$ rpki-client -vvf rpki.apnic.net/member_repository/A9140917/A5AF8E68F56311EF9FABCB41C4F9AE02/5CA081FEF58211EF893AAF50C4F9AE02.roa File: 5CA081FEF58211EF893AAF50C4F9AE02.roa (raw, json) Hash identifier: axDWul/tr1rqISMXD7rxm+ttdt95FtrZ0GJ1AnTUYP0= Subject key identifier: 92:57:F7:60:AC:F7:8F:7D:F6:17:5A:53:4D:FF:2B:8D:F1:14:8A:D9 Certificate issuer: /CN=A9140917/serialNumber=F72E88006BE8885B6F34A67D6F5B84209AD996C8 Certificate serial: 05 Authority key identifier: F7:2E:88:00:6B:E8:88:5B:6F:34:A6:7D:6F:5B:84:20:9A:D9:96:C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140917/A5AF8E68F56311EF9FABCB41C4F9AE02/5CA081FEF58211EF893AAF50C4F9AE02.roa Signing time: Fri 28 Feb 2025 03:16:38 +0000 ROA not before: Fri 28 Feb 2025 03:16:38 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 140637 IP address blocks: 203.13.66.0/24 maxlen: 24 203.13.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140917/A5AF8E68F56311EF9FABCB41C4F9AE02/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.crl rsync://rpki.apnic.net/member_repository/A9140917/A5AF8E68F56311EF9FABCB41C4F9AE02/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:16:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140917 Validity Not Before: Feb 28 03:16:38 2025 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=67c12a96-7d31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:5a:8c:45:69:5e:66:51:23:6c:0b:ac:05:02: b3:2f:83:08:3b:9e:a2:47:49:8b:bc:39:e2:2b:e8: 5e:21:b0:9c:5f:48:06:b5:3e:f1:ac:b0:ea:62:a8: 41:c8:b8:43:a1:a7:92:75:11:14:31:ba:ae:c3:01: a9:16:3e:70:5d:88:e6:cb:ae:d8:ec:5f:0a:9b:f3: 84:92:3b:ef:e3:3a:f8:eb:f9:5f:bc:b2:1b:c1:4e: 5b:f5:b3:57:65:e7:a2:26:9a:ac:ae:36:9e:32:4d: 13:e5:51:df:cb:97:91:b2:cb:6f:ab:18:42:4a:28: 47:f1:60:fa:df:33:a8:d6:0e:73:45:7d:86:14:4b: 04:c3:82:df:b8:71:63:d0:c1:da:86:db:d6:b5:34: 8d:b8:5a:45:92:8b:38:43:10:08:23:5f:28:61:db: 2d:6c:a0:3f:e5:6a:6f:a4:26:3f:4b:52:66:75:0b: 23:1e:aa:fc:00:35:62:9b:e6:bb:28:37:f9:e0:c4: 6d:01:fc:22:f7:49:2d:ab:79:bf:13:2f:bb:48:88: 6d:2b:65:f8:a1:29:7c:80:de:3b:f1:9f:23:af:55: a1:e8:8a:a0:90:cd:58:a4:3a:67:f4:25:5a:80:c8: 9e:88:55:30:3a:27:6f:00:d8:66:f1:9b:44:2a:8e: b4:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:57:F7:60:AC:F7:8F:7D:F6:17:5A:53:4D:FF:2B:8D:F1:14:8A:D9 X509v3 Authority Key Identifier: keyid:F7:2E:88:00:6B:E8:88:5B:6F:34:A6:7D:6F:5B:84:20:9A:D9:96:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140917/A5AF8E68F56311EF9FABCB41C4F9AE02/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140917/A5AF8E68F56311EF9FABCB41C4F9AE02/5CA081FEF58211EF893AAF50C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.13.66.0/23 