$ rpki-client -vvf rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/4524F69EF73211EE8BA96C65C4F9AE02.roa File: 4524F69EF73211EE8BA96C65C4F9AE02.roa (raw, json) Hash identifier: b/6uKuOBQOCAf1O3SZSHMcVD1+K7GM0OQRNX6RqtTnM= Subject key identifier: 62:40:0D:06:30:3A:61:30:48:3F:6C:35:AC:F3:2B:D8:D3:4E:98:6C Certificate issuer: /CN=A915D03A/serialNumber=615ED84C44E657F7095E0212AFEA052C542A0D91 Certificate serial: 1965 Authority key identifier: 61:5E:D8:4C:44:E6:57:F7:09:5E:02:12:AF:EA:05:2C:54:2A:0D:91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YV7YTETmV_cJXgISr-oFLFQqDZE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/4524F69EF73211EE8BA96C65C4F9AE02.roa Signing time: Tue 14 Jan 2025 16:34:28 +0000 ROA not before: Tue 14 Jan 2025 16:34:28 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 7470 IP address blocks: 118.214.2.0/24 maxlen: 24 118.215.120.0/21 maxlen: 21 125.56.198.0/24 maxlen: 24 125.252.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.crl rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YV7YTETmV_cJXgISr-oFLFQqDZE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6501 (0x1965) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D03A Validity Not Before: Jan 14 16:34:28 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=67869213-010c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:94:a9:e2:0f:1c:ed:21:28:a1:80:ee:a5:0b: 6b:8f:1a:10:1e:c7:de:58:7c:04:76:a8:92:46:87: d9:8a:45:27:13:c7:2b:25:b8:8b:42:d6:66:58:1d: f3:88:48:60:18:35:27:75:1f:52:52:2f:d5:e6:56: c5:79:ce:16:58:99:00:4e:7e:b2:55:e9:8f:40:b2: ef:31:66:ac:2f:ea:d0:1a:fc:f1:85:b3:15:e4:47: 35:93:29:04:f3:18:18:90:d9:f9:8d:9a:28:12:c1: 8f:a3:40:ef:94:ee:fe:9d:8a:7a:b6:24:9b:73:67: e4:1c:af:46:6e:09:27:1c:5d:b0:98:7d:61:97:33: 4d:27:35:24:a1:5d:eb:a2:18:7e:82:ad:52:07:08: ec:b5:e4:55:90:35:f7:cb:b6:e9:3b:26:39:d4:48: b8:f3:c3:1b:e9:9e:a5:89:b9:30:41:38:25:d0:72: f7:a0:36:10:7f:a7:0d:ae:16:ba:32:85:ba:bf:f5: f3:db:57:89:de:ab:a7:e7:c8:af:0b:f2:c3:99:7f: 46:66:6b:40:eb:91:0c:9e:d2:ed:b1:51:6a:0f:12: c6:79:ca:41:94:72:b9:a1:a7:04:f4:4e:b5:be:3e: 82:bf:ec:d5:f1:bf:47:41:59:61:fe:3b:35:46:6f: a8:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:40:0D:06:30:3A:61:30:48:3F:6C:35:AC:F3:2B:D8:D3:4E:98:6C X509v3 Authority Key Identifier: keyid:61:5E:D8:4C:44:E6:57:F7:09:5E:02:12:AF:EA:05:2C:54:2A:0D:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YV7YTETmV_cJXgISr-oFLFQqDZE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/4524F69EF73211EE8BA96C65C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 118.214.2.0/24 