA1UdIwQYMBaAFCDyUxp7qCEtK7CQDVdjctM/hGko MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REM1RC8zOUU3MTQ2QzJB MzMxMUVCOTI5REMwN0NDNEY5QUUwMi9JUEpUR251b0lTMHJzSkFOVjJOeTB6LUVh U2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lQSlRHbnVvSVMwcnNKQU5WMk55MHotRWFTZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NERDNUQvMzlFNzE0NkMyQTMzMTFFQjkyOURDMDdDQzRGOUFFMDIvNUYwNDM2QTA4 QUFGMTFFRTkzRDVFNTY2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADLl7kwDQYJKoZIhvcNAQELBQADggEBALavpEP2codxguek 9eucyMRrMPanir3Zh9ePwTR0lCLf+oA2jzv5DKcfwFx3ZPA56wDawoppf9IGM8XM 8/3sDmQZRkjAEqyf6T2j148S4q+Hf5/Xw6CHobqngvqSlq3uLmuWO/RWARv0tENk NwgcjXtW4GIJAhfMHDY8B4voYRxY4ahFX3bLsGKDdsqSrapIpTYsfgNldgHtIpKn pmh5WRPPFppueSZJ/Jdt/phJePl1oRJeEV38k4Ch+fDBHRzS9ghlFTFWGjTMrTGN KoxGtA5zj5K2uv12hxrdsCljRPf7hy37OK0wEevlw/VvkAnERkKCsAssyByA2uve WBML0Bo= -----END CERTIFICATE-----Generated at Sat Apr 5 03:54:03 2025 by rpki-client