$ rpki-client -vvf rpki.apnic.net/member_repository/A911E008/DD88C3AEF1D311E797ED4240C4F9AE02/04A96D3ADB0511EBB30F6E2EC4F9AE02.roa File: 04A96D3ADB0511EBB30F6E2EC4F9AE02.roa (raw, json) Hash identifier: 995PegsL3ZUwg9uvRMBU899Zay98EopTGO6qSEJefks= Subject key identifier: D5:A9:D3:0F:78:E7:6C:3B:19:39:2D:23:E5:D4:9D:CE:9B:1D:61:A3 Certificate issuer: /CN=A911E008/serialNumber=248F5588EA8FC7DD0A3B4DA1E1558031C0D927E4 Certificate serial: 16DA Authority key identifier: 24:8F:55:88:EA:8F:C7:DD:0A:3B:4D:A1:E1:55:80:31:C0:D9:27:E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI9ViOqPx90KO02h4VWAMcDZJ-Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E008/DD88C3AEF1D311E797ED4240C4F9AE02/04A96D3ADB0511EBB30F6E2EC4F9AE02.roa Signing time: Sat 10 May 2025 16:57:37 +0000 ROA not before: Sat 10 May 2025 16:57:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 23749 IP address blocks: 112.213.72.0/24 maxlen: 24 112.213.73.0/24 maxlen: 24 112.213.74.0/24 maxlen: 24 112.213.75.0/24 maxlen: 24 2401:3c60::/32 maxlen: 32 2401:3c60:1::/48 maxlen: 48 2401:3c60:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E008/DD88C3AEF1D311E797ED4240C4F9AE02/JI9ViOqPx90KO02h4VWAMcDZJ-Q.crl rsync://rpki.apnic.net/member_repository/A911E008/DD88C3AEF1D311E797ED4240C4F9AE02/JI9ViOqPx90KO02h4VWAMcDZJ-Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI9ViOqPx90KO02h4VWAMcDZJ-Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 16:35:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5850 (0x16da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E008, serialNumber=248F5588EA8FC7DD0A3B4DA1E1558031C0D927E4 Validity Not Before: May 10 16:57:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681f8580-86f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:1d:e8:9a:f1:52:94:c7:e1:04:08:0d:2e:6f: 11:6e:e9:19:d8:2f:c3:ab:0c:5d:f7:55:5f:4e:21: c4:e0:e1:85:c6:02:67:70:01:19:b4:40:de:86:79: de:bb:6b:9c:df:da:92:49:04:4f:23:5a:aa:c0:64: e4:48:e2:a4:85:4a:50:49:32:23:c9:27:24:d5:2d: d8:f0:92:64:ee:05:a9:56:8a:4e:d8:50:31:a4:43: 7d:19:83:80:75:db:8f:c9:9d:3e:7d:b9:ff:b5:7c: 30:67:f8:1c:46:aa:1d:fa:7c:27:47:ab:f8:26:bc: 8e:13:91:6e:ef:d1:d6:2f:e0:74:f4:e6:19:05:c8: 0b:60:cf:a5:96:f7:51:0f:27:1b:23:c9:ea:18:e4: f9:2e:3c:b4:d5:d7:c8:bf:cc:c4:4c:a4:cb:b3:5c: b8:ec:a4:56:83:dd:b4:06:05:9c:73:08:5a:aa:13: ad:6b:17:3e:3d:ba:28:48:89:64:7c:00:fe:f8:1d: 33:96:f7:8e:aa:01:71:86:33:b7:db:d5:d8:fd:e5: 1a:dc:6b:e9:5e:43:45:25:a4:e7:aa:93:04:d5:a9: 38:ca:57:fe:78:11:71:70:e7:4e:49:5b:eb:29:fb: 7b:5c:87:03:3a:a2:16:fe:d3:2f:d3:24:ff:0a:94: be:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:A9:D3:0F:78:E7:6C:3B:19:39:2D:23:E5:D4:9D:CE:9B:1D:61:A3 X509v3 Authority Key Identifier: