$ rpki-client -vvf rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/9A014CF430D811F0A444B26EC4F9AE02.roa File: 9A014CF430D811F0A444B26EC4F9AE02.roa (raw, json) Hash identifier: C8ptyGvwWlQzeSGOofAg4DZdLAMRxqC9y9f9rO1gP40= Subject key identifier: E6:73:03:09:03:6D:2C:2C:55:05:83:24:9B:45:6D:8C:DC:8D:92:16 Certificate issuer: /CN=A917E458/serialNumber=54DE99950B7FC9581FE8AC961F37B7898F35CDC3 Certificate serial: 02 Authority key identifier: 54:DE:99:95:0B:7F:C9:58:1F:E8:AC:96:1F:37:B7:89:8F:35:CD:C3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VN6ZlQt_yVgf6KyWHze3iY81zcM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/9A014CF430D811F0A444B26EC4F9AE02.roa Signing time: Wed 14 May 2025 15:32:11 +0000 ROA not before: Wed 14 May 2025 15:32:11 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 140919 IP address blocks: 165.99.38.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.crl rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VN6ZlQt_yVgf6KyWHze3iY81zcM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 07:30:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E458, serialNumber=54DE99950B7FC9581FE8AC961F37B7898F35CDC3 Validity Not Before: May 14 15:32:11 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=6824b77a-af8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:32:95:57:2d:0b:43:1b:34:c6:32:e4:b5:18: 20:0f:de:8a:6e:69:e6:0a:68:10:0d:d5:5d:ae:7a: 7a:b9:7c:fa:cd:53:75:8e:e7:1d:f5:4e:66:4f:0d: be:09:40:cd:d7:a0:c8:f8:86:f1:44:c6:6b:99:cd: 45:1e:41:4c:b5:9b:4b:44:fa:76:03:69:1d:86:c3: f0:3a:9f:97:a8:53:1a:a0:3b:f0:53:b3:6b:09:fd: 08:93:d3:96:4a:06:37:8d:83:df:5e:88:10:ff:75: a7:e3:77:39:64:ef:e0:39:4d:f6:83:22:7c:0b:82: 1e:f2:cd:1b:c0:92:0f:98:f8:f7:5f:42:ed:85:5f: 4f:ea:2f:b6:c1:b2:bc:12:23:97:04:0a:9b:ce:4f: 33:50:26:3d:fb:a8:69:42:e9:42:6a:e4:55:7b:07: c0:53:3a:7d:c9:97:75:31:30:8e:06:db:f4:c8:ea: c5:74:84:bb:7e:f4:a5:a5:a2:fb:aa:bc:3e:db:04: 58:3e:e1:85:31:d7:e2:7a:02:0b:aa:e4:1f:2d:fa: 50:e3:c0:96:28:28:f5:bd:92:95:30:e2:cb:cc:7e: 39:1f:b5:5b:38:45:09:57:74:c6:3d:9a:57:83:93: 85:cd:bd:ee:85:b3:74:aa:95:03:ea:18:c0:9c:d6: 7f:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:73:03:09:03:6D:2C:2C:55:05:83:24:9B:45:6D:8C:DC:8D:92:16 X509v3 Authority Key Identifier: keyid:54:DE:99:95:0B:7F:C9:58:1F:E8:AC:96:1F:37:B7:89:8F:35:CD:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VN6ZlQt_yVgf6KyWHze3iY81zcM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/9A014CF430D811F0A444B26EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 