$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/ECFCBBA4D8D711EF91AD5538C4F9AE02.roa File: ECFCBBA4D8D711EF91AD5538C4F9AE02.roa (raw, json) Hash identifier: RZU+vxzrJk5agVsB47bIr4bRNKdVBncHpu2NxllEAuY= Subject key identifier: CF:41:3A:E3:3C:2C:10:71:B3:D4:18:76:03:EE:84:52:AB:07:9F:D0 Certificate issuer: /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138 Certificate serial: 0266 Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/ECFCBBA4D8D711EF91AD5538C4F9AE02.roa Signing time: Wed 22 Jan 2025 15:45:38 +0000 ROA not before: Wed 22 Jan 2025 15:45:38 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 138115 IP address blocks: 202.155.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 02:37:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 614 (0x266) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192C18 Validity Not Before: Jan 22 15:45:38 2025 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=679112a1-60e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:08:5f:9c:35:17:19:0e:72:b9:61:b7:c5:7e: a8:f0:73:e3:94:f6:90:d1:d2:aa:10:b2:42:fd:51: fd:f0:29:ea:0f:5f:19:b4:4f:aa:5d:3d:e4:09:71: 5f:b2:8f:d9:b7:63:7a:14:44:9a:41:09:72:3d:b9: 20:36:b1:f7:1a:fc:10:aa:70:3f:42:31:39:a3:ee: 73:04:22:de:7e:fb:8b:cf:2a:21:d7:d6:9e:b7:47: c1:4c:bf:3a:ad:ac:bd:06:9d:bf:ae:34:dd:cb:2e: b4:be:b8:51:e6:31:75:8b:bf:ea:d6:fd:44:5c:50: 28:99:95:14:51:cf:fb:97:4d:1e:9d:65:77:f1:d9: c0:64:3e:15:b2:cf:47:4d:02:57:f9:ea:71:e5:1a: 6c:75:ca:8e:44:6c:cd:17:0d:01:04:f1:3d:13:0c: 32:c9:3a:b0:94:47:69:8e:ab:20:ca:87:00:44:52: b8:b0:0a:71:fb:04:b6:a3:54:fc:4b:83:71:d8:da: fa:7d:69:6b:3d:21:c2:09:db:ca:1e:88:72:6d:cc: 85:02:02:68:0b:b0:bd:5b:fd:04:5b:9d:b0:e6:ce: 65:69:30:f6:be:85:8b:b8:c6:61:d5:83:11:59:f2: a4:6d:15:78:31:bd:0f:ea:c2:7b:7e:4e:87:7f:47: 8e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:41:3A:E3:3C:2C:10:71:B3:D4:18:76:03:EE:84:52:AB:07:9F:D0 X509v3 Authority Key Identifier: keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/ECFCBBA4D8D711EF91AD5538C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.155.132.0/24 Signature Algorithm: sha256WithRSAEncryption 31:d3:98:c9:42:f7:f2:61:1d:1c:fa:be:fb:ea:92:b3:ae:9e: bf:c3:af:a3:02:4a:00:02:5a:62:fd:7e:d1:4e:06:ce:0e:dd: 0e:38:a0:b6:1a:59:35:a7:77:04:a7:bb:2b:97:e7:eb:2e:ac: 4d:18:17:c3:0f:a2:92:88:ba:6d:de:d8:bc:2b:44:fa:d1:ef: 2a:ad:84:14:07:01:15:1b:7c:0b:97:12:0a:a5:4d:2b:d3:c9: a3:2e:6d:e4:1f:71:c3:b7:50:e9:0e:80:32:56:f9:1b:fd:9a: 6c:ed:3d:2d:3d:ce:9d:1c:7e:e2:bf:3b:c2:16:f5:c8:51:63: 97:60:1e:b9:bc:3c:31:2e:10:f8:82:a6:e8:5f:2b:4e:60:d5: f9:f8:13:7f:2f:3e:48:62:a0:28:4b:f2:6e:a1:9a:1e:5b:10: e7:01:dc:7c:a7:25:50:2e:fc:4b:01:10:ff:31:0b:d4:a7:8d: 80:3b:0a:75:5f:87:df:07:5a:7f:27:fd:92:cb:73:75:ba:03: 56:e9:32:46:b7:f6:e7:ba:83:af:c1:51:6f:09:1a:ae:20:56: 68:f6:e8:23:23:82:fa:38:3f:43:de:18:1a:0a:22:aa:4d:dd: b2:29:74:c3:0e:44:70:9b:9c:e0:0f:8d:47:ba:ae:81:8a:b1: bb:d3:c5:0f -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAmYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJDMTgxMTAvBgNVBAUTKEYxRkUwQzMyN0U3OUU1QUY0M0UxNUIwRTZGOENENjZD MDMyOUQxMzgwHhcNMjUwMTIyMTU0NTM4WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzkxMTJhMS02MGU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1whfnDUXGQ5yuWG3xX6o8HPjlPaQ0dKqELJC/VH98CnqD18ZtE+qXT3kCXFf so/Zt2N6FESaQQlyPbkgNrH3GvwQqnA/QjE5o+5zBCLefvuLzyoh19aet0fBTL86 ray9Bp2/rjTdyy60vrhR5jF1i7/q1v1EXFAomZUUUc/7l00enWV38dnAZD4Vss9H TQJX+epx5RpsdcqORGzNFw0BBPE9EwwyyTqwlEdpjqsgyocARFK4sApx+wS2o1T8 S4Nx2Nr6fWlrPSHCCdvKHohybcyFAgJoC7C9W/0EW52w5s5laTD2voWLuMZh1YMR WfKkbRV4Mb0P6sJ7fk6Hf0eO2wIDAQABo4IClTCCApEwHQYDVR0OBBYEFM9BOuM8 LBBxs9QYdgPuhFKrB5/QMB8GA1UdIwQYMBaAFPH+DDJ+eeWvQ+FbDm+M1mwDKdE4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkMxOC85QTVFRUE4QzNE RjQxMUVEODA0MUY5MzBDNEY5QUUwMi84ZjRNTW41NTVhOUQ0VnNPYjR6V2JBTXAw VGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhmNE1NbjU1NWE5RDRWc09iNHpXYkFNcDBUZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTJDMTgvOUE1RUVBOEMzREY0MTFFRDgwNDFGOTMwQzRGOUFFMDIvRUNGQ0JCQTRE OEQ3MTFFRjkxQUQ1NTM4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADKm4QwDQYJKoZIhvcNAQELBQADggEBADHTmMlC9/JhHRz6 vvvqkrOunr/Dr6MCSgACWmL9ftFOBs4O3Q44oLYaWTWndwSnuyuX5+surE0YF8MP opKIum3e2LwrRPrR7yqthBQHARUbfAuXEgqlTSvTyaMubeQfccO3UOkOgDJW+Rv9 mmztPS09zp0cfuK/O8IW9chRY5dgHrm8PDEuEPiCpuhfK05g1fn4E38vPkhioChL 8m6hmh5bEOcB3HynJVAu/EsBEP8xC9SnjYA7CnVfh98HWn8n/ZLLc3W6A1bpMka3 9ue6g6/BUW8JGq4gVmj26CMjgvo4P0PeGBoKIqpN3bIpdMMORHCbnOAPjUe6roGK sbvTxQ8= -----END CERTIFICATE-----Generated at Sat Apr 5 16:04:17 2025 by rpki-client