$ rpki-client -vvf rpki.apnic.net/member_repository/A9173CCA/1CA9B824654D11EFB44B7B58C4F9AE02/3866993C6A6711EF929E6773C4F9AE02.roa File: 3866993C6A6711EF929E6773C4F9AE02.roa (raw, json) Hash identifier: blrLiUR2o+nqfH3V7oxiwVZEehZHbPAqakKDEvu+zf4= Subject key identifier: 03:16:45:F8:2A:D4:0C:71:B9:87:83:8E:9A:A2:51:23:5A:F0:69:15 Certificate issuer: /CN=A9173CCA/serialNumber=6FD5B7431E7150ED650F7F27A3DCF8C5CEAC7764 Certificate serial: 62 Authority key identifier: 6F:D5:B7:43:1E:71:50:ED:65:0F:7F:27:A3:DC:F8:C5:CE:AC:77:64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9W3Qx5xUO1lD38no9z4xc6sd2Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173CCA/1CA9B824654D11EFB44B7B58C4F9AE02/3866993C6A6711EF929E6773C4F9AE02.roa Signing time: Tue 25 Feb 2025 08:49:24 +0000 ROA not before: Tue 25 Feb 2025 08:49:24 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 4621 IP address blocks: 202.44.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173CCA/1CA9B824654D11EFB44B7B58C4F9AE02/b9W3Qx5xUO1lD38no9z4xc6sd2Q.crl rsync://rpki.apnic.net/member_repository/A9173CCA/1CA9B824654D11EFB44B7B58C4F9AE02/b9W3Qx5xUO1lD38no9z4xc6sd2Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9W3Qx5xUO1lD38no9z4xc6sd2Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 06:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 98 (0x62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173CCA Validity Not Before: Feb 25 08:49:24 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67bd8414-fa03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:4a:c3:cc:0f:38:85:49:75:c1:2a:6d:8e:0f: 47:86:37:77:97:fc:30:d5:e5:1a:bd:71:2f:97:50: 94:e7:cb:e4:c8:c9:86:12:50:6b:d6:33:5b:ab:c9: 59:d5:dd:51:a2:ee:af:fa:80:59:ca:52:e5:4d:b3: 5d:1a:b2:36:6d:c6:b2:62:17:94:16:1b:1b:dc:87: a3:20:1a:8b:14:06:c7:80:cc:ef:13:86:92:3d:89: 94:a5:57:9e:5c:6c:95:43:3f:99:88:a3:89:ce:d0: d0:06:69:54:b8:bb:fb:7d:42:54:c8:6b:20:0f:b6: 29:b4:e7:fd:47:14:44:03:a3:10:cf:c0:cd:64:2f: a2:7c:21:b4:67:30:25:8f:09:25:b5:b5:53:50:9a: 1a:4f:be:f9:df:84:e5:e8:0e:8f:6b:80:0b:6a:26: 08:87:f6:9d:f1:34:31:9c:3d:6b:49:5b:d7:88:4e: 8a:d1:38:40:41:c8:95:26:fb:bb:6c:c4:52:7b:b0: b7:a9:95:18:dd:6b:8c:eb:99:6a:a8:f6:9a:f4:de: d1:93:1b:16:26:42:53:e8:9b:3d:1c:73:96:00:fd: d3:63:d3:27:4e:25:22:d2:38:8f:e7:71:77:3d:2c: 93:e8:df:ca:df:9a:f2:17:e1:4c:d7:f9:11:58:88: 45:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:16:45:F8:2A:D4:0C:71:B9:87:83:8E:9A:A2:51:23:5A:F0:69:15 X509v3 Authority Key Identifier: keyid:6F:D5:B7:43:1E:71:50:ED:65:0F:7F:27:A3:DC:F8:C5:CE:AC:77:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173CCA/1CA9B824654D11EFB44B7B58C4F9AE02/b9W3Qx5xUO1lD38no9z4xc6sd2Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9W3Qx5xUO1lD38no9z4xc6sd2Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173CCA/1CA9B824654D11EFB44B7B58C4F9AE02/3866993C6A6711EF929E6773C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.44.128.