$ rpki-client -vvf rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/DA8EF7A48E7F11EAA2B2D767C4F9AE02.roa File: DA8EF7A48E7F11EAA2B2D767C4F9AE02.roa (raw, json) Hash identifier: wJNkPrAZnAwunRdATcEif4I0/3DklspHznNyGIiQ8LI= Subject key identifier: BB:C9:5A:3E:10:A1:92:5F:23:44:0A:97:F7:E6:61:79:7A:78:32:84 Certificate issuer: /CN=A916699C/serialNumber=770F28991DE648F8961C57C0DCDAD7D58B4A69F4 Certificate serial: 094A Authority key identifier: 77:0F:28:99:1D:E6:48:F8:96:1C:57:C0:DC:DA:D7:D5:8B:4A:69:F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dw8omR3mSPiWHFfA3NrX1YtKafQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/DA8EF7A48E7F11EAA2B2D767C4F9AE02.roa Signing time: Tue 14 Jan 2025 20:19:09 +0000 ROA not before: Tue 14 Jan 2025 20:19:09 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 38198 IP address blocks: 202.43.8.0/22 maxlen: 22 202.43.12.0/23 maxlen: 23 202.43.14.0/24 maxlen: 24 202.43.15.0/24 maxlen: 24 2402:1940::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.crl rsync://rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dw8omR3mSPiWHFfA3NrX1YtKafQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 20:20:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2378 (0x94a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916699C Validity Not Before: Jan 14 20:19:09 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=6786c6bd-0ee2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5b:65:a5:29:b4:fa:bd:81:73:f7:49:bf:7a: bb:0c:d0:2e:4a:61:ae:85:83:76:5c:d5:fa:2d:d2: 58:09:5f:5e:09:9f:3f:d4:cd:f9:a5:6c:54:28:5e: 09:1c:0c:b8:10:46:d3:ae:12:d4:79:4f:de:c0:d0: 56:ae:bf:6a:7f:84:8e:48:4e:95:a1:f7:d4:ca:96: db:12:71:4d:f1:18:cb:0a:13:b2:14:c9:84:29:ab: 97:1e:81:e7:a6:e4:6f:fe:63:90:01:92:16:a3:c9: 15:c6:e7:5c:1b:6c:5f:ce:25:5c:ae:b8:59:30:7b: 38:5c:b1:c7:f3:ab:04:82:e3:4a:3e:25:02:f8:0f: f3:35:1a:eb:48:2f:0a:41:7a:0e:69:46:dd:be:c1: 48:6f:49:d5:06:8b:46:4b:7a:db:fe:ca:5f:29:d4: 72:69:ce:dd:ba:27:6d:90:cf:1b:66:82:72:12:9f: df:a5:5d:a4:41:4b:e5:03:49:30:45:34:2e:3d:8b: 86:ef:dd:c2:68:95:b2:ff:d5:1d:2c:20:1b:12:92: 68:eb:2f:09:d0:25:af:9c:00:43:fc:6d:0c:c9:1d: 88:86:ee:aa:1d:71:f0:c4:6d:8b:39:0f:37:f0:49: e9:a3:9a:b1:d7:0a:8d:30:ad:32:8c:6d:73:14:3f: 8a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:C9:5A:3E:10:A1:92:5F:23:44:0A:97:F7:E6:61:79:7A:78:32:84 X509v3 Authority Key Identifier: keyid:77:0F:28:99:1D:E6:48:F8:96:1C:57:C0:DC:DA:D7:D5:8B:4A:69:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/dw8omR3mSPiWHFfA3NrX1YtKafQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dw8omR3mSPiWHFfA3NrX1YtKafQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916699C/AE99BC708E7E11EA963B0E66C4F9AE02/DA8EF7A48E7F11EAA2B2D767C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.43.8.0/21 