$ rpki-client -vvf rpki.apnic.net/member_repository/A915CC16/24D39D62F08011EAB5BB1037C4F9AE02/909B1B4AF08211EA87323C3AC4F9AE02.roa File: 909B1B4AF08211EA87323C3AC4F9AE02.roa (raw, json) Hash identifier: jqonIYPAIQthnkCgLl2o39RfU+ULMVx6aAHFKaXLR6w= Subject key identifier: 3F:CF:74:70:DE:E8:B4:BA:D9:6E:29:E9:7A:C1:FC:C0:DB:98:1F:6C Certificate issuer: /CN=A915CC16/serialNumber=587E7896025003ACD0C29B7F3F29A0708F6B286A Certificate serial: 07DC Authority key identifier: 58:7E:78:96:02:50:03:AC:D0:C2:9B:7F:3F:29:A0:70:8F:6B:28:6A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WH54lgJQA6zQwpt_PymgcI9rKGo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915CC16/24D39D62F08011EAB5BB1037C4F9AE02/909B1B4AF08211EA87323C3AC4F9AE02.roa Signing time: Mon 28 Apr 2025 22:01:00 +0000 ROA not before: Mon 28 Apr 2025 22:01:00 +0000 ROA not after: Thu 28 Aug 2025 00:00:00 +0000 asID: 135092 IP address blocks: 36.255.52.0/22 maxlen: 24 103.209.20.0/22 maxlen: 24 2400:bce0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915CC16/24D39D62F08011EAB5BB1037C4F9AE02/WH54lgJQA6zQwpt_PymgcI9rKGo.crl rsync://rpki.apnic.net/member_repository/A915CC16/24D39D62F08011EAB5BB1037C4F9AE02/WH54lgJQA6zQwpt_PymgcI9rKGo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WH54lgJQA6zQwpt_PymgcI9rKGo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 20:51:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2012 (0x7dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915CC16, serialNumber=587E7896025003ACD0C29B7F3F29A0708F6B286A Validity Not Before: Apr 28 22:01:00 2025 GMT Not After : Aug 28 00:00:00 2025 GMT Subject: CN=680ffa9c-3d32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:bf:1f:c8:0d:dd:ff:87:b0:dc:43:94:f9:91: 31:cc:80:5d:f4:39:d3:bd:04:15:45:6d:22:6a:fe: 7d:c3:e6:e7:af:28:c8:81:53:c9:cb:5f:d0:ea:e7: 1d:46:da:9a:2d:ee:43:80:21:7f:ce:d5:98:76:5b: e6:c9:34:49:7a:24:4f:0e:44:73:bb:84:e2:4e:29: 4b:a1:8c:d5:7b:89:c2:30:5e:bf:c1:2a:d7:8a:35: ce:b0:c4:3f:f6:c7:1a:d1:9b:c4:5c:4c:67:49:ea: 89:14:56:8a:b6:1f:3d:ba:d4:e5:fb:70:86:8b:41: af:c7:fe:7f:f0:38:0e:2b:1c:37:d2:d7:a6:82:9e: 10:3d:c1:3e:73:52:9a:54:6e:ce:10:d2:be:76:93: b0:b9:3d:4b:b2:e0:46:03:e3:f3:a6:60:4b:fa:eb: 06:24:4a:7f:f9:a8:ba:58:d5:79:b6:ba:dd:85:79: 70:8e:f6:3a:a2:b2:da:06:89:6e:44:c5:f5:c0:60: ef:48:b4:87:51:b4:1b:f7:08:fa:41:7b:c5:75:3e: 2c:a0:1f:ef:d5:59:53:5c:99:0e:7b:c4:d6:65:25: 10:ba:0c:f9:26:ad:4e:3f:24:43:c3:7b:df:ba:80: 49:6e:c1:d5:7e:85:79:0f:77:70:af:5d:c6:68:2e: 8b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:CF:74:70:DE:E8:B4:BA:D9:6E:29:E9:7A:C1:FC:C0:DB:98:1F:6C X509v3 Authority Key Identifier: keyid:58:7E:78:96:02:50:03:AC:D0:C2:9B:7F:3F:29:A0:70:8F:6B:28:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915CC16/24D39D62F08011EAB5BB1037C4F9AE02/WH54lgJQA6zQwpt_PymgcI9rKGo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WH54lgJQA6zQwpt_PymgcI9rKGo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CC16/24D39D62F08011EAB5BB1037C4F9AE02/909B1B4AF08211EA87323C3AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 36.255.52.0/22 103.209.20.0/22 IPv6: 2400:bce0::/32 Signature Algorithm: sha256WithRSAEncryption be:2a:9f:e7:d8:d1:4a:27:03:e1:b1:30:51:5e:28:e4:81:30: 8a:88:d8:97:b0:e4:d1:70:be:22:46:f6:5f:1d:44:20:7f:67: 29:76:56:07:5c:b8:75:86:cc:69:11:b1:8f:dc:44:d5:d5:3a: 6a:7f:2f:cf:1a:15:b3:f4:ac:87:48:3d:09:a0:aa:06:fa:b7: 37:b6:23:cb:70:4b:ba:4d:13:f4:cc:d0:a4:8d:c1:63:ab:5b: fb:94:e7:05:65:80:14:e0:85:96:76:b7:42:38:fd:db:a4:e8: ae:d7:6c:9a:8d:08:de:c3:6a:38:89:a3:80:32:22:53:cd:f8: 64:92:b4:45:59:f4:3b:e0:7f:bb:60:a4:50:b3:66:e4:81:94: dd:92:c7:6d:e5:06:29:82:a2:1f:60:e4:af:ff:b9:66:f7:8e: 18:91:45:50:37:a2:46:96:76:d5:fa:ce:97:d9:b1:ae:d4:98: 00:2f:a5:46:01:87:c6:e8:b1:c8:41:dc:49:45:26:a2:72:e5: 0e:ec:87:c1:91:94:6b:b6:14:c6:aa:af:83:84:4e:85:e3:9c: 70:ab:06:ef:fc:a7:08:57:c9:37:73:8d:78:8b:49:25:8f:19: 21:52:b4:55:a2:d2:7d:50:08:d4:60:05:51:f2:ee:f0:c4:b2: 34:31:66:e8 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICB9wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUNDMTYxMTAvBgNVBAUTKDU4N0U3ODk2MDI1MDAzQUNEMEMyOUI3RjNGMjlBMDcw OEY2QjI4NkEwHhcNMjUwNDI4MjIwMTAwWhcNMjUwODI4MDAwMDAwWjAYMRYwFAYD VQQDEw02ODBmZmE5Yy0zZDMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzb8fyA3d/4ew3EOU+ZExzIBd9DnTvQQVRW0iav59w+bnryjIgVPJy1/Q6ucd RtqaLe5DgCF/ztWYdlvmyTRJeiRPDkRzu4TiTilLoYzVe4nCMF6/wSrXijXOsMQ/ 9sca0ZvEXExnSeqJFFaKth89utTl+3CGi0Gvx/5/8DgOKxw30temgp4QPcE+c1Ka VG7OENK+dpOwuT1LsuBGA+PzpmBL+usGJEp/+ai6WNV5trrdhXlwjvY6orLaBolu RMX1wGDvSLSHUbQb9wj6QXvFdT4soB/v1VlTXJkOe8TWZSUQugz5Jq1OPyRDw3vf uoBJbsHVfoV5D3dwr13GaC6L+wIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFD/PdHDe 6LS62W4p6XrB/MDbmB9sMB8GA1UdIwQYMBaAFFh+eJYCUAOs0MKbfz8poHCPayhq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Q0MxNi8yNEQzOUQ2MkYw ODAxMUVBQjVCQjEwMzdDNEY5QUUwMi9XSDU0bGdKUUE2elF3cHRfUHltZ2NJOXJL R28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dINTRsZ0pRQTZ6UXdwdF9QeW1nY0k5cktHby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUNDMTYvMjREMzlENjJGMDgwMTFFQUI1QkIxMDM3QzRGOUFFMDIvOTA5QjFCNEFG MDgyMTFFQTg3MzIzQzNBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAIk/zQDBAJn0RQwDQQCAAIwBwMFACQAvOAwDQYJKoZIhvcN AQELBQADggEBAL4qn+fY0UonA+GxMFFeKOSBMIqI2Jew5NFwviJG9l8dRCB/Zyl2 VgdcuHWGzGkRsY/cRNXVOmp/L88aFbP0rIdIPQmgqgb6tze2I8twS7pNE/TM0KSN wWOrW/uU5wVlgBTghZZ2t0I4/duk6K7XbJqNCN7DajiJo4AyIlPN+GSStEVZ9Dvg f7tgpFCzZuSBlN2Sx23lBimCoh9g5K//uWb3jhiRRVA3okaWdtX6zpfZsa7UmAAv pUYBh8boschB3ElFJqJy5Q7sh8GRlGu2FMaqr4OEToXjnHCrBu/8pwhXyTdzjXiL SSWPGSFStFWi0n1QCNRgBVHy7vDEsjQxZug= -----END CERTIFICATE-----Generated at Wed May 14 17:33:20 2025 by rpki-client