$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/BC7FD008F9A511EF885CA76EC4F9AE02.roa File: BC7FD008F9A511EF885CA76EC4F9AE02.roa (raw, json) Hash identifier: Ex7392prc1zunazGcvbevro7VL69lZXVyb5pMImsMLI= Subject key identifier: 38:DA:24:18:11:DC:62:44:3D:6F:6A:D0:36:AD:E5:D1:F8:E7:5D:AE Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264 Certificate serial: 0CBA Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/BC7FD008F9A511EF885CA76EC4F9AE02.roa Signing time: Wed 05 Mar 2025 09:39:30 +0000 ROA not before: Wed 05 Mar 2025 09:39:30 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 43260 IP address blocks: 14.192.134.0/24 maxlen: 24 111.92.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 19:55:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3258 (0xcba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264 Validity Not Before: Mar 5 09:39:30 2025 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=67c81bd2-2f51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:aa:d9:4f:d4:88:7f:89:04:1c:ba:fa:03:22: e2:61:0e:f7:23:8f:2e:12:a5:25:fd:84:8c:46:ae: 34:85:9f:06:d6:e3:64:87:b4:d6:06:b0:cd:48:ae: b4:b1:82:98:58:fa:fc:1e:00:da:eb:84:df:c2:bb: a2:ef:84:cd:f3:77:0e:16:d5:bf:37:1c:07:c9:08: d7:a1:95:f0:fb:94:b0:f6:e3:ee:1c:08:8a:a4:49: 7e:bc:f0:84:34:38:47:04:dc:f0:8b:7b:6f:3c:05: 7f:90:57:d0:c0:55:8d:5e:41:58:8d:c9:fd:13:a7: d3:3c:4d:2b:58:67:c4:b3:4d:f5:c4:be:17:e8:49: 19:d8:1a:a3:d5:9e:b6:73:69:ce:c1:8a:5a:c4:fc: f2:da:7e:b7:83:9b:16:18:6c:7f:3a:27:50:fd:68: 14:66:8b:0f:f5:e3:b7:66:a3:1e:90:de:4c:7f:0e: 46:0a:d2:cc:85:64:46:40:f8:f1:37:b6:51:f6:e0: 78:7a:ab:6b:24:1c:3e:dd:a0:27:ae:03:06:b8:12: 27:a3:3d:e3:30:b9:39:f4:70:9d:40:68:ed:2a:ac: 8a:be:24:9c:54:6a:ab:0a:c4:76:9a:7a:88:b3:48: 3a:07:fb:2b:79:e5:2d:22:55:84:11:d6:82:b2:43: a1:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:DA:24:18:11:DC:62:44:3D:6F:6A:D0:36:AD:E5:D1:F8:E7:5D:AE X509v3 Authority Key Identifier: keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/BC7FD008F9A511EF885CA76EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 14.192.134.0/24 111.92.138.0/24 Signature Algorithm: sha256WithRSAEncryption 78:9a:8f:ee:d7:51:91:78:0d:25:ff:43:b1:e2:db:86:c6:60: 18:6a:43:62:bc:75:ae:3c:76:eb:41:23:57:eb:15:73:02:b6: 3d:00:47:bd:20:23:21:7a:21:76:1f:eb:28:30:f4:b1:a0:1d: 2a:7b:0b:ad:13:f9:2c:d3:20:bb:4b:04:47:68:e2:b1:b5:36: 3a:19:ce:91:9b:c3:18:19:e0:e4:1e:4f:e5:47:2f:5f:8e:9a: 34:21:18:a2:7f:5f:a2:f8:26:bb:ad:73:9f:d5:9a:71:db:bd: 86:16:60:9f:8d:96:e9:2c:82:f0:89:8a:d0:61:f7:a8:60:a1: 55:1b:8b:4c:ac:d8:3d:a5:f1:9e:55:c4:21:68:cf:d2:67:28: cd:84:89:95:86:33:8e:4e:fd:4a:01:bb:22:2f:a5:0c:45:db: a5:ec:57:1e:e1:be:b2:46:5b:3a:be:8b:d1:cf:9a:81:c5:74: 46:cd:d5:56:06:15:1e:bf:74:2c:b6:01:83:f9:90:cf:18:a7: 3a:59:58:36:b6:cb:e5:c7:ed:c7:78:96:58:5d:ee:e1:2f:22: ba:3c:6d:ff:83:83:35:33:2e:b7:24:e5:16:3d:a1:49:1d:2f: e5:77:9b:90:c6:0b:53:92:c1:19:1d:2f:49:d2:bf:cf:8f:c1: bf:38:2f:8f -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICDLowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEwQ0QxMTAvBgNVBAUTKDM4MTkzNzIwODIxRTA3RDY5MThFM0E3OUZCRTA4MjND NjczMkUyNjQwHhcNMjUwMzA1MDkzOTMwWhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02N2M4MWJkMi0yZjUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA46rZT9SIf4kEHLr6AyLiYQ73I48uEqUl/YSMRq40hZ8G1uNkh7TWBrDNSK60 sYKYWPr8HgDa64Tfwrui74TN83cOFtW/NxwHyQjXoZXw+5Sw9uPuHAiKpEl+vPCE NDhHBNzwi3tvPAV/kFfQwFWNXkFYjcn9E6fTPE0rWGfEs031xL4X6EkZ2Bqj1Z62 c2nOwYpaxPzy2n63g5sWGGx/OidQ/WgUZosP9eO3ZqMekN5Mfw5GCtLMhWRGQPjx N7ZR9uB4eqtrJBw+3aAnrgMGuBInoz3jMLk59HCdQGjtKqyKviScVGqrCsR2mnqI s0g6B/sreeUtIlWEEdaCskOhhQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFDjaJBgR 3GJEPW9q0Dat5dH4512uMB8GA1UdIwQYMBaAFDgZNyCCHgfWkY46efvggjxnMuJk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBDRC80NjcyM0YxRTg5 RUMxMUVBODFDMDRGMUVDNEY5QUUwMi9PQmszSUlJZUI5YVJqanA1LS1DQ1BHY3k0 bVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09CazNJSUllQjlhUmpqcDUtLUNDUEdjeTRtUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUEwQ0QvNDY3MjNGMUU4OUVDMTFFQTgxQzA0RjFFQzRGOUFFMDIvQkM3RkQwMDhG OUE1MTFFRjg4NUNBNzZFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAAOwIYDBABvXIowDQYJKoZIhvcNAQELBQADggEBAHiaj+7X UZF4DSX/Q7Hi24bGYBhqQ2K8da48dutBI1frFXMCtj0AR70gIyF6IXYf6ygw9LGg HSp7C60T+SzTILtLBEdo4rG1NjoZzpGbwxgZ4OQeT+VHL1+OmjQhGKJ/X6L4Jrut c5/VmnHbvYYWYJ+NluksgvCJitBh96hgoVUbi0ys2D2l8Z5VxCFoz9JnKM2EiZWG M45O/UoBuyIvpQxF26XsVx7hvrJGWzq+i9HPmoHFdEbN1VYGFR6/dCy2AYP5kM8Y pzpZWDa2y+XH7cd4llhd7uEvIro8bf+DgzUzLrck5RY9oUkdL+V3m5DGC1OSwRkd L0nSv8+Pwb84L48= -----END CERTIFICATE-----Generated at Fri Apr 18 02:43:32 2025 by rpki-client