$ rpki-client -vvf rpki.apnic.net/member_repository/A913837F/64590C1246E311EEB5E41642C4F9AE02/3D83357646E411EE82ED8843C4F9AE02.roa File: 3D83357646E411EE82ED8843C4F9AE02.roa (raw, json) Hash identifier: 34LR4muDkvBv1o97MuicPyBMy45vufYYnTs0rk2DkdE= Subject key identifier: FA:BC:03:1B:43:7F:54:FC:08:8D:46:44:F5:FF:94:7D:79:39:34:DD Certificate issuer: /CN=A913837F/serialNumber=04A9B8919B220F5F3EABD0F4DD85E2F5BDBC5500 Certificate serial: 0141 Authority key identifier: 04:A9:B8:91:9B:22:0F:5F:3E:AB:D0:F4:DD:85:E2:F5:BD:BC:55:00 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BKm4kZsiD18-q9D03YXi9b28VQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913837F/64590C1246E311EEB5E41642C4F9AE02/3D83357646E411EE82ED8843C4F9AE02.roa Signing time: Sat 03 May 2025 04:10:35 +0000 ROA not before: Sat 03 May 2025 04:10:35 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 4768 IP address blocks: 192.122.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913837F/64590C1246E311EEB5E41642C4F9AE02/BKm4kZsiD18-q9D03YXi9b28VQA.crl rsync://rpki.apnic.net/member_repository/A913837F/64590C1246E311EEB5E41642C4F9AE02/BKm4kZsiD18-q9D03YXi9b28VQA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BKm4kZsiD18-q9D03YXi9b28VQA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 03:13:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 321 (0x141) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913837F, serialNumber=04A9B8919B220F5F3EABD0F4DD85E2F5BDBC5500 Validity Not Before: May 3 04:10:35 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=6815973a-6d0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:92:99:b6:c4:0a:eb:d6:57:1d:af:6e:74:36: ab:58:8b:d4:34:c1:e3:7b:3b:a4:d0:f1:32:57:88: b1:68:7b:85:15:67:5b:f9:13:c6:f7:68:dd:82:6d: 9f:28:e3:ec:62:a4:e1:e7:b5:91:3e:44:93:fb:79: 26:a4:64:71:28:44:6c:8d:38:88:ac:42:53:15:e9: 9d:a5:59:b9:74:a9:aa:2d:c6:47:12:b3:1a:d5:64: 94:de:cb:6f:af:92:ed:ef:7f:08:fa:ec:6f:21:69: 5d:4d:5c:b9:25:95:bf:91:57:43:3b:4f:5b:c4:48: 09:22:df:b8:5d:73:a0:87:1c:f1:e7:b5:3b:6e:d7: 48:cf:22:ef:c4:40:65:43:d9:68:3f:87:51:76:59: 96:54:6a:98:54:4c:4c:d0:b0:9a:3f:59:f3:4b:7d: e4:11:40:a9:0c:d0:35:52:41:a4:a1:8c:c5:f5:51: 63:b8:2e:a4:d8:68:cf:77:3c:1b:67:eb:9c:89:99: ee:88:63:81:d1:da:6c:1b:1b:1c:ba:57:65:59:4e: c1:7d:8f:dc:7f:2a:04:55:cf:d2:f6:e2:ae:79:b0: 6a:ff:fb:a6:b4:b8:f0:2b:02:11:78:a2:d6:c9:16: 60:31:fc:a5:85:7f:78:ed:07:70:49:05:69:14:b0: 1a:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:BC:03:1B:43:7F:54:FC:08:8D:46:44:F5:FF:94:7D:79:39:34:DD X509v3 Authority Key Identifier: keyid:04:A9:B8:91:9B:22:0F:5F:3E:AB:D0:F4:DD:85:E2:F5:BD:BC:55:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913837F/64590C1246E311EEB5E41642C4F9AE02/BKm4kZsiD18-q9D03YXi9b28VQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BKm4kZsiD18-q9D03YXi9b28VQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913837F/64590C1246E311EEB5E41642C4F9AE02/3D83357646E411EE82ED8843C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 192.122.180.0/24 Signature Algorithm: sha256WithRSAEncryption 55:27:bb:a7:aa:44:c8:76:e2:b2:d0:5d:67:5d:e6:5a:1e:22: 7a:6c:ea:16:b9:60:0c:ad:a1:c4:5b:89:25:87:0f:2f:f1:b5: fc:62:18:c9:be:f3:57:ad:a6:ab:bd:73:aa:62:9c:bd:c4:65: 7b:0b:72:cd:f2:87:83:c3:1d:d6:04:14:9e:5a:10:de:59:80: b0:89:e4:51:46:16:bd:8d:e0:60:6d:8b:4d:67:07:f6:d1:b3: e1:ab:bd:26:26:02:a5:4d:a2:7c:29:02:55:5b:ab:21:c0:3f: 17:0d:c6:99:19:14:99:40:37:cc:02:87:b3:5f:f1:19:cd:5b: c2:74:54:db:75:d0:64:02:bd:34:9a:68:7c:ff:2b:80:d5:17: 1c:96:0b:14:91:93:66:35:fe:f0:3b:d4:b3:c3:1e:f4:e1:78: cc:9c:71:04:3d:b2:6c:18:2a:dd:33:08:14:9a:8f:d7:03:4a: 11:f7:bb:82:a1:9a:a0:92:6f:9f:37:40:c4:ab:3a:f4:1b:6b: 3c:eb:0d:64:2f:cc:08:4f:25:5c:e8:8f:6e:94:4d:a7:a4:3c: 18:7b:34:06:f5:2d:f6:93:fe:7e:c9:86:74:50:24:a0:b7:ed: db:69:0b:e6:54:d2:df:86:6d:1e:2f:70:a5:da:9c:13:68:e6: 01:55:c6:4b -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzgzN0YxMTAvBgNVBAUTKDA0QTlCODkxOUIyMjBGNUYzRUFCRDBGNEREODVFMkY1 QkRCQzU1MDAwHhcNMjUwNTAzMDQxMDM1WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02ODE1OTczYS02ZDBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArpKZtsQK69ZXHa9udDarWIvUNMHjezuk0PEyV4ixaHuFFWdb+RPG92jdgm2f KOPsYqTh57WRPkST+3kmpGRxKERsjTiIrEJTFemdpVm5dKmqLcZHErMa1WSU3stv r5Lt738I+uxvIWldTVy5JZW/kVdDO09bxEgJIt+4XXOghxzx57U7btdIzyLvxEBl Q9loP4dRdlmWVGqYVExM0LCaP1nzS33kEUCpDNA1UkGkoYzF9VFjuC6k2GjPdzwb Z+uciZnuiGOB0dpsGxsculdlWU7BfY/cfyoEVc/S9uKuebBq//umtLjwKwIReKLW yRZgMfylhX947QdwSQVpFLAajQIDAQABo4IClTCCApEwHQYDVR0OBBYEFPq8AxtD f1T8CI1GRPX/lH15OTTdMB8GA1UdIwQYMBaAFASpuJGbIg9fPqvQ9N2F4vW9vFUA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODM3Ri82NDU5MEMxMjQ2 RTMxMUVFQjVFNDE2NDJDNEY5QUUwMi9CS200a1pzaUQxOC1xOUQwM1lYaTliMjhW UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0JLbTRrWnNpRDE4LXE5RDAzWVhpOWIyOFZRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzgzN0YvNjQ1OTBDMTI0NkUzMTFFRUI1RTQxNjQyQzRGOUFFMDIvM0Q4MzM1NzY0 NkU0MTFFRTgyRUQ4ODQzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADAerQwDQYJKoZIhvcNAQELBQADggEBAFUnu6eqRMh24rLQ XWdd5loeInps6ha5YAytocRbiSWHDy/xtfxiGMm+81etpqu9c6pinL3EZXsLcs3y h4PDHdYEFJ5aEN5ZgLCJ5FFGFr2N4GBti01nB/bRs+GrvSYmAqVNonwpAlVbqyHA PxcNxpkZFJlAN8wCh7Nf8RnNW8J0VNt10GQCvTSaaHz/K4DVFxyWCxSRk2Y1/vA7 1LPDHvTheMyccQQ9smwYKt0zCBSaj9cDShH3u4KhmqCSb583QMSrOvQbazzrDWQv zAhPJVzoj26UTaekPBh7NAb1LfaT/n7JhnRQJKC37dtpC+ZU0t+GbR4vcKXanBNo 5gFVxks= -----END CERTIFICATE-----Generated at Mon May 12 11:30:13 2025 by rpki-client