$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/8CF5DC46E6B411EFBA61B834C4F9AE02.roa File: 8CF5DC46E6B411EFBA61B834C4F9AE02.roa (raw, json) Hash identifier: oPWd3btaFwuiDoFS0LuO0R3kAm/+XPdEgxefOeSVHLI= Subject key identifier: A9:00:CA:FD:7A:30:83:89:9E:4C:43:B6:F9:8F:C9:49:ED:E8:F6:2B Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264 Certificate serial: 0C65 Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/8CF5DC46E6B411EFBA61B834C4F9AE02.roa Signing time: Sun 09 Feb 2025 07:07:40 +0000 ROA not before: Sun 09 Feb 2025 07:07:40 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 208485 IP address blocks: 14.192.138.0/24 maxlen: 24 14.192.139.0/24 maxlen: 24 14.192.143.0/24 maxlen: 24 14.192.158.0/24 maxlen: 24 103.20.135.0/24 maxlen: 24 111.92.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3173 (0xc65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A0CD Validity Not Before: Feb 9 07:07:40 2025 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=67a8543c-1228 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ba:b0:87:40:6a:94:49:af:10:cb:52:98:92: ff:13:f9:e3:5b:db:0f:11:ff:5f:5f:eb:b5:3a:e1: 49:a4:41:85:ee:dd:a0:2d:66:5b:c9:74:2f:0d:39: ee:97:ba:d8:3a:00:48:c1:1e:17:09:1a:d3:ac:d5: 77:30:23:a0:de:a4:9a:92:53:c9:2b:db:41:40:cb: c1:b3:50:3c:6c:90:ff:0c:47:30:45:c3:68:7f:94: f2:04:a7:8c:b5:cd:95:e9:9c:94:93:f0:2b:3b:cd: d1:5d:94:58:b2:59:60:ff:80:4a:2a:a3:7a:3b:2f: 63:e2:a8:23:ec:c1:5b:b2:c9:fa:5b:9b:d7:5c:22: 33:a2:93:be:94:b4:ac:cc:29:fb:ba:f2:f2:bf:dc: 80:3b:37:b6:94:b2:14:c7:64:71:1b:c6:d8:19:19: c5:7d:70:1e:60:20:1b:01:92:36:c7:0c:27:fa:ed: e2:85:d5:fc:b7:3a:a9:f8:fb:09:c0:11:4f:d2:42: 58:9b:4b:05:d3:6f:2a:a9:8e:9c:b5:8c:22:93:93: 2f:a1:8b:26:a0:7e:17:75:3f:00:18:85:1e:14:37: 35:3e:cf:b1:aa:33:b6:41:1f:67:17:86:c6:df:20: bd:e5:f8:90:c7:88:2f:64:4c:1c:7a:bf:c4:69:fc: 72:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:00:CA:FD:7A:30:83:89:9E:4C:43:B6:F9:8F:C9:49:ED:E8:F6:2B X509v3 Authority Key Identifier: keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/8CF5DC46E6B411EFBA61B834C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 14.192.138.0/23 14.192.143.0/24 14.192.158.0/24 103.20.135.0/24 111.92.157.