$ rpki-client -vvf rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/3195F9E62C6711F0B5DEE20CC4F9AE02.roa File: 3195F9E62C6711F0B5DEE20CC4F9AE02.roa (raw, json) Hash identifier: teBU/xY5fyCYlDvGRSOFgRvi80EiZfgHjGrIEnrk+fw= Subject key identifier: 9A:80:0C:23:F6:8B:EE:4B:96:95:D5:AA:F6:CD:4F:13:8B:38:3F:DD Certificate issuer: /CN=A9147049/serialNumber=833BD79CF17E66023F70A6252D5159C9CD7A50E3 Certificate serial: 02 Authority key identifier: 83:3B:D7:9C:F1:7E:66:02:3F:70:A6:25:2D:51:59:C9:CD:7A:50:E3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gzvXnPF-ZgI_cKYlLVFZyc16UOM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/3195F9E62C6711F0B5DEE20CC4F9AE02.roa Signing time: Thu 08 May 2025 23:50:17 +0000 ROA not before: Thu 08 May 2025 23:50:17 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 134090 IP address blocks: 165.99.26.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/gzvXnPF-ZgI_cKYlLVFZyc16UOM.crl rsync://rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/gzvXnPF-ZgI_cKYlLVFZyc16UOM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gzvXnPF-ZgI_cKYlLVFZyc16UOM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 07:26:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147049, serialNumber=833BD79CF17E66023F70A6252D5159C9CD7A50E3 Validity Not Before: May 8 23:50:17 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=681d4339-0883 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:1a:d3:7d:04:00:a2:8d:92:96:2f:d9:5d:47: 77:2f:cc:98:dc:96:e2:ac:2f:41:29:5e:9d:4e:a4: 3d:33:06:0a:9a:f0:53:4b:63:88:27:c5:05:86:37: c7:79:c4:43:a3:84:db:e0:be:ca:22:fd:38:55:e2: b6:77:d8:e1:e4:f8:48:5e:cc:40:89:e3:42:b5:5a: 9f:f8:97:d0:f5:9f:27:8a:72:0b:09:1d:14:6d:de: 14:52:aa:79:d0:e7:71:47:b3:19:cb:a4:bc:c1:1b: 8f:fe:5e:5d:15:5c:3f:5e:a3:1f:7e:21:ed:ea:18: 73:46:ef:0d:55:bc:4e:13:e7:ce:09:5d:0a:07:c9: b8:5d:6f:bc:a4:10:a5:d3:b9:de:69:bd:ea:86:e0: 8d:aa:0b:2e:64:ef:57:e1:48:0e:e8:a0:2d:c5:41: 08:a3:9c:af:74:a2:c7:01:f5:57:5d:b6:33:3d:f5: 3e:ad:67:6d:20:af:84:48:6a:69:6a:b4:4b:61:25: f1:77:fa:e9:64:2a:79:9b:1c:56:01:2a:58:d2:22: 60:47:49:76:34:0c:d0:d9:14:a0:d8:22:6b:75:fa: 99:1e:a5:c2:bc:b0:b2:69:01:d4:8c:ef:b4:8d:8e: 3f:3c:0a:95:07:49:8a:e2:a0:13:df:67:97:34:90: 06:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:80:0C:23:F6:8B:EE:4B:96:95:D5:AA:F6:CD:4F:13:8B:38:3F:DD X509v3 Authority Key Identifier: keyid:83:3B:D7:9C:F1:7E:66:02:3F:70:A6:25:2D:51:59:C9:CD:7A:50:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/gzvXnPF-ZgI_cKYlLVFZyc16UOM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gzvXnPF-ZgI_cKYlLVFZyc16UOM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/3195F9E62C6711F0B5DEE20CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 