165.99.38.0/23 Signature Algorithm: sha256WithRSAEncryption 2d:32:56:36:cd:32:06:c9:fc:de:41:95:71:c5:61:7b:b6:b9: b5:69:ed:35:c6:16:e2:1c:ef:fc:64:8a:18:8b:29:c6:12:e5: da:22:1f:73:18:70:f7:97:f0:93:93:a1:fa:ca:b6:5c:55:c8: 3c:1b:4e:b9:e1:64:59:b3:bc:5d:82:1a:e6:7f:c4:8b:ba:4c: fe:df:1b:81:a6:b8:a7:ec:33:05:49:e7:8b:a3:44:eb:8e:ab: a8:3b:1f:80:42:92:7e:d6:fa:d2:05:24:f4:60:71:71:d3:8d: 68:cf:89:71:c0:6b:20:83:40:95:22:0b:4e:87:f1:c2:6f:d3: d3:4b:c0:83:a1:60:7c:dd:fe:bf:d7:76:5d:51:84:75:33:dd: 15:87:40:5d:e2:94:7f:1c:13:fd:7a:4c:f5:bc:b7:a3:c3:80: f1:c7:f7:c4:fc:2a:b9:d6:7f:27:fc:c4:44:36:a8:bc:2c:21: cc:0c:6f:1e:be:45:c7:52:df:26:93:69:22:fc:84:b4:63:3f: 30:9a:fb:7b:0d:98:9b:06:bd:f1:6f:c9:87:0a:69:c3:c4:50: 55:34:75:ab:aa:f3:a1:60:0e:f6:20:a8:23:65:f9:96:91:b0: 2a:5a:17:3e:8f:d3:ca:1e:06:5c:1b:a3:ca:1a:2e:a6:28:78: 0d:7c:05:9c -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RTQ1ODExMC8GA1UEBRMoNTRERTk5OTUwQjdGQzk1ODFGRThBQzk2MUYzN0I3ODk4 RjM1Q0RDMzAeFw0yNTA1MTQxNTMyMTFaFw0yNjA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4MjRiNzdhLWFmOGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHMpVXLQtDGzTGMuS1GCAP3opuaeYKaBAN1V2uenq5fPrNU3WO5x31TmZPDb4J QM3XoMj4hvFExmuZzUUeQUy1m0tE+nYDaR2Gw/A6n5eoUxqgO/BTs2sJ/QiT05ZK BjeNg99eiBD/dafjdzlk7+A5TfaDInwLgh7yzRvAkg+Y+PdfQu2FX0/qL7bBsrwS I5cECpvOTzNQJj37qGlC6UJq5FV7B8BTOn3Jl3UxMI4G2/TI6sV0hLt+9KWlovuq vD7bBFg+4YUx1+J6Aguq5B8t+lDjwJYoKPW9kpUw4svMfjkftVs4RQlXdMY9mleD k4XNve6Fs3SqlQPqGMCc1n8vAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU5nMDCQNt LCxVBYMkm0VtjNyNkhYwHwYDVR0jBBgwFoAUVN6ZlQt/yVgf6KyWHze3iY81zcMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdFNDU4LzFFQzcyRjIyMzBE ODExRjBBN0JFMkU0RkM0RjlBRTAyL1ZONlpsUXRfeVZnZjZLeVdIemUzaVk4MXpj TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVk42WmxRdF95VmdmNkt5V0h6ZTNpWTgxemNNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTQ1OC8xRUM3MkYyMjMwRDgxMUYwQTdCRTJFNEZDNEY5QUUwMi85QTAxNENGNDMw RDgxMUYwQTQ0NEIyNkVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaVjJjANBgkqhkiG9w0BAQsFAAOCAQEALTJWNs0yBsn83kGV ccVhe7a5tWntNcYW4hzv/GSKGIspxhLl2iIfcxhw95fwk5Oh+sq2XFXIPBtOueFk WbO8XYIa5n/Ei7pM/t8bgaa4p+wzBUnni6NE646rqDsfgEKSftb60gUk9GBxcdON aM+JccBrIINAlSILTofxwm/T00vAg6FgfN3+v9d2XVGEdTPdFYdAXeKUfxwT/XpM 9by3o8OA8cf3xPwqudZ/J/zERDaovCwhzAxvHr5Fx1LfJpNpIvyEtGM/MJr7ew2Y mwa98W/Jhwppw8RQVTR1q6rzoWAO9iCoI2X5lpGwKloXPo/Tyh4GXBujyhoupih4 DXwFnA== -----END CERTIFICATE-----Generated at Thu Jun 5 19:59:33 2025 by rpki-client