$ rpki-client -vvf rpki.apnic.net/member_repository/A9119AE2/8AB8C18A87C411EBA1FDD86BC4F9AE02/8D20F290411811ECA0929516C4F9AE02.roa File: 8D20F290411811ECA0929516C4F9AE02.roa (raw, json) Hash identifier: RzJGgawBbn3xUezpVG2c9suPVgigMwJa0fSwMeigVU8= Subject key identifier: CC:B0:05:82:15:D2:8C:4C:9D:18:6F:FF:1B:6C:DF:8B:F4:54:5A:ED Certificate issuer: /CN=A9119AE2/serialNumber=68595B98E4C27B30BAA331CEAAC7261767CB92EB Certificate serial: 066D Authority key identifier: 68:59:5B:98:E4:C2:7B:30:BA:A3:31:CE:AA:C7:26:17:67:CB:92:EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFlbmOTCezC6ozHOqscmF2fLkus.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119AE2/8AB8C18A87C411EBA1FDD86BC4F9AE02/8D20F290411811ECA0929516C4F9AE02.roa Signing time: Wed 18 Jun 2025 22:31:24 +0000 ROA not before: Wed 18 Jun 2025 22:31:23 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 24541 IP address blocks: 27.54.128.0/20 maxlen: 20 27.54.139.0/24 maxlen: 24 203.30.44.0/22 maxlen: 22 203.82.208.0/22 maxlen: 24 203.82.212.0/23 maxlen: 23 203.82.214.0/24 maxlen: 24 203.82.215.0/24 maxlen: 24 2402:8000::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119AE2/8AB8C18A87C411EBA1FDD86BC4F9AE02/aFlbmOTCezC6ozHOqscmF2fLkus.crl rsync://rpki.apnic.net/member_repository/A9119AE2/8AB8C18A87C411EBA1FDD86BC4F9AE02/aFlbmOTCezC6ozHOqscmF2fLkus.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFlbmOTCezC6ozHOqscmF2fLkus.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 22:48:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1645 (0x66d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119AE2, serialNumber=68595B98E4C27B30BAA331CEAAC7261767CB92EB Validity Not Before: Jun 18 22:31:23 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=68533e3b-85a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:16:ec:bc:04:95:46:8e:4e:1f:1c:4a:39:76: 3e:28:02:fc:70:0e:99:88:cd:68:05:3d:43:a3:20: 0e:08:3a:2e:14:07:42:4b:cc:80:ae:20:26:c0:e3: 9e:db:4b:0a:ba:f7:49:8b:49:32:92:6c:c1:b8:32: 0a:cf:50:b2:3d:11:d7:5a:f2:8e:4a:f8:53:bf:7a: 0d:81:95:8f:5a:3d:de:ba:41:95:5a:3d:4a:91:60: f5:57:6e:a9:6c:25:72:8b:b1:02:d7:28:34:3e:27: ce:6a:61:05:34:f0:65:fa:d8:2f:84:53:8e:6d:6d: 6d:db:fc:c6:7e:b6:dc:14:26:f8:c0:57:41:60:e2: f6:98:d6:76:54:a3:24:60:65:01:b9:6b:eb:9e:01: 9c:11:be:e6:8e:0b:b1:8a:dd:99:2f:19:c1:2e:a0: 3a:b6:92:96:53:88:93:d9:9e:38:9f:d8:cf:2e:dd: 07:1f:a4:5e:37:cb:fc:b9:b9:c1:af:9a:93:c6:34: 2c:bd:71:0d:83:3d:d7:4f:d3:5a:3f:af:58:ea:57: c4:61:6b:87:4a:b3:b8:64:08:09:ca:67:82:95:81: d3:ec:46:65:dc:40:53:d1:0a:e0:39:69:06:f1:5a: 01:c4:51:aa:17:2f:51:53:79:17:ff:5f:68:d2:ec: d9:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:B0:05:82:15:D2:8C:4C:9D:18:6F:FF:1B:6C:DF:8B:F4:54:5A:ED X509v3 Authority Key Identifier: keyid:68:59:5B:98:E4:C2:7B:30:BA:A3:31:CE:AA:C7:26:17:67:CB:92:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119AE2/8AB8C18A87C411EBA1FDD86BC4F9AE02/aFlbmOTCezC6ozHOqscmF2fLkus.