$ rpki-client -vvf rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/6E340B9C4EA811EFA593A24CC4F9AE02.roa File: 6E340B9C4EA811EFA593A24CC4F9AE02.roa (raw, json) Hash identifier: rAOd8xVKvANxmyBwOeyZF3qLA857c4wVbRSif1s6BJM= Subject key identifier: 46:0D:6C:19:5E:AA:42:80:12:71:D1:48:EE:49:82:23:00:8C:BF:DB Certificate issuer: /CN=A911911C/serialNumber=F457EF8C19AA0976CE0459A5FF709C5DCA4FC7D6 Certificate serial: 356E Authority key identifier: F4:57:EF:8C:19:AA:09:76:CE:04:59:A5:FF:70:9C:5D:CA:4F:C7:D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/6E340B9C4EA811EFA593A24CC4F9AE02.roa Signing time: Wed 30 Apr 2025 14:50:20 +0000 ROA not before: Wed 30 Apr 2025 14:50:20 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 137289 IP address blocks: 118.97.213.0/24 maxlen: 24 180.250.80.0/24 maxlen: 24 180.250.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.crl rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 14:22:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13678 (0x356e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911911C, serialNumber=F457EF8C19AA0976CE0459A5FF709C5DCA4FC7D6 Validity Not Before: Apr 30 14:50:20 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=681238ac-7618 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e9:ce:cc:ec:c6:10:fc:0d:80:30:35:3d:6e: 54:11:0a:4d:fd:39:8b:6c:82:b9:33:0d:99:c0:62: 4a:95:46:17:0c:be:42:e4:09:55:c2:f9:ea:a2:0a: ac:a8:60:0a:f5:e8:37:65:2a:44:bd:d7:3b:26:bb: 4f:3a:f9:a1:49:53:55:19:07:00:4a:18:ff:af:a5: fa:c6:b3:a7:f7:4f:9b:01:7b:9a:c7:bd:7a:9e:c1: c4:4f:51:7b:b7:aa:6a:8d:8d:5e:da:8d:27:11:09: c4:76:d4:ec:7a:a9:4e:72:e5:fb:3e:6c:ed:b2:3f: 38:1a:21:69:8b:06:c5:56:9c:8d:6c:06:2b:3c:3a: 60:46:47:2c:32:6b:cd:52:42:af:89:d4:8f:52:62: ed:67:e5:04:00:56:3f:5c:5d:e1:d0:4c:f6:d8:cc: 39:52:22:1c:cf:cc:bc:96:57:bc:b4:a2:ad:cb:8d: a8:ca:de:52:72:f3:17:72:97:bd:35:f1:8b:e0:87: 97:ee:fd:37:c2:99:d7:de:ad:80:89:68:ac:cb:ff: 2e:a3:71:46:b6:93:1e:b5:06:b3:26:7f:f2:1a:bc: af:1d:1f:c9:9d:d0:89:07:86:fc:2a:fb:c0:f7:01: ab:82:1d:51:f9:4e:34:3e:06:3d:4a:96:40:c4:9f: 24:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:0D:6C:19:5E:AA:42:80:12:71:D1:48:EE:49:82:23:00:8C:BF:DB X509v3 Authority Key Identifier: keyid:F4:57:EF:8C:19:AA:09:76:CE:04:59:A5:FF:70:9C:5D:CA:4F:C7:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/6E340B9C4EA811EFA593A24CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 118.97.213.0/24 180.250.80.0/24 180.250.242.0/24 Signature Algorithm: sha256WithRSAEncryption 