$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/1730E5B2DD8811EFB0F9275CC4F9AE02.roa File: 1730E5B2DD8811EFB0F9275CC4F9AE02.roa (raw, json) Hash identifier: ZcszmlKpvmRrmOwrrWbU+MSwNxZQcSB7AxY1JIq/C+4= Subject key identifier: E3:6B:79:BC:5B:F3:7B:7E:F3:A4:16:FA:E6:97:A7:90:58:D5:67:9E Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264 Certificate serial: 0C73 Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/1730E5B2DD8811EFB0F9275CC4F9AE02.roa Signing time: Thu 13 Feb 2025 16:04:24 +0000 ROA not before: Thu 13 Feb 2025 16:04:24 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 55154 IP address blocks: 14.192.152.0/24 maxlen: 24 14.192.153.0/24 maxlen: 24 103.20.132.0/24 maxlen: 24 111.92.128.0/24 maxlen: 24 111.92.140.0/24 maxlen: 24 111.92.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Feb 2025 21:02:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3187 (0xc73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A0CD Validity Not Before: Feb 13 16:04:24 2025 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=67ae1807-f245 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6d:b5:06:61:75:7d:15:7b:bd:ee:2e:2a:ee: 18:0c:ee:0c:aa:36:04:22:91:10:8e:12:8e:20:6d: d5:5d:5c:52:d3:26:2d:7f:04:80:ad:d4:f5:f0:68: 58:11:b8:01:64:ec:70:50:6b:e8:64:9c:3b:45:59: 73:15:f6:1f:14:76:8d:19:b5:9f:97:87:62:ef:17: 29:50:cf:21:0e:58:a4:01:2f:02:0f:29:3e:48:5e: f5:21:0d:cc:8d:5c:e9:d7:c7:ff:53:06:f7:e0:7c: 6d:21:a8:66:7c:9c:a7:a3:85:c5:c8:a6:23:5d:60: 8a:b6:bc:91:35:0b:57:90:7f:07:c5:08:38:56:2e: 8d:2d:1c:3a:4b:fa:ea:6e:81:d7:14:fd:16:45:98: 6d:b9:d9:5c:c4:6c:89:fb:46:48:2f:a0:48:8b:53: 27:15:5a:8b:38:8c:d1:c5:29:a7:55:4d:11:0f:c2: 47:9b:e0:bb:c2:38:8c:66:52:41:85:8e:e5:fc:03: e9:c4:e0:1e:b6:4e:57:6b:a5:b9:7e:a5:78:58:68: 28:21:c5:92:4c:ed:2b:da:73:30:ad:60:4d:64:27: 85:58:5c:9e:4c:54:e4:d2:4a:25:c8:e7:c3:df:ae: c2:c4:7d:1d:d7:d3:c8:dd:5d:6f:72:31:61:40:f6: 15:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:6B:79:BC:5B:F3:7B:7E:F3:A4:16:FA:E6:97:A7:90:58:D5:67:9E X509v3 Authority Key Identifier: keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/1730E5B2DD8811EFB0F9275CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 14.192.152.0/23 103.20.132.0/24 111.92.128.0/24 111.92.140.0/24 111.92.150.