$ rpki-client -vvf rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/D3CE9058A5AD11ED95DBC66FC4F9AE02.roa File: D3CE9058A5AD11ED95DBC66FC4F9AE02.roa (raw, json) Hash identifier: V89TVKMG86FWKeqAC80eNKWm9QeM+Xm489cfb+DFW7Q= Subject key identifier: 30:A2:0B:E5:2D:B1:64:22:D0:86:82:D1:D7:B5:28:D2:89:39:E9:20 Certificate issuer: /CN=A918E469/serialNumber=E0D5445B80B1817F62F3C64AA8C8F6D7E13AE103 Certificate serial: 0172 Authority key identifier: E0:D5:44:5B:80:B1:81:7F:62:F3:C6:4A:A8:C8:F6:D7:E1:3A:E1:03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NVEW4CxgX9i88ZKqMj21-E64QM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/D3CE9058A5AD11ED95DBC66FC4F9AE02.roa Signing time: Thu 23 Jan 2025 02:16:47 +0000 ROA not before: Thu 23 Jan 2025 02:16:47 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 150672 IP address blocks: 203.24.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.crl rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NVEW4CxgX9i88ZKqMj21-E64QM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 02:42:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 370 (0x172) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E469 Validity Not Before: Jan 23 02:16:47 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=6791a68f-5a1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d1:da:85:1a:68:a3:d2:ae:16:85:02:f7:3e: 1a:f6:85:10:2f:b2:ee:a5:7c:1d:58:75:bd:57:d8: a5:2c:73:a3:d0:98:e9:b1:2f:ae:63:43:0e:ac:ce: df:94:31:e5:70:57:b6:be:dd:66:e4:34:21:16:63: 2a:39:06:ce:66:d9:f7:c0:5a:43:d0:5d:51:a3:e0: 56:b2:e7:8e:49:0a:25:81:0c:41:33:ad:4c:b1:e4: bc:3f:f8:ff:44:58:63:d3:fc:d7:0a:28:5a:f6:ea: 34:bd:bc:51:14:a8:42:20:5b:6a:59:d1:e5:4c:5d: 83:92:f2:ce:cb:c6:1f:ee:74:03:d3:ed:06:62:55: fb:ec:3d:67:2e:05:7a:e9:c0:32:30:39:0b:58:7a: 74:0e:4c:f1:0d:fb:b3:28:a8:3d:fb:96:20:cd:f0: 20:54:4a:f7:84:89:39:a1:fb:49:50:1c:0c:ce:d0: 5f:ef:2f:ee:25:74:ee:8e:e2:47:0d:99:8e:57:60: 51:39:d2:8d:82:cf:5a:8d:1e:e5:06:1b:1a:ee:d1: 89:de:22:bf:d7:3d:b0:e2:24:1e:03:e7:fc:eb:52: 0e:f7:01:ec:80:fe:ef:87:f8:02:25:40:bc:99:99: 0e:4d:f6:d0:67:fc:56:71:3a:31:f9:b4:0c:11:36: 31:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:A2:0B:E5:2D:B1:64:22:D0:86:82:D1:D7:B5:28:D2:89:39:E9:20 X509v3 Authority Key Identifier: keyid:E0:D5:44:5B:80:B1:81:7F:62:F3:C6:4A:A8:C8:F6:D7:E1:3A:E1:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NVEW4CxgX9i88ZKqMj21-E64QM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/D3CE9058A5AD11ED95DBC66FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.24.9.0/24 