$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/6520648CCC3A11EF97B13E83C4F9AE02.roa File: 6520648CCC3A11EF97B13E83C4F9AE02.roa (raw, json) Hash identifier: cioPSnvxCV9MlKk+N+OKdKIZIjZxwbeh0ez1/CK80l4= Subject key identifier: 4F:36:05:5F:A7:F0:E8:10:EA:D7:09:92:6D:69:8E:21:75:7E:C1:F0 Certificate issuer: /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138 Certificate serial: 025B Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/6520648CCC3A11EF97B13E83C4F9AE02.roa Signing time: Sun 19 Jan 2025 04:33:37 +0000 ROA not before: Sun 19 Jan 2025 04:33:37 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 47741 IP address blocks: 202.155.144.0/21 maxlen: 24 202.155.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 02:37:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 603 (0x25b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192C18 Validity Not Before: Jan 19 04:33:37 2025 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=678c80a0-77ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:db:60:d9:ad:de:d3:31:e1:49:ba:a7:15:f5: ed:d6:b3:1e:b3:57:09:39:08:1b:9e:2e:5f:4f:9e: d3:2c:08:4a:84:de:ce:cd:50:e7:ba:86:0b:ab:f4: c1:6f:57:eb:33:21:5c:6f:36:14:a4:f6:b9:3f:ab: 06:c0:38:fb:fc:08:1e:59:57:6e:68:a8:03:6b:b4: d7:84:b8:d5:bf:b6:45:85:d1:b2:a6:de:35:ec:a3: 00:90:c9:34:03:11:31:9f:3e:46:f4:48:a9:9b:f5: a7:78:91:03:d8:f3:43:6a:5d:26:80:89:ba:89:cd: bf:d3:bf:e1:76:a9:1f:4f:d7:19:35:b5:49:c7:ac: 44:f5:f1:78:d7:d6:1c:43:f8:a9:4c:ef:bd:19:16: 81:0b:77:d1:98:cc:3a:a2:17:50:94:82:6e:64:5e: 25:f0:b9:c9:f1:c2:e6:b3:7b:ff:d7:b4:27:38:38: 31:59:10:5c:28:6f:0d:1b:0c:4a:55:eb:cc:2a:86: 94:0c:4c:bf:7b:9a:e2:ac:b3:fd:d1:d8:1f:28:3a: b8:39:e6:ac:06:47:4e:ad:0b:51:5c:25:60:89:43: 78:70:0f:62:a0:66:59:f4:fe:35:e1:08:38:9b:3d: c5:c7:91:d4:c0:39:2f:45:14:18:20:35:76:f2:1b: 62:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:36:05:5F:A7:F0:E8:10:EA:D7:09:92:6D:69:8E:21:75:7E:C1:F0 X509v3 Authority Key Identifier: keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/6520648CCC3A11EF97B13E83C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.155.144.0-202.155.155.255 Signature Algorithm: sha256WithRSAEncryption 00:91:ec:a4:fd:69:3d:17:9c:a6:0e:da:be:22:8c:a5:e6:fc: cc:7d:6a:b1:e1:03:48:44:66:43:b7:8b:af:c8:f0:94:ef:f2: e0:ae:40:36:95:94:01:2a:24:e7:38:24:e7:80:94:03:ef:9e: 42:3f:23:c6:50:41:3c:b2:3e:32:a8:f4:02:4b:3f:81:6e:ce: 95:36:db:46:a1:b7:a6:e2:25:4f:5c:56:b2:e5:b7:e1:43:f5: 09:ee:73:a1:00:77:fe:ae:7f:18:e8:c6:5b:1c:2d:5e:fb:88: 77:9b:13:0e:51:ed:68:cd:7f:5e:dd:15:d8:81:ad:15:2e:96: 27:a1:9a:87:05:f5:08:13:a9:1c:6a:af:54:86:9e:eb:b7:c9: 3a:9a:36:99:1e:69:f7:26:da:1d:70:5f:c6:d3:ed:b4:73:e0: 32:93:9f:c2:b7:21:83:4e:93:9e:54:ae:43:8b:98:13:90:51: 3b:2f:5c:26:69:b0:ba:8d:62:39:ec:d4:1b:f6:c8:c4:14:a4: 37:4a:74:44:95:d5:64:a0:61:21:84:a4:2c:dc:6c:f5:ff:c9: e5:a6:b2:3e:12:bb:9b:5f:7e:5e:8d:6a:ba:d5:b8:b0:a1:ae: a4:ea:61:56:60:22:dd:e2:03:b2:31:b3:e0:79:10:02:07:0a: 8a:9c:a0:7f -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgICAlswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJDMTgxMTAvBgNVBAUTKEYxRkUwQzMyN0U3OUU1QUY0M0UxNUIwRTZGOENENjZD MDMyOUQxMzgwHhcNMjUwMTE5MDQzMzM3WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzhjODBhMC03N2VlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Ntg2a3e0zHhSbqnFfXt1rMes1cJOQgbni5fT57TLAhKhN7OzVDnuoYLq/TB b1frMyFcbzYUpPa5P6sGwDj7/AgeWVduaKgDa7TXhLjVv7ZFhdGypt417KMAkMk0 AxExnz5G9Eipm/WneJED2PNDal0mgIm6ic2/07/hdqkfT9cZNbVJx6xE9fF419Yc Q/ipTO+9GRaBC3fRmMw6ohdQlIJuZF4l8LnJ8cLms3v/17QnODgxWRBcKG8NGwxK VevMKoaUDEy/e5rirLP90dgfKDq4OeasBkdOrQtRXCVgiUN4cA9ioGZZ9P414Qg4 mz3Fx5HUwDkvRRQYIDV28hti3wIDAQABo4ICnTCCApkwHQYDVR0OBBYEFE82BV+n 8OgQ6tcJkm1pjiF1fsHwMB8GA1UdIwQYMBaAFPH+DDJ+eeWvQ+FbDm+M1mwDKdE4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkMxOC85QTVFRUE4QzNE RjQxMUVEODA0MUY5MzBDNEY5QUUwMi84ZjRNTW41NTVhOUQ0VnNPYjR6V2JBTXAw VGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhmNE1NbjU1NWE5RDRWc09iNHpXYkFNcDBUZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTJDMTgvOUE1RUVBOEMzREY0MTFFRDgwNDFGOTMwQzRGOUFFMDIvNjUyMDY0OEND QzNBMTFFRjk3QjEzRTgzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E GDAWMBQEAgABMA4wDAMEBMqbkAMEAsqbmDANBgkqhkiG9w0BAQsFAAOCAQEAAJHs pP1pPRecpg7aviKMpeb8zH1qseEDSERmQ7eLr8jwlO/y4K5ANpWUASok5zgk54CU A++eQj8jxlBBPLI+Mqj0Aks/gW7OlTbbRqG3puIlT1xWsuW34UP1Ce5zoQB3/q5/ GOjGWxwtXvuId5sTDlHtaM1/Xt0V2IGtFS6WJ6GahwX1CBOpHGqvVIae67fJOpo2 mR5p9ybaHXBfxtPttHPgMpOfwrchg06TnlSuQ4uYE5BROy9cJmmwuo1iOezUG/bI xBSkN0p0RJXVZKBhIYSkLNxs9f/J5aayPhK7m19+Xo1qutW4sKGupOphVmAi3eID sjGz4HkQAgcKipygfw== -----END CERTIFICATE-----Generated at Sat Apr 5 12:34:38 2025 by rpki-client