keyid:24:8F:55:88:EA:8F:C7:DD:0A:3B:4D:A1:E1:55:80:31:C0:D9:27:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E008/DD88C3AEF1D311E797ED4240C4F9AE02/JI9ViOqPx90KO02h4VWAMcDZJ-Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI9ViOqPx90KO02h4VWAMcDZJ-Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E008/DD88C3AEF1D311E797ED4240C4F9AE02/04A96D3ADB0511EBB30F6E2EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 112.213.72.0/22 IPv6: 2401:3c60::/32 Signature Algorithm: sha256WithRSAEncryption 87:f2:b7:2c:be:3b:84:60:c5:86:98:39:24:ce:84:1f:d3:7b: 08:bf:6d:5a:99:1c:68:3d:1c:73:18:2f:99:10:1d:9b:8d:b3: 86:be:34:89:f4:85:c1:ca:76:9f:50:c6:25:39:6b:12:d0:58: 2b:af:19:06:74:71:84:56:1c:ab:77:36:f2:c9:c5:9b:dd:1c: 35:ce:7e:4d:c4:8c:b3:b1:2c:5d:2f:93:ad:45:8e:ed:27:e2: fc:83:0f:3e:00:67:c6:38:0a:0c:59:c6:46:60:08:39:6e:c9: 11:57:c3:d2:1e:df:45:c7:36:15:ee:7e:f0:a9:09:2d:a5:9c: b0:d8:03:52:7a:07:a8:86:0d:97:6d:4d:31:f2:c3:d9:17:00: 33:2e:2f:83:3f:6d:e0:6e:f2:84:52:ad:db:52:8c:54:b4:f3: 2a:88:10:6f:61:30:90:6a:08:77:e2:87:67:e5:b7:60:38:c4: 38:2c:c6:24:c8:de:ef:82:8e:b3:01:6a:cd:22:d3:a9:36:e2: 6e:6d:6e:2c:b3:24:89:68:f7:d9:d8:dd:0e:8a:35:fb:05:58: bd:bd:60:7d:d4:39:5e:1b:fb:22:fe:2e:f6:41:7b:b0:55:b7: 7a:bf:2e:34:03:f3:27:b6:c3:29:57:8e:70:87:19:c7:89:72: b4:e8:a4:ed -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICFtowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUUwMDgxMTAvBgNVBAUTKDI0OEY1NTg4RUE4RkM3REQwQTNCNERBMUUxNTU4MDMx QzBEOTI3RTQwHhcNMjUwNTEwMTY1NzM3WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFmODU4MC04NmY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzh3omvFSlMfhBAgNLm8RbukZ2C/Dqwxd91VfTiHE4OGFxgJncAEZtEDehnne u2uc39qSSQRPI1qqwGTkSOKkhUpQSTIjySck1S3Y8JJk7gWpVopO2FAxpEN9GYOA dduPyZ0+fbn/tXwwZ/gcRqod+nwnR6v4JryOE5Fu79HWL+B09OYZBcgLYM+llvdR DycbI8nqGOT5Ljy01dfIv8zETKTLs1y47KRWg920BgWccwhaqhOtaxc+PbooSIlk fAD++B0zlveOqgFxhjO329XY/eUa3GvpXkNFJaTnqpME1ak4ylf+eBFxcOdOSVvr Kft7XIcDOqIW/tMv0yT/CpS+SwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFNWp0w94 52w7GTktI+XUnc6bHWGjMB8GA1UdIwQYMBaAFCSPVYjqj8fdCjtNoeFVgDHA2Sfk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTAwOC9ERDg4QzNBRUYx RDMxMUU3OTdFRDQyNDBDNEY5QUUwMi9KSTlWaU9xUHg5MEtPMDJoNFZXQU1jRFpK LVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pJOVZpT3FQeDkwS08wMmg0VldBTWNEWkotUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUUwMDgvREQ4OEMzQUVGMUQzMTFFNzk3RUQ0MjQwQzRGOUFFMDIvMDRBOTZEM0FE QjA1MTFFQkIzMEY2RTJFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJw1UgwDQQCAAIwBwMFACQBPGAwDQYJKoZIhvcNAQELBQAD ggEBAIfytyy+O4RgxYaYOSTOhB/Tewi/bVqZHGg9HHMYL5kQHZuNs4a+NIn0hcHK dp9QxiU5axLQWCuvGQZ0cYRWHKt3NvLJxZvdHDXOfk3EjLOxLF0vk61Fju0n4vyD Dz4AZ8Y4CgxZxkZgCDluyRFXw9Ie30XHNhXufvCpCS2lnLDYA1J6B6iGDZdtTTHy w9kXADMuL4M/beBu8oRSrdtSjFS08yqIEG9hMJBqCHfih2flt2A4xDgsxiTI3u+C jrMBas0i06k24m5tbiyzJIlo99nY3Q6KNfsFWL29YH3UOV4b+yL+LvZBe7BVt3q/ LjQD8ye2wylXjnCHGceJcrTopO0= -----END CERTIFICATE-----Generated at Tue May 13 19:44:30 2025 by rpki-client