$ rpki-client -vvf rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/0BB29428314511EF9B1F4B46C4F9AE02.roa File: 0BB29428314511EF9B1F4B46C4F9AE02.roa (raw, json) Hash identifier: H2sLs/hJoaPZU0Z/0qHdW66zEdj635m4qaU5cpHkB3A= Subject key identifier: 55:9D:A8:AA:5B:2D:F3:A1:B9:5A:39:A1:B3:47:C1:2D:B0:F3:3A:82 Certificate issuer: /CN=A91229A5/serialNumber=56F928C72A5728C17A9825109BBBB7210313BBCA Certificate serial: 0149 Authority key identifier: 56:F9:28:C7:2A:57:28:C1:7A:98:25:10:9B:BB:B7:21:03:13:BB:CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VvkoxypXKMF6mCUQm7u3IQMTu8o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/0BB29428314511EF9B1F4B46C4F9AE02.roa Signing time: Sat 07 Jun 2025 04:32:57 +0000 ROA not before: Sat 07 Jun 2025 04:32:57 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 134823 IP address blocks: 123.253.110.0/23 maxlen: 23 123.253.110.0/24 maxlen: 24 123.253.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/VvkoxypXKMF6mCUQm7u3IQMTu8o.crl rsync://rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/VvkoxypXKMF6mCUQm7u3IQMTu8o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VvkoxypXKMF6mCUQm7u3IQMTu8o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 329 (0x149) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91229A5, serialNumber=56F928C72A5728C17A9825109BBBB7210313BBCA Validity Not Before: Jun 7 04:32:57 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=6843c0f9-d526 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:1b:10:92:7a:b9:a6:a1:c3:ff:bf:c2:15:0b: 35:fa:fd:bb:52:6d:33:78:a2:c3:ff:e0:07:3b:93: ac:1e:77:94:0e:94:fd:26:0d:f0:36:0e:e2:5f:e9: 05:fc:98:aa:fe:a0:e7:e5:4f:cd:f3:aa:38:9f:8e: d4:d3:ed:a8:3d:c2:68:4b:30:b3:88:83:20:2f:86: 85:50:95:be:1b:ff:fe:c5:2b:6d:84:be:a5:fe:77: 05:ad:da:bd:5a:21:94:70:be:f0:14:86:85:d8:ee: d2:2e:ed:1d:48:e0:06:e8:ce:19:b5:e3:d5:fb:2e: 87:09:5e:9d:0b:fc:63:3d:11:ec:53:62:fa:75:15: fd:e7:fd:26:21:e3:16:81:ac:03:cb:4c:f6:e9:b8: b7:7b:b0:cf:87:6f:2b:68:c2:7f:df:ed:bc:03:4d: 86:a3:e9:61:92:8c:86:5c:f4:7d:39:a8:50:7b:e1: f4:1d:e7:62:37:9e:07:e2:79:e4:7f:02:bb:db:c9: 8f:07:11:bb:15:cb:1a:79:71:3f:4f:1a:29:74:f0: 80:94:3b:ce:f3:83:d1:02:ce:91:e3:42:c7:de:37: 5e:45:5c:28:9e:97:94:9a:4d:96:99:08:c7:b0:79: 57:09:f0:27:21:2f:46:5c:4b:61:12:18:8f:b0:88: f3:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:9D:A8:AA:5B:2D:F3:A1:B9:5A:39:A1:B3:47:C1:2D:B0:F3:3A:82 X509v3 Authority Key Identifier: keyid:56:F9:28:C7:2A:57:28:C1:7A:98:25:10:9B:BB:B7:21:03:13:BB:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/VvkoxypXKMF6mCUQm7u3IQMTu8o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VvkoxypXKMF6mCUQm7u3IQMTu8o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/0BB29428314511EF9B1F4B46C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 