$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/A14DCC1A366311EEB376DC3AC4F9AE02.roa File: A14DCC1A366311EEB376DC3AC4F9AE02.roa (raw, json) Hash identifier: 2oxGf1eF2vMP7e/KYqIXBpkCvgOIzwtv4aEoBWiSHEE= Subject key identifier: 19:4F:7B:C0:27:DC:36:07:A5:95:13:50:C0:C8:87:2C:AA:85:1B:8E Certificate issuer: /CN=A919536C/serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D Certificate serial: 01AE Authority key identifier: A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/A14DCC1A366311EEB376DC3AC4F9AE02.roa Signing time: Mon 23 Jun 2025 03:22:17 +0000 ROA not before: Mon 23 Jun 2025 03:22:17 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 140326 IP address blocks: 161.82.178.0/24 maxlen: 24 161.82.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 430 (0x1ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919536C, serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D Validity Not Before: Jun 23 03:22:17 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=6858c868-9018 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:5b:fb:fc:85:f0:7d:a4:41:d7:b2:02:ec:75: 7d:e4:2a:de:42:94:0a:da:36:08:84:99:74:0d:fb: 11:2a:b9:64:cf:53:3e:cf:69:25:62:64:f1:9c:a0: 2f:72:b0:f4:d3:6a:f2:8c:ad:bb:f6:9f:95:7e:66: 73:2d:46:0b:1e:fc:c7:e4:7f:08:d7:6f:59:04:38: df:56:5d:35:cd:e4:d1:3c:c4:e0:56:48:8c:ec:66: 9f:ea:8f:c6:24:b5:74:13:19:a0:4b:91:83:c9:4b: 62:93:88:68:3f:8f:8e:0d:bc:8c:49:ff:bd:d3:e7: 82:61:7a:41:10:78:7b:ad:7d:2d:12:2e:6a:0a:de: 27:42:8e:23:a0:03:98:2f:53:85:6a:5e:63:15:0d: c0:ce:1e:82:c2:ee:69:56:8e:21:08:e3:61:53:49: e3:ac:bc:b9:32:b5:a6:e2:5a:f5:20:8d:2a:35:eb: 74:9d:a6:a3:e4:12:73:c4:4a:64:53:e8:42:0d:24: fa:6d:bb:c4:de:f0:86:99:99:2e:18:d7:b9:a0:5d: 87:5e:fa:4c:d1:36:7a:43:eb:25:78:cc:9f:c1:b3: 56:84:7f:f3:b6:fe:e4:e4:60:68:7e:43:74:75:cc: 09:b7:9b:b9:70:71:bb:cc:9b:e0:6a:47:9f:13:ad: a9:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:4F:7B:C0:27:DC:36:07:A5:95:13:50:C0:C8:87:2C:AA:85:1B:8E X509v3 Authority Key Identifier: keyid:A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/A14DCC1A366311EEB376DC3AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 161.82.178.0/23 Signature Algorithm: sha256WithRSAEncryption b3:a6:1e:0a:54:b6:13:4e:7e:f4:cb:b6:34:eb:86:05:49:57: 8f:90:89:06:c9:95:b9:ed:0e:6f:e9:4e:9b:4c:e0:eb:f7:dd: 9d:2d:8a:f4:60:25:91:6f:0c:0c:40:a9:40:11:66:68:52:21: 4f:77:43:92:cb:db:5c:17:58:45:3d:b3:ef:ce:20:9c:87:24: 7c:21:5e:5b:4b:b1:12:7c:4e:df:4a:c4:b3:8f:5a:0c:84:5e: 08:31:82:20:cf:07:fc:a3:5b:10:7c:87:2d:8f:43:3b:d1:6a: c1:b4:25:ea:1a:2c:f5:eb:a1:c5:79:b8:4a:68:ae:68:1a:53: 4b:3f:80:01:4e:67:4d:90:e7:1b:1f:bd:5f:85:81:ce:e0:66: 31:83:d5:4e:ee:6b:39:69:ae:30:c0:dd:4e:75:81:7a:c0:06: 97:79:8c:a3:3c:eb:3e:1f:6c:37:31:6a:0f:b0:6f:a9:e1:4b: c6:cb:48:db:54:4b:05:b2:3f:12:3a:a8:6c:22:51:4d:d4:10: bc:8c:84:6a:28:db:a2:ac:8b:c8:ca:91:47:ca:89:69:0b:55: 84:56:fd:28:74:b6:a1:74:ba:78:5e:0f:6a:00:7d:a0:f2:83: 32:78:66:87:ef:6f:24:9d:2b:55:79:33:8c:7a:61:68:54:ef: 9f:5e:74:85 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTUzNkMxMTAvBgNVBAUTKEEwOTBFNTIwQkY5RDUxRjJGRENFRUQ0MTNBRjI3QUM3 NThGNkFFMUQwHhcNMjUwNjIzMDMyMjE3WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODU4Yzg2OC05MDE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Vv7/IXwfaRB17IC7HV95CreQpQK2jYIhJl0DfsRKrlkz1M+z2klYmTxnKAv crD002ryjK279p+VfmZzLUYLHvzH5H8I129ZBDjfVl01zeTRPMTgVkiM7Gaf6o/G JLV0ExmgS5GDyUtik4hoP4+ODbyMSf+90+eCYXpBEHh7rX0tEi5qCt4nQo4joAOY L1OFal5jFQ3Azh6Cwu5pVo4hCONhU0njrLy5MrWm4lr1II0qNet0naaj5BJzxEpk U+hCDST6bbvE3vCGmZkuGNe5oF2HXvpM0TZ6Q+sleMyfwbNWhH/ztv7k5GBofkN0 dcwJt5u5cHG7zJvgakefE62p7QIDAQABo4IClTCCApEwHQYDVR0OBBYEFBlPe8An 3DYHpZUTUMDIhyyqhRuOMB8GA1UdIwQYMBaAFKCQ5SC/nVHy/c7tQTryesdY9q4d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTM2Qy83NUI5OEJGMDM2 NjAxMUVFODhFMEY1MzBDNEY5QUUwMi9vSkRsSUwtZFVmTDl6dTFCT3ZKNngxajJy aDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL29KRGxJTC1kVWZMOXp1MUJPdko2eDFqMnJoMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTUzNkMvNzVCOThCRjAzNjYwMTFFRTg4RTBGNTMwQzRGOUFFMDIvQTE0RENDMUEz NjYzMTFFRUIzNzZEQzNBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGhUrIwDQYJKoZIhvcNAQELBQADggEBALOmHgpUthNOfvTL tjTrhgVJV4+QiQbJlbntDm/pTptM4Ov33Z0tivRgJZFvDAxAqUARZmhSIU93Q5LL 21wXWEU9s+/OIJyHJHwhXltLsRJ8Tt9KxLOPWgyEXggxgiDPB/yjWxB8hy2PQzvR asG0JeoaLPXrocV5uEpormgaU0s/gAFOZ02Q5xsfvV+Fgc7gZjGD1U7uazlprjDA 3U51gXrABpd5jKM86z4fbDcxag+wb6nhS8bLSNtUSwWyPxI6qGwiUU3UELyMhGoo 26Ksi8jKkUfKiWkLVYRW/Sh0tqF0unheD2oAfaDygzJ4ZofvbySdK1V5M4x6YWhU 759edIU= -----END CERTIFICATE-----Generated at Fri Jul 4 00:01:06 2025 by rpki-client