$ rpki-client -vvf rpki.apnic.net/member_repository/A9114FFB/6AC1F16A6E7C11EA8B3F0E59C4F9AE02/267A24046E7D11EAADB09659C4F9AE02.roa File: 267A24046E7D11EAADB09659C4F9AE02.roa (raw, json) Hash identifier: 3bopi4jiFY/1Loa4aKzVKdm1Wqw6EWIsHmdkMoO5oMI= Subject key identifier: 8D:61:5D:7A:56:96:05:70:C8:D7:04:33:58:30:1A:93:80:89:59:FD Certificate issuer: /CN=A9114FFB/serialNumber=84CE29F86141ACFB8A75E904F02723852DE63338 Certificate serial: 0A26 Authority key identifier: 84:CE:29:F8:61:41:AC:FB:8A:75:E9:04:F0:27:23:85:2D:E6:33:38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hM4p-GFBrPuKdekE8CcjhS3mMzg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114FFB/6AC1F16A6E7C11EA8B3F0E59C4F9AE02/267A24046E7D11EAADB09659C4F9AE02.roa Signing time: Tue 06 May 2025 19:59:59 +0000 ROA not before: Tue 06 May 2025 19:59:59 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 56266 IP address blocks: 203.119.90.0/23 maxlen: 24 2001:dd8:10::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114FFB/6AC1F16A6E7C11EA8B3F0E59C4F9AE02/hM4p-GFBrPuKdekE8CcjhS3mMzg.crl rsync://rpki.apnic.net/member_repository/A9114FFB/6AC1F16A6E7C11EA8B3F0E59C4F9AE02/hM4p-GFBrPuKdekE8CcjhS3mMzg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hM4p-GFBrPuKdekE8CcjhS3mMzg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 20:02:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2598 (0xa26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114FFB, serialNumber=84CE29F86141ACFB8A75E904F02723852DE63338 Validity Not Before: May 6 19:59:59 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681a6a3f-7b88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:29:74:d4:52:e5:02:9f:8a:6a:91:77:12:ab: 72:50:43:19:05:ec:22:44:a1:74:15:74:da:6a:32: 87:7d:7c:e8:8f:fa:5a:9f:1a:97:8c:1f:69:51:ac: 16:d1:32:e7:85:e3:3d:83:14:51:91:19:33:27:57: 1c:d4:9a:2f:57:71:20:30:fb:ed:1a:46:9f:da:7c: 70:57:06:c9:c7:8d:8f:2b:9c:6b:62:8e:2a:f8:af: 8d:37:c6:ca:46:8e:a1:30:f6:e3:32:24:0e:13:77: 04:07:20:98:37:e2:de:fe:dc:69:8c:1f:1c:bf:b7: a8:fe:eb:37:cb:06:82:83:e1:d6:59:09:55:8a:69: f1:af:ba:f9:0e:b1:b0:33:9b:be:f9:99:15:c1:93: f3:c4:ae:ed:cd:e7:b6:66:4d:7a:cc:4a:ab:50:d8: 16:b8:5e:f4:c7:b6:4d:3d:d7:fa:95:ac:76:6e:f5: 35:c2:46:18:f2:4f:b2:32:a9:34:6e:f8:de:7d:a1: 53:ee:41:21:01:5f:47:6e:0e:53:9b:ef:d2:df:f2: 06:f1:93:99:56:62:59:6c:92:b5:56:1d:17:be:cc: 54:ab:a6:37:fc:3c:3c:3a:2b:e8:2f:8c:7c:38:ab: 3b:c2:78:75:06:97:02:9c:31:db:71:20:ee:9e:10: 1f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:61:5D:7A:56:96:05:70:C8:D7:04:33:58:30:1A:93:80:89:59:FD X509v3 Authority Key Identifier: