$ rpki-client -vvf rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/AF6AA9ECFF6011ED90C62C26C4F9AE02.roa File: AF6AA9ECFF6011ED90C62C26C4F9AE02.roa (raw, json) Hash identifier: I6SN+VthWHNwpn13bC2pRMPfdtmxkMFNn0d1M2WvxFQ= Subject key identifier: FF:56:DD:28:15:90:93:DB:43:79:84:F2:9E:A9:A3:B0:47:EF:36:B5 Certificate issuer: /CN=A9120B99/serialNumber=86C7946946B2A57B056F02B279340D30C2CE49B4 Certificate serial: 34F5 Authority key identifier: 86:C7:94:69:46:B2:A5:7B:05:6F:02:B2:79:34:0D:30:C2:CE:49:B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hseUaUaypXsFbwKyeTQNMMLOSbQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/AF6AA9ECFF6011ED90C62C26C4F9AE02.roa Signing time: Wed 07 May 2025 17:29:17 +0000 ROA not before: Wed 07 May 2025 17:29:17 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 136897 IP address blocks: 202.181.136.0/24 maxlen: 24 202.181.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.crl rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hseUaUaypXsFbwKyeTQNMMLOSbQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 14:22:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13557 (0x34f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120B99, serialNumber=86C7946946B2A57B056F02B279340D30C2CE49B4 Validity Not Before: May 7 17:29:17 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=681b986c-0451 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:cf:b8:da:2e:32:94:61:97:5c:7e:aa:55:01: 8a:2a:b7:68:71:84:32:62:2f:07:2d:6f:89:71:b8: 26:8c:7f:55:f1:89:25:7d:f3:88:fb:c2:7c:28:d8: 66:3c:24:85:3a:e3:cf:55:ec:6f:f0:f0:d2:7c:42: 33:2e:9c:73:8f:60:ee:85:62:4a:72:60:d3:5b:b3: 19:0b:bf:c7:0b:8a:36:62:32:ae:26:28:73:73:cb: 1b:33:9f:3b:a8:5b:b5:e6:3c:42:98:f9:30:e4:ea: 05:68:b5:2a:b2:61:36:32:7e:7e:74:34:64:24:9b: ce:4f:ce:93:a8:d4:34:b6:35:43:68:54:bd:7c:48: 72:6d:c1:e5:8d:88:f1:6f:10:42:69:05:7d:da:47: 05:a4:ff:b2:a5:0c:7a:58:fa:ca:c1:20:d0:38:ea: 39:63:04:fd:1b:b5:7a:ab:47:65:37:54:46:b3:1c: 73:b0:79:37:e0:cc:28:9d:21:5d:ab:da:17:29:4b: 57:1a:7d:49:53:63:c2:84:4c:bf:be:33:e6:dc:2d: 33:a9:77:14:2d:c0:24:8f:ec:7c:0d:99:ad:8f:b2: ad:59:ef:ae:88:df:51:72:a6:72:e1:d2:5b:13:9b: 09:b5:fd:b1:92:14:ca:6a:56:c5:b3:d7:e0:47:a3: 08:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:56:DD:28:15:90:93:DB:43:79:84:F2:9E:A9:A3:B0:47:EF:36:B5 X509v3 Authority Key Identifier: keyid:86:C7:94:69:46:B2:A5:7B:05:6F:02:B2:79:34:0D:30:C2:CE:49:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hseUaUaypXsFbwKyeTQNMMLOSbQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/AF6AA9ECFF6011ED90C62C26C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.181.136.0/24 