$ rpki-client -vvf rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/7CA593102A2811F0819D8C13C4F9AE02.roa File: 7CA593102A2811F0819D8C13C4F9AE02.roa (raw, json) Hash identifier: AgK/4KQKRm1k0cfVPX0Zdc5eL/A0KNuVFO4G4wksfbA= Subject key identifier: 8F:E2:57:66:D8:B2:FF:6E:2E:8F:6A:2A:AB:04:F3:55:E7:8E:54:88 Certificate issuer: /CN=A9165DB1/serialNumber=8686C92B87DD5DD2EE2ABB40EC73F178F6045A34 Certificate serial: 0268 Authority key identifier: 86:86:C9:2B:87:DD:5D:D2:EE:2A:BB:40:EC:73:F1:78:F6:04:5A:34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hobJK4fdXdLuKrtA7HPxePYEWjQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/7CA593102A2811F0819D8C13C4F9AE02.roa Signing time: Tue 06 May 2025 03:16:23 +0000 ROA not before: Tue 06 May 2025 03:16:23 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 14618 IP address blocks: 203.4.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.crl rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hobJK4fdXdLuKrtA7HPxePYEWjQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 01:43:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 616 (0x268) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165DB1, serialNumber=8686C92B87DD5DD2EE2ABB40EC73F178F6045A34 Validity Not Before: May 6 03:16:23 2025 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=68197f06-d45b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:16:17:25:5a:1a:64:fe:b5:44:1b:90:b6:a5: 5a:4f:21:5c:d0:83:c5:98:10:78:3c:b2:14:41:ff: 5b:27:49:5c:6f:3b:d8:c3:e9:1f:74:3d:97:2c:f6: 19:03:33:7d:7d:12:1d:2c:de:01:f9:be:96:f9:91: 10:f6:8b:ce:54:fd:43:82:ac:9a:2b:da:89:75:34: f3:5e:b4:8c:c8:bf:14:d9:26:d5:5f:d9:7c:d9:4c: ff:76:59:01:89:38:3d:55:58:cb:c8:ac:05:2a:57: 20:ba:b0:80:3e:1f:c0:e4:44:ab:c4:f6:62:b7:4a: 55:ea:a2:8a:3f:b1:da:53:a5:7a:b9:4e:d0:a6:46: 8e:31:6b:0e:48:d1:68:cc:13:a4:b1:cb:68:4e:40: c3:aa:75:9c:65:c4:28:9c:57:73:ef:65:33:07:68: db:05:db:44:9a:02:68:49:c5:61:e5:18:d1:50:3c: 1f:93:2e:d9:40:2a:85:4c:3d:fb:f2:be:6b:a3:9c: 7a:1c:98:96:ca:9b:74:3d:4d:af:20:cd:c6:f2:51: 10:38:b8:f1:db:46:0b:3c:bf:01:2c:cb:02:02:98: 12:76:fc:43:7b:2e:93:99:9f:83:96:82:e0:64:1e: 0a:9c:1d:cf:4d:4e:e9:9f:34:05:6e:89:18:3d:cd: 1c:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:E2:57:66:D8:B2:FF:6E:2E:8F:6A:2A:AB:04:F3:55:E7:8E:54:88 X509v3 Authority Key Identifier: keyid:86:86:C9:2B:87:DD:5D:D2:EE:2A:BB:40:EC:73:F1:78:F6:04:5A:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hobJK4fdXdLuKrtA7HPxePYEWjQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/7CA593102A2811F0819D8C13C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.4.146.0/24 