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:11:3c:43:56:51:5b:26:fb:fb:33:32:64:57:80:85:73:33: e3:1e:3c:85:99:82:33:ad:c1:1e:08:9d:5d:49:dc:e7:b4:59: ba:d8:40:e9:98:76:17:f4:1e:ac:52:04:92:4b:1b:31:ad:8c: c9:00:fb:e8:db:8f:07:75:dd:92:98:83:6b:13:ec:b3:cf:bf: 0e:b5:d7:84:8c:b3:02:d9:fa:be:e1:a0:d3:f6:ac:85:7f:ac: c8:16:95:63:63:90:39:0b:7a:d0:cf:9c:f0:1d:10:47:73:ef: 76:41:81:f2:fd:e4:5f:54:2c:12:ca:cd:32:4f:0c:5e:38:af: 21:86:0d:49:cd:c3:c7:9c:8c:00:19:2e:96:1c:4f:d0:23:d7: f3:05:cd:57:fe:2f:6e:87:d9:53:35:f2:2c:db:01:41:3a:66: 70:d1:c0:9a:68:97:da:ee:53:8c:32:89:3a:af:27:f9:b3:ac: 5e:76:61:1b:8f:6b:8f:14:c9:95:50:57:2d:0e:d8:11:71:e6: 3b:56:e2:01:08:a5:7f:2f:b9:59:c3:84:4b:c7:6a:9c:33:27: 8f:ea:91:de:fb:5a:54:62:8a:10:2b:05:b2:e8:71:d3:26:ac: 67:a5:25:f3:45:4d:a1:e1:c0:98:cf:a5:bd:f9:04:1e:9c:c3: 3d:59:25:ae -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgICDGUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEwQ0QxMTAvBgNVBAUTKDM4MTkzNzIwODIxRTA3RDY5MThFM0E3OUZCRTA4MjND NjczMkUyNjQwHhcNMjUwMjA5MDcwNzQwWhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02N2E4NTQzYy0xMjI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3bqwh0BqlEmvEMtSmJL/E/njW9sPEf9fX+u1OuFJpEGF7t2gLWZbyXQvDTnu l7rYOgBIwR4XCRrTrNV3MCOg3qSaklPJK9tBQMvBs1A8bJD/DEcwRcNof5TyBKeM tc2V6ZyUk/ArO83RXZRYsllg/4BKKqN6Oy9j4qgj7MFbssn6W5vXXCIzopO+lLSs zCn7uvLyv9yAOze2lLIUx2RxG8bYGRnFfXAeYCAbAZI2xwwn+u3ihdX8tzqp+PsJ wBFP0kJYm0sF028qqY6ctYwik5MvoYsmoH4XdT8AGIUeFDc1Ps+xqjO2QR9nF4bG 3yC95fiQx4gvZEwcer/EafxyPQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFKkAyv16 MIOJnkxDtvmPyUnt6PYrMB8GA1UdIwQYMBaAFDgZNyCCHgfWkY46efvggjxnMuJk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBDRC80NjcyM0YxRTg5 RUMxMUVBODFDMDRGMUVDNEY5QUUwMi9PQmszSUlJZUI5YVJqanA1LS1DQ1BHY3k0 bVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09CazNJSUllQjlhUmpqcDUtLUNDUEdjeTRtUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUEwQ0QvNDY3MjNGMUU4OUVDMTFFQTgxQzA0RjFFQzRGOUFFMDIvOENGNURDNDZF NkI0MTFFRkJBNjFCODM0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNwYIKwYBBQUHAQcBAf8E KDAmMCQEAgABMB4DBAEOwIoDBAAOwI8DBAAOwJ4DBABnFIcDBABvXJ0wDQYJKoZI hvcNAQELBQADggEBAHoRPENWUVsm+/szMmRXgIVzM+MePIWZgjOtwR4InV1J3Oe0 WbrYQOmYdhf0HqxSBJJLGzGtjMkA++jbjwd13ZKYg2sT7LPPvw6114SMswLZ+r7h oNP2rIV/rMgWlWNjkDkLetDPnPAdEEdz73ZBgfL95F9ULBLKzTJPDF44ryGGDUnN w8ecjAAZLpYcT9Aj1/MFzVf+L26H2VM18izbAUE6ZnDRwJpol9ruU4wyiTqvJ/mz rF52YRuPa48UyZVQVy0O2BFx5jtW4gEIpX8vuVnDhEvHapwzJ4/qkd77WlRiihAr BbLocdMmrGelJfNFTaHhwJjPpb35BB6cwz1ZJa4= -----END CERTIFICATE-----Generated at Wed Feb 19 22:39:46 2025 by rpki-client