202.181.149.0/24 Signature Algorithm: sha256WithRSAEncryption 98:0e:e1:5d:b8:65:fa:83:98:00:e2:86:a1:42:45:f0:5e:f1: 92:22:a7:01:83:cc:15:5e:c4:ab:20:35:cd:76:74:36:7f:30: 38:69:66:1d:28:27:60:fe:51:a2:b4:21:76:6b:d4:05:74:b6: 30:b3:63:b5:fc:b4:3f:d0:1f:d3:9a:7a:ef:60:ba:53:fd:40: 9a:8a:da:81:0e:d1:79:9e:90:67:48:b0:99:43:02:aa:18:b3: 8b:a6:15:9a:48:64:bf:c6:7f:59:f7:dd:23:28:bb:50:c8:a8: ec:f2:0d:52:63:56:e9:67:35:66:31:ea:7c:7f:9a:eb:a8:9b: 16:4e:bb:19:f6:10:5e:a1:79:ec:71:00:a3:e3:76:9e:1d:ef: eb:9c:86:c7:68:ec:c0:8d:6c:8c:f2:1d:30:6d:0a:95:dc:db: 4f:e1:1c:aa:6f:b2:14:5e:a2:9d:16:75:5f:96:44:4c:7d:25: 2f:62:09:ad:23:70:9c:0b:67:7f:36:d0:fd:6c:3c:5c:e2:0a: cf:ed:ef:17:65:b3:eb:51:21:9e:38:77:38:81:13:b2:f1:40: 0d:ba:61:ca:93:c5:64:86:91:6d:f3:6d:6a:36:26:4e:b3:b5: e3:f9:e3:22:94:e6:82:9e:fc:cb:9c:60:6b:fe:50:d2:cd:58: 0e:73:22:93 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICNPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBCOTkxMTAvBgNVBAUTKDg2Qzc5NDY5NDZCMkE1N0IwNTZGMDJCMjc5MzQwRDMw QzJDRTQ5QjQwHhcNMjUwNTA3MTcyOTE3WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFiOTg2Yy0wNDUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAms+42i4ylGGXXH6qVQGKKrdocYQyYi8HLW+JcbgmjH9V8YklffOI+8J8KNhm PCSFOuPPVexv8PDSfEIzLpxzj2DuhWJKcmDTW7MZC7/HC4o2YjKuJihzc8sbM587 qFu15jxCmPkw5OoFaLUqsmE2Mn5+dDRkJJvOT86TqNQ0tjVDaFS9fEhybcHljYjx bxBCaQV92kcFpP+ypQx6WPrKwSDQOOo5YwT9G7V6q0dlN1RGsxxzsHk34MwonSFd q9oXKUtXGn1JU2PChEy/vjPm3C0zqXcULcAkj+x8DZmtj7KtWe+uiN9RcqZy4dJb E5sJtf2xkhTKalbFs9fgR6MIPQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFP9W3SgV kJPbQ3mE8p6po7BH7za1MB8GA1UdIwQYMBaAFIbHlGlGsqV7BW8Csnk0DTDCzkm0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEI5OS9EM0Y5MDUxQzFE ODMxMUUyQjRFRDVDRDkwOEIwMkNEMi9oc2VVYVVheXBYc0Zid0t5ZVRRTk1NTE9T YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hzZVVhVWF5cFhzRmJ3S3llVFFOTU1MT1NiUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjBCOTkvRDNGOTA1MUMxRDgzMTFFMkI0RUQ1Q0Q5MDhCMDJDRDIvQUY2QUE5RUNG RjYwMTFFRDkwQzYyQzI2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBADKtYgDBADKtZUwDQYJKoZIhvcNAQELBQADggEBAJgO4V24 ZfqDmADihqFCRfBe8ZIipwGDzBVexKsgNc12dDZ/MDhpZh0oJ2D+UaK0IXZr1AV0 tjCzY7X8tD/QH9Oaeu9gulP9QJqK2oEO0XmekGdIsJlDAqoYs4umFZpIZL/Gf1n3 3SMou1DIqOzyDVJjVulnNWYx6nx/muuomxZOuxn2EF6heexxAKPjdp4d7+uchsdo 7MCNbIzyHTBtCpXc20/hHKpvshReop0WdV+WREx9JS9iCa0jcJwLZ3820P1sPFzi Cs/t7xdls+tRIZ44dziBE7LxQA26YcqTxWSGkW3zbWo2Jk6zteP54yKU5oKe/Muc YGv+UNLNWA5zIpM= -----END CERTIFICATE-----Generated at Mon May 12 13:28:05 2025 by rpki-client