$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/8D94D7F0E3FE11EFA9975414C4F9AE02.roa File: 8D94D7F0E3FE11EFA9975414C4F9AE02.roa (raw, json) Hash identifier: 4YRSquv5DXlwgwanyEgsO6pw0NoZUCvIiUSsuz/N7hs= Subject key identifier: A9:29:8E:10:62:A6:E6:8B:50:B3:6A:59:56:E1:2F:FC:34:A5:5B:F1 Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264 Certificate serial: 0C5A Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/8D94D7F0E3FE11EFA9975414C4F9AE02.roa Signing time: Wed 05 Feb 2025 20:19:51 +0000 ROA not before: Wed 05 Feb 2025 20:19:51 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 62425 IP address blocks: 14.192.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Feb 2025 21:02:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3162 (0xc5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A0CD Validity Not Before: Feb 5 20:19:51 2025 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=67a3c7e7-387f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:79:6e:c0:a8:ef:10:fb:86:ec:e9:46:40:eb: 61:bd:b4:12:b2:70:37:59:c8:7a:09:04:fe:63:68: a1:19:6d:cc:3f:60:b6:2e:4f:d5:6d:07:e6:fb:68: 02:2d:91:5b:be:94:1c:c4:05:09:ef:4e:e7:c2:b6: 16:42:75:ac:47:96:1d:31:59:f6:8b:77:bc:c7:20: aa:41:57:97:75:e4:64:41:b6:b8:4b:af:14:34:11: e1:a1:22:5a:89:2c:87:bf:f1:e6:ea:39:c2:56:30: 38:05:6e:98:f2:6e:48:2c:ac:df:fa:c1:23:51:0d: 28:d8:2c:3d:32:2b:63:36:9b:a0:1d:7c:bd:98:51: 55:44:d1:93:27:74:4c:fd:19:85:a7:5f:3d:6e:7c: 3a:9b:b0:ab:9e:17:92:77:64:85:e0:9b:7e:f8:08: 32:c9:e7:64:4f:c6:43:75:4b:88:d6:52:ee:20:7a: 43:4b:8d:b4:e9:01:e7:21:7a:4e:9d:52:48:ad:60: 53:d0:27:c8:a0:b8:f7:33:21:a5:b2:37:8a:94:48: 08:e2:b3:88:ea:6c:31:ba:cf:c6:25:fc:4e:c7:c9: 89:9e:0e:87:21:2c:0c:d2:fd:4a:cc:2b:75:32:60: 0c:5e:5c:f6:90:a6:dc:b9:5f:a1:5a:02:2c:35:28: 8b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:29:8E:10:62:A6:E6:8B:50:B3:6A:59:56:E1:2F:FC:34:A5:5B:F1 X509v3 Authority Key Identifier: keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/8D94D7F0E3FE11EFA9975414C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 14.192.132.0/24 Signature Algorithm: sha256WithRSAEncryption bd:33:52:91:d5:9c:09:e5:7d:2b:5f:3c:53:de:5f:30:43:cf: c9:87:0f:09:a5:39:27:b6:ef:90:d8:0f:df:f8:92:42:c4:be: 82:19:07:ba:f3:57:6a:60:06:00:72:43:af:dd:a9:28:84:df: a7:b7:fa:0b:fa:5c:c6:42:3b:da:84:05:4f:8b:81:c2:af:91: ec:c5:02:73:b5:82:19:d9:7d:c5:9c:23:56:b9:41:93:83:d7: 0c:1a:66:29:13:76:fe:20:df:3a:d2:0c:67:52:7c:b0:26:92: 6c:61:87:5d:8c:6d:26:46:c5:56:1c:67:d1:d2:75:e5:4b:07: b1:1f:5b:f9:9f:ae:98:5b:b0:83:d4:ce:2c:07:ba:e9:0c:52: 49:20:1d:90:9f:52:60:63:dc:83:e4:77:be:7c:0e:ec:46:aa: 5a:40:fb:4b:31:86:7e:c3:b1:19:67:19:ad:c0:7d:b6:dc:33: b8:36:42:54:ce:92:28:a7:01:a1:fb:63:ff:a4:d3:38:32:38: c9:7e:dd:8f:d9:fd:ff:96:c6:6e:6b:16:a2:97:34:c7:e3:8a: 7a:cc:ec:8e:9b:a6:97:cd:b7:5b:7d:d0:e1:10:00:ce:fb:cc: c9:4e:05:9c:d0:2b:72:35:31:d5:be:28:28:38:54:fb:75:b4: 9a:8e:9e:41 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDFowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEwQ0QxMTAvBgNVBAUTKDM4MTkzNzIwODIxRTA3RDY5MThFM0E3OUZCRTA4MjND NjczMkUyNjQwHhcNMjUwMjA1MjAxOTUxWhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02N2EzYzdlNy0zODdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmHluwKjvEPuG7OlGQOthvbQSsnA3Wch6CQT+Y2ihGW3MP2C2Lk/VbQfm+2gC LZFbvpQcxAUJ707nwrYWQnWsR5YdMVn2i3e8xyCqQVeXdeRkQba4S68UNBHhoSJa iSyHv/Hm6jnCVjA4BW6Y8m5ILKzf+sEjUQ0o2Cw9MitjNpugHXy9mFFVRNGTJ3RM /RmFp189bnw6m7CrnheSd2SF4Jt++AgyyedkT8ZDdUuI1lLuIHpDS4206QHnIXpO nVJIrWBT0CfIoLj3MyGlsjeKlEgI4rOI6mwxus/GJfxOx8mJng6HISwM0v1KzCt1 MmAMXlz2kKbcuV+hWgIsNSiLBwIDAQABo4IClTCCApEwHQYDVR0OBBYEFKkpjhBi puaLULNqWVbhL/w0pVvxMB8GA1UdIwQYMBaAFDgZNyCCHgfWkY46efvggjxnMuJk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBDRC80NjcyM0YxRTg5 RUMxMUVBODFDMDRGMUVDNEY5QUUwMi9PQmszSUlJZUI5YVJqanA1LS1DQ1BHY3k0 bVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09CazNJSUllQjlhUmpqcDUtLUNDUEdjeTRtUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUEwQ0QvNDY3MjNGMUU4OUVDMTFFQTgxQzA0RjFFQzRGOUFFMDIvOEQ5NEQ3RjBF M0ZFMTFFRkE5OTc1NDE0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAOwIQwDQYJKoZIhvcNAQELBQADggEBAL0zUpHVnAnlfStf PFPeXzBDz8mHDwmlOSe275DYD9/4kkLEvoIZB7rzV2pgBgByQ6/dqSiE36e3+gv6 XMZCO9qEBU+LgcKvkezFAnO1ghnZfcWcI1a5QZOD1wwaZikTdv4g3zrSDGdSfLAm kmxhh12MbSZGxVYcZ9HSdeVLB7EfW/mfrphbsIPUziwHuukMUkkgHZCfUmBj3IPk d758DuxGqlpA+0sxhn7DsRlnGa3AfbbcM7g2QlTOkiinAaH7Y/+k0zgyOMl+3Y/Z /f+Wxm5rFqKXNMfjinrM7I6bppfNt1t90OEQAM77zMlOBZzQK3I1MdW+KCg4VPt1 tJqOnkE= -----END CERTIFICATE-----Generated at Wed Feb 19 20:44:01 2025 by rpki-client