40:4c:a7:b0:1f:8f:d3:36:f9:ff:34:b2:e0:b0:e2:b5:d6:17: 44:e1:c7:2c:40:b6:95:66:8d:e4:c3:cf:d9:f4:84:d7:bd:43: ef:8e:37:8f:40:00:f4:45:53:96:37:52:ac:fc:a3:92:4b:e2: 72:be:89:b6:ff:3e:84:88:f6:80:57:18:c7:38:5b:6b:b6:f8: 6f:40:19:9e:2b:4d:38:2f:1b:57:7c:dd:60:9e:0e:36:dc:89: 51:c2:67:34:64:22:72:a8:de:5c:12:9a:31:13:0c:72:4e:18: ba:49:1c:65:2e:8c:9c:e4:bd:9a:0e:94:25:73:a8:e8:82:4d: 33:07:bf:63:7c:b9:1f:c8:2b:56:c7:b9:0a:58:2f:02:42:3d: 6b:35:10:15:30:42:0d:ae:97:50:70:47:77:03:29:b1:25:ed: 11:21:6e:49:27:23:e3:98:cf:5a:4f:06:e4:16:e2:2e:97:d2: 8d:07:a9:45:5f:f0:42:a3:28:6e:f3:de:a7:52:f3:ea:51:ae: b6:0f:89:0b:18:f9:48:a3:0b:6b:fc:97:b7:a7:bc:d5:17:43: cf:61:1b:57:7a:3e:10:74:73:60:f5:55:ca:4a:c6:20:b5:26: 0a:7d:f2:c6:98:f7:58:35:43:2c:48:fe:29:4b:b8:ab:d8:43: c7:ff:a7:a3 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICNW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkxMUMxMTAvBgNVBAUTKEY0NTdFRjhDMTlBQTA5NzZDRTA0NTlBNUZGNzA5QzVE Q0E0RkM3RDYwHhcNMjUwNDMwMTQ1MDIwWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODEyMzhhYy03NjE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsunOzOzGEPwNgDA1PW5UEQpN/TmLbIK5Mw2ZwGJKlUYXDL5C5AlVwvnqogqs qGAK9eg3ZSpEvdc7JrtPOvmhSVNVGQcAShj/r6X6xrOn90+bAXuax716nsHET1F7 t6pqjY1e2o0nEQnEdtTseqlOcuX7Pmztsj84GiFpiwbFVpyNbAYrPDpgRkcsMmvN UkKvidSPUmLtZ+UEAFY/XF3h0Ez22Mw5UiIcz8y8lle8tKKty42oyt5ScvMXcpe9 NfGL4IeX7v03wpnX3q2AiWisy/8uo3FGtpMetQazJn/yGryvHR/JndCJB4b8KvvA 9wGrgh1R+U40PgY9SpZAxJ8kbQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFEYNbBle qkKAEnHRSO5JgiMAjL/bMB8GA1UdIwQYMBaAFPRX74wZqgl2zgRZpf9wnF3KT8fW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTExQy9CQkM1NEJBNDFE ODMxMUUyOEU3RTJERDkwOEIwMkNEMi85RmZ2akJtcUNYYk9CRm1sXzNDY1hjcFB4 OVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlGZnZqQm1xQ1hiT0JGbWxfM0NjWGNwUHg5WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTkxMUMvQkJDNTRCQTQxRDgzMTFFMjhFN0UyREQ5MDhCMDJDRDIvNkUzNDBCOUM0 RUE4MTFFRkE1OTNBMjRDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAB2YdUDBAC0+lADBAC0+vIwDQYJKoZIhvcNAQELBQADggEB AEBMp7Afj9M2+f80suCw4rXWF0ThxyxAtpVmjeTDz9n0hNe9Q++ON49AAPRFU5Y3 Uqz8o5JL4nK+ibb/PoSI9oBXGMc4W2u2+G9AGZ4rTTgvG1d83WCeDjbciVHCZzRk InKo3lwSmjETDHJOGLpJHGUujJzkvZoOlCVzqOiCTTMHv2N8uR/IK1bHuQpYLwJC PWs1EBUwQg2ul1BwR3cDKbEl7REhbkknI+OYz1pPBuQW4i6X0o0HqUVf8EKjKG7z 3qdS8+pRrrYPiQsY+UijC2v8l7envNUXQ89hG1d6PhB0c2D1VcpKxiC1Jgp98saY 91g1QyxI/ilLuKvYQ8f/p6M= -----END CERTIFICATE-----Generated at Sun May 11 14:37:47 2025 by rpki-client