$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/9CDC48AC2A5C11F08E4E234FC4F9AE02.roa File: 9CDC48AC2A5C11F08E4E234FC4F9AE02.roa (raw, json) Hash identifier: 2oPBIk4MK6aaZcvphIdOCWQJNuv/J8CrlEPLFmrT1v0= Subject key identifier: 29:BB:DD:35:DA:68:7D:EB:18:65:13:B1:E4:1F:4D:39:DD:7B:06:3F Certificate issuer: /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138 Certificate serial: 033B Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/9CDC48AC2A5C11F08E4E234FC4F9AE02.roa Signing time: Fri 09 May 2025 00:58:36 +0000 ROA not before: Fri 09 May 2025 00:58:36 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 834 IP address blocks: 202.155.141.0/24 maxlen: 24 202.155.142.0/24 maxlen: 24 218.33.80.0/22 maxlen: 24 218.33.92.0/22 maxlen: 24 218.33.100.0/22 maxlen: 24 218.33.120.0/22 maxlen: 24 218.33.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 01:35:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 827 (0x33b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192C18, serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138 Validity Not Before: May 9 00:58:36 2025 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=681d533c-a36b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:22:e4:98:cb:9c:83:84:54:a0:3f:0d:82:29: 13:0e:a4:8a:70:b3:6c:d0:d1:c2:dc:27:23:f9:47: 95:9c:96:47:50:af:de:18:e3:81:ff:ed:3d:e8:6a: 91:d8:c9:ce:18:26:f0:b9:31:48:0a:6e:93:d7:26: cb:57:05:50:9c:2e:ad:fe:63:f5:b8:e8:18:6c:c6: a6:e2:22:3a:5a:fd:91:6b:b8:48:6b:85:3e:3d:17: a5:05:e4:a2:bb:8b:73:a6:01:11:b6:9f:91:c8:52: 3b:50:31:c5:12:03:a6:60:82:07:90:a4:74:4b:40: d0:88:c7:ff:04:df:44:37:5e:b4:bb:84:5f:09:23: 55:20:db:29:26:cc:77:f8:bf:5d:87:9a:7a:96:67: 14:c6:23:e9:bb:ff:22:f0:58:c7:ae:63:9b:1c:1a: 94:5a:47:f1:e3:54:b3:bf:46:f3:fa:d7:9e:23:5b: fb:83:66:58:45:d9:b8:04:88:11:54:d7:fb:8f:df: 14:21:40:4b:cc:b5:45:6d:4b:94:f4:44:42:65:90: 71:fd:69:ac:9e:78:24:df:c5:cd:ae:ce:a0:bf:ec: e8:26:55:ec:7a:ee:1b:c7:bd:27:49:3d:9f:95:e0: 79:dd:b6:68:47:ed:16:3c:2e:54:33:03:2e:ab:b6: a0:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:BB:DD:35:DA:68:7D:EB:18:65:13:B1:E4:1F:4D:39:DD:7B:06:3F X509v3 Authority Key Identifier: keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/9CDC48AC2A5C11F08E4E234FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.155.141.0-202.155.142.255 218.33.80.0/22 218.33.92.0/22 218.33.100.0/22 218.33.120.0/21 Signature Algorithm: sha256WithRSAEncryption a2:3a:e9:52:35:6d:f7:c8:ee:b7:cb:9d:cb:e9:26:f1:83:1a: 