$ rpki-client -vvf rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/9CD16392309711F09EFD0C4CC4F9AE02.roa File: 9CD16392309711F09EFD0C4CC4F9AE02.roa (raw, json) Hash identifier: AfGxVPGE0X5aiSEnPrV13VcxuUAvslUoJjsgWW+PD9o= Subject key identifier: 23:CF:89:3E:F9:00:48:B7:77:08:F5:AF:AD:87:B3:9B:FD:53:D8:60 Certificate issuer: /CN=A9157DAE/serialNumber=760E6A7F08B72FF80EB56F6750323B164A70DA1D Certificate serial: 0459 Authority key identifier: 76:0E:6A:7F:08:B7:2F:F8:0E:B5:6F:67:50:32:3B:16:4A:70:DA:1D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/9CD16392309711F09EFD0C4CC4F9AE02.roa Signing time: Wed 14 May 2025 07:46:58 +0000 ROA not before: Wed 14 May 2025 07:46:58 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 213438 IP address blocks: 45.129.230.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.crl rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 17:12:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1113 (0x459) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157DAE, serialNumber=760E6A7F08B72FF80EB56F6750323B164A70DA1D Validity Not Before: May 14 07:46:58 2025 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=68244a72-c632 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:11:be:4b:05:82:d0:72:e1:ca:1b:d9:dc:49: 89:00:e1:8b:b9:84:a9:ac:5b:f6:ff:86:d0:59:61: 25:0c:40:73:f6:c1:07:ce:c0:6b:20:8e:2f:bd:39: 77:ab:7a:72:b4:a8:04:90:5f:3d:e6:c8:04:90:3c: 1d:44:87:3e:d5:d4:77:00:4c:f2:5e:1d:af:5d:80: 6b:c0:10:a3:e9:23:a4:df:12:24:96:fe:c8:ae:96: 7d:b8:fe:8e:74:3e:44:58:f5:bf:b5:a7:55:4e:aa: a3:86:d9:16:38:4c:79:c8:87:86:1f:58:56:58:f4: 5c:ed:77:04:02:85:49:5f:91:ba:60:7b:37:26:b4: 2b:ef:ed:c8:a4:b3:dd:b3:88:0c:83:2a:f5:de:1b: a6:c1:f4:eb:c5:3b:6b:d0:9f:ba:33:c5:02:4a:0a: 3b:7c:0a:a0:c0:65:ae:72:6f:93:2a:9b:79:1f:f3: 73:38:99:68:a2:99:f1:72:5e:5d:c4:66:78:e1:3e: 9d:0c:67:78:bd:9b:b7:6a:16:0f:82:72:8e:0c:bd: e1:c3:57:82:4c:a3:c4:84:a1:e4:2e:e7:be:61:4d: 3a:59:7e:35:2d:ec:e4:87:90:f4:95:f3:25:c8:57: 4d:11:36:2d:2e:ba:65:71:06:21:fe:7b:5d:92:56: bc:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:CF:89:3E:F9:00:48:B7:77:08:F5:AF:AD:87:B3:9B:FD:53:D8:60 X509v3 Authority Key Identifier: keyid:76:0E:6A:7F:08:B7:2F:F8:0E:B5:6F:67:50:32:3B:16:4A:70:DA:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/9CD16392309711F09EFD0C4CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.129.230.0/23 Signature Algorithm: sha256WithRSAEncryption 