keyid:84:CE:29:F8:61:41:AC:FB:8A:75:E9:04:F0:27:23:85:2D:E6:33:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114FFB/6AC1F16A6E7C11EA8B3F0E59C4F9AE02/hM4p-GFBrPuKdekE8CcjhS3mMzg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hM4p-GFBrPuKdekE8CcjhS3mMzg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114FFB/6AC1F16A6E7C11EA8B3F0E59C4F9AE02/267A24046E7D11EAADB09659C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.119.90.0/23 IPv6: 2001:dd8:10::/47 Signature Algorithm: sha256WithRSAEncryption 45:fa:21:29:3e:b5:4e:a1:5f:60:1a:d5:e9:59:63:5b:50:a6: ad:bd:ba:54:f4:5c:f8:5b:b2:0e:b4:7e:8f:74:e1:88:1c:d8: 4b:92:7c:60:25:95:94:98:36:69:68:0f:cf:e4:f7:ce:6d:4d: 1a:9f:a7:26:c6:5b:69:86:ad:87:7b:e8:b9:20:03:c3:10:17: 9b:50:19:fc:19:1a:f7:0f:e7:6f:4f:73:0f:a1:9c:2f:9c:19: f9:87:51:35:98:b9:17:80:b8:86:98:5b:9a:b7:13:57:f8:e1: 11:1e:97:74:24:71:69:a9:a1:cc:2a:f0:48:ec:59:56:a2:8c: 26:28:53:88:28:42:10:d7:db:80:2b:11:88:a5:07:c3:ac:b0: 10:e1:42:05:cf:c7:59:49:c1:07:f1:1c:26:ea:2a:64:ce:5d: 78:b7:7e:c7:ed:44:aa:4e:23:79:6a:9e:bf:55:02:d4:ac:be: 25:e8:cc:7b:db:d0:7c:1f:c4:7b:e6:8d:94:fe:ab:4b:b6:b2: 57:3c:2b:50:eb:7d:6d:2b:39:6c:5d:33:25:cb:1a:f6:53:03: e6:1f:76:03:1e:66:2b:23:66:7f:9b:c7:b2:4e:bb:6d:d9:ba: 2c:fd:6d:86:e5:43:fc:d4:a4:36:3d:18:25:85:42:08:a8:2e: fb:02:08:29 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICCiYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTRGRkIxMTAvBgNVBAUTKDg0Q0UyOUY4NjE0MUFDRkI4QTc1RTkwNEYwMjcyMzg1 MkRFNjMzMzgwHhcNMjUwNTA2MTk1OTU5WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFhNmEzZi03Yjg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2il01FLlAp+KapF3EqtyUEMZBewiRKF0FXTaajKHfXzoj/panxqXjB9pUawW 0TLnheM9gxRRkRkzJ1cc1JovV3EgMPvtGkaf2nxwVwbJx42PK5xrYo4q+K+NN8bK Ro6hMPbjMiQOE3cEByCYN+Le/txpjB8cv7eo/us3ywaCg+HWWQlVimnxr7r5DrGw M5u++ZkVwZPzxK7tzee2Zk16zEqrUNgWuF70x7ZNPdf6lax2bvU1wkYY8k+yMqk0 bvjefaFT7kEhAV9Hbg5Tm+/S3/IG8ZOZVmJZbJK1Vh0XvsxUq6Y3/Dw8OivoL4x8 OKs7wnh1BpcCnDHbcSDunhAfBwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFI1hXXpW lgVwyNcEM1gwGpOAiVn9MB8GA1UdIwQYMBaAFITOKfhhQaz7inXpBPAnI4Ut5jM4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNEZGQi82QUMxRjE2QTZF N0MxMUVBOEIzRjBFNTlDNEY5QUUwMi9oTTRwLUdGQnJQdUtkZWtFOENjamhTM21N emcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hNNHAtR0ZCclB1S2Rla0U4Q2NqaFMzbU16Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTRGRkIvNkFDMUYxNkE2RTdDMTFFQThCM0YwRTU5QzRGOUFFMDIvMjY3QTI0MDQ2 RTdEMTFFQUFEQjA5NjU5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAHLd1owDwQCAAIwCQMHASABDdgAEDANBgkqhkiG9w0BAQsF AAOCAQEARfohKT61TqFfYBrV6VljW1Cmrb26VPRc+FuyDrR+j3ThiBzYS5J8YCWV lJg2aWgPz+T3zm1NGp+nJsZbaYath3vouSADwxAXm1AZ/Bka9w/nb09zD6GcL5wZ +YdRNZi5F4C4hphbmrcTV/jhER6XdCRxaamhzCrwSOxZVqKMJihTiChCENfbgCsR iKUHw6ywEOFCBc/HWUnBB/EcJuoqZM5deLd+x+1Eqk4jeWqev1UC1Ky+JejMe9vQ fB/Ee+aNlP6rS7ayVzwrUOt9bSs5bF0zJcsa9lMD5h92Ax5mKyNmf5vHsk67bdm6 LP1thuVD/NSkNj0YJYVCCKgu+wIIKQ== -----END CERTIFICATE-----Generated at Sat May 17 17:52:54 2025 by rpki-client