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFlbmOTCezC6ozHOqscmF2fLkus.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119AE2/8AB8C18A87C411EBA1FDD86BC4F9AE02/8D20F290411811ECA0929516C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.54.128.0/20 203.30.44.0/22 203.82.208.0/21 IPv6: 2402:8000::/32 Signature Algorithm: sha256WithRSAEncryption 99:63:67:5b:4b:06:26:70:2f:2c:11:af:4f:f1:52:07:b7:a3: cb:8b:4d:e1:da:08:29:b9:72:f4:63:3f:af:df:f5:35:50:8d: 6e:77:63:e3:33:0b:08:58:68:de:f9:1a:eb:86:64:27:d0:09: 77:a3:46:2b:92:c3:d7:a3:2f:dc:b4:0d:3c:ec:b9:83:1a:d2: ff:fd:a5:15:64:64:99:15:90:1c:48:a2:c3:40:ea:72:5d:fc: 5c:f8:dd:08:e4:13:e8:4b:79:46:20:b2:a1:a1:06:fb:b7:61: 78:ec:6d:25:2e:5e:13:61:f4:d6:27:cb:70:6f:d6:30:70:ef: b9:89:d3:c4:69:97:78:ba:59:e0:e3:a9:30:e9:a0:09:a8:23: 6f:82:19:61:8a:99:f7:08:b6:c4:00:e3:74:f5:89:a1:84:30: d6:a4:0b:94:90:e4:1e:c6:cb:40:cc:f4:39:75:f8:8f:70:e6: 9d:ee:3f:7a:a6:21:54:91:e5:76:96:1c:3c:b0:3a:83:2e:a8: 3c:c1:80:9a:3c:cb:12:ca:d8:f9:58:f4:92:05:03:79:60:39: b6:2f:d5:38:3d:70:e7:9c:84:b1:37:7b:38:7c:d9:c0:3e:03: 76:f6:26:71:90:44:10:80:8e:1b:9a:53:cf:87:cd:fa:ad:4c: 9f:4d:6b:f1 -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICBm0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTlBRTIxMTAvBgNVBAUTKDY4NTk1Qjk4RTRDMjdCMzBCQUEzMzFDRUFBQzcyNjE3 NjdDQjkyRUIwHhcNMjUwNjE4MjIzMTIzWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODUzM2UzYi04NWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7BbsvASVRo5OHxxKOXY+KAL8cA6ZiM1oBT1DoyAOCDouFAdCS8yAriAmwOOe 20sKuvdJi0kykmzBuDIKz1CyPRHXWvKOSvhTv3oNgZWPWj3eukGVWj1KkWD1V26p bCVyi7EC1yg0PifOamEFNPBl+tgvhFOObW1t2/zGfrbcFCb4wFdBYOL2mNZ2VKMk YGUBuWvrngGcEb7mjguxit2ZLxnBLqA6tpKWU4iT2Z44n9jPLt0HH6ReN8v8ubnB r5qTxjQsvXENgz3XT9NaP69Y6lfEYWuHSrO4ZAgJymeClYHT7EZl3EBT0QrgOWkG 8VoBxFGqFy9RU3kX/19o0uzZPwIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFMywBYIV 0oxMnRhv/xts34v0VFrtMB8GA1UdIwQYMBaAFGhZW5jkwnswuqMxzqrHJhdny5Lr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOUFFMi84QUI4QzE4QTg3 QzQxMUVCQTFGREQ4NkJDNEY5QUUwMi9hRmxibU9UQ2V6QzZvekhPcXNjbUYyZkxr dXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FGbGJtT1RDZXpDNm96SE9xc2NtRjJmTGt1cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTlBRTIvOEFCOEMxOEE4N0M0MTFFQkExRkREODZCQzRGOUFFMDIvOEQyMEYyOTA0 MTE4MTFFQ0EwOTI5NTE2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E KzApMBgEAgABMBIDBAQbNoADBALLHiwDBAPLUtAwDQQCAAIwBwMFACQCgAAwDQYJ KoZIhvcNAQELBQADggEBAJljZ1tLBiZwLywRr0/xUge3o8uLTeHaCCm5cvRjP6/f 9TVQjW53Y+MzCwhYaN75GuuGZCfQCXejRiuSw9ejL9y0DTzsuYMa0v/9pRVkZJkV kBxIosNA6nJd/Fz43QjkE+hLeUYgsqGhBvu3YXjsbSUuXhNh9NYny3Bv1jBw77mJ 08Rpl3i6WeDjqTDpoAmoI2+CGWGKmfcItsQA43T1iaGEMNakC5SQ5B7Gy0DM9Dl1 +I9w5p3uP3qmIVSR5XaWHDywOoMuqDzBgJo8yxLK2PlY9JIFA3lgObYv1Tg9cOec hLE3ezh82cA+A3b2JnGQRBCAjhuaU8+HzfqtTJ9Na/E= -----END CERTIFICATE-----Generated at Wed Jul 2 13:52:21 2025 by rpki-client