$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/014D4C442FBE11F0A6052D6EC4F9AE02.roa File: 014D4C442FBE11F0A6052D6EC4F9AE02.roa (raw, json) Hash identifier: HvfmNqxFmcfKHCyNzxieUSHoMXYQTPtDcK7VdWvtNBU= Subject key identifier: 8A:FA:33:0C:94:FD:F0:83:0E:76:8C:B1:C1:E5:13:66:10:13:83:E1 Certificate issuer: /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138 Certificate serial: 0346 Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/014D4C442FBE11F0A6052D6EC4F9AE02.roa Signing time: Tue 13 May 2025 05:50:58 +0000 ROA not before: Tue 13 May 2025 05:50:58 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 153771 IP address blocks: 202.155.142.0/24 maxlen: 24 202.155.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 02:15:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 838 (0x346) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192C18, serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138 Validity Not Before: May 13 05:50:58 2025 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=6822ddc2-6bf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:82:2f:c8:ae:94:a0:00:7c:fa:83:e0:a2:d8: 2f:99:95:bf:be:fe:ae:a5:58:91:12:80:de:68:4c: fc:ef:9a:33:fe:0f:5a:a3:e9:75:3b:f0:22:ba:0f: 23:bc:6f:c1:07:d9:f5:03:7d:8a:9a:17:01:dd:c4: d4:2f:bd:d2:c3:7b:25:61:68:8e:fe:a1:eb:cb:14: b1:54:20:a5:95:28:9e:d4:5d:6f:5d:99:c3:db:02: d1:3d:a9:a4:78:26:3e:56:f9:f7:96:bb:13:84:10: bc:ca:e8:de:dd:3b:ea:6a:88:c4:44:43:d2:f7:a9: 4b:99:07:f1:2e:e0:a5:df:00:ac:62:88:01:54:06: dd:22:8a:97:30:58:09:41:28:08:8c:dc:f7:ed:fc: 53:bd:54:1a:91:3f:d1:c8:fd:be:b0:dd:fd:3b:9f: b3:68:94:a6:58:92:7d:cd:14:6f:09:7a:93:c4:83: 50:fd:e2:e7:13:7d:af:78:44:ff:cf:93:b2:7d:7a: a3:d3:ef:ca:ed:07:52:8a:7f:90:e0:57:75:bd:99: 4c:30:8f:ae:a5:53:58:b7:5d:38:88:34:15:0d:2c: 5f:9e:c0:d5:56:77:43:af:09:98:fd:26:a7:a5:43: e5:69:c3:60:75:b4:3a:9c:11:4d:8d:08:f7:00:22: 0d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:FA:33:0C:94:FD:F0:83:0E:76:8C:B1:C1:E5:13:66:10:13:83:E1 X509v3 Authority Key Identifier: keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/014D4C442FBE11F0A6052D6EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.155.142.0/24 202.155.158.0/24 Signature Algorithm: sha256WithRSAEncryption 74:3f:3a:b9:c2:14:ce:3c:41:0c:11:06:49:63:1d:ec:8b:91: d7:6b:be:6c:3e:d8:35:c5:ab:14:8f:b6:0c:02:bb:c3:41:a9: 05:ba:b4:64:c8:c4:68:b1:9b:e6:6e:c4:d2:87:5f:75:be:d8: 04:b7:70:be:67:12:44:31:c2:07:84:92:df:12:7a:f9:09:c1: 7a:87:29:ce:fb:33:03:71:cb:aa:d3:e7:65:29:5a:c6:41:75: d0:69:a3:e9:d4:ad:91:26:29:e5:f9:b0:5c:35:15:92:2f:24: 9a:17:33:3b:fc:72:d7:40:7f:63:77:04:fa:52:da:f0:6d:8c: 8f:ed:2e:5b:ea:02:cd:c4:82:46:89:53:a2:29:6c:d5:26:ce: 63:f6:42:31:b8:db:41:fb:1c:ce:b5:7c:a6:b9:3e:88:05:dc: e7:c9:5f:76:12:92:b2:58:75:9b:10:3f:64:be:f3:c4:8d:83: fb:e4:a5:a8:f7:a6:c7:30:d9:61:a2:9f:44:e1:09:61:05:4f: f7:89:e8:02:24:a3:40:48:6b:29:5c:48:44:5a:08:df:cf:0e: ca:55:a1:06:d7:ce:4b:d8:47:b9:67:42:4b:4f:1a:2c:b8:6a: 74:43:83:8e:a6:5e:32:7a:8f:e6:0e:fa:5c:fa:dc:cf:c7:58: 74:66:a6:9e -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICA0YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJDMTgxMTAvBgNVBAUTKEYxRkUwQzMyN0U3OUU1QUY0M0UxNUIwRTZGOENENjZD MDMyOUQxMzgwHhcNMjUwNTEzMDU1MDU4WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODIyZGRjMi02YmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzoIvyK6UoAB8+oPgotgvmZW/vv6upViREoDeaEz875oz/g9ao+l1O/Aiug8j vG/BB9n1A32KmhcB3cTUL73Sw3slYWiO/qHryxSxVCCllSie1F1vXZnD2wLRPamk eCY+Vvn3lrsThBC8yuje3TvqaojEREPS96lLmQfxLuCl3wCsYogBVAbdIoqXMFgJ QSgIjNz37fxTvVQakT/RyP2+sN39O5+zaJSmWJJ9zRRvCXqTxINQ/eLnE32veET/ z5OyfXqj0+/K7QdSin+Q4Fd1vZlMMI+upVNYt104iDQVDSxfnsDVVndDrwmY/San pUPlacNgdbQ6nBFNjQj3ACIN7QIDAQABo4ICmzCCApcwHQYDVR0OBBYEFIr6MwyU /fCDDnaMscHlE2YQE4PhMB8GA1UdIwQYMBaAFPH+DDJ+eeWvQ+FbDm+M1mwDKdE4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkMxOC85QTVFRUE4QzNE RjQxMUVEODA0MUY5MzBDNEY5QUUwMi84ZjRNTW41NTVhOUQ0VnNPYjR6V2JBTXAw VGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhmNE1NbjU1NWE5RDRWc09iNHpXYkFNcDBUZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTJDMTgvOUE1RUVBOEMzREY0MTFFRDgwNDFGOTMwQzRGOUFFMDIvMDE0RDRDNDQy RkJFMTFGMEE2MDUyRDZFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBADKm44DBADKm54wDQYJKoZIhvcNAQELBQADggEBAHQ/OrnC FM48QQwRBkljHeyLkddrvmw+2DXFqxSPtgwCu8NBqQW6tGTIxGixm+ZuxNKHX3W+ 2AS3cL5nEkQxwgeEkt8SevkJwXqHKc77MwNxy6rT52UpWsZBddBpo+nUrZEmKeX5 sFw1FZIvJJoXMzv8ctdAf2N3BPpS2vBtjI/tLlvqAs3EgkaJU6IpbNUmzmP2QjG4 20H7HM61fKa5PogF3OfJX3YSkrJYdZsQP2S+88SNg/vkpaj3pscw2WGin0ThCWEF T/eJ6AIko0BIaylcSERaCN/PDspVoQbXzkvYR7lnQktPGiy4anRDg46mXjJ6j+YO +lz63M/HWHRmpp4= -----END CERTIFICATE-----Generated at Mon Jun 2 06:27:03 2025 by rpki-client