$ rpki-client -vvf rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/6159E3148BEB11ED9A3CD825C4F9AE02.roa File: 6159E3148BEB11ED9A3CD825C4F9AE02.roa (raw, json) Hash identifier: qzbXivpb0JIa597930ox0hSBuWQ7KjKDNIli1RBqDkg= Subject key identifier: DF:3E:67:BB:02:22:55:C5:08:DF:01:19:45:D1:D9:9A:53:3F:D8:AB Certificate issuer: /CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F Certificate serial: 3498 Authority key identifier: BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/6159E3148BEB11ED9A3CD825C4F9AE02.roa Signing time: Thu 20 Mar 2025 15:21:18 +0000 ROA not before: Thu 20 Mar 2025 15:21:18 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 59089 IP address blocks: 118.26.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 15:24:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13464 (0x3498) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915370F Validity Not Before: Mar 20 15:21:18 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67dc326d-0a3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ac:fa:c2:17:99:80:37:b9:f3:67:da:b0:78: 07:28:a9:58:ed:62:54:ee:39:96:26:92:64:2d:d3: f1:ee:14:e0:e3:d1:9b:54:b9:14:d2:af:41:af:02: 24:2a:f0:52:d9:16:ae:40:ec:70:34:ff:a2:ab:7b: 0d:3a:64:0a:79:82:62:d0:cc:23:b6:3c:53:5b:15: e9:9d:f1:14:51:2e:bc:e2:db:c3:f4:cd:6c:7c:1b: ee:17:c7:54:7d:77:17:60:e6:db:40:1a:bc:33:01: ca:37:9d:2f:b1:69:d0:42:55:4d:0d:38:c6:c7:d7: 48:75:ea:75:ad:04:03:af:19:e4:af:81:e0:d4:c3: b2:6d:e5:54:6d:3a:c5:5d:ca:84:a6:96:89:08:5f: b6:f0:62:71:25:f4:90:7d:64:76:13:67:16:5c:e3: 33:0d:21:94:ac:b9:83:69:f4:48:85:d7:80:4c:3c: 98:6c:33:d6:12:72:77:61:fe:0c:67:49:95:7d:90: a9:24:6d:5a:50:5d:77:aa:7d:4d:bd:6d:cc:9c:5e: 7f:d1:3d:29:5f:08:7b:ee:96:ed:3b:ea:91:2e:d3: 4d:50:ef:a3:5b:da:0f:67:94:ea:3b:72:81:35:a6: 78:64:1d:5b:47:89:f8:cd:67:9e:14:2f:93:14:fc: b8:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:3E:67:BB:02:22:55:C5:08:DF:01:19:45:D1:D9:9A:53:3F:D8:AB X509v3 Authority Key Identifier: keyid:BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/6159E3148BEB11ED9A3CD825C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 118.26.188.0/22 Signature Algorithm: sha256WithRSAEncryption e8:9f:57:33:0d:8e:ea:bc:43:61:4c:1c:e8:56:17:f9:46:60: 50:0a:28:b5:e9:66:df:63:e8:66:98:0b:a5:96:c6:a4:27:99: f0:5a:1a:7a:06:cd:3e:50:45:26:95:29:1b:e8:17:c7:ce:99: e8:5b:89:2a:14:1e:80:50:10:25:ff:43:43:62:91:aa:0e:d2: 11:a3:ca:d1:2d:d3:54:98:fa:fd:ac:36:63:eb:0d:0c:5f:c3: eb:07:9e:39:1b:af:07:04:29:ed:5d:70:9b:e2:00:56:46:4d: cb:2b:6f:d6:e2:fe:cf:4a:ba:f7:93:fa:96:43:3b:1f:b5:a9: f6:e9:60:db:2d:8c:9f:89:aa:4e:c1:56:30:1b:df:e3:56:5e: d1:22:d7:90:02:e2:b0:21:5b:e0:95:ad:0c:44:1e:85:8a:9c: b5:91:f8:d2:6c:85:7b:7f:3c:57:78:29:6b:17:b0:59:07:28: 39:a9:30:33:50:93:77:db:0c:40:1d:67:ef:a7:91:1c:bb:81: 70:36:c0:6b:f9:c5:3a:43:85:01:de:41:b4:7e:8f:cd:fc:ac: 73:90:3f:0a:7a:51:3d:67:97:b4:41:b1:c7:46:7e:65:cb:b1: b4:83:b6:63:f6:a9:73:5c:5f:8c:b6:37:eb:98:2a:d5:27:94: 6b:b6:e4:f6 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM3MEYxMTAvBgNVBAUTKEJCNUI4MTU2QjAzN0U1RDIyMjYzRUFDN0Y2QTExQzA1 MkZERjYzM0YwHhcNMjUwMzIwMTUyMTE4WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2RjMzI2ZC0wYTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwaz6wheZgDe582fasHgHKKlY7WJU7jmWJpJkLdPx7hTg49GbVLkU0q9BrwIk KvBS2RauQOxwNP+iq3sNOmQKeYJi0MwjtjxTWxXpnfEUUS684tvD9M1sfBvuF8dU fXcXYObbQBq8MwHKN50vsWnQQlVNDTjGx9dIdep1rQQDrxnkr4Hg1MOybeVUbTrF XcqEppaJCF+28GJxJfSQfWR2E2cWXOMzDSGUrLmDafRIhdeATDyYbDPWEnJ3Yf4M Z0mVfZCpJG1aUF13qn1NvW3MnF5/0T0pXwh77pbtO+qRLtNNUO+jW9oPZ5TqO3KB NaZ4ZB1bR4n4zWeeFC+TFPy4UQIDAQABo4IClTCCApEwHQYDVR0OBBYEFN8+Z7sC IlXFCN8BGUXR2ZpTP9irMB8GA1UdIwQYMBaAFLtbgVawN+XSImPqx/ahHAUv32M/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzcwRi83MzQ2RThBMjYw NDkxMUUyQTMwNzU3OEQyOTc5QkIyMC91MXVCVnJBMzVkSWlZLXJIOXFFY0JTX2ZZ ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UxdUJWckEzNWRJaVktckg5cUVjQlNfZll6OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTM3MEYvNzM0NkU4QTI2MDQ5MTFFMkEzMDc1NzhEMjk3OUJCMjAvNjE1OUUzMTQ4 QkVCMTFFRDlBM0NEODI1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJ2GrwwDQYJKoZIhvcNAQELBQADggEBAOifVzMNjuq8Q2FM HOhWF/lGYFAKKLXpZt9j6GaYC6WWxqQnmfBaGnoGzT5QRSaVKRvoF8fOmehbiSoU HoBQECX/Q0NikaoO0hGjytEt01SY+v2sNmPrDQxfw+sHnjkbrwcEKe1dcJviAFZG Tcsrb9bi/s9KuveT+pZDOx+1qfbpYNstjJ+Jqk7BVjAb3+NWXtEi15AC4rAhW+CV rQxEHoWKnLWR+NJshXt/PFd4KWsXsFkHKDmpMDNQk3fbDEAdZ++nkRy7gXA2wGv5 xTpDhQHeQbR+j838rHOQPwp6UT1nl7RBscdGfmXLsbSDtmP2qXNcX4y2N+uYKtUn lGu25PY= -----END CERTIFICATE-----Generated at Sat Apr 5 07:18:33 2025 by rpki-client