IPv6: 2402:1940::/32 Signature Algorithm: sha256WithRSAEncryption a5:01:53:4b:74:40:ae:66:b4:90:14:4d:14:2b:54:69:40:bd: bd:16:6f:14:11:2c:f0:ec:16:37:10:1e:1a:77:a7:8f:2f:49: 41:55:82:18:4e:1a:e1:86:4d:76:a8:74:01:a4:19:7a:da:4d: 8c:2b:0d:82:58:7d:e9:fb:32:92:92:0f:68:eb:fb:2e:69:0b: 02:82:c3:78:80:83:b5:fc:ab:2d:be:7b:c0:5f:6f:b3:23:24: 9f:99:25:d9:f5:01:94:cc:95:20:84:f3:fe:cb:f8:39:7a:28: 62:c9:e6:e4:4c:c5:3c:0a:39:c8:31:be:65:15:88:7e:e8:16: 4b:14:95:23:11:3f:1e:f8:dc:25:00:6a:d8:a5:11:7f:19:02: b3:d3:b1:9f:e0:dd:a2:64:7a:22:33:97:09:06:00:38:d4:ea: 5a:68:a6:ea:77:68:1a:9e:65:f6:e0:f5:78:13:c3:91:b1:45: 99:4a:f7:f7:fd:89:e5:ab:b7:01:73:b5:cb:f0:ee:ec:19:6e: 7a:31:12:31:53:e1:cf:4c:5d:f1:4b:f9:da:42:21:80:7d:00: ba:60:75:10:14:02:20:68:fc:9c:e6:83:83:0f:bc:c2:91:7a: 52:24:5d:ed:9b:32:c0:cf:4d:d5:ef:d6:fa:6a:7a:9a:aa:5c: f5:56:c4:d1 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICCUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjY5OUMxMTAvBgNVBAUTKDc3MEYyODk5MURFNjQ4Rjg5NjFDNTdDMERDREFEN0Q1 OEI0QTY5RjQwHhcNMjUwMTE0MjAxOTA5WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02Nzg2YzZiZC0wZWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxFtlpSm0+r2Bc/dJv3q7DNAuSmGuhYN2XNX6LdJYCV9eCZ8/1M35pWxUKF4J HAy4EEbTrhLUeU/ewNBWrr9qf4SOSE6VoffUypbbEnFN8RjLChOyFMmEKauXHoHn puRv/mOQAZIWo8kVxudcG2xfziVcrrhZMHs4XLHH86sEguNKPiUC+A/zNRrrSC8K QXoOaUbdvsFIb0nVBotGS3rb/spfKdRyac7duidtkM8bZoJyEp/fpV2kQUvlA0kw RTQuPYuG793CaJWy/9UdLCAbEpJo6y8J0CWvnABD/G0MyR2Ihu6qHXHwxG2LOQ83 8Enpo5qx1wqNMK0yjG1zFD+KaQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFLvJWj4Q oZJfI0QKl/fmYXl6eDKEMB8GA1UdIwQYMBaAFHcPKJkd5kj4lhxXwNza19WLSmn0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Njk5Qy9BRTk5QkM3MDhF N0UxMUVBOTYzQjBFNjZDNEY5QUUwMi9kdzhvbVIzbVNQaVdIRmZBM05yWDFZdEth ZlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R3OG9tUjNtU1BpV0hGZkEzTnJYMVl0S2FmUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjY5OUMvQUU5OUJDNzA4RTdFMTFFQTk2M0IwRTY2QzRGOUFFMDIvREE4RUY3QTQ4 RTdGMTFFQUEyQjJENzY3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAPKKwgwDQQCAAIwBwMFACQCGUAwDQYJKoZIhvcNAQELBQAD ggEBAKUBU0t0QK5mtJAUTRQrVGlAvb0WbxQRLPDsFjcQHhp3p48vSUFVghhOGuGG TXaodAGkGXraTYwrDYJYfen7MpKSD2jr+y5pCwKCw3iAg7X8qy2+e8Bfb7MjJJ+Z Jdn1AZTMlSCE8/7L+Dl6KGLJ5uRMxTwKOcgxvmUViH7oFksUlSMRPx743CUAatil EX8ZArPTsZ/g3aJkeiIzlwkGADjU6lpopup3aBqeZfbg9XgTw5GxRZlK9/f9ieWr twFztcvw7uwZbnoxEjFT4c9MXfFL+dpCIYB9ALpgdRAUAiBo/Jzmg4MPvMKRelIk Xe2bMsDPTdXv1vpqepqqXPVWxNE= -----END CERTIFICATE-----Generated at Sat Apr 5 07:10:15 2025 by rpki-client