Signature Algorithm: sha256WithRSAEncryption 2c:01:90:4f:c6:27:4e:a1:68:a9:5e:25:13:65:32:08:cb:bb: 87:80:66:80:55:3c:9d:b1:25:f5:98:88:73:37:a0:65:eb:bb: 14:ad:b2:99:d5:64:22:60:ff:58:7a:b6:0d:59:32:8a:36:71: 3f:83:9b:78:bb:ee:8c:dc:ad:47:60:e6:28:6e:71:6d:ea:63: 35:6b:be:1f:0c:39:0a:67:c4:e1:37:e7:0d:4a:e4:af:d1:e9: b2:12:1b:05:92:6b:b5:7e:88:81:02:e9:77:31:e3:cb:74:31: 69:9b:98:73:38:38:a2:43:c3:05:00:39:e6:81:75:85:56:1a: 46:70:66:cc:9d:fb:14:a6:fd:7f:7f:6e:4d:bb:07:96:63:40: d9:02:19:6f:b4:be:85:41:5f:3a:90:3e:bd:14:f6:19:63:e3: 83:d6:69:b1:bc:46:cc:04:7f:c3:f6:a1:d0:8a:7d:14:81:7b: 3e:73:52:7d:b6:ea:5d:8e:02:79:e4:a6:5d:c6:31:88:45:69: 9c:55:d7:27:d9:3f:62:3a:19:97:79:2d:3b:e8:14:0f:5e:7f: d9:3c:40:07:dd:0a:d7:40:a3:44:10:8e:3a:66:2f:aa:27:f5: 7c:eb:61:91:29:bd:49:7c:87:28:f2:ba:a6:74:ba:f7:e1:59: 6f:db:76:0f -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MDkxNzExMC8GA1UEBRMoRjcyRTg4MDA2QkU4ODg1QjZGMzRBNjdENkY1Qjg0MjA5 QUQ5OTZDODAeFw0yNTAyMjgwMzE2MzhaFw0yNTA3MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3YzEyYTk2LTdkMzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDTWoxFaV5mUSNsC6wFArMvgwg7nqJHSYu8OeIr6F4hsJxfSAa1PvGssOpiqEHI uEOhp5J1ERQxuq7DAakWPnBdiObLrtjsXwqb84SSO+/jOvjr+V+8shvBTlv1s1dl 56ImmqyuNp4yTRPlUd/Ll5Gyy2+rGEJKKEfxYPrfM6jWDnNFfYYUSwTDgt+4cWPQ wdqG29a1NI24WkWSizhDEAgjXyhh2y1soD/lam+kJj9LUmZ1CyMeqvwANWKb5rso N/ngxG0B/CL3SS2reb8TL7tIiG0rZfihKXyA3jvxnyOvVaHoiqCQzVikOmf0JVqA yJ6IVTA6J28A2Gbxm0QqjrRjAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUklf3YKz3 j332F1pTTf8rjfEUitkwHwYDVR0jBBgwFoAU9y6IAGvoiFtvNKZ9b1uEIJrZlsgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQwOTE3L0E1QUY4RTY4RjU2 MzExRUY5RkFCQ0I0MUM0RjlBRTAyLzl5NklBR3ZvaUZ0dk5LWjliMXVFSUpyWmxz Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOXk2SUFHdm9pRnR2TktaOWIxdUVJSnJabHNnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDkxNy9BNUFGOEU2OEY1NjMxMUVGOUZBQkNCNDFDNEY5QUUwMi81Q0EwODFGRUY1 ODIxMUVGODkzQUFGNTBDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAcsNQjANBgkqhkiG9w0BAQsFAAOCAQEALAGQT8YnTqFoqV4l E2UyCMu7h4BmgFU8nbEl9ZiIczegZeu7FK2ymdVkImD/WHq2DVkyijZxP4ObeLvu jNytR2DmKG5xbepjNWu+Hww5CmfE4TfnDUrkr9HpshIbBZJrtX6IgQLpdzHjy3Qx aZuYczg4okPDBQA55oF1hVYaRnBmzJ37FKb9f39uTbsHlmNA2QIZb7S+hUFfOpA+ vRT2GWPjg9ZpsbxGzAR/w/ah0Ip9FIF7PnNSfbbqXY4CeeSmXcYxiEVpnFXXJ9k/ YjoZl3ktO+gUD15/2TxAB90K10CjRBCOOmYvqif1fOthkSm9SXyHKPK6pnS69+FZ b9t2Dw== -----END CERTIFICATE-----Generated at Mon Apr 7 08:00:57 2025 by rpki-client