03:f4:4d:fb:d2:e9:48:73:04:79:7c:8e:1b:75:b2:19:19:e3: aa:10:ed:1c:d7:5a:65:20:6e:55:89:35:f1:23:08:56:d9:d5: e6:82:31:8e:36:31:6d:99:c2:ee:d2:05:51:d9:3e:fb:e2:05: 83:95:a7:e6:52:2e:be:a1:92:d5:46:2e:d7:71:a9:7d:d4:71: 48:89:73:56:ff:eb:3d:03:4f:92:bc:97:81:56:04:36:4f:3b: 3d:1f:c0:85:c7:fc:7f:db:c8:e3:e2:d0:05:a1:d3:ff:b3:70: 56:f8:50:35:6e:b2:55:0a:a0:38:06:1a:97:c6:39:42:48:50: ea:42:f3:ad:c1:84:0d:81:85:85:58:16:44:c8:34:ef:93:ba: 5a:a6:6c:69:8b:80:c3:b7:53:18:a1:48:e3:27:22:29:5e:06: b1:28:4f:2c:ea:53:01:6c:9d:7c:58:f4:d3:50:b2:0b:66:62: 93:16:3f:78:bb:92:bf:c9:ed:05:e0:ae:36:77:ed:eb:92:80: 06:79:97:b1:16:7e:19:a0:cf:5d:fa:86:31:76:02:8f:b5:41: 18:48:e4:c8:1d:26:46:dc:a7:e8:0d:7b:fd:21:32:cd:3a:d2: 0d:c9:09:a1:da:82:07:c5:91:ff:e0:7c:51:60:56:de:bf:85: 35:10:c7:7f -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBFkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdEQUUxMTAvBgNVBAUTKDc2MEU2QTdGMDhCNzJGRjgwRUI1NkY2NzUwMzIzQjE2 NEE3MERBMUQwHhcNMjUwNTE0MDc0NjU4WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODI0NGE3Mi1jNjMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxhG+SwWC0HLhyhvZ3EmJAOGLuYSprFv2/4bQWWElDEBz9sEHzsBrII4vvTl3 q3pytKgEkF895sgEkDwdRIc+1dR3AEzyXh2vXYBrwBCj6SOk3xIklv7IrpZ9uP6O dD5EWPW/tadVTqqjhtkWOEx5yIeGH1hWWPRc7XcEAoVJX5G6YHs3JrQr7+3IpLPd s4gMgyr13humwfTrxTtr0J+6M8UCSgo7fAqgwGWucm+TKpt5H/NzOJloopnxcl5d xGZ44T6dDGd4vZu3ahYPgnKODL3hw1eCTKPEhKHkLue+YU06WX41Lezkh5D0lfMl yFdNETYtLrplcQYh/ntdkla8AQIDAQABo4IClTCCApEwHQYDVR0OBBYEFCPPiT75 AEi3dwj1r62Hs5v9U9hgMB8GA1UdIwQYMBaAFHYOan8Ity/4DrVvZ1AyOxZKcNod MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0RBRS81QjRDNEUzNjU5 NjkxMUVDOTRBM0U3NzBDNEY5QUUwMi9kZzVxZndpM0xfZ090VzluVURJN0ZrcHcy aDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2RnNXFmd2kzTF9nT3RXOW5VREk3RmtwdzJoMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTdEQUUvNUI0QzRFMzY1OTY5MTFFQzk0QTNFNzcwQzRGOUFFMDIvOUNEMTYzOTIz MDk3MTFGMDlFRkQwQzRDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAEtgeYwDQYJKoZIhvcNAQELBQADggEBAAP0TfvS6UhzBHl8 jht1shkZ46oQ7RzXWmUgblWJNfEjCFbZ1eaCMY42MW2Zwu7SBVHZPvviBYOVp+ZS Lr6hktVGLtdxqX3UcUiJc1b/6z0DT5K8l4FWBDZPOz0fwIXH/H/byOPi0AWh0/+z cFb4UDVuslUKoDgGGpfGOUJIUOpC863BhA2BhYVYFkTINO+TulqmbGmLgMO3Uxih SOMnIileBrEoTyzqUwFsnXxY9NNQsgtmYpMWP3i7kr/J7QXgrjZ37euSgAZ5l7EW fhmgz136hjF2Ao+1QRhI5MgdJkbcp+gNe/0hMs060g3JCaHaggfFkf/gfFFgVt6/ hTUQx38= -----END CERTIFICATE-----Generated at Thu May 15 17:54:51 2025 by rpki-client