Signature Algorithm: sha256WithRSAEncryption 98:d1:29:5d:08:e6:25:13:08:d6:ba:11:c1:87:d1:e6:13:b6: 3a:20:a1:29:ad:55:58:88:c1:63:e7:c9:9a:5f:8b:ea:e5:7c: 09:74:56:12:f7:07:c2:f5:1c:f4:b0:e6:d6:10:99:fd:7d:79: 39:a1:19:d0:86:40:46:6f:51:d2:cc:7f:25:fb:1c:c6:e2:ec: 4f:39:70:bb:79:fb:1f:bc:9a:0e:22:b8:4d:5f:d0:37:ac:a4: 44:c0:a4:96:c8:08:03:0c:ca:83:10:40:68:8c:76:59:ea:13: 4d:bc:a4:47:d2:d3:0b:f2:0d:d5:29:1f:65:66:1a:2f:53:68: 77:e4:07:84:5e:a2:11:d6:b8:56:01:0a:3d:8e:16:22:67:6c: 56:52:5e:9f:c7:fc:9a:3b:42:1d:d0:93:5e:f8:3a:65:d7:00: a5:b0:85:83:c6:15:49:64:cc:a6:78:0d:c5:b5:b6:41:a9:5b: e5:95:90:24:e7:73:ba:09:3f:83:04:1e:54:b5:7c:89:fa:3f: ad:a4:26:68:54:76:49:07:4b:7a:18:8b:20:43:6d:9f:9e:09: 04:6b:9e:24:87:e9:61:2f:14:df:dc:de:1c:d7:9c:ed:aa:40: e8:59:42:84:06:2e:a5:18:ff:33:d4:d8:e7:6f:ec:15:dc:9e: ed:f7:78:a5 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAmgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVEQjExMTAvBgNVBAUTKDg2ODZDOTJCODdERDVERDJFRTJBQkI0MEVDNzNGMTc4 RjYwNDVBMzQwHhcNMjUwNTA2MDMxNjIzWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODE5N2YwNi1kNDViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyhYXJVoaZP61RBuQtqVaTyFc0IPFmBB4PLIUQf9bJ0lcbzvYw+kfdD2XLPYZ AzN9fRIdLN4B+b6W+ZEQ9ovOVP1DgqyaK9qJdTTzXrSMyL8U2SbVX9l82Uz/dlkB iTg9VVjLyKwFKlcgurCAPh/A5ESrxPZit0pV6qKKP7HaU6V6uU7QpkaOMWsOSNFo zBOksctoTkDDqnWcZcQonFdz72UzB2jbBdtEmgJoScVh5RjRUDwfky7ZQCqFTD37 8r5ro5x6HJiWypt0PU2vIM3G8lEQOLjx20YLPL8BLMsCApgSdvxDey6TmZ+DloLg ZB4KnB3PTU7pnzQFbokYPc0cYwIDAQABo4IClTCCApEwHQYDVR0OBBYEFI/iV2bY sv9uLo9qKqsE81XnjlSIMB8GA1UdIwQYMBaAFIaGySuH3V3S7iq7QOxz8Xj2BFo0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NURCMS81QTQ5NkY4ODBF MTcxMUVEOEUzQkQ5MTVDNEY5QUUwMi9ob2JKSzRmZFhkTHVLcnRBN0hQeGVQWUVX alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hvYkpLNGZkWGRMdUtydEE3SFB4ZVBZRVdqUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjVEQjEvNUE0OTZGODgwRTE3MTFFRDhFM0JEOTE1QzRGOUFFMDIvN0NBNTkzMTAy QTI4MTFGMDgxOUQ4QzEzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADLBJIwDQYJKoZIhvcNAQELBQADggEBAJjRKV0I5iUTCNa6 EcGH0eYTtjogoSmtVViIwWPnyZpfi+rlfAl0VhL3B8L1HPSw5tYQmf19eTmhGdCG QEZvUdLMfyX7HMbi7E85cLt5+x+8mg4iuE1f0DespETApJbICAMMyoMQQGiMdlnq E028pEfS0wvyDdUpH2VmGi9TaHfkB4ReohHWuFYBCj2OFiJnbFZSXp/H/Jo7Qh3Q k174OmXXAKWwhYPGFUlkzKZ4DcW1tkGpW+WVkCTnc7oJP4MEHlS1fIn6P62kJmhU dkkHS3oYiyBDbZ+eCQRrniSH6WEvFN/c3hzXnO2qQOhZQoQGLqUY/zPU2Odv7BXc nu33eKU= -----END CERTIFICATE-----Generated at Thu May 15 16:39:49 2025 by rpki-client