$ rpki-client -vvf rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/18164B6AB2C811EFA702DF80C4F9AE02.roa File: 18164B6AB2C811EFA702DF80C4F9AE02.roa (raw, json) Hash identifier: WLNXMP0ra3REMtSs7laKuUO//z/EEyMC3rb1Y8gR3Jk= Subject key identifier: F5:B5:F9:FB:B2:B4:11:8A:8C:4D:48:12:67:3F:B3:D9:08:2A:B2:5D Certificate issuer: /CN=A91517CF/serialNumber=EC3D807F793C9CF5FCE335EE15E0984449B43096 Certificate serial: 50 Authority key identifier: EC:3D:80:7F:79:3C:9C:F5:FC:E3:35:EE:15:E0:98:44:49:B4:30:96 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7D2Af3k8nPX84zXuFeCYREm0MJY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/18164B6AB2C811EFA702DF80C4F9AE02.roa Signing time: Thu 01 May 2025 06:45:17 +0000 ROA not before: Thu 01 May 2025 06:45:17 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 203.34.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/7D2Af3k8nPX84zXuFeCYREm0MJY.crl rsync://rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/7D2Af3k8nPX84zXuFeCYREm0MJY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7D2Af3k8nPX84zXuFeCYREm0MJY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 06:31:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 80 (0x50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91517CF, serialNumber=EC3D807F793C9CF5FCE335EE15E0984449B43096 Validity Not Before: May 1 06:45:17 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=6813187d-72ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:6d:0c:a9:32:c7:14:09:19:53:47:ad:9a:fb: 05:7b:2e:f1:e6:d9:aa:ed:61:af:a0:b0:ac:43:89: 5d:11:9b:9c:04:95:7b:2d:ce:14:ad:af:38:ec:b9: 92:16:39:7a:6d:dd:5c:30:45:19:bf:d2:bc:62:c5: dd:3e:ba:ba:54:75:f5:cf:c6:df:85:95:3d:58:03: c8:37:22:cc:18:9f:4e:74:4b:89:2a:45:04:b4:46: 20:cf:30:55:f1:cc:ae:d7:73:cd:31:67:7e:03:94: 64:e5:4b:76:29:45:69:79:d3:b8:8c:be:1b:47:52: 92:f7:38:67:ca:a1:82:ce:61:3f:25:80:87:80:31: 85:63:20:f6:f0:c1:66:90:11:10:9e:e6:8c:05:85: bb:db:a1:b7:38:ae:0b:9b:ba:88:18:38:50:95:cd: b9:9c:03:7f:98:1e:f3:1a:2f:47:d9:5e:f6:32:09: d4:40:49:ba:2c:f0:81:88:20:79:58:55:bb:f5:f8: ac:01:a2:6e:f3:2a:92:60:ac:8f:1a:3a:6d:32:71: 16:21:9f:91:ef:b3:3c:15:5d:45:36:c3:40:b6:74: f4:98:f6:30:5a:61:59:9d:35:e3:b4:c1:3b:97:90: cf:61:66:20:da:13:0c:57:56:a7:bb:9b:21:3c:98: 8b:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:B5:F9:FB:B2:B4:11:8A:8C:4D:48:12:67:3F:B3:D9:08:2A:B2:5D X509v3 Authority Key Identifier: keyid:EC:3D:80:7F:79:3C:9C:F5:FC:E3:35:EE:15:E0:98:44:49:B4:30:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/7D2Af3k8nPX84zXuFeCYREm0MJY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7D2Af3k8nPX84zXuFeCYREm0MJY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/18164B6AB2C811EFA702DF80C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.34.237.0/24 