$ rpki-client -vvf rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/A2C8B57074B711EB8491BC63C4F9AE02.roa File: A2C8B57074B711EB8491BC63C4F9AE02.roa (raw, json) Hash identifier: 1XIBkz1xrsmaIEUuPCKysFF+5jDC/AbJdnY6h8iCmzA= Subject key identifier: 3B:31:5E:20:9F:E2:F6:FB:77:AF:15:48:E1:C9:46:25:6E:C8:20:90 Certificate issuer: /CN=A918495F/serialNumber=90C22F7393850E8ECF6B5F1E320D07B2D1ACD8FD Certificate serial: 17D2 Authority key identifier: 90:C2:2F:73:93:85:0E:8E:CF:6B:5F:1E:32:0D:07:B2:D1:AC:D8:FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/A2C8B57074B711EB8491BC63C4F9AE02.roa Signing time: Thu 08 May 2025 17:17:45 +0000 ROA not before: Thu 08 May 2025 17:17:45 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 134963 IP address blocks: 203.198.4.0/24 maxlen: 24 203.198.7.0/24 maxlen: 24 218.102.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.crl rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 16:31:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6098 (0x17d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918495F, serialNumber=90C22F7393850E8ECF6B5F1E320D07B2D1ACD8FD Validity Not Before: May 8 17:17:45 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=681ce739-605c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ae:65:fe:06:82:a1:b0:7e:63:28:19:38:7c: 1f:30:ea:56:96:89:5b:59:e6:08:3d:60:49:ff:7a: d6:d7:c4:b9:2c:27:74:e7:ae:ac:55:00:c7:87:fa: f9:c0:45:14:28:ea:9c:90:bb:7b:36:c1:78:0a:49: a7:9c:85:e9:92:ca:50:15:c8:b1:4e:67:5f:00:19: c2:7e:44:97:51:97:71:45:5d:57:5c:b5:85:5d:b4: 8a:49:49:f8:9d:17:98:f0:a8:30:42:61:68:0e:1c: 48:d8:ec:40:42:fa:6e:40:49:9d:bc:81:64:7f:6a: 5c:19:3f:c1:3d:9d:2d:8b:15:46:c1:ec:c2:7f:51: 4d:e9:83:45:25:8d:93:db:56:57:cb:2b:97:33:60: 7a:a6:fc:2f:48:f0:af:0e:6e:32:74:7f:4e:a3:3b: 5a:df:63:b7:87:ba:f9:66:6d:70:9e:9c:3a:3b:82: b6:83:84:63:26:d3:5f:ac:17:ef:8d:00:8e:78:e8: a5:24:bc:6f:9f:37:18:37:31:5a:ce:e0:e4:ab:61: e1:0a:61:50:e8:ef:20:a0:c7:41:4e:77:b1:77:d4: 4b:19:12:6a:a6:7b:04:bd:8b:ae:86:f0:08:9c:fd: b9:fa:29:0a:7f:b3:ae:3a:d0:dc:73:f1:80:5a:52: 80:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:31:5E:20:9F:E2:F6:FB:77:AF:15:48:E1:C9:46:25:6E:C8:20:90 X509v3 Authority Key Identifier: keyid:90:C2:2F:73:93:85:0E:8E:CF:6B:5F:1E:32:0D:07:B2:D1:AC:D8:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/A2C8B57074B711EB8491BC63C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.198.4.0/24 203.198.7.0/24 218.102.23.0/24 Signature Algorithm: sha256WithRSAEncryption 