$ rpki-client -vvf rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/C1D2BAAAE87711EFBE7C537EC4F9AE02.roa File: C1D2BAAAE87711EFBE7C537EC4F9AE02.roa (raw, json) Hash identifier: WdDKCuw5AVDiVR16mU2Qcjj1sSiCL+PgjYB8nFrV9pk= Subject key identifier: 3F:90:F4:A1:56:03:EC:F0:92:AC:A4:46:3E:69:BD:FB:34:F5:FC:48 Certificate issuer: /CN=A911A557/serialNumber=67CE3D9C26A14BCDFF9B3394D33557668218A156 Certificate serial: 2E Authority key identifier: 67:CE:3D:9C:26:A1:4B:CD:FF:9B:33:94:D3:35:57:66:82:18:A1:56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z849nCahS83_mzOU0zVXZoIYoVY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/C1D2BAAAE87711EFBE7C537EC4F9AE02.roa Signing time: Mon 28 Apr 2025 06:54:23 +0000 ROA not before: Mon 28 Apr 2025 06:54:23 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 58627 IP address blocks: 45.119.0.0/24 maxlen: 24 45.119.1.0/24 maxlen: 24 45.119.2.0/24 maxlen: 24 45.119.3.0/24 maxlen: 24 110.92.76.0/24 maxlen: 24 110.92.77.0/24 maxlen: 24 110.92.78.0/24 maxlen: 24 110.92.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/Z849nCahS83_mzOU0zVXZoIYoVY.crl rsync://rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/Z849nCahS83_mzOU0zVXZoIYoVY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z849nCahS83_mzOU0zVXZoIYoVY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 06:55:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A557, serialNumber=67CE3D9C26A14BCDFF9B3394D33557668218A156 Validity Not Before: Apr 28 06:54:23 2025 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=680f261f-9649 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:50:19:0e:32:60:e9:42:8e:ec:c9:c6:71:71: 09:0e:1a:29:41:8e:e6:ed:33:f5:40:05:ac:ba:e4: a1:46:81:ad:c7:3c:30:a8:db:9c:56:01:f2:92:ff: 71:93:2c:c9:9e:30:19:09:5c:56:dc:5a:8e:e1:a6: 2c:b6:d3:10:70:2c:57:19:a3:a4:02:2b:4c:8e:2b: 88:0e:c3:c2:02:40:a0:ac:fe:a0:8e:c3:3a:e3:ef: be:47:3f:4c:2d:ef:ad:e1:1d:b3:df:7e:ea:2a:c4: 90:cc:62:58:6b:cd:88:3c:43:f5:51:62:c1:c8:e0: c9:97:f1:75:fa:4b:98:e9:64:04:da:58:dd:b3:92: a9:17:7e:c9:93:27:3a:2d:f7:a2:86:07:2f:be:c5: cc:d3:ad:28:8e:bf:27:9f:ee:72:4c:b5:bd:9d:d7: c6:b6:f8:bb:39:74:9b:f6:cf:ca:01:09:ce:22:25: 4f:f0:ff:81:77:20:4a:fa:58:58:11:6e:c9:c3:e5: 4b:5c:b3:c9:35:5f:ad:68:c7:99:0b:f7:ec:70:85: 32:27:19:5f:e0:ca:b2:98:5b:a7:39:c8:dd:1a:12: 9b:a3:7c:d2:c1:da:e3:c8:57:0d:ad:cb:da:39:f1: f2:df:51:ab:3f:43:ed:03:06:bb:08:e9:e3:28:d2: 7f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:90:F4:A1:56:03:EC:F0:92:AC:A4:46:3E:69:BD:FB:34:F5:FC:48 X509v3 Authority Key Identifier: keyid:67:CE:3D:9C:26:A1:4B:CD:FF:9B:33:94:D3:35:57:66:82:18:A1:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/Z849nCahS83_mzOU0zVXZoIYoVY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z849nCahS83_mzOU0zVXZoIYoVY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/C1D2BAAAE87711EFBE7C537EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.119.0.0/22 110.92.76.0/22 Signature Algorithm: sha256WithRSAEncryption b5:fd:8c:04:91:2d:b7:d0:b5:71:46:d8:c1:85:93:ea:93:3e: a6:34:52:aa:7e:58:79:8a:2a:3a:38:e9:a6:26:eb:17:d6:c3: f6:37:84:04:89:7a:dd:24:da:8f:9a:4a:5c:d4:9c:27:98:3f: 44:1a:26:64:11:27:33:52:2f:bd:fd:bb:77:b4:d0:f5:a5:4f: 75:24:f0:67:57:99:f1:ed:84:4e:e2:14:ba:9d:8f:b1:ef:b0: ff:aa:a1:25:15:85:b5:5b:b8:10:4d:97:20:73:98:3d:2b:77: 9f:08:99:31:5b:cf:23:3f:6f:87:16:de:8b:da:67:5e:88:03: 81:c2:24:79:6e:f6:f7:e5:4a:b4:98:87:6f:b8:55:14:7a:b4: 54:36:d8:5d:62:f4:63:9d:43:7e:53:6f:06:3d:d7:0f:38:ef: b5:b6:ac:b5:6a:bc:f8:94:49:d4:bd:ed:33:6e:1f:ba:d1:08: 9c:23:60:b4:f9:60:a7:13:79:e4:d1:0d:ad:e2:9e:f3:15:b5: c4:e9:7b:0f:9c:f7:40:ec:eb:1d:b3:05:6c:61:fa:e3:d8:34: 45:fe:f6:70:c4:83:1d:2b:22:7f:16:96:df:25:cc:17:cf:4e: 15:4b:04:a3:19:5e:94:17:51:c9:8d:64:66:2d:f1:17:c3:99: a8:b1:fa:17 -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QTU1NzExMC8GA1UEBRMoNjdDRTNEOUMyNkExNEJDREZGOUIzMzk0RDMzNTU3NjY4 MjE4QTE1NjAeFw0yNTA0MjgwNjU0MjNaFw0yNTA3MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY4MGYyNjFmLTk2NDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDiUBkOMmDpQo7sycZxcQkOGilBjubtM/VABay65KFGga3HPDCo25xWAfKS/3GT LMmeMBkJXFbcWo7hpiy20xBwLFcZo6QCK0yOK4gOw8ICQKCs/qCOwzrj775HP0wt 763hHbPffuoqxJDMYlhrzYg8Q/VRYsHI4MmX8XX6S5jpZATaWN2zkqkXfsmTJzot 96KGBy++xczTrSiOvyef7nJMtb2d18a2+Ls5dJv2z8oBCc4iJU/w/4F3IEr6WFgR bsnD5Utcs8k1X61ox5kL9+xwhTInGV/gyrKYW6c5yN0aEpujfNLB2uPIVw2ty9o5 8fLfUas/Q+0DBrsI6eMo0n8xAgMBAAGjggKbMIIClzAdBgNVHQ4EFgQUP5D0oVYD 7PCSrKRGPmm9+zT1/EgwHwYDVR0jBBgwFoAUZ849nCahS83/mzOU0zVXZoIYoVYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFBNTU3LzkyNjgzRTNBRTg2 QzExRUZCMjMyMDU2RUM0RjlBRTAyL1o4NDluQ2FoUzgzX216T1UwelZYWm9JWW9W WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWjg0OW5DYWhTODNfbXpPVTB6Vlhab0lZb1ZZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTU1Ny85MjY4M0UzQUU4NkMxMUVGQjIzMjA1NkVDNEY5QUUwMi9DMUQyQkFBQUU4 NzcxMUVGQkU3QzUzN0VDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQW MBQwEgQCAAEwDAMEAi13AAMEAm5cTDANBgkqhkiG9w0BAQsFAAOCAQEAtf2MBJEt t9C1cUbYwYWT6pM+pjRSqn5YeYoqOjjppibrF9bD9jeEBIl63STaj5pKXNScJ5g/ RBomZBEnM1Ivvf27d7TQ9aVPdSTwZ1eZ8e2ETuIUup2Pse+w/6qhJRWFtVu4EE2X IHOYPSt3nwiZMVvPIz9vhxbei9pnXogDgcIkeW729+VKtJiHb7hVFHq0VDbYXWL0 Y51DflNvBj3XDzjvtbastWq8+JRJ1L3tM24futEInCNgtPlgpxN55NENreKe8xW1 xOl7D5z3QOzrHbMFbGH649g0Rf72cMSDHSsifxaW3yXMF89OFUsEoxlelBdRyY1k Zi3xF8OZqLH6Fw== -----END CERTIFICATE-----Generated at Fri May 16 14:40:26 2025 by rpki-client