$ rpki-client -vvf rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/AEF56D7C2A4111EBA1B1BB3DC4F9AE02.roa File: AEF56D7C2A4111EBA1B1BB3DC4F9AE02.roa (raw, json) Hash identifier: idP0hZXpOCwYHzliLMTNRucny8Egj/j1Z19W4PS5OLo= Subject key identifier: 8C:F9:4D:22:F6:07:D2:CC:9B:CA:57:3B:40:F7:0E:53:32:AE:D5:9F Certificate issuer: /CN=A914DC5D/serialNumber=20F2531A7BA8212D2BB0900D576372D33F846928 Certificate serial: 0759 Authority key identifier: 20:F2:53:1A:7B:A8:21:2D:2B:B0:90:0D:57:63:72:D3:3F:84:69:28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/AEF56D7C2A4111EBA1B1BB3DC4F9AE02.roa Signing time: Tue 02 Jul 2024 23:11:18 +0000 ROA not before: Tue 02 Jul 2024 23:11:18 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 23644 IP address blocks: 203.151.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 21:56:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1881 (0x759) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DC5D Validity Not Before: Jul 2 23:11:18 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66848916-0b21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:5c:3c:8f:f1:4d:d2:e9:5b:84:b6:f5:6b:fa: 25:89:bf:6f:ad:e8:d6:8a:85:01:c8:f6:e0:65:29: 56:a1:07:05:8c:95:36:e1:1b:35:c0:e1:6f:48:a7: 60:d4:22:21:0f:6a:bf:8b:4c:23:7c:21:61:15:a3: 30:37:b1:db:f4:41:32:92:56:e0:63:87:62:2d:30: 2d:b2:85:b0:15:0b:be:b2:80:ae:a5:b6:a0:7e:94: 7b:b7:7e:36:25:b6:17:18:82:1a:8d:69:10:a6:4c: 54:1b:d0:d4:4f:24:01:96:37:cc:bf:08:e0:2f:a8: 62:ae:65:8a:da:a5:64:b6:70:bd:94:b9:b9:48:f2: 2c:a5:fe:43:09:8d:92:e3:8a:d9:e2:3d:15:08:25: 15:93:f9:d0:b3:73:5a:af:52:6e:36:44:46:7c:3c: 4d:4a:04:09:18:a0:93:fd:36:15:59:43:d8:93:15: 9f:0e:12:55:66:08:00:37:2e:d5:8e:75:01:0f:0b: ed:90:4f:40:af:26:e3:99:c5:e3:92:3f:92:91:71: 63:32:10:1a:37:ab:47:24:27:9d:8e:81:eb:27:ef: 5b:52:1c:db:8e:c2:fc:dd:6a:90:89:8b:bf:49:25: e2:0f:95:22:43:ab:7c:cc:7b:16:72:37:c4:37:b7: 13:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:F9:4D:22:F6:07:D2:CC:9B:CA:57:3B:40:F7:0E:53:32:AE:D5:9F X509v3 Authority Key Identifier: keyid:20:F2:53:1A:7B:A8:21:2D:2B:B0:90:0D:57:63:72:D3:3F:84:69:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/AEF56D7C2A4111EBA1B1BB3DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.151.18.0/24 Signature Algorithm: sha256WithRSAEncryption 69:9a:c9:2a:8e:0e:c5:dd:88:97:82:da:70:22:a6:ee:75:ac: 