$ rpki-client -vvf rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/8D88B9125B2311EE86CC6A71C4F9AE02.roa File: 8D88B9125B2311EE86CC6A71C4F9AE02.roa (raw, json) Hash identifier: 8QOgqDdN+ptFq5t2Do1YrPeFHrdcCMOhvnCtIt6h2xM= Subject key identifier: 41:41:AB:B0:A5:A3:0B:8C:BA:17:06:ED:1E:50:42:EA:21:3C:24:6B Certificate issuer: /CN=A914F937/serialNumber=88A2CB4624801BC9C7ADA223839FC3C536C7FB26 Certificate serial: 0117 Authority key identifier: 88:A2:CB:46:24:80:1B:C9:C7:AD:A2:23:83:9F:C3:C5:36:C7:FB:26 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iKLLRiSAG8nHraIjg5_DxTbH-yY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/8D88B9125B2311EE86CC6A71C4F9AE02.roa Signing time: Fri 07 Mar 2025 03:49:44 +0000 ROA not before: Fri 07 Mar 2025 03:49:44 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 4768 IP address blocks: 192.146.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.crl rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iKLLRiSAG8nHraIjg5_DxTbH-yY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 03:37:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 279 (0x117) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F937 Validity Not Before: Mar 7 03:49:44 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67ca6cd8-9755 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:36:9b:14:5c:78:35:7e:b9:9f:6b:e0:23:22: 9a:39:8b:9d:82:b5:22:32:91:c9:7e:e0:52:08:19: b4:fa:29:6d:73:8c:6c:28:fb:94:c6:7f:30:3f:af: a4:cd:69:61:89:c0:56:29:0b:b5:99:a5:86:89:e1: 74:d1:2f:f3:66:a6:e6:e5:2d:c8:94:1f:2f:bf:26: ab:cf:61:27:fb:b6:c1:52:83:55:4d:65:dc:0a:4b: 10:fa:bf:00:6d:30:4e:60:56:1e:31:12:58:5e:86: 1f:51:77:02:70:14:2d:2b:64:20:8d:4d:ac:f5:4b: f3:94:e7:ff:1b:91:97:3a:68:07:7c:87:be:58:f3: 13:43:73:5d:ed:5f:1c:62:90:b0:48:0f:10:36:59: ee:6d:af:3b:f6:6f:d7:dc:3d:d0:52:f5:5e:0e:57: c3:3b:92:b4:8a:01:5f:e0:a0:ee:e4:1c:35:e7:d8: 48:d7:2a:14:58:11:cb:50:3d:33:4b:26:d5:18:9d: 39:25:b0:81:29:aa:03:bb:96:24:e8:2a:eb:04:03: 51:df:15:b8:4f:94:f3:1e:59:8a:47:35:12:15:c8: 8d:78:43:f0:71:6b:2b:85:64:bf:e4:97:89:9a:23: d0:a3:d5:d5:1d:c4:c2:f8:39:9f:3a:63:0e:6b:bc: a8:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:41:AB:B0:A5:A3:0B:8C:BA:17:06:ED:1E:50:42:EA:21:3C:24:6B X509v3 Authority Key Identifier: keyid:88:A2:CB:46:24:80:1B:C9:C7:AD:A2:23:83:9F:C3:C5:36:C7:FB:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iKLLRiSAG8nHraIjg5_DxTbH-yY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/8D88B9125B2311EE86CC6A71C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 192.146.219.