$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/75EBFC30147A11F0B6BF5B67C4F9AE02.roa File: 75EBFC30147A11F0B6BF5B67C4F9AE02.roa (raw, json) Hash identifier: KG2RLaKQGPSadB3NRv2ridHAGMaUMBRbwy2ETF/NtCo= Subject key identifier: B5:A4:23:10:79:64:B8:36:89:34:A0:80:46:53:6B:30:EC:10:11:1F Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264 Certificate serial: 0CEF Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/75EBFC30147A11F0B6BF5B67C4F9AE02.roa Signing time: Tue 08 Apr 2025 13:07:45 +0000 ROA not before: Tue 08 Apr 2025 13:07:45 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 5065 IP address blocks: 111.92.144.0/24 maxlen: 24 111.92.146.0/24 maxlen: 24 111.92.147.0/24 maxlen: 24 111.92.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 19:55:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3311 (0xcef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264 Validity Not Before: Apr 8 13:07:45 2025 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=67f51fa0-fc2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:14:83:15:fa:f6:e2:cb:b9:3b:95:82:ef:d8: 12:8f:53:4d:cd:bf:5e:ef:25:c3:8d:2b:82:7f:d3: 8d:28:76:c0:58:9b:b6:5a:ed:3a:0e:41:60:b1:bf: af:23:a5:23:20:0d:c4:72:fc:10:9a:b2:74:bd:b3: 9d:e1:d0:fe:49:89:e8:c4:7c:67:5e:53:b8:48:ef: c6:e1:18:b6:bf:4c:e6:b4:b6:ff:d5:18:74:62:ce: ab:9c:45:8b:93:d1:f7:74:06:85:78:d1:2a:a9:4c: c6:c0:33:17:f7:7f:2a:2a:d4:43:14:15:1a:ed:21: 05:d2:06:c4:7c:3c:b9:c7:c2:0d:4f:14:e8:41:8b: aa:3e:53:e6:64:7a:e6:df:07:ae:62:bd:95:2b:86: d5:b8:f8:83:8e:fc:31:61:e9:aa:aa:03:a0:1f:70: 15:b6:63:6a:b0:90:e5:18:c0:ba:16:91:0f:89:6f: e1:f7:a0:90:52:a7:83:41:a8:60:70:b5:1d:be:e0: 19:8f:df:24:7c:d1:05:1f:d2:11:9d:92:e7:6d:5b: 5d:a7:e6:ae:db:5d:79:00:f1:8f:4d:50:db:f7:bf: dd:5e:bf:3f:db:f5:f7:3e:9b:e5:c4:f9:47:09:d8: 57:8c:6b:dd:b0:75:03:21:6c:c0:dd:3d:4c:d6:c1: cf:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:A4:23:10:79:64:B8:36:89:34:A0:80:46:53:6B:30:EC:10:11:1F X509v3 Authority Key Identifier: keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/75EBFC30147A11F0B6BF5B67C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 111.92.144.0/24 111.92.146.0/23 111.92.149.0/24 Signature Algorithm: sha256WithRSAEncryption 01:53:ab:41:99:f8:9a:eb:0a:cc:48:99:b7:25:88:98:ef:71: af:3a:c1:e3:7e:e3:e5:a7:45:c8:38:91:49:2d:8e:cf:e0:24: ef:72:7f:7a:54:d0:aa:61:da:d4:60:e9:7e:71:99:bf:8a:6b: 42:70:4b:4f:70:bd:10:fd:7d:96:eb:c7:23:d0:1c:f9:e6:d6: 61:20:f7:14:99:06:31:e4:de:71:56:78:f4:3d:f7:c0:97:84: 2f:7f:68:d4:76:f3:2a:9d:4f:67:78:e7:9d:4f:28:1b:a0:8a: e1:fa:a2:a1:c0:2e:fd:80:c0:eb:f0:05:9c:b1:d2:a9:73:b2: 6a:b5:5c:97:49:2f:8f:d0:c1:c7:19:48:7b:35:70:20:b0:39: 29:17:9e:f9:68:ce:df:61:f0:86:a3:69:28:2e:63:b6:4f:a2: b4:74:0f:5d:54:f3:45:aa:d6:fd:1c:06:f4:97:c0:40:03:0c: 4e:ff:9d:30:ec:78:5b:b2:98:00:03:29:df:13:5a:87:30:8f: 4e:6b:97:85:f3:e9:1c:f0:2c:c9:23:c0:40:9a:47:f7:2b:fd: 65:af:03:62:44:cb:a3:0e:d6:9c:d6:f7:ac:45:05:02:08:72: 5e:b2:9b:17:b1:4d:e6:53:47:a2:98:82:86:ad:3e:51:b8:a1: f7:3e:cf:42 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICDO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEwQ0QxMTAvBgNVBAUTKDM4MTkzNzIwODIxRTA3RDY5MThFM0E3OUZCRTA4MjND NjczMkUyNjQwHhcNMjUwNDA4MTMwNzQ1WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02N2Y1MWZhMC1mYzJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0RSDFfr24su5O5WC79gSj1NNzb9e7yXDjSuCf9ONKHbAWJu2Wu06DkFgsb+v I6UjIA3EcvwQmrJ0vbOd4dD+SYnoxHxnXlO4SO/G4Ri2v0zmtLb/1Rh0Ys6rnEWL k9H3dAaFeNEqqUzGwDMX938qKtRDFBUa7SEF0gbEfDy5x8INTxToQYuqPlPmZHrm 3weuYr2VK4bVuPiDjvwxYemqqgOgH3AVtmNqsJDlGMC6FpEPiW/h96CQUqeDQahg cLUdvuAZj98kfNEFH9IRnZLnbVtdp+au2115APGPTVDb97/dXr8/2/X3PpvlxPlH CdhXjGvdsHUDIWzA3T1M1sHPZwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFLWkIxB5 ZLg2iTSggEZTazDsEBEfMB8GA1UdIwQYMBaAFDgZNyCCHgfWkY46efvggjxnMuJk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBDRC80NjcyM0YxRTg5 RUMxMUVBODFDMDRGMUVDNEY5QUUwMi9PQmszSUlJZUI5YVJqanA1LS1DQ1BHY3k0 bVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09CazNJSUllQjlhUmpqcDUtLUNDUEdjeTRtUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUEwQ0QvNDY3MjNGMUU4OUVDMTFFQTgxQzA0RjFFQzRGOUFFMDIvNzVFQkZDMzAx NDdBMTFGMEI2QkY1QjY3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBABvXJADBAFvXJIDBABvXJUwDQYJKoZIhvcNAQELBQADggEB AAFTq0GZ+JrrCsxImbcliJjvca86weN+4+WnRcg4kUktjs/gJO9yf3pU0Kph2tRg 6X5xmb+Ka0JwS09wvRD9fZbrxyPQHPnm1mEg9xSZBjHk3nFWePQ998CXhC9/aNR2 8yqdT2d4551PKBugiuH6oqHALv2AwOvwBZyx0qlzsmq1XJdJL4/QwccZSHs1cCCw OSkXnvlozt9h8IajaSguY7ZPorR0D11U80Wq1v0cBvSXwEADDE7/nTDseFuymAAD Kd8TWocwj05rl4Xz6RzwLMkjwECaR/cr/WWvA2JEy6MO1pzW96xFBQIIcl6ymxex TeZTR6KYgoatPlG4ofc+z0I= -----END CERTIFICATE-----Generated at Fri Apr 18 19:24:45 2025 by rpki-client