165.99.26.0/23 Signature Algorithm: sha256WithRSAEncryption 99:8f:d5:37:4e:20:cd:2a:0d:4b:6c:5d:85:0f:1d:4c:67:a3: c0:de:61:d9:d7:14:96:85:37:6a:fb:13:dc:f3:bb:61:05:77: 34:06:fc:4d:cd:e1:14:ba:0b:94:30:39:72:01:a0:e6:17:a3: e4:6f:cb:2b:3b:c2:94:3e:ca:6c:49:ed:9c:b4:04:01:e0:cd: 54:39:64:d6:92:82:71:8b:02:80:99:d5:60:75:72:c4:44:88: ae:24:a0:50:02:7d:09:09:0f:f0:11:be:12:80:22:cc:0a:77: a2:0c:fd:89:67:d2:29:68:5b:b0:c3:90:7e:d4:cc:fa:77:cd: 0c:17:ba:9f:28:c9:77:47:f0:6f:72:8e:43:28:a2:53:dc:b2: 38:f8:17:69:57:ed:8a:84:9f:e8:8f:1e:51:48:c4:e2:4b:93: c1:67:c0:59:d3:c1:be:38:10:60:1a:7e:bc:a2:15:03:ed:32: cb:ca:89:c7:0b:a0:3c:f8:31:6a:48:98:55:c4:30:26:f4:c8: 05:ae:dd:b2:30:0c:30:20:e9:76:4f:ae:7f:92:36:4d:de:99: 94:28:3a:76:90:40:13:22:b2:eb:b7:c1:cb:fd:c3:51:f0:2c: 1f:b9:e1:7c:b0:b8:27:be:89:0a:f5:51:aa:2d:41:a6:88:dd: 7c:22:e5:c2 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NzA0OTExMC8GA1UEBRMoODMzQkQ3OUNGMTdFNjYwMjNGNzBBNjI1MkQ1MTU5QzlD RDdBNTBFMzAeFw0yNTA1MDgyMzUwMTdaFw0yNjA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4MWQ0MzM5LTA4ODMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCuGtN9BACijZKWL9ldR3cvzJjcluKsL0EpXp1OpD0zBgqa8FNLY4gnxQWGN8d5 xEOjhNvgvsoi/ThV4rZ32OHk+EhezECJ40K1Wp/4l9D1nyeKcgsJHRRt3hRSqnnQ 53FHsxnLpLzBG4/+Xl0VXD9eox9+Ie3qGHNG7w1VvE4T584JXQoHybhdb7ykEKXT ud5pveqG4I2qCy5k71fhSA7ooC3FQQijnK90oscB9VddtjM99T6tZ20gr4RIamlq tEthJfF3+ulkKnmbHFYBKljSImBHSXY0DNDZFKDYImt1+pkepcK8sLJpAdSM77SN jj88CpUHSYrioBPfZ5c0kAaTAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUmoAMI/aL 7kuWldWq9s1PE4s4P90wHwYDVR0jBBgwFoAUgzvXnPF+ZgI/cKYlLVFZyc16UOMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3MDQ5L0E4MDRBNDhFMkM2 NjExRjA5REE1NkIwQkM0RjlBRTAyL2d6dlhuUEYtWmdJX2NLWWxMVkZaeWMxNlVP TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZ3p2WG5QRi1aZ0lfY0tZbExWRlp5YzE2VU9NLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzA0OS9BODA0QTQ4RTJDNjYxMUYwOURBNTZCMEJDNEY5QUUwMi8zMTk1RjlFNjJD NjcxMUYwQjVERUUyMENDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaVjGjANBgkqhkiG9w0BAQsFAAOCAQEAmY/VN04gzSoNS2xd hQ8dTGejwN5h2dcUloU3avsT3PO7YQV3NAb8Tc3hFLoLlDA5cgGg5hej5G/LKzvC lD7KbEntnLQEAeDNVDlk1pKCcYsCgJnVYHVyxESIriSgUAJ9CQkP8BG+EoAizAp3 ogz9iWfSKWhbsMOQftTM+nfNDBe6nyjJd0fwb3KOQyiiU9yyOPgXaVftioSf6I8e UUjE4kuTwWfAWdPBvjgQYBp+vKIVA+0yy8qJxwugPPgxakiYVcQwJvTIBa7dsjAM MCDpdk+uf5I2Td6ZlCg6dpBAEyKy67fBy/3DUfAsH7nhfLC4J76JCvVRqi1Bpojd fCLlwg== -----END CERTIFICATE-----Generated at Wed May 14 08:39:46 2025 by rpki-client