123.253.110.0/23 Signature Algorithm: sha256WithRSAEncryption 74:de:de:0f:9a:09:29:27:3b:b3:e9:f0:c7:d7:07:97:cc:5b: e4:11:f3:2b:1e:e9:a8:88:26:6b:1e:8c:61:45:a2:74:4d:b5: 62:2b:18:be:4c:b8:01:a8:e6:7f:6b:01:21:de:0a:08:49:2d: b4:18:0e:ad:0d:f0:f6:fc:71:d0:ac:a1:2a:c3:90:01:1f:ef: c9:fc:e5:87:43:c0:a9:a8:32:5b:c6:84:7f:61:29:80:19:ec: 90:6d:7f:92:56:2a:12:92:cb:35:ce:9c:91:b7:08:c0:5b:a2: 7a:22:d5:62:a5:a8:30:ee:04:ba:57:c9:d6:00:0a:10:51:52: b0:52:c3:ec:9d:84:d8:ad:c1:0f:be:71:01:53:4b:11:4c:4e: b0:53:80:28:8b:6e:d8:92:ba:c3:e3:13:94:18:0b:eb:86:67: fa:e5:f6:2a:23:4e:88:d5:eb:33:3d:77:a3:8f:ef:96:8a:09: dc:be:4c:da:a6:35:d4:59:cb:29:9a:8c:da:f8:a7:e0:25:de: f1:cb:f2:e0:71:87:c0:6f:32:ec:e0:0c:ef:34:21:da:e9:1a: ae:72:b1:d2:5a:fc:22:50:d2:7b:29:2f:88:99:14:5f:bc:3c: f3:b2:80:ef:0b:3c:fb:43:9d:89:6f:4f:ad:35:fc:dc:78:95: 92:0c:d6:e4 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjI5QTUxMTAvBgNVBAUTKDU2RjkyOEM3MkE1NzI4QzE3QTk4MjUxMDlCQkJCNzIx MDMxM0JCQ0EwHhcNMjUwNjA3MDQzMjU3WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODQzYzBmOS1kNTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnBsQknq5pqHD/7/CFQs1+v27Um0zeKLD/+AHO5OsHneUDpT9Jg3wNg7iX+kF /Jiq/qDn5U/N86o4n47U0+2oPcJoSzCziIMgL4aFUJW+G//+xStthL6l/ncFrdq9 WiGUcL7wFIaF2O7SLu0dSOAG6M4ZtePV+y6HCV6dC/xjPRHsU2L6dRX95/0mIeMW gawDy0z26bi3e7DPh28raMJ/3+28A02Go+lhkoyGXPR9OahQe+H0HediN54H4nnk fwK728mPBxG7FcsaeXE/TxopdPCAlDvO84PRAs6R40LH3jdeRVwonpeUmk2WmQjH sHlXCfAnIS9GXEthEhiPsIjzUwIDAQABo4IClTCCApEwHQYDVR0OBBYEFFWdqKpb LfOhuVo5obNHwS2w8zqCMB8GA1UdIwQYMBaAFFb5KMcqVyjBepglEJu7tyEDE7vK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjlBNS9FMjlFNzM2MDdB MTMxMUVFQUJBMTUwNjlDNEY5QUUwMi9WdmtveHlwWEtNRjZtQ1VRbTd1M0lRTVR1 OG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Z2a294eXBYS01GNm1DVVFtN3UzSVFNVHU4by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjI5QTUvRTI5RTczNjA3QTEzMTFFRUFCQTE1MDY5QzRGOUFFMDIvMEJCMjk0Mjgz MTQ1MTFFRjlCMUY0QjQ2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAF7/W4wDQYJKoZIhvcNAQELBQADggEBAHTe3g+aCSknO7Pp 8MfXB5fMW+QR8yse6aiIJmsejGFFonRNtWIrGL5MuAGo5n9rASHeCghJLbQYDq0N 8Pb8cdCsoSrDkAEf78n85YdDwKmoMlvGhH9hKYAZ7JBtf5JWKhKSyzXOnJG3CMBb onoi1WKlqDDuBLpXydYAChBRUrBSw+ydhNitwQ++cQFTSxFMTrBTgCiLbtiSusPj E5QYC+uGZ/rl9iojTojV6zM9d6OP75aKCdy+TNqmNdRZyymajNr4p+Al3vHL8uBx h8BvMuzgDO80IdrpGq5ysdJa/CJQ0nspL4iZFF+8PPOygO8LPPtDnYlvT601/Nx4 lZIM1uQ= -----END CERTIFICATE-----Generated at Fri Jul 4 16:13:57 2025 by rpki-client