$ rpki-client -vvf rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/8A991E5AD6DC11EF9E9B2B15C4F9AE02.roa File: 8A991E5AD6DC11EF9E9B2B15C4F9AE02.roa (raw, json) Hash identifier: QCzs9DtUBneLczNateHgF9QDoBD6O2A9yziLaXOtyBM= Subject key identifier: BF:88:FB:FC:55:00:B4:9F:C5:F7:84:4F:05:A6:17:72:79:15:85:8E Certificate issuer: /CN=A919D180/serialNumber=87DA44A4CF839C3881C6BC38683CCDC308CA7CE9 Certificate serial: 1F Authority key identifier: 87:DA:44:A4:CF:83:9C:38:81:C6:BC:38:68:3C:CD:C3:08:CA:7C:E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9pEpM-DnDiBxrw4aDzNwwjKfOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/8A991E5AD6DC11EF9E9B2B15C4F9AE02.roa Signing time: Mon 10 Feb 2025 03:31:57 +0000 ROA not before: Mon 10 Feb 2025 03:31:57 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 10118 IP address blocks: 202.45.88.0/21 maxlen: 21 202.45.89.0/24 maxlen: 24 202.45.90.0/23 maxlen: 23 202.45.92.0/23 maxlen: 23 202.45.92.0/24 maxlen: 24 202.45.93.0/24 maxlen: 24 202.45.94.0/23 maxlen: 23 202.45.94.0/24 maxlen: 24 202.45.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.crl rsync://rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9pEpM-DnDiBxrw4aDzNwwjKfOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 18 Mar 2025 07:02:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D180 Validity Not Before: Feb 10 03:31:57 2025 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=67a9732d-7243 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:19:11:1b:9d:2a:43:ab:9e:47:1d:ce:8d:ea: 6a:da:9c:5a:1e:b4:dc:67:6e:2f:26:2f:2b:83:69: 7c:cc:70:3e:16:09:c4:dd:0b:c7:b7:29:52:bc:12: e2:9d:45:a1:80:47:ec:bb:67:73:b6:a6:c8:de:fe: ae:01:5c:ec:5c:cd:03:26:d0:63:47:db:0b:8a:1c: 42:ca:5a:a7:2d:d7:a6:09:9f:b8:ec:b9:f8:ec:2f: a0:21:ef:95:40:43:c1:4f:67:74:c8:f5:80:86:c6: 74:a0:6a:71:39:f9:27:a5:e8:1c:30:7f:2a:1f:6b: a5:b4:b7:74:ae:b0:5d:2c:28:7b:64:f1:54:a4:4a: 5b:ba:c3:0d:9c:7f:07:05:2e:b1:bd:32:82:1a:ee: a1:30:fe:86:e2:33:91:42:5a:2c:3a:29:70:cd:2a: 31:22:f8:b4:94:6b:37:18:ec:c4:d5:17:21:ce:2e: 0d:22:50:c1:f5:7a:93:b0:e5:6a:68:77:80:8c:48: da:43:cb:30:d8:b5:5d:a2:96:83:01:d0:19:ec:a9: e7:92:93:3a:bf:a4:7b:77:09:6b:41:43:67:55:82: 62:02:1c:ec:7f:30:9b:9f:a4:50:8f:b6:48:32:08: ae:79:d2:99:2b:5c:75:dc:89:8e:f0:14:6b:c1:a0: 3f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:88:FB:FC:55:00:B4:9F:C5:F7:84:4F:05:A6:17:72:79:15:85:8E X509v3 Authority Key Identifier: keyid:87:DA:44:A4:CF:83:9C:38:81:C6:BC:38:68:3C:CD:C3:08:CA:7C:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9pEpM-DnDiBxrw4aDzNwwjKfOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/8A991E5AD6DC11EF9E9B2B15C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.45.88.0/21 