118.215.120.0/21 125.56.198.0/24 125.252.240.0/21 Signature Algorithm: sha256WithRSAEncryption 36:58:6c:e0:ea:e9:12:7c:ba:93:5b:52:fb:ab:ce:e6:85:98: 8b:bd:ba:fd:b1:43:8b:25:51:e8:d1:a6:fe:f1:b0:69:0c:c9: 78:f5:27:d0:28:a1:ae:0d:9c:8a:f1:94:59:95:09:c0:2a:43: 5c:db:e5:dc:6e:86:58:19:08:6d:7d:46:07:c1:fc:dc:94:ec: 34:3a:c7:b9:8c:a2:2c:2e:0a:cc:45:37:63:ae:76:d6:0b:9f: 6d:05:51:f0:7a:c3:2a:9d:24:f4:7b:81:a2:30:e7:67:a9:d8: 51:a0:1e:33:74:e3:f9:df:1c:c6:20:fc:de:b3:ee:27:03:0c: df:40:cc:a6:ff:0f:cc:ed:f4:a4:c5:71:7d:1e:70:71:ed:95: 6b:e0:62:e9:60:10:0b:21:6d:3c:f5:85:10:a4:c1:b1:c9:5c: e4:48:69:78:24:00:ba:11:b8:04:f3:3b:b7:bc:c4:ba:b4:04: b5:09:5c:4d:2b:48:f0:3e:1b:3d:0b:18:d5:2e:1c:de:a8:cf: 63:9f:98:5c:d2:43:58:45:f2:db:59:bc:96:6c:7c:35:85:f2: 2e:64:65:ec:20:d6:67:c1:7e:49:8b:28:26:94:fb:e1:91:c0: dd:a4:77:2c:f6:da:b3:de:55:0c:c6:2b:0e:65:42:9b:90:e3: 9c:f7:e8:46 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICGWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQwM0ExMTAvBgNVBAUTKDYxNUVEODRDNDRFNjU3RjcwOTVFMDIxMkFGRUEwNTJD NTQyQTBEOTEwHhcNMjUwMTE0MTYzNDI4WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02Nzg2OTIxMy0wMTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7pSp4g8c7SEooYDupQtrjxoQHsfeWHwEdqiSRofZikUnE8crJbiLQtZmWB3z iEhgGDUndR9SUi/V5lbFec4WWJkATn6yVemPQLLvMWasL+rQGvzxhbMV5Ec1kykE 8xgYkNn5jZooEsGPo0DvlO7+nYp6tiSbc2fkHK9GbgknHF2wmH1hlzNNJzUkoV3r ohh+gq1SBwjsteRVkDX3y7bpOyY51Ei488Mb6Z6libkwQTgl0HL3oDYQf6cNrha6 MoW6v/Xz21eJ3qun58ivC/LDmX9GZmtA65EMntLtsVFqDxLGecpBlHK5oacE9E61 vj6Cv+zV8b9HQVlh/js1Rm+o2QIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFGJADQYw OmEwSD9sNazzK9jTTphsMB8GA1UdIwQYMBaAFGFe2ExE5lf3CV4CEq/qBSxUKg2R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDAzQS8xQjY0NzcxMDky NDYxMUU3OUFBRUJFMTBDNEY5QUUwMi9ZVjdZVEVUbVZfY0pYZ0lTci1vRkxGUXFE WkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lWN1lURVRtVl9jSlhnSVNyLW9GTEZRcURaRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUQwM0EvMUI2NDc3MTA5MjQ2MTFFNzlBQUVCRTEwQzRGOUFFMDIvNDUyNEY2OUVG NzMyMTFFRThCQTk2QzY1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBAB21gIDBAN213gDBAB9OMYDBAN9/PAwDQYJKoZIhvcNAQEL BQADggEBADZYbODq6RJ8upNbUvurzuaFmIu9uv2xQ4slUejRpv7xsGkMyXj1J9Ao oa4NnIrxlFmVCcAqQ1zb5dxuhlgZCG19RgfB/NyU7DQ6x7mMoiwuCsxFN2OudtYL n20FUfB6wyqdJPR7gaIw52ep2FGgHjN04/nfHMYg/N6z7icDDN9AzKb/D8zt9KTF cX0ecHHtlWvgYulgEAshbTz1hRCkwbHJXORIaXgkALoRuATzO7e8xLq0BLUJXE0r SPA+Gz0LGNUuHN6oz2OfmFzSQ1hF8ttZvJZsfDWF8i5kZewg1mfBfkmLKCaU++GR wN2kdyz22rPeVQzGKw5lQpuQ45z36EY= -----END CERTIFICATE-----Generated at Sun Apr 6 19:49:02 2025 by rpki-client