$ rpki-client -vvf rpki.apnic.net/member_repository/A918C31C/F107DA10A6CF11EFB2FBB57DC4F9AE02/7C616486A6EF11EF9EB0B473C4F9AE02.roa File: 7C616486A6EF11EF9EB0B473C4F9AE02.roa (raw, json) Hash identifier: j5rVzYxmjqZEY8FEsWt1qRbBmnhP9Qi2T1I55K8uP3k= Subject key identifier: 66:04:4A:FE:C8:96:5B:16:24:7E:63:CB:80:2A:B2:B0:B0:15:D1:BD Certificate issuer: /CN=A918C31C/serialNumber=40FAA70F8A23A03D16A11086DBE502E862164967 Certificate serial: 42 Authority key identifier: 40:FA:A7:0F:8A:23:A0:3D:16:A1:10:86:DB:E5:02:E8:62:16:49:67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QPqnD4ojoD0WoRCG2-UC6GIWSWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C31C/F107DA10A6CF11EFB2FBB57DC4F9AE02/7C616486A6EF11EF9EB0B473C4F9AE02.roa Signing time: Thu 13 Mar 2025 06:02:31 +0000 ROA not before: Thu 13 Mar 2025 06:02:31 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 45476 IP address blocks: 203.208.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C31C/F107DA10A6CF11EFB2FBB57DC4F9AE02/QPqnD4ojoD0WoRCG2-UC6GIWSWc.crl rsync://rpki.apnic.net/member_repository/A918C31C/F107DA10A6CF11EFB2FBB57DC4F9AE02/QPqnD4ojoD0WoRCG2-UC6GIWSWc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QPqnD4ojoD0WoRCG2-UC6GIWSWc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 06:31:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C31C, serialNumber=40FAA70F8A23A03D16A11086DBE502E862164967 Validity Not Before: Mar 13 06:02:31 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67d274f7-d119 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:41:a2:ea:b9:ba:82:72:83:49:57:3f:02:b0: c3:9a:c4:7c:06:26:68:eb:f8:7e:1f:2d:3c:8a:57: 4c:49:ac:7c:f2:39:9e:01:76:d6:0b:cb:bc:12:1e: cd:46:f9:ed:e1:69:7b:72:af:99:f4:9f:3a:58:ac: 44:e4:d4:c5:63:08:19:5f:81:df:c2:2e:e9:ed:fb: 1d:94:3e:8d:d9:bf:90:c6:54:b8:4a:77:f4:f6:12: 56:75:06:4f:eb:df:c4:1b:59:ec:75:21:bb:db:7f: 49:98:42:ab:be:c2:7a:c8:3c:a3:83:56:8e:b6:54: 61:98:b0:0e:78:48:24:32:2f:af:84:2d:3f:40:93: 38:ab:fb:d8:19:0b:cb:2c:92:07:7a:8f:26:cb:89: 1b:12:44:22:72:d8:42:6d:44:71:28:1d:c6:50:0b: 73:23:6a:e7:5e:d5:be:57:11:2e:f9:e4:5a:00:43: 1e:54:c8:ce:12:d6:54:b8:75:d2:fd:74:b2:94:92: 6e:b3:57:31:9a:c9:50:7b:a7:83:bb:1c:75:b4:be: cc:47:f7:0b:34:20:51:39:da:05:a5:31:12:d2:98: a8:8f:d4:43:bc:f6:ca:97:27:32:f4:f3:6c:7c:97: c2:ba:c7:c0:0c:42:59:57:31:09:19:11:37:08:cf: 60:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:04:4A:FE:C8:96:5B:16:24:7E:63:CB:80:2A:B2:B0:B0:15:D1:BD X509v3 Authority Key Identifier: keyid:40:FA:A7:0F:8A:23:A0:3D:16:A1:10:86:DB:E5:02:E8:62:16:49:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C31C/F107DA10A6CF11EFB2FBB57DC4F9AE02/QPqnD4ojoD0WoRCG2-UC6GIWSWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QPqnD4ojoD0WoRCG2-UC6GIWSWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C31C/F107DA10A6CF11EFB2FBB57DC4F9AE02/7C616486A6EF11EF9EB0B473C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.208.21.0/24 Signature Algorithm: sha256WithRSAEncryption 87:4b:86:a0:99:96:a2:f8:12:49:9b:5f:47:81:41:ad:76:83: aa:5b:88:cc:08:13:5e:af:46:ba:3b:98:c0:9b:48:a8:a7:9d: 61:66:d9:bf:f6:95:6e:6f:7f:a7:16:f1:0d:71:5f:90:b1:ab: 70:67:5c:9c:a8:0b:93:32:87:47:db:31:c8:4e:c9:b5:ac:a7: f3:92:76:6b:f3:85:68:1e:c1:ad:eb:71:40:52:7c:c1:0a:22: 78:73:e7:14:d4:76:e9:9b:20:df:9a:70:e4:66:55:a9:a3:39: 71:fb:0b:fe:b2:4c:6a:c8:c9:0d:20:4e:9a:5c:fc:75:02:90: bc:1a:2e:e2:ff:a9:b1:af:df:64:43:86:95:c0:18:33:e5:91: 01:a2:cc:45:f6:d3:d4:2d:98:2d:21:61:4c:06:3f:5f:42:67: fd:00:ec:97:41:5b:e2:d8:5b:15:99:c5:53:14:91:6d:bb:0c: 9f:61:8e:83:8d:52:7c:58:d0:e4:9c:3b:2a:56:3a:b4:82:16: fd:0d:9e:e6:de:3d:63:a2:42:ef:ac:30:39:20:b8:9d:a0:d8: 1c:61:08:b2:35:e9:e0:8f:f3:25:66:64:51:da:f3:1f:f5:8b: e3:4f:0c:e6:6e:83:8a:d4:de:78:bc:cc:a3:e4:36:a8:e0:d9: 87:da:2e:f8 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 QzMxQzExMC8GA1UEBRMoNDBGQUE3MEY4QTIzQTAzRDE2QTExMDg2REJFNTAyRTg2 MjE2NDk2NzAeFw0yNTAzMTMwNjAyMzFaFw0yNjA1MjgwMDAwMDBaMBgxFjAUBgNV BAMTDTY3ZDI3NGY3LWQxMTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDhQaLqubqCcoNJVz8CsMOaxHwGJmjr+H4fLTyKV0xJrHzyOZ4BdtYLy7wSHs1G +e3haXtyr5n0nzpYrETk1MVjCBlfgd/CLunt+x2UPo3Zv5DGVLhKd/T2ElZ1Bk/r 38QbWex1Ibvbf0mYQqu+wnrIPKODVo62VGGYsA54SCQyL6+ELT9Akzir+9gZC8ss kgd6jybLiRsSRCJy2EJtRHEoHcZQC3Mjaude1b5XES755FoAQx5UyM4S1lS4ddL9 dLKUkm6zVzGayVB7p4O7HHW0vsxH9ws0IFE52gWlMRLSmKiP1EO89sqXJzL082x8 l8K6x8AMQllXMQkZETcIz2CrAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUZgRK/siW WxYkfmPLgCqysLAV0b0wHwYDVR0jBBgwFoAUQPqnD4ojoD0WoRCG2+UC6GIWSWcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThDMzFDL0YxMDdEQTEwQTZD RjExRUZCMkZCQjU3REM0RjlBRTAyL1FQcW5ENG9qb0QwV29SQ0cyLVVDNkdJV1NX Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUVBxbkQ0b2pvRDBXb1JDRzItVUM2R0lXU1djLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzMxQy9GMTA3REExMEE2Q0YxMUVGQjJGQkI1N0RDNEY5QUUwMi83QzYxNjQ4NkE2 RUYxMUVGOUVCMEI0NzNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAMvQFTANBgkqhkiG9w0BAQsFAAOCAQEAh0uGoJmWovgSSZtf R4FBrXaDqluIzAgTXq9GujuYwJtIqKedYWbZv/aVbm9/pxbxDXFfkLGrcGdcnKgL kzKHR9sxyE7Jtayn85J2a/OFaB7BretxQFJ8wQoieHPnFNR26Zsg35pw5GZVqaM5 cfsL/rJMasjJDSBOmlz8dQKQvBou4v+psa/fZEOGlcAYM+WRAaLMRfbT1C2YLSFh TAY/X0Jn/QDsl0Fb4thbFZnFUxSRbbsMn2GOg41SfFjQ5Jw7KlY6tIIW/Q2e5t49 Y6JC76wwOSC4naDYHGEIsjXp4I/zJWZkUdrzH/WL408M5m6DitTeeLzMo+Q2qODZ h9ou+A== -----END CERTIFICATE-----Generated at Sun Apr 13 06:02:28 2025 by rpki-client