Signature Algorithm: sha256WithRSAEncryption 18:28:22:2a:bc:c7:31:c7:8e:b2:f2:54:09:01:03:43:88:de: 4d:88:93:eb:35:0f:34:6c:74:b1:c3:3b:c5:17:af:71:65:43: 3f:dc:7e:e5:21:2a:a8:df:c2:9f:ca:96:05:68:47:35:26:4d: 48:b6:3f:49:84:c8:63:91:10:fa:36:66:32:c9:1d:3f:9e:e0: c9:d9:14:20:6e:8c:f6:e1:9e:72:92:a1:42:fb:15:f0:b9:17: ed:df:9f:23:34:5e:44:3f:b1:ab:77:0b:99:f4:7f:29:e4:16: 5c:14:7f:c6:1d:bc:50:9b:95:d2:19:c9:6e:e4:ea:d4:32:de: 6a:b4:23:de:43:94:b7:61:06:b6:ae:d4:7c:38:78:dd:91:6f: 86:a7:6e:dc:07:1a:d0:28:a8:7d:9a:ea:b0:1d:3a:24:51:b7: 6f:66:c3:cc:63:f3:03:78:c6:2f:ed:b3:78:4f:95:f6:8b:ac: b5:f3:23:bf:c9:1b:10:4e:dd:b3:a1:5c:bc:04:2d:f6:c0:57: d1:53:4e:aa:bc:c7:32:7f:da:00:04:f1:af:20:ba:62:62:51: 2d:0d:af:cb:1b:d6:50:9b:bb:bc:9c:c6:9b:dc:0b:fc:23:65: 13:20:40:12:18:60:21:1d:c3:91:d9:cb:fc:de:eb:70:94:f7: d7:54:fc:79 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU0NjkxMTAvBgNVBAUTKEUwRDU0NDVCODBCMTgxN0Y2MkYzQzY0QUE4QzhGNkQ3 RTEzQUUxMDMwHhcNMjUwMTIzMDIxNjQ3WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzkxYTY4Zi01YTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwtHahRpoo9KuFoUC9z4a9oUQL7LupXwdWHW9V9ilLHOj0JjpsS+uY0MOrM7f lDHlcFe2vt1m5DQhFmMqOQbOZtn3wFpD0F1Ro+BWsueOSQolgQxBM61MseS8P/j/ RFhj0/zXCiha9uo0vbxRFKhCIFtqWdHlTF2DkvLOy8Yf7nQD0+0GYlX77D1nLgV6 6cAyMDkLWHp0DkzxDfuzKKg9+5YgzfAgVEr3hIk5oftJUBwMztBf7y/uJXTujuJH DZmOV2BROdKNgs9ajR7lBhsa7tGJ3iK/1z2w4iQeA+f861IO9wHsgP7vh/gCJUC8 mZkOTfbQZ/xWcTox+bQMETYxRwIDAQABo4IClTCCApEwHQYDVR0OBBYEFDCiC+Ut sWQi0IaC0de1KNKJOekgMB8GA1UdIwQYMBaAFODVRFuAsYF/YvPGSqjI9tfhOuED MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTQ2OS9FRkE1NjNDOEE1 QTkxMUVEOEZFMzA1NTNDNEY5QUUwMi80TlZFVzRDeGdYOWk4OFpLcU1qMjEtRTY0 UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzROVkVXNEN4Z1g5aTg4WktxTWoyMS1FNjRRTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEU0NjkvRUZBNTYzQzhBNUE5MTFFRDhGRTMwNTUzQzRGOUFFMDIvRDNDRTkwNThB NUFEMTFFRDk1REJDNjZGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADLGAkwDQYJKoZIhvcNAQELBQADggEBABgoIiq8xzHHjrLy VAkBA0OI3k2Ik+s1DzRsdLHDO8UXr3FlQz/cfuUhKqjfwp/KlgVoRzUmTUi2P0mE yGOREPo2ZjLJHT+e4MnZFCBujPbhnnKSoUL7FfC5F+3fnyM0XkQ/sat3C5n0fynk FlwUf8YdvFCbldIZyW7k6tQy3mq0I95DlLdhBrau1Hw4eN2Rb4anbtwHGtAoqH2a 6rAdOiRRt29mw8xj8wN4xi/ts3hPlfaLrLXzI7/JGxBO3bOhXLwELfbAV9FTTqq8 xzJ/2gAE8a8gumJiUS0Nr8sb1lCbu7ycxpvcC/wjZRMgQBIYYCEdw5HZy/ze63CU 99dU/Hk= -----END CERTIFICATE-----Generated at Sat Apr 12 09:19:40 2025 by rpki-client