$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/8975AF72144211F0A098EF73C4F9AE02.roa File: 8975AF72144211F0A098EF73C4F9AE02.roa (raw, json) Hash identifier: IsY/UsITcWg5LiNMs1VnIeiTEwn1tedKMzPO94OPcgs= Subject key identifier: 8C:C3:60:8E:32:84:F0:38:A9:6B:14:44:ED:B5:60:B5:0A:04:9A:47 Certificate issuer: /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D Certificate serial: 045A Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/8975AF72144211F0A098EF73C4F9AE02.roa Signing time: Tue 08 Apr 2025 06:27:25 +0000 ROA not before: Tue 08 Apr 2025 06:27:25 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 150110 IP address blocks: 203.32.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 01:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1114 (0x45a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FC75, serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D Validity Not Before: Apr 8 06:27:25 2025 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=67f4c1cd-b00c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:8e:74:ee:e6:3f:a8:ae:fa:a6:d3:09:39:b6: 8c:ed:b9:b8:40:88:e7:52:77:fe:2c:8d:ad:07:7a: 3e:e0:c3:97:5b:ca:a0:c5:44:46:db:7f:cf:df:2a: 08:4a:83:99:9f:c1:0f:82:6f:ca:2a:df:8b:f3:05: 7a:ef:8a:b4:86:9d:2b:21:35:a4:fa:4f:58:fb:c7: 7a:2e:c4:6c:86:d1:70:ec:a9:71:30:7b:c7:f0:94: 9e:0a:2d:ac:07:8d:65:6f:bf:da:a0:6c:da:29:8f: fa:eb:40:78:a4:b2:d1:d2:59:7f:bc:d2:1e:ed:83: 5c:66:6d:3d:95:36:51:63:9f:36:fc:32:9e:36:8b: 5a:f0:fd:76:c0:d4:88:57:19:88:bf:28:65:ed:68: 45:5f:f5:35:2e:8e:50:11:de:f6:e9:c1:ca:3d:9c: 8a:f8:37:a9:d7:f7:96:18:bf:4b:b0:5c:77:04:25: 1d:d4:2a:ff:0f:38:d5:ce:a2:8a:e3:14:aa:a7:e3: 42:b1:55:39:cb:f0:06:98:c3:8a:c4:b5:ba:24:2d: b6:40:70:d4:f5:36:ef:e7:dc:ca:cc:ca:e4:bd:34: 70:56:77:a3:cd:b6:26:4b:69:6e:74:1c:46:63:85: cd:7e:c9:48:0e:5b:d7:9a:38:13:72:b0:5c:f0:10: 1f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:C3:60:8E:32:84:F0:38:A9:6B:14:44:ED:B5:60:B5:0A:04:9A:47 X509v3 Authority Key Identifier: keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/8975AF72144211F0A098EF73C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.32.38.0/24 Signature Algorithm: sha256WithRSAEncryption ad:8e:94:af:4d:97:e7:53:bb:48:54:f9:03:cc:55:b1:1c:d0: 44:7c:81:70:f9:75:b2:f9:2f:8a:2d:4a:c3:04:76:38:ce:1a: ce:38:6a:9b:14:75:05:7d:0b:cf:de:09:28:08:32:ee:20:be: 77:66:04:8f:fc:96:ad:78:e9:20:37:96:6b:71:4d:89:6e:dd: 3b:3b:a5:eb:f6:55:7a:3a:43:70:33:b5:61:5a:dd:d9:4c:37: 8a:56:c0:5f:e5:96:84:f5:c1:93:9b:83:b1:9b:13:f9:17:ce: ce:73:3f:a3:57:18:d0:66:65:cb:9d:79:d8:c8:ce:a7:93:db: 3f:a3:54:76:55:64:af:ea:5c:4d:cc:6e:88:86:64:c4:d0:6e: db:9b:db:3d:1e:a3:2e:fb:f9:3a:76:cb:3d:1c:5f:fb:57:22: 72:be:46:87:cd:ca:61:cb:9b:b8:15:4d:6b:be:c3:9b:06:b5: f8:be:a8:53:78:b2:97:52:57:24:be:5d:c8:b4:85:4b:0d:26: 9c:33:e3:57:a8:04:af:c7:39:a4:b1:af:d3:8f:9f:4b:36:bd: 1b:0c:bc:01:f8:20:ef:05:43:12:61:e3:0f:59:39:3d:88:4c: c6:7c:42:12:de:5b:66:37:c6:6e:2d:22:5c:fa:83:e8:53:9a: 83:09:84:7a -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBFowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZDNzUxMTAvBgNVBAUTKDQ4MkU1QTZFMDg5NkEyNjZBOTFBNDA2NkMwNkY0QjRF RDk4NDY0OUQwHhcNMjUwNDA4MDYyNzI1WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2Y0YzFjZC1iMDBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9o507uY/qK76ptMJObaM7bm4QIjnUnf+LI2tB3o+4MOXW8qgxURG23/P3yoI SoOZn8EPgm/KKt+L8wV674q0hp0rITWk+k9Y+8d6LsRshtFw7KlxMHvH8JSeCi2s B41lb7/aoGzaKY/660B4pLLR0ll/vNIe7YNcZm09lTZRY582/DKeNota8P12wNSI VxmIvyhl7WhFX/U1Lo5QEd726cHKPZyK+Dep1/eWGL9LsFx3BCUd1Cr/DzjVzqKK 4xSqp+NCsVU5y/AGmMOKxLW6JC22QHDU9Tbv59zKzMrkvTRwVnejzbYmS2ludBxG Y4XNfslIDlvXmjgTcrBc8BAfdwIDAQABo4IClTCCApEwHQYDVR0OBBYEFIzDYI4y hPA4qWsURO21YLUKBJpHMB8GA1UdIwQYMBaAFEguWm4IlqJmqRpAZsBvS07ZhGSd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkM3NS8zQUE1REVFMERE NTgxMUVDODcwRkMyMERDNEY5QUUwMi9TQzVhYmdpV29tYXBHa0Jtd0c5TFR0bUVa SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NDNWFiZ2lXb21hcEdrQm13RzlMVHRtRVpKMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEZDNzUvM0FBNURFRTBERDU4MTFFQzg3MEZDMjBEQzRGOUFFMDIvODk3NUFGNzIx NDQyMTFGMEEwOThFRjczQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADLICYwDQYJKoZIhvcNAQELBQADggEBAK2OlK9Nl+dTu0hU +QPMVbEc0ER8gXD5dbL5L4otSsMEdjjOGs44apsUdQV9C8/eCSgIMu4gvndmBI/8 lq146SA3lmtxTYlu3Ts7pev2VXo6Q3AztWFa3dlMN4pWwF/lloT1wZObg7GbE/kX zs5zP6NXGNBmZcudedjIzqeT2z+jVHZVZK/qXE3MboiGZMTQbtub2z0eoy77+Tp2 yz0cX/tXInK+RofNymHLm7gVTWu+w5sGtfi+qFN4spdSVyS+Xci0hUsNJpwz41eo BK/HOaSxr9OPn0s2vRsMvAH4IO8FQxJh4w9ZOT2ITMZ8QhLeW2Y3xm4tIlz6g+hT moMJhHo= -----END CERTIFICATE-----Generated at Sun Apr 13 05:55:30 2025 by rpki-client