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:d2:8c:31:fa:1b:07:4d:b2:21:f4:05:33:94:cb:b5:1c:60: b4:34:b5:3d:f4:b4:da:c9:df:cc:b5:78:5d:ce:8f:c1:8f:9d: d0:b6:d6:99:64:10:df:04:ec:11:55:cf:e6:3e:26:55:73:32: b1:2f:86:f9:67:60:2e:c2:49:12:83:d8:1b:f4:c7:66:29:d5: b0:9c:35:a8:69:51:e8:23:82:6c:fa:1f:04:4f:29:2c:6d:b8: 4c:fa:60:18:63:81:8c:d9:52:aa:4f:4e:a5:af:80:b9:54:b3: a9:33:62:14:ea:8e:86:da:f9:57:5a:21:45:a4:ff:c9:c9:6e: ab:7e:2a:79:b8:5b:06:6a:c0:8c:a9:86:b3:64:dc:fe:48:8b: 27:59:f8:4c:6b:27:2a:98:1f:95:7b:ca:f6:d6:49:c3:e0:85: 6c:43:69:d8:d5:2d:a7:13:ad:9d:21:b8:19:01:61:87:c6:4e: 9d:8f:94:b2:56:4a:77:8e:ac:70:00:a3:33:65:10:ac:5d:e3: 69:25:4e:20:d9:f7:5b:00:d4:be:f9:1c:b7:42:22:ab:56:e4: 33:2a:5f:e6:b6:a1:4c:bd:85:ab:06:6c:20:5b:5c:9c:f1:7d: 7c:9f:6c:74:18:48:92:2a:f9:89:8c:22:47:fc:66:e9:8a:dd: b8:6a:67:df -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgICDHMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEwQ0QxMTAvBgNVBAUTKDM4MTkzNzIwODIxRTA3RDY5MThFM0E3OUZCRTA4MjND NjczMkUyNjQwHhcNMjUwMjEzMTYwNDI0WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02N2FlMTgwNy1mMjQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvG21BmF1fRV7ve4uKu4YDO4MqjYEIpEQjhKOIG3VXVxS0yYtfwSArdT18GhY EbgBZOxwUGvoZJw7RVlzFfYfFHaNGbWfl4di7xcpUM8hDlikAS8CDyk+SF71IQ3M jVzp18f/Uwb34HxtIahmfJyno4XFyKYjXWCKtryRNQtXkH8HxQg4Vi6NLRw6S/rq boHXFP0WRZhtudlcxGyJ+0ZIL6BIi1MnFVqLOIzRxSmnVU0RD8JHm+C7wjiMZlJB hY7l/APpxOAetk5Xa6W5fqV4WGgoIcWSTO0r2nMwrWBNZCeFWFyeTFTk0kolyOfD 367CxH0d19PI3V1vcjFhQPYV2QIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFONrebxb 83t+86QW+uaXp5BY1WeeMB8GA1UdIwQYMBaAFDgZNyCCHgfWkY46efvggjxnMuJk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBDRC80NjcyM0YxRTg5 RUMxMUVBODFDMDRGMUVDNEY5QUUwMi9PQmszSUlJZUI5YVJqanA1LS1DQ1BHY3k0 bVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09CazNJSUllQjlhUmpqcDUtLUNDUEdjeTRtUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUEwQ0QvNDY3MjNGMUU4OUVDMTFFQTgxQzA0RjFFQzRGOUFFMDIvMTczMEU1QjJE RDg4MTFFRkIwRjkyNzVDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNwYIKwYBBQUHAQcBAf8E KDAmMCQEAgABMB4DBAEOwJgDBABnFIQDBABvXIADBABvXIwDBABvXJYwDQYJKoZI hvcNAQELBQADggEBAC7SjDH6GwdNsiH0BTOUy7UcYLQ0tT30tNrJ38y1eF3Oj8GP ndC21plkEN8E7BFVz+Y+JlVzMrEvhvlnYC7CSRKD2Bv0x2Yp1bCcNahpUegjgmz6 HwRPKSxtuEz6YBhjgYzZUqpPTqWvgLlUs6kzYhTqjoba+VdaIUWk/8nJbqt+Knm4 WwZqwIyphrNk3P5IiydZ+ExrJyqYH5V7yvbWScPghWxDadjVLacTrZ0huBkBYYfG Tp2PlLJWSneOrHAAozNlEKxd42klTiDZ91sA1L75HLdCIqtW5DMqX+a2oUy9hasG bCBbXJzxfXyfbHQYSJIq+YmMIkf8ZumK3bhqZ98= -----END CERTIFICATE-----Generated at Wed Feb 19 22:33:15 2025 by rpki-client