$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/712D274624BF11F0ADDD3D44C4F9AE02.roa File: 712D274624BF11F0ADDD3D44C4F9AE02.roa (raw, json) Hash identifier: hI8rPrNoFSuSDtKlIpIXN+5aKoXdXK52nCDyF+LIHUg= Subject key identifier: 0E:03:B0:B7:29:43:02:5E:6F:0A:80:41:FC:92:C2:5E:B2:FD:85:79 Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264 Certificate serial: 0D4D Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/712D274624BF11F0ADDD3D44C4F9AE02.roa Signing time: Mon 12 May 2025 12:46:14 +0000 ROA not before: Mon 12 May 2025 12:46:14 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 18811 IP address blocks: 14.192.133.0/24 maxlen: 24 14.192.145.0/24 maxlen: 24 111.92.128.0/24 maxlen: 24 111.92.132.0/24 maxlen: 24 111.92.136.0/24 maxlen: 24 111.92.137.0/24 maxlen: 24 111.92.141.0/24 maxlen: 24 111.92.143.0/24 maxlen: 24 111.92.144.0/24 maxlen: 24 111.92.145.0/24 maxlen: 24 111.92.146.0/24 maxlen: 24 111.92.147.0/24 maxlen: 24 111.92.148.0/24 maxlen: 24 111.92.149.0/24 maxlen: 24 111.92.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 19:55:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3405 (0xd4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264 Validity Not Before: May 12 12:46:14 2025 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=6821ed96-9d0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:b9:d8:b5:b8:2d:24:6d:3a:b8:93:0e:33:08: e2:58:24:12:88:7f:6d:60:1c:56:3c:98:24:31:ce: 10:1b:6e:5c:ad:60:cb:4d:f7:75:dd:05:7a:42:b8: 19:95:be:fe:eb:4f:22:0d:20:b4:7a:a6:b3:9d:08: a7:6d:87:41:dc:79:54:02:aa:fc:74:01:0a:dd:6c: 38:69:d0:54:b3:4b:84:1d:01:7e:d7:09:7a:f7:bd: 7a:d0:4c:99:61:23:70:3b:2c:54:be:fd:cf:16:8d: 6b:50:86:b3:49:01:4a:b7:dd:f9:85:95:af:da:4d: 1c:b9:a4:8b:73:7e:20:fb:22:e9:ec:3b:6f:93:eb: 66:2e:1c:30:ed:41:6b:74:f9:11:93:1e:87:f6:65: fe:06:e2:03:91:fc:80:4e:79:b9:96:35:37:f0:b6: d1:bf:57:42:c9:ef:ed:a4:08:91:21:ee:96:a2:a8: 89:e9:cc:db:28:47:0c:b0:84:6d:71:a1:b5:aa:eb: 32:91:9d:f9:03:a7:d4:3d:1e:f0:fc:db:76:dc:96: 13:23:d1:68:5f:28:87:02:c0:cf:22:b5:d9:ac:eb: 2d:9c:1f:07:86:1b:e2:1e:c8:39:f1:ac:20:31:84: b8:8b:ba:29:b4:d3:5c:a3:bf:d1:8e:03:21:a7:4a: f4:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:03:B0:B7:29:43:02:5E:6F:0A:80:41:FC:92:C2:5E:B2:FD:85:79 X509v3 Authority Key Identifier: keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/712D274624BF11F0ADDD3D44C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 14.192.133.0/24 14.192.145.0/24 111.92.128.0/24 111.92.132.0/24 111.92.136.0/23 111.92.141.0/24 111.92.143.0-111.92.149.255 111.92.151.0/24 Signature Algorithm: