$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/03BA8B36824411EF94479387C4F9AE02.roa File: 03BA8B36824411EF94479387C4F9AE02.roa (raw, json) Hash identifier: D72c3/tWqqsyWhz7xh0D4WY61fHAQe4xrqgYkSdBeoE= Subject key identifier: E5:60:7D:1B:C3:5D:F8:6B:E1:17:A8:1E:48:C4:C8:B9:0B:E8:AD:2F Certificate issuer: /CN=A9157D7A/serialNumber=401B429906C90EA03ECFC61B15BA4EF123903379 Certificate serial: 0760 Authority key identifier: 40:1B:42:99:06:C9:0E:A0:3E:CF:C6:1B:15:BA:4E:F1:23:90:33:79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/03BA8B36824411EF94479387C4F9AE02.roa Signing time: Thu 15 May 2025 07:46:09 +0000 ROA not before: Thu 15 May 2025 07:46:09 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 55740 IP address blocks: 14.195.78.0/24 maxlen: 24 14.195.79.0/24 maxlen: 24 14.195.91.0/24 maxlen: 24 14.195.124.0/24 maxlen: 24 27.107.200.0/24 maxlen: 24 27.107.201.0/24 maxlen: 24 49.249.1.0/24 maxlen: 24 49.249.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 09:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1888 (0x760) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157D7A, serialNumber=401B429906C90EA03ECFC61B15BA4EF123903379 Validity Not Before: May 15 07:46:09 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=68259bc0-c863 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:04:5e:66:5b:66:53:4c:6c:99:ba:32:ea:54: 77:c4:26:17:9d:38:47:6c:68:cb:05:02:d0:5b:dc: a5:80:6d:bd:d8:e0:fa:a8:28:87:33:e2:13:43:63: b3:3b:4e:d5:35:ff:86:f3:1d:e8:49:58:f0:1c:ee: c2:3e:4d:4a:c9:70:bb:d3:78:05:e4:e2:a3:08:5d: d0:14:e0:35:40:43:52:c9:4b:79:a9:3e:63:c5:54: de:10:c6:92:7d:2a:cc:77:05:25:5b:d8:5b:45:5f: ef:22:e3:70:c7:c4:0e:e1:04:6a:dc:c4:0d:95:73: 78:86:c0:da:86:da:9f:88:72:e8:27:20:aa:1b:bd: f9:f5:be:e8:90:50:8b:40:b8:4d:0b:79:c9:b5:fd: af:90:96:2e:b1:c2:e1:95:b7:17:a4:92:08:13:ab: 13:2a:bc:07:10:a7:a1:f5:29:7b:f4:de:89:b6:cc: 58:3d:64:53:31:44:3a:91:a8:0a:92:b5:f2:ef:00: d1:9a:0c:54:d5:aa:fc:70:99:26:42:24:8a:e4:f8: 8f:42:e0:a8:4c:c9:cb:4d:c2:a5:b2:66:a6:61:40: 48:84:68:89:3d:1a:0e:10:79:33:df:fa:32:91:d2: 53:bb:3e:27:8f:b9:1b:3b:1d:21:4b:b7:13:ce:fd: 4b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:60:7D:1B:C3:5D:F8:6B:E1:17:A8:1E:48:C4:C8:B9:0B:E8:AD:2F X509v3 Authority Key Identifier: keyid:40:1B:42:99:06:C9:0E:A0:3E:CF:C6:1B:15:BA:4E:F1:23:90:33:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/03BA8B36824411EF94479387C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 14.195.78.0/23 14.195.91.0/24 14.195.124.0/24 27.107.200.0/23 49.249.1.0/24 49.249.27.