$ rpki-client -vvf rpki.apnic.net/member_repository/A917C0C4/9180C822055711F09C6A8E49C4F9AE02/BA22BEB40B3011F0B579B519C4F9AE02.roa File: BA22BEB40B3011F0B579B519C4F9AE02.roa (raw, json) Hash identifier: zdEqtGtii43VUXH0g8Jdd0m7uoQgCUcFB8S2j4k//AQ= Subject key identifier: 37:28:C9:B8:CB:D9:E9:3E:80:37:53:F8:0F:14:89:14:66:94:F7:7D Certificate issuer: /CN=A917C0C4/serialNumber=6E904BE05182BCB1F6F505D0A305891E6E8D1039 Certificate serial: 07 Authority key identifier: 6E:90:4B:E0:51:82:BC:B1:F6:F5:05:D0:A3:05:89:1E:6E:8D:10:39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpBL4FGCvLH29QXQowWJHm6NEDk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C0C4/9180C822055711F09C6A8E49C4F9AE02/BA22BEB40B3011F0B579B519C4F9AE02.roa Signing time: Thu 27 Mar 2025 17:27:16 +0000 ROA not before: Thu 27 Mar 2025 17:27:16 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 18385 IP address blocks: 203.29.114.0/23 maxlen: 23 203.77.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C0C4/9180C822055711F09C6A8E49C4F9AE02/bpBL4FGCvLH29QXQowWJHm6NEDk.crl rsync://rpki.apnic.net/member_repository/A917C0C4/9180C822055711F09C6A8E49C4F9AE02/bpBL4FGCvLH29QXQowWJHm6NEDk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpBL4FGCvLH29QXQowWJHm6NEDk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 06:55:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C0C4 Validity Not Before: Mar 27 17:27:16 2025 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=67e58a74-b7f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8d:cb:e2:6a:ad:65:ec:dc:46:b2:c6:7d:ee: 52:7a:6e:05:a1:01:2a:ca:5b:95:54:b2:ba:9c:5a: 47:df:b3:c5:01:25:df:13:f8:92:0d:b5:02:05:1f: fc:ff:8b:36:dc:6d:c7:10:11:b3:90:73:63:89:11: ab:a9:1e:4a:dc:c8:8a:3b:e9:3a:91:ce:0e:f1:18: 85:36:c6:2b:38:e0:03:65:80:21:ae:69:86:ee:2b: 0e:6e:cb:63:1e:cb:40:29:77:17:12:81:48:91:21: ed:65:d9:ec:0a:45:56:af:a7:8b:fa:50:81:cb:2d: 6c:11:cb:4b:3a:c8:ff:02:0d:f9:85:ea:be:53:5d: 2d:26:d2:7f:44:19:8d:c2:41:17:fd:3f:60:1d:31: b2:9f:07:c8:4d:21:cd:49:92:d1:66:73:18:48:b0: a8:97:a1:cb:a3:96:b4:a6:97:69:06:f6:d9:96:d7: c9:29:c6:58:39:02:5d:4f:39:c9:71:2d:b7:5e:2d: a9:d3:55:50:f8:ba:92:9f:fe:8b:55:1b:8b:8c:24: a5:5a:4d:89:81:d4:50:94:5a:1b:40:c2:21:18:aa: 1d:a4:4d:c1:4a:94:1a:db:20:3c:85:ee:ab:a5:d5: 81:0d:af:cc:36:fe:1f:34:cb:16:be:9d:b6:81:29: b5:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:28:C9:B8:CB:D9:E9:3E:80:37:53:F8:0F:14:89:14:66:94:F7:7D X509v3 Authority Key Identifier: keyid:6E:90:4B:E0:51:82:BC:B1:F6:F5:05:D0:A3:05:89:1E:6E:8D:10:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C0C4/9180C822055711F09C6A8E49C4F9AE02/bpBL4FGCvLH29QXQowWJHm6NEDk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpBL4FGCvLH29QXQowWJHm6NEDk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C0C4/9180C822055711F09C6A8E49C4F9AE02/BA22BEB40B3011F0B579B519C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.29.114.0/23 