$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/212DD5DEEFCB11EFBA51D367C4F9AE02.roa File: 212DD5DEEFCB11EFBA51D367C4F9AE02.roa (raw, json) Hash identifier: j9uwlF1XU1bhm01I4UfNei0qn7GHjRRQXfewbREQbL0= Subject key identifier: 56:ED:72:0E:8C:78:A1:0D:D4:2D:CA:F4:94:9F:DB:E9:38:20:C0:77 Certificate issuer: /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D Certificate serial: 043D Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/212DD5DEEFCB11EFBA51D367C4F9AE02.roa Signing time: Thu 20 Feb 2025 20:41:59 +0000 ROA not before: Thu 20 Feb 2025 20:41:59 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 26383 IP address blocks: 203.32.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 01:03:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1085 (0x43d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FC75 Validity Not Before: Feb 20 20:41:59 2025 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=67b79396-a21a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:11:36:c9:5b:be:ca:8e:0b:9f:dc:e9:ff:ee: c1:bc:14:b5:51:ec:d5:bb:c4:21:49:6b:84:4c:ae: d3:f8:7b:c6:a9:07:ce:73:8e:dd:ef:21:7e:86:94: 01:5d:14:2b:79:23:6f:c8:40:df:d5:60:0a:28:2c: 8e:bc:4b:13:49:3f:86:8e:e6:87:55:ef:5c:40:b4: 6b:e8:5f:19:cc:dd:1b:33:6f:74:24:ea:ab:e5:13: 71:8e:36:18:cb:e5:72:39:e0:87:8c:f4:e9:4b:67: e0:a4:41:57:d1:ae:00:bb:d9:22:53:33:16:03:0d: 53:f3:0a:92:69:d3:3d:83:0e:88:7f:16:3b:fa:a5: 24:20:63:c5:de:76:9b:89:ba:b6:c4:c2:65:b5:3d: 6f:53:18:42:15:84:9a:9a:b2:ca:a9:45:6a:50:91: 46:db:80:a7:ba:b4:3e:e6:c9:07:3f:5a:79:ce:21: 60:1a:1c:fb:51:1c:41:47:4e:f7:72:0f:90:05:9c: e6:2c:38:7b:bd:4b:64:1d:11:5f:39:60:a2:dc:53: 97:56:9c:e5:97:12:6e:80:4a:3c:d5:88:f6:03:f2: 44:a2:88:43:96:d7:1a:e3:ce:ac:c3:3c:09:16:87: 3b:c9:d6:65:a7:75:9c:61:46:c8:a2:c9:13:d7:c5: 7f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:ED:72:0E:8C:78:A1:0D:D4:2D:CA:F4:94:9F:DB:E9:38:20:C0:77 X509v3 Authority Key Identifier: keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/212DD5DEEFCB11EFBA51D367C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.32.26.0/24 Signature Algorithm: sha256WithRSAEncryption 94:54:11:6b:f8:65:48:14:82:88:6e:41:cd:08:b0:7d:19:45: 43:2b:3a:28:2b:d4:0a:c0:d8:42:66:c4:9e:10:2b:1d:76:7e: d5:b1:3a:08:99:e6:d4:4d:86:0f:5b:58:2f:c3:09:b0:c1:47: 2c:6a:77:43:45:b9:d6:cc:66:3a:9a:f9:73:5c:93:71:5a:6e: e7:db:1d:37:7f:cf:2c:e7:f9:f3:5a:f8:52:75:93:80:1a:3f: 2e:85:8c:dc:db:af:bc:cc:5b:4a:a1:c5:ee:54:b6:71:29:0c: b6:e5:b8:cf:85:0e:c6:2a:5a:f4:4e:20:b8:48:aa:bd:0d:0d: 1a:6b:10:f9:a4:68:fa:c3:e1:be:d5:69:73:bb:89:7e:e6:8a: 46:77:34:e2:ff:c3:10:eb:0c:bc:01:f3:7a:c6:18:fb:f2:3d: e2:4a:cf:2c:67:a3:11:c1:63:bf:8b:b4:12:de:f0:95:50:ff: 4a:75:ae:ab:e4:fa:82:2c:16:99:d6:20:2f:e8:58:b1:5f:b9: 2b:04:76:f5:f6:e9:3f:4a:ae:c3:6b:c9:3e:6c:69:96:af:5a: a5:c7:3a:d8:47:33:e7:a7:22:36:07:ac:b5:7d:48:f7:f0:01: 63:91:42:45:58:45:15:8d:39:4e:b2:d2:aa:3e:91:5a:96:88: 21:a3:83:da -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBD0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZDNzUxMTAvBgNVBAUTKDQ4MkU1QTZFMDg5NkEyNjZBOTFBNDA2NkMwNkY0QjRF RDk4NDY0OUQwHhcNMjUwMjIwMjA0MTU5WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2I3OTM5Ni1hMjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuxE2yVu+yo4Ln9zp/+7BvBS1UezVu8QhSWuETK7T+HvGqQfOc47d7yF+hpQB XRQreSNvyEDf1WAKKCyOvEsTST+GjuaHVe9cQLRr6F8ZzN0bM290JOqr5RNxjjYY y+VyOeCHjPTpS2fgpEFX0a4Au9kiUzMWAw1T8wqSadM9gw6IfxY7+qUkIGPF3nab ibq2xMJltT1vUxhCFYSamrLKqUVqUJFG24CnurQ+5skHP1p5ziFgGhz7URxBR073 cg+QBZzmLDh7vUtkHRFfOWCi3FOXVpzllxJugEo81Yj2A/JEoohDltca486swzwJ Foc7ydZlp3WcYUbIoskT18V/UwIDAQABo4IClTCCApEwHQYDVR0OBBYEFFbtcg6M eKEN1C3K9JSf2+k4IMB3MB8GA1UdIwQYMBaAFEguWm4IlqJmqRpAZsBvS07ZhGSd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkM3NS8zQUE1REVFMERE NTgxMUVDODcwRkMyMERDNEY5QUUwMi9TQzVhYmdpV29tYXBHa0Jtd0c5TFR0bUVa SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NDNWFiZ2lXb21hcEdrQm13RzlMVHRtRVpKMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEZDNzUvM0FBNURFRTBERDU4MTFFQzg3MEZDMjBEQzRGOUFFMDIvMjEyREQ1REVF RkNCMTFFRkJBNTFEMzY3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADLIBowDQYJKoZIhvcNAQELBQADggEBAJRUEWv4ZUgUgohu Qc0IsH0ZRUMrOigr1ArA2EJmxJ4QKx12ftWxOgiZ5tRNhg9bWC/DCbDBRyxqd0NF udbMZjqa+XNck3FabufbHTd/zyzn+fNa+FJ1k4AaPy6FjNzbr7zMW0qhxe5UtnEp DLbluM+FDsYqWvROILhIqr0NDRprEPmkaPrD4b7VaXO7iX7mikZ3NOL/wxDrDLwB 83rGGPvyPeJKzyxnoxHBY7+LtBLe8JVQ/0p1rqvk+oIsFpnWIC/oWLFfuSsEdvX2 6T9KrsNryT5saZavWqXHOthHM+enIjYHrLV9SPfwAWORQkVYRRWNOU6y0qo+kVqW iCGjg9o= -----END CERTIFICATE-----Generated at Fri Apr 11 13:12:11 2025 by rpki-client