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:ca:ee:c4:8b:53:6e:37:b4:4f:a3:9f:cf:84:0d:4a:55:8e: 76:ae:bd:3b:3a:77:cb:2c:88:4a:7b:aa:c6:80:85:a2:5a:a0: 09:a2:97:6c:cb:27:cb:b0:ab:16:73:ae:b4:05:87:c8:bd:22: 3d:82:e0:9f:e2:7a:44:9e:8d:74:b3:a5:3e:fd:e8:f9:45:8c: 05:4f:2a:f4:cb:c8:3e:64:62:ba:9e:3e:9b:e3:0a:29:5a:c6: 8a:74:96:d1:d7:63:42:8d:50:73:33:b9:54:96:26:ee:12:cb: 23:f5:c4:2f:35:fd:77:ac:80:29:7b:13:ad:9e:d1:de:1f:c2: aa:51:f1:1b:05:b1:5c:a2:c8:5e:e1:38:33:c4:f0:be:e1:66: c1:03:1c:12:86:94:d9:16:74:57:2e:e0:72:69:8a:f2:3a:12: a4:9c:e9:3c:7c:3c:8a:b0:15:89:9a:b2:cb:15:24:f6:3e:c0: 4a:b7:2f:3d:0b:9a:df:06:73:72:1c:1e:0f:aa:f4:0f:2d:e7: 2c:dc:52:65:21:72:02:46:9b:b1:f6:d7:11:01:e2:9e:0b:cd: c7:7c:da:c5:70:f7:0e:e2:15:88:50:71:6b:3a:64:ab:f3:80: 01:30:42:2b:24:f7:1d:55:bf:19:d8:a4:31:6e:22:26:70:ca: 61:a4:ad:e3 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgICB2AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdEN0ExMTAvBgNVBAUTKDQwMUI0Mjk5MDZDOTBFQTAzRUNGQzYxQjE1QkE0RUYx MjM5MDMzNzkwHhcNMjUwNTE1MDc0NjA5WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02ODI1OWJjMC1jODYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6gReZltmU0xsmboy6lR3xCYXnThHbGjLBQLQW9ylgG292OD6qCiHM+ITQ2Oz O07VNf+G8x3oSVjwHO7CPk1KyXC703gF5OKjCF3QFOA1QENSyUt5qT5jxVTeEMaS fSrMdwUlW9hbRV/vIuNwx8QO4QRq3MQNlXN4hsDahtqfiHLoJyCqG7359b7okFCL QLhNC3nJtf2vkJYuscLhlbcXpJIIE6sTKrwHEKeh9Sl79N6JtsxYPWRTMUQ6kagK krXy7wDRmgxU1ar8cJkmQiSK5PiPQuCoTMnLTcKlsmamYUBIhGiJPRoOEHkz3/oy kdJTuz4nj7kbOx0hS7cTzv1LxQIDAQABo4ICszCCAq8wHQYDVR0OBBYEFOVgfRvD Xfhr4ReoHkjEyLkL6K0vMB8GA1UdIwQYMBaAFEAbQpkGyQ6gPs/GGxW6TvEjkDN5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0Q3QS81RERDQ0NDNjk5 MTUxMUVCOTY3MjcyNDNDNEY5QUUwMi9RQnRDbVFiSkRxQS16OFliRmJwTzhTT1FN M2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FCdENtUWJKRHFBLXo4WWJGYnBPOFNPUU0zay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTdEN0EvNUREQ0NDQzY5OTE1MTFFQjk2NzI3MjQzQzRGOUFFMDIvMDNCQThCMzY4 MjQ0MTFFRjk0NDc5Mzg3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPQYIKwYBBQUHAQcBAf8E LjAsMCoEAgABMCQDBAEOw04DBAAOw1sDBAAOw3wDBAEba8gDBAAx+QEDBAAx+Rsw DQYJKoZIhvcNAQELBQADggEBAF7K7sSLU243tE+jn8+EDUpVjnauvTs6d8ssiEp7 qsaAhaJaoAmil2zLJ8uwqxZzrrQFh8i9Ij2C4J/iekSejXSzpT796PlFjAVPKvTL yD5kYrqePpvjCilaxop0ltHXY0KNUHMzuVSWJu4SyyP1xC81/XesgCl7E62e0d4f wqpR8RsFsVyiyF7hODPE8L7hZsEDHBKGlNkWdFcu4HJpivI6EqSc6Tx8PIqwFYma sssVJPY+wEq3Lz0Lmt8Gc3IcHg+q9A8t5yzcUmUhcgJGm7H21xEB4p4Lzcd82sVw 9w7iFYhQcWs6ZKvzgAEwQisk9x1VvxnYpDFuIiZwymGkreM= -----END CERTIFICATE-----Generated at Fri May 16 13:49:15 2025 by rpki-client