$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/90A6E260F97711EF931B0A48C4F9AE02.roa File: 90A6E260F97711EF931B0A48C4F9AE02.roa (raw, json) Hash identifier: yNt3+76oxiczQlWAKFrrom/dgPrfFKQXLtrONN2mqsc= Subject key identifier: 9A:F2:0F:69:CB:6B:A3:AF:EE:CB:52:F5:92:31:D3:FD:B2:46:12:DF Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264 Certificate serial: 0CAA Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/90A6E260F97711EF931B0A48C4F9AE02.roa Signing time: Wed 05 Mar 2025 04:09:00 +0000 ROA not before: Wed 05 Mar 2025 04:09:00 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 36352 IP address blocks: 14.192.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 20:17:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3242 (0xcaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A0CD Validity Not Before: Mar 5 04:09:00 2025 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=67c7ce5b-bafc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:71:0e:b4:ad:94:7c:67:62:3e:3b:fa:20:85: dc:97:b3:9e:8e:d9:93:e7:19:14:f3:2f:79:b8:b3: 6d:87:72:7f:c8:7f:54:0b:b2:93:ac:14:b4:c3:d9: c3:3a:90:f3:95:99:d3:1a:b6:a5:a6:ab:67:74:f2: ab:25:ae:a6:66:b0:11:35:d4:59:1c:e4:3d:4f:a3: 7a:2f:0a:43:02:d9:db:4b:e7:1d:ed:f2:ba:fa:56: 2c:50:a5:94:a7:c6:35:b2:b4:22:42:b5:de:88:0c: 8b:c0:2b:0a:19:f4:74:97:22:ed:0a:02:4d:af:5c: 15:d0:f8:4c:4f:fe:96:0f:b7:2e:96:17:82:1b:19: ff:d8:49:0c:ea:ad:c5:a3:fc:85:11:df:e4:dc:25: 15:3d:8d:09:76:c2:5f:a3:56:0b:09:c3:66:31:8e: b1:df:07:78:34:fe:f5:e2:49:e8:c7:c1:62:20:6b: d3:1b:e2:7f:ae:39:bd:f8:25:7d:13:17:ca:8d:b2: 7a:16:20:8f:7d:eb:0a:a4:46:52:51:0c:6e:b5:52: c9:5c:60:35:ce:fd:50:73:a7:e9:c9:4f:5f:5c:07: 93:72:58:fc:07:f4:fc:a9:de:b1:06:c6:1e:81:4f: 00:e1:e4:20:70:ec:6b:05:27:1d:f8:c8:ae:a7:de: b2:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:F2:0F:69:CB:6B:A3:AF:EE:CB:52:F5:92:31:D3:FD:B2:46:12:DF X509v3 Authority Key Identifier: keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/90A6E260F97711EF931B0A48C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 14.192.146.0/24 Signature Algorithm: sha256WithRSAEncryption a5:19:cb:d9:8e:af:18:21:10:d2:48:37:ea:80:bd:45:2f:9a: 45:a8:96:ed:9f:f2:f8:10:75:2c:03:8a:a8:89:7c:d4:1f:00: f9:6d:e6:d3:23:50:77:df:32:1e:a1:17:9b:8d:41:42:a8:75: 56:41:f5:cd:71:73:ad:42:e3:73:7b:83:f9:0e:b4:e8:c2:16: 71:ff:8b:85:3e:d4:08:bf:c8:af:78:fe:88:80:8e:4b:3a:2d: 34:e7:ca:e6:b6:61:eb:a6:f8:95:08:8b:fe:3c:9a:71:92:09: a3:72:d4:d8:12:b1:94:cb:ad:9d:4c:38:b2:60:6e:2c:37:01: d6:8a:b7:c5:73:85:8f:22:04:60:a7:41:23:ce:c0:44:cf:1f: 5f:3e:89:e8:29:79:ff:c6:0c:2a:e6:0a:f0:b3:1d:35:32:39: e7:71:8e:b9:57:97:d2:ae:4e:5b:24:48:41:07:49:a5:57:9a: 7e:12:19:20:0d:f9:82:d4:01:9c:81:1c:e9:e1:fe:86:90:cc: 91:c0:14:cc:5f:48:54:de:f7:f4:53:32:14:2a:7b:e1:0b:f3: 42:59:0c:eb:ff:34:fe:c3:78:dd:b0:71:15:95:73:0f:d8:a8: d8:9e:01:56:34:5e:4d:81:3f:67:0b:ab:62:ad:9b:0f:25:0f: f0:da:18:ef -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEwQ0QxMTAvBgNVBAUTKDM4MTkzNzIwODIxRTA3RDY5MThFM0E3OUZCRTA4MjND NjczMkUyNjQwHhcNMjUwMzA1MDQwOTAwWhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02N2M3Y2U1Yi1iYWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArHEOtK2UfGdiPjv6IIXcl7OejtmT5xkU8y95uLNth3J/yH9UC7KTrBS0w9nD OpDzlZnTGralpqtndPKrJa6mZrARNdRZHOQ9T6N6LwpDAtnbS+cd7fK6+lYsUKWU p8Y1srQiQrXeiAyLwCsKGfR0lyLtCgJNr1wV0PhMT/6WD7culheCGxn/2EkM6q3F o/yFEd/k3CUVPY0JdsJfo1YLCcNmMY6x3wd4NP714knox8FiIGvTG+J/rjm9+CV9 ExfKjbJ6FiCPfesKpEZSUQxutVLJXGA1zv1Qc6fpyU9fXAeTclj8B/T8qd6xBsYe gU8A4eQgcOxrBScd+Miup96ytQIDAQABo4IClTCCApEwHQYDVR0OBBYEFJryD2nL a6Ov7stS9ZIx0/2yRhLfMB8GA1UdIwQYMBaAFDgZNyCCHgfWkY46efvggjxnMuJk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBDRC80NjcyM0YxRTg5 RUMxMUVBODFDMDRGMUVDNEY5QUUwMi9PQmszSUlJZUI5YVJqanA1LS1DQ1BHY3k0 bVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09CazNJSUllQjlhUmpqcDUtLUNDUEdjeTRtUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUEwQ0QvNDY3MjNGMUU4OUVDMTFFQTgxQzA0RjFFQzRGOUFFMDIvOTBBNkUyNjBG OTc3MTFFRjkzMUIwQTQ4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAOwJIwDQYJKoZIhvcNAQELBQADggEBAKUZy9mOrxghENJI N+qAvUUvmkWolu2f8vgQdSwDiqiJfNQfAPlt5tMjUHffMh6hF5uNQUKodVZB9c1x c61C43N7g/kOtOjCFnH/i4U+1Ai/yK94/oiAjks6LTTnyua2Yeum+JUIi/48mnGS CaNy1NgSsZTLrZ1MOLJgbiw3AdaKt8VzhY8iBGCnQSPOwETPH18+iegpef/GDCrm CvCzHTUyOedxjrlXl9KuTlskSEEHSaVXmn4SGSAN+YLUAZyBHOnh/oaQzJHAFMxf SFTe9/RTMhQqe+EL80JZDOv/NP7DeN2wcRWVcw/YqNieAVY0Xk2BP2cLq2Ktmw8l D/DaGO8= -----END CERTIFICATE-----Generated at Sat Apr 5 10:46:44 2025 by rpki-client