203.77.160.0/20 Signature Algorithm: sha256WithRSAEncryption 26:76:c7:19:50:52:62:00:d8:a0:07:c0:20:88:4c:ec:2b:5e: 65:fb:4c:3b:69:28:d3:bf:e5:ad:65:d6:e8:3f:5c:40:af:c9: b8:02:23:1b:17:cf:ea:2f:ba:79:81:60:c6:c5:e8:e4:2f:c2: 55:de:2d:e4:0b:ce:0d:f0:1c:29:66:62:7d:19:fc:be:5d:2f: 22:8e:c0:f1:d5:eb:96:fa:1e:13:4b:24:10:44:95:7d:95:69: c4:a5:e6:8c:5b:35:31:c1:df:c2:77:92:8a:23:55:2c:6f:1c: 82:da:6e:44:aa:95:55:48:ef:1b:02:f4:b3:d8:dc:46:b9:6c: d5:6d:35:67:08:37:77:25:9e:3a:cf:5e:cd:90:d4:08:90:e3: 95:11:21:f4:d0:f7:e2:b5:44:02:71:56:c0:03:85:92:1a:4a: 1b:8f:91:60:94:76:58:50:a9:34:e4:73:e8:51:31:d2:39:70: a8:ae:d7:69:66:e1:f7:5a:c7:ec:7a:ba:5d:a4:83:72:88:4d: 26:b3:ad:f3:fe:a3:d4:5a:88:62:95:94:a6:51:9c:e4:d4:ee: 44:cb:54:03:02:cd:83:33:9c:3b:3c:ba:20:20:c0:6c:3d:54: 53:16:08:be:79:42:c8:0e:dc:fb:91:51:23:e2:75:b7:fa:28: 4f:67:bb:1e -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QzBDNDExMC8GA1UEBRMoNkU5MDRCRTA1MTgyQkNCMUY2RjUwNUQwQTMwNTg5MUU2 RThEMTAzOTAeFw0yNTAzMjcxNzI3MTZaFw0yNTEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY3ZTU4YTc0LWI3ZjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHjcviaq1l7NxGssZ97lJ6bgWhASrKW5VUsrqcWkffs8UBJd8T+JINtQIFH/z/ izbcbccQEbOQc2OJEaupHkrcyIo76TqRzg7xGIU2xis44ANlgCGuaYbuKw5uy2Me y0ApdxcSgUiRIe1l2ewKRVavp4v6UIHLLWwRy0s6yP8CDfmF6r5TXS0m0n9EGY3C QRf9P2AdMbKfB8hNIc1JktFmcxhIsKiXocujlrSml2kG9tmW18kpxlg5Al1POclx LbdeLanTVVD4upKf/otVG4uMJKVaTYmB1FCUWhtAwiEYqh2kTcFKlBrbIDyF7qul 1YENr8w2/h80yxa+nbaBKbXDAgMBAAGjggKbMIIClzAdBgNVHQ4EFgQUNyjJuMvZ 6T6AN1P4DxSJFGaU930wHwYDVR0jBBgwFoAUbpBL4FGCvLH29QXQowWJHm6NEDkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdDMEM0LzkxODBDODIyMDU1 NzExRjA5QzZBOEU0OUM0RjlBRTAyL2JwQkw0RkdDdkxIMjlRWFFvd1dKSG02TkVE ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYnBCTDRGR0N2TEgyOVFYUW93V0pIbTZORURrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzBDNC85MTgwQzgyMjA1NTcxMUYwOUM2QThFNDlDNEY5QUUwMi9CQTIyQkVCNDBC MzAxMUYwQjU3OUI1MTlDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQW MBQwEgQCAAEwDAMEAcsdcgMEBMtNoDANBgkqhkiG9w0BAQsFAAOCAQEAJnbHGVBS YgDYoAfAIIhM7CteZftMO2ko07/lrWXW6D9cQK/JuAIjGxfP6i+6eYFgxsXo5C/C Vd4t5AvODfAcKWZifRn8vl0vIo7A8dXrlvoeE0skEESVfZVpxKXmjFs1McHfwneS iiNVLG8cgtpuRKqVVUjvGwL0s9jcRrls1W01Zwg3dyWeOs9ezZDUCJDjlREh9ND3 4rVEAnFWwAOFkhpKG4+RYJR2WFCpNORz6FEx0jlwqK7XaWbh91rH7Hq6XaSDcohN JrOt8/6j1FqIYpWUplGc5NTuRMtUAwLNgzOcOzy6ICDAbD1UUxYIvnlCyA7c+5FR I+J1t/ooT2e7Hg== -----END CERTIFICATE-----Generated at Fri Apr 11 10:39:31 2025 by rpki-client