Signature Algorithm: sha256WithRSAEncryption a2:3d:32:a2:9d:cd:e7:f6:44:90:82:d6:7c:ad:4c:1e:91:1d: ba:c1:d9:be:7e:5e:43:f8:f9:53:06:77:a8:89:97:04:fa:62: 40:df:71:23:7a:15:e0:d5:62:32:68:88:99:e0:3d:05:18:6c: 6c:19:06:69:59:82:cd:1c:bf:d5:33:24:05:d7:1a:05:6d:dd: c0:82:5c:ea:d8:08:32:81:b9:7c:9b:b6:71:ba:e1:91:d1:54: 58:bd:be:8e:f5:ae:8b:e7:7e:ba:b5:3d:17:a9:b2:df:87:8e: 92:7f:36:df:f6:84:cd:9f:60:2c:51:59:5f:91:1d:d6:50:5b: 25:8a:41:04:23:ff:39:0d:1d:eb:43:d5:47:f0:ff:59:5e:7a: 21:af:be:cb:65:09:18:64:f7:73:f6:30:48:df:1f:d7:6f:8e: 87:ef:48:6f:67:57:0c:56:bc:28:59:0b:8d:b5:91:c6:e8:8b: b8:4c:5b:58:49:89:62:e1:ed:81:ca:78:ec:f8:2c:aa:59:b9: 16:e8:9b:0a:f4:00:f2:0b:b5:82:27:99:6a:cf:68:46:6c:00: fd:81:b0:94:b2:ec:2d:5d:59:14:2f:33:41:51:91:b4:91:59: 17:36:e0:ed:98:77:4b:96:93:9a:da:21:8b:ae:75:df:df:36: 6e:f6:06:c3 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBUDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MTdDRjExMC8GA1UEBRMoRUMzRDgwN0Y3OTNDOUNGNUZDRTMzNUVFMTVFMDk4NDQ0 OUI0MzA5NjAeFw0yNTA1MDEwNjQ1MTdaFw0yNjA3MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY4MTMxODdkLTcyZWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJbQypMscUCRlTR62a+wV7LvHm2artYa+gsKxDiV0Rm5wElXstzhStrzjsuZIW OXpt3VwwRRm/0rxixd0+urpUdfXPxt+FlT1YA8g3IswYn050S4kqRQS0RiDPMFXx zK7Xc80xZ34DlGTlS3YpRWl507iMvhtHUpL3OGfKoYLOYT8lgIeAMYVjIPbwwWaQ ERCe5owFhbvbobc4rgubuogYOFCVzbmcA3+YHvMaL0fZXvYyCdRASbos8IGIIHlY Vbv1+KwBom7zKpJgrI8aOm0ycRYhn5HvszwVXUU2w0C2dPSY9jBaYVmdNeO0wTuX kM9hZiDaEwxXVqe7myE8mIs9AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU9bX5+7K0 EYqMTUgSZz+z2Qgqsl0wHwYDVR0jBBgwFoAU7D2Af3k8nPX84zXuFeCYREm0MJYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUxN0NGL0I0MTU1NDU4QjJD NzExRUY5MTZCQjY3RkM0RjlBRTAyLzdEMkFmM2s4blBYODR6WHVGZUNZUkVtME1K WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvN0QyQWYzazhuUFg4NHpYdUZlQ1lSRW0wTUpZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTdDRi9CNDE1NTQ1OEIyQzcxMUVGOTE2QkI2N0ZDNEY5QUUwMi8xODE2NEI2QUIy QzgxMUVGQTcwMkRGODBDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAMsi7TANBgkqhkiG9w0BAQsFAAOCAQEAoj0yop3N5/ZEkILW fK1MHpEdusHZvn5eQ/j5UwZ3qImXBPpiQN9xI3oV4NViMmiImeA9BRhsbBkGaVmC zRy/1TMkBdcaBW3dwIJc6tgIMoG5fJu2cbrhkdFUWL2+jvWui+d+urU9F6my34eO kn823/aEzZ9gLFFZX5Ed1lBbJYpBBCP/OQ0d60PVR/D/WV56Ia++y2UJGGT3c/Yw SN8f12+Oh+9Ib2dXDFa8KFkLjbWRxuiLuExbWEmJYuHtgcp47Pgsqlm5FuibCvQA 8gu1gieZas9oRmwA/YGwlLLsLV1ZFC8zQVGRtJFZFzbg7Zh3S5aTmtohi6513982 bvYGww== -----END CERTIFICATE-----Generated at Fri May 16 02:39:53 2025 by rpki-client