Signature Algorithm: sha256WithRSAEncryption b7:01:d5:d9:83:4a:a7:f7:fe:27:a5:3e:e7:4c:d7:23:36:ce: a6:61:3f:fa:4d:1d:af:cf:08:ec:94:1d:96:28:ed:d7:24:fa: 9b:99:d7:54:ae:fa:1f:bf:58:bb:16:83:04:bd:18:31:e1:d8: 18:b0:68:e2:52:8c:99:43:33:e0:44:c4:88:81:53:ad:b7:40: a2:c0:c3:01:b1:68:60:e3:b7:9e:4f:e9:7d:70:27:9e:91:f7: 78:f1:17:9d:19:02:d1:67:68:a4:fe:ff:47:ef:9f:ab:b4:50: ed:e8:c5:11:39:40:5f:49:99:e9:f0:73:88:96:77:95:55:96: 6c:dd:10:7a:6c:f2:49:78:81:72:a4:ce:39:bc:7b:56:88:b7: 76:b6:ae:57:a1:d4:2a:50:a8:3e:12:8f:bf:7e:50:dc:4b:c5: 0e:fc:bc:64:61:3a:67:ec:73:bf:14:51:40:ff:9b:f7:65:32: 5d:ca:cf:e2:74:f7:dc:b8:a8:50:21:e1:dd:35:e9:58:cb:09: 1a:26:11:48:42:f9:a3:c2:52:36:47:38:4f:b7:a5:5b:0e:40: 77:de:a6:37:c8:32:63:8d:73:35:82:cc:e0:1c:68:37:27:8a: 87:15:ac:2c:d2:dd:f2:6e:55:39:9e:fb:91:b5:d3:48:dc:08: a1:da:20:e7 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RDE4MDExMC8GA1UEBRMoODdEQTQ0QTRDRjgzOUMzODgxQzZCQzM4NjgzQ0NEQzMw OENBN0NFOTAeFw0yNTAyMTAwMzMxNTdaFw0yNTA3MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3YTk3MzJkLTcyNDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDWGREbnSpDq55HHc6N6mranFoetNxnbi8mLyuDaXzMcD4WCcTdC8e3KVK8EuKd RaGAR+y7Z3O2psje/q4BXOxczQMm0GNH2wuKHELKWqct16YJn7jsufjsL6Ah75VA Q8FPZ3TI9YCGxnSganE5+Sel6Bwwfyofa6W0t3SusF0sKHtk8VSkSlu6ww2cfwcF LrG9MoIa7qEw/obiM5FCWiw6KXDNKjEi+LSUazcY7MTVFyHOLg0iUMH1epOw5Wpo d4CMSNpDyzDYtV2iloMB0BnsqeeSkzq/pHt3CWtBQ2dVgmICHOx/MJufpFCPtkgy CK550pkrXHXciY7wFGvBoD8TAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUv4j7/FUA tJ/F94RPBaYXcnkVhY4wHwYDVR0jBBgwFoAUh9pEpM+DnDiBxrw4aDzNwwjKfOkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlEMTgwLzc3NDI4N0YyRDZD NzExRUZBM0UxRDgxQ0M0RjlBRTAyL2g5cEVwTS1EbkRpQnhydzRhRHpOd3dqS2ZP ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaDlwRXBNLURuRGlCeHJ3NGFEek53d2pLZk9rLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDE4MC83NzQyODdGMkQ2QzcxMUVGQTNFMUQ4MUNDNEY5QUUwMi84QTk5MUU1QUQ2 REMxMUVGOUU5QjJCMTVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEA8otWDANBgkqhkiG9w0BAQsFAAOCAQEAtwHV2YNKp/f+J6U+ 50zXIzbOpmE/+k0dr88I7JQdlijt1yT6m5nXVK76H79YuxaDBL0YMeHYGLBo4lKM mUMz4ETEiIFTrbdAosDDAbFoYOO3nk/pfXAnnpH3ePEXnRkC0WdopP7/R++fq7RQ 7ejFETlAX0mZ6fBziJZ3lVWWbN0QemzySXiBcqTOObx7Voi3drauV6HUKlCoPhKP v35Q3EvFDvy8ZGE6Z+xzvxRRQP+b92UyXcrP4nT33LioUCHh3TXpWMsJGiYRSEL5 o8JSNkc4T7elWw5Ad96mN8gyY41zNYLM4BxoNyeKhxWsLNLd8m5VOZ77kbXTSNwI odog5w== -----END CERTIFICATE-----Generated at Wed Mar 12 12:56:53 2025 by rpki-client