17:95:dd:6c:bf:a5:af:21:30:7a:34:dd:bb:8b:7a:e5:3b:73: 42:60:de:46:fd:3a:06:b1:c0:94:1d:80:67:4c:e5:05:b1:57: 79:de:0b:ce:6a:bb:ea:03:a7:91:52:65:f2:f1:2d:85:0f:9e: 81:d5:70:5e:49:ed:2f:1c:f3:4e:a2:91:f7:c8:7a:81:a8:2d: f9:c8:83:26:c7:59:39:30:ca:99:53:4d:ef:af:de:cd:34:d3: a5:3b:2d:eb:ec:40:66:12:f7:da:77:1d:f1:5f:a1:09:77:b2: 71:f8:00:eb:de:21:cd:42:90:08:85:6a:6b:6c:dd:70:e4:fc: 4a:90:83:5a:b5:46:c7:f5:8b:12:11:e3:d9:2c:0e:4f:98:e5: c7:30:01:66:b4:27:fa:bf:b9:0f:86:23:d2:ef:7c:29:5a:fb: 14:c2:a1:42:9f:3c:fa:41:d8:b2:3f:dd:03:dc:9e:cb:14:35: 91:02:76:d6:e6:ea:97:ee:e6:23:5f:9a:7f:0c:2c:9f:c9:3c: 5b:cb:ff:f7:68:13:9e:f5:ce:b0:1e:ca:eb:64:e1:0a:72:75: 29:3b:1f:66:12:44:5d:9d:dc:3f:06:bf:b0:c2:a4:39:ce:75: 78:d9:37:6d -----BEGIN CERTIFICATE----- MIIFkTCCBHmgAwIBAgICAzswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJDMTgxMTAvBgNVBAUTKEYxRkUwQzMyN0U3OUU1QUY0M0UxNUIwRTZGOENENjZD MDMyOUQxMzgwHhcNMjUwNTA5MDA1ODM2WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFkNTMzYy1hMzZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmyLkmMucg4RUoD8NgikTDqSKcLNs0NHC3Ccj+UeVnJZHUK/eGOOB/+096GqR 2MnOGCbwuTFICm6T1ybLVwVQnC6t/mP1uOgYbMam4iI6Wv2Ra7hIa4U+PRelBeSi u4tzpgERtp+RyFI7UDHFEgOmYIIHkKR0S0DQiMf/BN9EN160u4RfCSNVINspJsx3 +L9dh5p6lmcUxiPpu/8i8FjHrmObHBqUWkfx41Szv0bz+teeI1v7g2ZYRdm4BIgR VNf7j98UIUBLzLVFbUuU9ERCZZBx/Wmsnngk38XNrs6gv+zoJlXseu4bx70nST2f leB53bZoR+0WPC5UMwMuq7agiQIDAQABo4ICtTCCArEwHQYDVR0OBBYEFCm73TXa aH3rGGUTseQfTTndewY/MB8GA1UdIwQYMBaAFPH+DDJ+eeWvQ+FbDm+M1mwDKdE4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkMxOC85QTVFRUE4QzNE RjQxMUVEODA0MUY5MzBDNEY5QUUwMi84ZjRNTW41NTVhOUQ0VnNPYjR6V2JBTXAw VGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhmNE1NbjU1NWE5RDRWc09iNHpXYkFNcDBUZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTJDMTgvOUE1RUVBOEMzREY0MTFFRDgwNDFGOTMwQzRGOUFFMDIvOUNEQzQ4QUMy QTVDMTFGMDhFNEUyMzRGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPwYIKwYBBQUHAQcBAf8E MDAuMCwEAgABMCYwDAMEAMqbjQMEAMqbjgMEAtohUAMEAtohXAMEAtohZAMEA9oh eDANBgkqhkiG9w0BAQsFAAOCAQEAojrpUjVt98jut8udy+km8YMaF5XdbL+lryEw ejTdu4t65TtzQmDeRv06BrHAlB2AZ0zlBbFXed4Lzmq76gOnkVJl8vEthQ+egdVw XkntLxzzTqKR98h6gagt+ciDJsdZOTDKmVNN76/ezTTTpTst6+xAZhL32ncd8V+h CXeycfgA694hzUKQCIVqa2zdcOT8SpCDWrVGx/WLEhHj2SwOT5jlxzABZrQn+r+5 D4Yj0u98KVr7FMKhQp88+kHYsj/dA9yeyxQ1kQJ21ubql+7mI1+afwwsn8k8W8v/ 92gTnvXOsB7K62ThCnJ1KTsfZhJEXZ3cPwa/sMKkOc51eNk3bQ== -----END CERTIFICATE-----Generated at Sun May 11 17:09:40 2025 by rpki-client