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:e5:4d:46:c9:51:13:47:a1:02:ef:62:cf:c8:6a:dd:9c:00: d2:23:25:78:e3:30:89:f3:92:d1:15:e2:9e:9f:25:0d:1e:0f: 9b:e1:97:f5:55:0c:a9:7d:5b:2b:f4:15:cf:5c:f8:17:01:2b: b0:f7:28:2d:eb:04:52:90:0c:5f:df:2c:73:22:6e:03:ff:6e: 24:dd:87:1a:e5:54:31:22:6e:c3:8b:23:69:1c:43:ad:c0:77: fe:58:b0:79:7b:6d:21:c2:51:58:00:69:23:9e:3d:58:03:e6: 2b:98:9e:93:37:91:b7:a9:a4:85:32:9e:b1:e8:8c:a1:cf:f3: 79:c3:d8:ab:cc:62:5b:09:7f:4a:ae:ac:bf:28:86:df:25:9d: 92:ca:08:a2:58:ad:2c:06:e5:7d:35:f6:20:63:7a:6f:52:06: ba:ec:bd:4c:2a:b9:43:d2:f1:aa:35:74:d0:29:eb:02:37:b3: 87:27:d8:0e:9b:48:42:a3:a7:22:dd:26:7f:ac:fe:fb:ab:ca: d6:b3:31:c0:e5:0c:7f:79:b6:1e:81:a6:63:bc:76:e2:30:27: db:64:f3:c4:3b:a0:6b:ac:14:5f:7c:2e:c1:97:f4:59:74:30: a0:8e:7b:2b:d1:e5:fb:6d:e3:77:54:bf:29:3b:d7:27:b6:c1: 22:8a:ff:0b -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICARcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEY5MzcxMTAvBgNVBAUTKDg4QTJDQjQ2MjQ4MDFCQzlDN0FEQTIyMzgzOUZDM0M1 MzZDN0ZCMjYwHhcNMjUwMzA3MDM0OTQ0WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2NhNmNkOC05NzU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqTabFFx4NX65n2vgIyKaOYudgrUiMpHJfuBSCBm0+iltc4xsKPuUxn8wP6+k zWlhicBWKQu1maWGieF00S/zZqbm5S3IlB8vvyarz2En+7bBUoNVTWXcCksQ+r8A bTBOYFYeMRJYXoYfUXcCcBQtK2QgjU2s9UvzlOf/G5GXOmgHfIe+WPMTQ3Nd7V8c YpCwSA8QNlnuba879m/X3D3QUvVeDlfDO5K0igFf4KDu5Bw159hI1yoUWBHLUD0z SybVGJ05JbCBKaoDu5Yk6CrrBANR3xW4T5TzHlmKRzUSFciNeEPwcWsrhWS/5JeJ miPQo9XVHcTC+DmfOmMOa7yoNQIDAQABo4IClTCCApEwHQYDVR0OBBYEFEFBq7Cl owuMuhcG7R5QQuohPCRrMB8GA1UdIwQYMBaAFIiiy0YkgBvJx62iI4Ofw8U2x/sm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjkzNy8yNkI0OTgxRTVC MjMxMUVFQjg3NzNGNzBDNEY5QUUwMi9pS0xMUmlTQUc4bkhyYUlqZzVfRHhUYkgt eVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lLTExSaVNBRzhuSHJhSWpnNV9EeFRiSC15WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEY5MzcvMjZCNDk4MUU1QjIzMTFFRUI4NzczRjcwQzRGOUFFMDIvOEQ4OEI5MTI1 QjIzMTFFRTg2Q0M2QTcxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADAktswDQYJKoZIhvcNAQELBQADggEBAG7lTUbJURNHoQLv Ys/Iat2cANIjJXjjMInzktEV4p6fJQ0eD5vhl/VVDKl9Wyv0Fc9c+BcBK7D3KC3r BFKQDF/fLHMibgP/biTdhxrlVDEibsOLI2kcQ63Ad/5YsHl7bSHCUVgAaSOePVgD 5iuYnpM3kbeppIUynrHojKHP83nD2KvMYlsJf0qurL8oht8lnZLKCKJYrSwG5X01 9iBjem9SBrrsvUwquUPS8ao1dNAp6wI3s4cn2A6bSEKjpyLdJn+s/vurytazMcDl DH95th6BpmO8duIwJ9tk88Q7oGusFF98LsGX9Fl0MKCOeyvR5ftt43dUvyk71ye2 wSKK/ws= -----END CERTIFICATE-----Generated at Fri Apr 11 21:32:35 2025 by rpki-client