sha256WithRSAEncryption 50:ae:36:a6:51:be:36:d8:f0:0d:84:eb:e3:1b:d6:ad:d9:58: 69:48:a8:f9:50:b1:da:86:67:3b:f7:5d:36:6d:f0:49:0a:68: f7:4f:af:46:51:26:28:41:92:cb:88:4b:c0:74:e3:1f:99:cd: 05:0c:6f:8c:b8:d8:e7:b1:bd:6a:9f:11:41:39:31:a6:17:b4: b0:7b:d9:8b:1b:2a:39:fe:4e:62:09:e5:f2:57:b9:9a:75:5d: ed:16:c6:70:bd:b2:b3:aa:2b:0e:c6:a1:5e:1a:cd:40:2d:5b: 8c:65:f4:ab:d2:30:ab:25:86:cc:7d:a5:90:15:a1:c2:61:aa: a6:14:e0:fb:6c:fc:a0:2a:e4:87:32:7f:5e:9e:c4:ba:a1:e9: 89:68:5f:0b:c7:a2:fc:9a:34:2c:3d:d3:e1:b8:9e:95:e9:76: f6:86:43:cb:19:f0:01:db:3b:b0:51:0f:cf:ff:4b:be:f3:8e: 16:1f:62:e9:e4:1e:46:80:1c:31:72:5f:60:9b:52:85:53:35: 33:75:72:30:72:e1:63:26:33:91:ba:05:d4:28:2e:5a:6b:f3: 1a:c1:62:68:68:9d:d7:8a:80:13:c8:2e:1a:ca:dc:5e:25:c1: 22:99:f6:e6:5c:cc:14:62:ee:e7:df:e0:96:fd:63:30:25:0c: 20:3e:c2:88 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgICDU0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEwQ0QxMTAvBgNVBAUTKDM4MTkzNzIwODIxRTA3RDY5MThFM0E3OUZCRTA4MjND NjczMkUyNjQwHhcNMjUwNTEyMTI0NjE0WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODIxZWQ5Ni05ZDBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/LnYtbgtJG06uJMOMwjiWCQSiH9tYBxWPJgkMc4QG25crWDLTfd13QV6QrgZ lb7+608iDSC0eqaznQinbYdB3HlUAqr8dAEK3Ww4adBUs0uEHQF+1wl697160EyZ YSNwOyxUvv3PFo1rUIazSQFKt935hZWv2k0cuaSLc34g+yLp7Dtvk+tmLhww7UFr dPkRkx6H9mX+BuIDkfyATnm5ljU38LbRv1dCye/tpAiRIe6WoqiJ6czbKEcMsIRt caG1qusykZ35A6fUPR7w/Nt23JYTI9FoXyiHAsDPIrXZrOstnB8HhhviHsg58awg MYS4i7optNNco7/RjgMhp0r0HQIDAQABo4ICxzCCAsMwHQYDVR0OBBYEFA4DsLcp QwJebwqAQfySwl6y/YV5MB8GA1UdIwQYMBaAFDgZNyCCHgfWkY46efvggjxnMuJk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBDRC80NjcyM0YxRTg5 RUMxMUVBODFDMDRGMUVDNEY5QUUwMi9PQmszSUlJZUI5YVJqanA1LS1DQ1BHY3k0 bVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09CazNJSUllQjlhUmpqcDUtLUNDUEdjeTRtUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUEwQ0QvNDY3MjNGMUU4OUVDMTFFQTgxQzA0RjFFQzRGOUFFMDIvNzEyRDI3NDYy NEJGMTFGMEFEREQzRDQ0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwUQYIKwYBBQUHAQcBAf8E QjBAMD4EAgABMDgDBAAOwIUDBAAOwJEDBABvXIADBABvXIQDBAFvXIgDBABvXI0w DAMEAG9cjwMEAW9clAMEAG9clzANBgkqhkiG9w0BAQsFAAOCAQEAUK42plG+Ntjw DYTr4xvWrdlYaUio+VCx2oZnO/ddNm3wSQpo90+vRlEmKEGSy4hLwHTjH5nNBQxv jLjY57G9ap8RQTkxphe0sHvZixsqOf5OYgnl8le5mnVd7RbGcL2ys6orDsahXhrN QC1bjGX0q9IwqyWGzH2lkBWhwmGqphTg+2z8oCrkhzJ/Xp7EuqHpiWhfC8ei/Jo0 LD3T4bielel29oZDyxnwAds7sFEPz/9LvvOOFh9i6eQeRoAcMXJfYJtShVM1M3Vy MHLhYyYzkboF1CguWmvzGsFiaGid14qAE8guGsrcXiXBIpn25lzMFGLu59/glv1j MCUMID7CiA== -----END CERTIFICATE-----Generated at Tue May 13 15:04:45 2025 by rpki-client