20:b5:57:7c:9b:4b:ab:8d:cb:b7:6d:ae:1d:04:13:39:92:51: 19:a3:de:09:21:2f:01:d6:8c:6a:12:03:ce:fc:7d:7a:b0:e2: 96:19:fe:7e:62:6e:62:db:3e:17:13:9e:17:bf:6e:0a:6f:4e: 1b:3e:df:58:2a:fc:76:e1:89:77:33:24:54:42:89:57:37:64: 42:ec:b5:6a:64:d3:49:f5:6b:44:6f:eb:1c:d3:c2:e5:f5:aa: 5a:5d:58:ef:b1:a6:0f:9e:04:2d:b0:84:f4:b6:db:5f:91:e1: c4:9a:83:d3:17:1d:20:7c:1e:61:5b:6d:7a:6c:20:6a:82:12: 43:cc:d5:f0:4c:2e:83:e0:a4:0c:a2:d0:91:cf:bf:af:52:d2: 58:f7:b9:9e:4e:df:95:12:89:0d:b0:d5:b0:06:b9:60:52:e6: ea:6e:e4:41:43:63:f3:09:94:1d:2c:c0:3f:85:39:fe:a7:7f: cb:27:2e:1e:9a:d3:e9:ce:b8:05:a3:ca:d8:35:3f:ee:d3:f0: 2b:6a:23:bf:aa:0c:8b:f7:30:63:9c:ce:8e:5f:6a:80:26:f6: d6:6c:84:db:15:b3:a3:18:74:63:37:60:08:1a:fd:9a:8c:a1: 2f:db:63:70 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB1kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NERDNUQxMTAvBgNVBAUTKDIwRjI1MzFBN0JBODIxMkQyQkIwOTAwRDU3NjM3MkQz M0Y4NDY5MjgwHhcNMjQwNzAyMjMxMTE4WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02Njg0ODkxNi0wYjIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxVw8j/FN0ulbhLb1a/olib9vrejWioUByPbgZSlWoQcFjJU24Rs1wOFvSKdg 1CIhD2q/i0wjfCFhFaMwN7Hb9EEyklbgY4diLTAtsoWwFQu+soCupbagfpR7t342 JbYXGIIajWkQpkxUG9DUTyQBljfMvwjgL6hirmWK2qVktnC9lLm5SPIspf5DCY2S 44rZ4j0VCCUVk/nQs3Nar1JuNkRGfDxNSgQJGKCT/TYVWUPYkxWfDhJVZggANy7V jnUBDwvtkE9ArybjmcXjkj+SkXFjMhAaN6tHJCedjoHrJ+9bUhzbjsL83WqQiYu/ SSXiD5UiQ6t8zHsWcjfEN7cTEQIDAQABo4IClTCCApEwHQYDVR0OBBYEFIz5TSL2 B9LMm8pXO0D3DlMyrtWfMB8GA1UdIwQYMBaAFCDyUxp7qCEtK7CQDVdjctM/hGko MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REM1RC8zOUU3MTQ2QzJB MzMxMUVCOTI5REMwN0NDNEY5QUUwMi9JUEpUR251b0lTMHJzSkFOVjJOeTB6LUVh U2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lQSlRHbnVvSVMwcnNKQU5WMk55MHotRWFTZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NERDNUQvMzlFNzE0NkMyQTMzMTFFQjkyOURDMDdDQzRGOUFFMDIvQUVGNTZEN0My QTQxMTFFQkExQjFCQjNEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADLlxIwDQYJKoZIhvcNAQELBQADggEBAGmaySqODsXdiJeC 2nAipu51rCC1V3ybS6uNy7dtrh0EEzmSURmj3gkhLwHWjGoSA878fXqw4pYZ/n5i bmLbPhcTnhe/bgpvThs+31gq/HbhiXczJFRCiVc3ZELstWpk00n1a0Rv6xzTwuX1 qlpdWO+xpg+eBC2whPS221+R4cSag9MXHSB8HmFbbXpsIGqCEkPM1fBMLoPgpAyi 0JHPv69S0lj3uZ5O35USiQ2w1bAGuWBS5upu5EFDY/MJlB0swD+FOf6nf8snLh6a 0+nOuAWjytg1P+7T8CtqI7+qDIv3MGOczo5faoAm9tZshNsVs6MYdGM3YAga/ZqM oS/bY3A= -----END CERTIFICATE-----Generated at Sat Apr 5 07:19:33 2025 by rpki-client