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:c4:ee:23:3d:eb:54:e4:5a:80:fe:92:eb:ae:ce:2c:3b:e2: fd:08:70:86:41:d6:d1:e5:ce:9d:f6:32:be:41:5f:f0:5e:99: 24:ee:d6:54:b9:38:c0:db:e5:5e:46:55:f9:39:3a:43:fd:f2: bf:a0:69:51:88:92:79:1f:5f:ac:c0:2c:c8:c3:d1:15:0c:d5: 05:c0:1c:32:ea:73:83:34:be:ef:80:15:93:ef:b0:88:79:5d: ba:9d:6a:b7:f3:31:ed:84:73:aa:44:e8:b2:44:bd:4d:3b:c8: 31:d2:bc:f4:e4:ff:3e:11:4a:c8:99:2e:c5:14:fa:39:f5:29: ad:8f:03:c0:5c:da:53:6f:15:d2:a1:26:71:9e:d4:23:3b:8f: 7d:d2:9b:89:3d:21:ac:6f:fe:04:07:81:7f:7a:99:21:7e:79: aa:78:7a:c0:b6:19:45:0d:00:c1:b0:98:c8:2c:04:ad:74:e3: a2:7d:a3:d9:b9:d8:81:e0:e1:57:85:d2:5e:31:5f:14:79:4b: 1b:c1:6d:25:db:a4:d5:7f:87:70:ae:96:c1:08:3a:dd:dd:84: dd:4d:09:40:65:64:63:b5:54:00:54:b6:74:fc:66:5a:bc:5f: d1:fb:12:ba:20:92:4a:98:21:3a:c1:c3:c9:ab:1b:c5:6f:30: b9:ea:b8:54 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBYjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 M0NDQTExMC8GA1UEBRMoNkZENUI3NDMxRTcxNTBFRDY1MEY3RjI3QTNEQ0Y4QzVD RUFDNzc2NDAeFw0yNTAyMjUwODQ5MjRaFw0yNjA1MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3YmQ4NDE0LWZhMDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMSsPMDziFSXXBKm2OD0eGN3eX/DDV5Rq9cS+XUJTny+TIyYYSUGvWM1uryVnV 3VGi7q/6gFnKUuVNs10asjZtxrJiF5QWGxvch6MgGosUBseAzO8ThpI9iZSlV55c bJVDP5mIo4nO0NAGaVS4u/t9QlTIayAPtim05/1HFEQDoxDPwM1kL6J8IbRnMCWP CSW1tVNQmhpPvvnfhOXoDo9rgAtqJgiH9p3xNDGcPWtJW9eITorROEBByJUm+7ts xFJ7sLeplRjda4zrmWqo9pr03tGTGxYmQlPomz0cc5YA/dNj0ydOJSLSOI/ncXc9 LJPo38rfmvIX4UzX+RFYiEVVAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUAxZF+CrU DHG5h4OOmqJRI1rwaRUwHwYDVR0jBBgwFoAUb9W3Qx5xUO1lD38no9z4xc6sd2Qw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTczQ0NBLzFDQTlCODI0NjU0 RDExRUZCNDRCN0I1OEM0RjlBRTAyL2I5VzNReDV4VU8xbEQzOG5vOXo0eGM2c2Qy US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYjlXM1F4NXhVTzFsRDM4bm85ejR4YzZzZDJRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0NDQS8xQ0E5QjgyNDY1NEQxMUVGQjQ0QjdCNThDNEY5QUUwMi8zODY2OTkzQzZB NjcxMUVGOTI5RTY3NzNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAMosgDANBgkqhkiG9w0BAQsFAAOCAQEALMTuIz3rVORagP6S 667OLDvi/QhwhkHW0eXOnfYyvkFf8F6ZJO7WVLk4wNvlXkZV+Tk6Q/3yv6BpUYiS eR9frMAsyMPRFQzVBcAcMupzgzS+74AVk++wiHldup1qt/Mx7YRzqkToskS9TTvI MdK89OT/PhFKyJkuxRT6OfUprY8DwFzaU28V0qEmcZ7UIzuPfdKbiT0hrG/+BAeB f3qZIX55qnh6wLYZRQ0AwbCYyCwErXTjon2j2bnYgeDhV4XSXjFfFHlLG8FtJduk 1X+HcK6WwQg63d2E3U0JQGVkY7VUAFS2dPxmWrxf0fsSuiCSSpghOsHDyasbxW8w ueq4VA== -----END CERTIFICATE-----Generated at Mon Apr 7 01:50:30 2025 by rpki-client