$ rpki-client -vvf rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/8CBE17540BCF11EF80BE8E0CC4F9AE02.roa File: 8CBE17540BCF11EF80BE8E0CC4F9AE02.roa (raw, json) Hash identifier: GBfQ8G2LgiRk7mNMod65ctHAM+9Xqf2dlYgMPWmItHk= Subject key identifier: 14:D5:42:A5:DF:45:C7:58:41:0D:0A:CD:44:A3:39:B6:AA:CF:A0:42 Certificate issuer: /CN=A91203EB/serialNumber=2F265B0C802473094926890A85124E21B109DA3C Certificate serial: 063B Authority key identifier: 2F:26:5B:0C:80:24:73:09:49:26:89:0A:85:12:4E:21:B1:09:DA:3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyZbDIAkcwlJJokKhRJOIbEJ2jw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/8CBE17540BCF11EF80BE8E0CC4F9AE02.roa Signing time: Sat 10 May 2025 22:22:49 +0000 ROA not before: Sat 10 May 2025 22:22:49 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 394089 IP address blocks: 114.141.120.0/24 maxlen: 24 114.141.121.0/24 maxlen: 24 114.141.122.0/24 maxlen: 24 114.141.123.0/24 maxlen: 24 114.141.124.0/24 maxlen: 24 114.141.125.0/24 maxlen: 24 114.141.126.0/24 maxlen: 24 114.141.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.crl rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyZbDIAkcwlJJokKhRJOIbEJ2jw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 22:59:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1595 (0x63b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91203EB, serialNumber=2F265B0C802473094926890A85124E21B109DA3C Validity Not Before: May 10 22:22:49 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=681fd1b9-a52e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:5a:60:55:b9:cd:2d:80:ae:1d:57:37:36:69: d0:0d:10:f1:09:25:11:b3:02:28:37:36:08:c3:dd: 4d:48:3f:1b:43:e1:67:35:c9:c2:01:86:e3:92:b7: 99:ca:b5:b0:d9:fc:fb:e6:9b:c4:81:66:20:6b:52: bd:c4:14:a1:86:91:ae:e4:90:af:3b:a3:ee:53:84: 3e:4e:a3:87:79:e7:2f:e5:b8:c7:f4:aa:cd:e8:41: fe:30:44:20:c4:63:e1:d5:63:24:85:bf:c8:8d:28: 89:39:b2:84:c0:54:fd:fa:98:11:ea:65:79:aa:b2: eb:87:b4:17:21:e5:2c:42:51:5b:19:f4:39:64:03: 16:ba:dd:fc:b7:d0:f1:dd:ea:9e:da:ec:3e:83:d7: 8b:ef:7d:71:3a:ee:d4:91:1b:1a:63:29:e2:c9:dd: 41:75:96:b4:06:cf:87:dc:e8:c6:1e:f2:82:e6:f8: 74:46:e5:d3:e3:16:d5:55:b6:dc:ec:9a:65:85:3f: 66:53:73:4c:b0:1e:39:18:c5:f3:aa:52:9f:9d:c4: 1b:0a:9c:2a:57:8d:18:c4:8c:4e:e3:ec:eb:23:b2: 25:52:ed:ad:b3:39:db:6d:bc:9e:ff:d7:15:3a:36: e2:6c:24:de:ad:88:9e:87:ff:88:0d:1d:41:ea:5c: cd:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:D5:42:A5:DF:45:C7:58:41:0D:0A:CD:44:A3:39:B6:AA:CF:A0:42 X509v3 Authority Key Identifier: keyid:2F:26:5B:0C:80:24:73:09:49:26:89:0A:85:12:4E:21:B1:09:DA:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyZbDIAkcwlJJokKhRJOIbEJ2jw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/8CBE17540BCF11EF80BE8E0CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 114.141.120.0/21 Signature Algorithm: sha256WithRSAEncryption a3:7a:90:b9:b7:16:cd:13:2c:09:50:aa:f9:c8:3e:3c:bd:50: a3:d1:30:d9:09:4e:76:cb:5c:cc:8a:32:06:16:9e:02:f2:5c: 1f:59:b3:58:cf:25:71:e3:9e:7b:2d:e0:04:e9:08:0b:3d:e4: 74:5b:84:53:6d:a0:14:0e:fe:0f:d0:63:bc:55:57:4b:ef:92: 1b:f1:ea:09:9d:e8:dd:1f:15:72:a1:a4:70:4f:1a:fc:91:dd: 1f:d7:d6:2c:0a:0e:72:c9:07:50:4d:ed:5a:28:28:29:a9:5e: 60:48:0f:81:0d:a6:86:0c:dd:a8:ff:28:44:eb:ae:96:9a:1b: 54:9c:fa:fc:00:0b:26:d2:f0:1d:1f:e5:de:04:75:d7:f4:47: 7f:2f:a1:63:e2:81:ad:f1:3d:e5:f7:4a:b0:95:a1:7b:af:05: 49:80:29:8d:24:02:60:e2:36:81:20:06:1b:41:45:c6:6c:26: b7:37:44:dc:e8:ef:29:f6:a0:55:2c:50:90:cb:90:d5:85:b7: e8:f2:b0:6a:b7:76:a4:72:22:c8:9e:d7:f4:1e:5e:3b:12:44: 26:59:83:14:95:47:6e:47:a2:cc:d7:18:28:dc:c4:80:9b:a9: f2:5e:0f:4b:12:22:a9:6d:16:8d:62:30:9a:68:3c:ba:f9:4e: 8e:17:3d:83 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBjswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjAzRUIxMTAvBgNVBAUTKDJGMjY1QjBDODAyNDczMDk0OTI2ODkwQTg1MTI0RTIx QjEwOURBM0MwHhcNMjUwNTEwMjIyMjQ5WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFmZDFiOS1hNTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzVpgVbnNLYCuHVc3NmnQDRDxCSURswIoNzYIw91NSD8bQ+FnNcnCAYbjkreZ yrWw2fz75pvEgWYga1K9xBShhpGu5JCvO6PuU4Q+TqOHeecv5bjH9KrN6EH+MEQg xGPh1WMkhb/IjSiJObKEwFT9+pgR6mV5qrLrh7QXIeUsQlFbGfQ5ZAMWut38t9Dx 3eqe2uw+g9eL731xOu7UkRsaYyniyd1BdZa0Bs+H3OjGHvKC5vh0RuXT4xbVVbbc 7JplhT9mU3NMsB45GMXzqlKfncQbCpwqV40YxIxO4+zrI7IlUu2tsznbbbye/9cV OjbibCTerYieh/+IDR1B6lzN/QIDAQABo4IClTCCApEwHQYDVR0OBBYEFBTVQqXf RcdYQQ0KzUSjObaqz6BCMB8GA1UdIwQYMBaAFC8mWwyAJHMJSSaJCoUSTiGxCdo8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDNFQi9GMzYyMkU3NDk3 NjkxMUVCQUJDNzc0ODZDNEY5QUUwMi9MeVpiRElBa2N3bEpKb2tLaFJKT0liRUoy ancuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0x5WmJESUFrY3dsSkpva0toUkpPSWJFSjJqdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjAzRUIvRjM2MjJFNzQ5NzY5MTFFQkFCQzc3NDg2QzRGOUFFMDIvOENCRTE3NTQw QkNGMTFFRjgwQkU4RTBDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBANyjXgwDQYJKoZIhvcNAQELBQADggEBAKN6kLm3Fs0TLAlQ qvnIPjy9UKPRMNkJTnbLXMyKMgYWngLyXB9Zs1jPJXHjnnst4ATpCAs95HRbhFNt oBQO/g/QY7xVV0vvkhvx6gmd6N0fFXKhpHBPGvyR3R/X1iwKDnLJB1BN7VooKCmp XmBID4ENpoYM3aj/KETrrpaaG1Sc+vwACybS8B0f5d4Eddf0R38voWPiga3xPeX3 SrCVoXuvBUmAKY0kAmDiNoEgBhtBRcZsJrc3RNzo7yn2oFUsUJDLkNWFt+jysGq3 dqRyIsie1/QeXjsSRCZZgxSVR25HoszXGCjcxICbqfJeD0sSIqltFo1iMJpoPLr5 To4XPYM= -----END CERTIFICATE-----Generated at Sat May 17 07:58:26 2025 by rpki-client