93:4e:34:3d:a0:ee:90:61:7c:49:a1:7c:dc:69:d6:42:8c:a1: 54:f9:37:a4:2d:1c:c5:4d:39:78:d8:b2:67:93:08:72:0c:4d: f1:84:3f:3f:48:fc:6f:aa:ab:9f:e8:bd:38:8e:69:d3:26:3e: 0a:3c:87:d8:91:40:cf:fe:d0:7e:08:00:af:07:60:dd:3e:1d: 03:b5:83:60:4b:2a:d7:18:70:df:91:7b:dc:2d:07:86:27:3b: 0d:2c:7c:2a:0c:b4:b7:03:fc:86:b0:b7:bd:77:20:36:8f:a4: 3d:b6:da:fd:00:6b:0f:25:64:72:d2:06:59:31:bf:93:a1:a3: 6d:b7:33:c2:1b:b6:9d:75:45:29:10:f8:31:d0:77:25:d9:88: 5b:fd:ab:73:50:13:25:47:52:f6:e0:06:9a:ee:dc:20:43:4e: 30:ed:4a:91:e7:3e:37:1c:ed:f0:70:e8:54:1e:b7:ef:ae:cb: a1:2f:3d:38:f6:c6:25:27:55:7b:f2:f2:d0:02:88:2a:36:5d: 19:48:9b:77:66:40:d6:31:ba:e6:db:57:28:e0:66:55:03:f1: 5b:ef:2b:58:ce:6f:53:d8:8f:99:c6:f9:88:d3:c3:a3:96:97: 6c:a6:ab:18:10:b3:88:b2:a7:2b:48:0d:47:8e:4e:5d:e3:42: f1:8e:df:53 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICF9IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ5NUYxMTAvBgNVBAUTKDkwQzIyRjczOTM4NTBFOEVDRjZCNUYxRTMyMEQwN0Iy RDFBQ0Q4RkQwHhcNMjUwNTA4MTcxNzQ1WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFjZTczOS02MDVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtq5l/gaCobB+YygZOHwfMOpWlolbWeYIPWBJ/3rW18S5LCd0566sVQDHh/r5 wEUUKOqckLt7NsF4CkmnnIXpkspQFcixTmdfABnCfkSXUZdxRV1XXLWFXbSKSUn4 nReY8KgwQmFoDhxI2OxAQvpuQEmdvIFkf2pcGT/BPZ0tixVGwezCf1FN6YNFJY2T 21ZXyyuXM2B6pvwvSPCvDm4ydH9Oozta32O3h7r5Zm1wnpw6O4K2g4RjJtNfrBfv jQCOeOilJLxvnzcYNzFazuDkq2HhCmFQ6O8goMdBTnexd9RLGRJqpnsEvYuuhvAI nP25+ikKf7OuOtDcc/GAWlKAFQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFDsxXiCf 4vb7d68VSOHJRiVuyCCQMB8GA1UdIwQYMBaAFJDCL3OThQ6Oz2tfHjINB7LRrNj9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDk1Ri84NDhDODU3Q0RG RUMxMUU3QTI3QTIyMTNDNEY5QUUwMi9rTUl2YzVPRkRvN1BhMThlTWcwSHN0R3My UDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tNSXZjNU9GRG83UGExOGVNZzBIc3RHczJQMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODQ5NUYvODQ4Qzg1N0NERkVDMTFFN0EyN0EyMjEzQzRGOUFFMDIvQTJDOEI1NzA3 NEI3MTFFQjg0OTFCQzYzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBADLxgQDBADLxgcDBADaZhcwDQYJKoZIhvcNAQELBQADggEB AJNOND2g7pBhfEmhfNxp1kKMoVT5N6QtHMVNOXjYsmeTCHIMTfGEPz9I/G+qq5/o vTiOadMmPgo8h9iRQM/+0H4IAK8HYN0+HQO1g2BLKtcYcN+Re9wtB4YnOw0sfCoM tLcD/Iawt713IDaPpD222v0Aaw8lZHLSBlkxv5Oho223M8Ibtp11RSkQ+DHQdyXZ iFv9q3NQEyVHUvbgBpru3CBDTjDtSpHnPjcc7fBw6FQet++uy6EvPTj2xiUnVXvy 8tACiCo2XRlIm3dmQNYxuubbVyjgZlUD8VvvK1jOb1PYj5nG+YjTw6OWl2ymqxgQ s4iypytIDUeOTl3jQvGO31M= -----END CERTIFICATE-----Generated at Mon May 12 16:50:31 2025 by rpki-client