$ rpki-client -vvf rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/4DF0EB00249711F0A959EB42C4F9AE02.roa File: 4DF0EB00249711F0A959EB42C4F9AE02.roa (raw, json) Hash identifier: qCFOL7CAxCdjmW/kv56vA6sNkM6rvQEti+d+yDN2pHs= Subject key identifier: 8A:96:5B:E8:4B:B0:D6:EF:47:30:DA:E1:3E:DA:7E:34:46:F1:6B:A4 Certificate issuer: /CN=A9134172/serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7 Certificate serial: 0A34 Authority key identifier: F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/4DF0EB00249711F0A959EB42C4F9AE02.roa Signing time: Tue 29 Apr 2025 01:14:32 +0000 ROA not before: Tue 29 Apr 2025 01:14:32 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 9908 IP address blocks: 61.10.0.0/16 maxlen: 16 61.10.0.0/17 maxlen: 17 61.10.0.0/18 maxlen: 20 61.10.64.0/18 maxlen: 18 61.10.64.0/19 maxlen: 20 61.10.96.0/19 maxlen: 20 61.10.128.0/17 maxlen: 20 61.15.0.0/16 maxlen: 16 61.15.0.0/17 maxlen: 20 61.15.128.0/17 maxlen: 20 61.18.0.0/16 maxlen: 20 125.59.0.0/16 maxlen: 20 203.83.64.0/18 maxlen: 18 203.168.222.0/23 maxlen: 24 218.252.0.0/16 maxlen: 16 218.252.0.0/17 maxlen: 20 218.252.128.0/17 maxlen: 20 218.253.0.0/18 maxlen: 20 222.166.0.0/16 maxlen: 20 222.167.0.0/18 maxlen: 20 222.167.64.0/19 maxlen: 20 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 22:38:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2612 (0xa34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134172, serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7 Validity Not Before: Apr 29 01:14:32 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=681027f7-6821 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a4:f8:41:de:a8:fd:80:57:b8:aa:ae:43:47: ba:44:e2:e6:96:a4:e9:84:b8:8f:54:22:bd:91:23: 23:0f:d6:1b:15:17:ff:7b:c0:63:69:8f:6a:fc:83: 38:b5:31:98:67:c4:ea:ba:19:34:47:e2:51:18:da: 60:bd:61:f3:b8:d3:75:e7:5e:0a:db:fd:08:05:b6: 0b:b0:1d:c7:b4:92:2a:8e:1f:cd:62:23:a6:3a:ea: 6e:f7:d2:28:cc:4b:bb:ca:69:29:d1:0b:2d:22:2b: b6:62:bc:7a:2c:c9:a8:95:7e:bc:5d:25:ef:aa:43: 8c:b6:fd:7c:08:da:47:e3:91:55:5b:97:ea:2a:d8: 6d:88:d2:c8:13:bb:40:34:09:f7:3e:1a:db:8c:1a: 38:b0:84:58:8c:5b:9c:f4:db:8d:da:da:f1:75:29: 46:8b:c4:dd:60:a9:60:86:9e:cd:2c:d1:b9:e6:62: b6:37:95:d1:2c:5c:1d:0c:02:b9:4a:24:9a:94:1c: c8:03:98:e7:a9:bd:bd:ac:ce:a1:0f:ce:00:e3:70: 76:28:83:46:5b:69:54:b4:88:4e:ad:54:9e:5e:05: f5:7f:ae:a5:72:a8:c9:92:40:37:ce:76:51:b9:80: c5:4f:b8:cf:3b:68:4c:fb:e2:a1:b8:d2:0c:55:df: 81:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:96:5B:E8:4B:B0:D6:EF:47:30:DA:E1:3E:DA:7E:34:46:F1:6B:A4 X509v3 Authority Key Identifier: keyid:F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/4DF0EB00249711F0A959EB42C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.10.0.0/16 61.15.0.0/16 61.18.0.0/16 125.59.0.0/16 203.83.64.0/18 203.168.222.0/23 218.252.0.0-218.253.63.255 222.166.0.0-222.167.95.255 Signature Algorithm: sha256WithRSAEncryption 26:e4:de:71:c5:b9:07:7d:13:03:39:d6:57:3c:4f:05:2b:97: 45:cd:e1:35:f1:c3:06:3f:e4:48:fb:f8:d7:d7:0e:48:30:73: d3:b3:e1:4f:54:04:22:87:d4:e4:ea:7d:bd:c1:3c:c7:a3:7d: a3:8e:86:c3:b9:87:53:3b:8e:9c:95:c1:79:d3:a7:8a:3f:38: c6:f2:f0:8b:83:c5:06:7b:ab:09:a1:8f:fb:0d:ce:63:a2:ff: ae:3e:e6:c6:b8:d8:8a:9a:fe:18:f0:63:89:99:26:52:e0:31: d0:5f:01:52:ea:b3:63:1d:16:07:93:ec:30:21:a9:60:3a:39: 3a:eb:52:b4:2b:13:0a:ab:7e:38:f8:4f:90:fd:fc:06:02:40: a9:4f:ab:45:31:a8:e7:8d:3a:f3:b6:6b:74:b7:2a:e5:8e:d6: 59:1a:ff:d0:e1:44:fd:4c:00:c1:e5:32:a8:d9:4a:c7:9b:f7: 9c:89:5c:93:65:f1:fd:4b:13:c0:37:a7:40:22:67:72:c9:ea: 21:92:7c:5e:fb:41:4a:86:d2:cf:02:6c:c7:38:45:62:cd:6b: f0:68:93:5d:4d:18:10:db:3c:95:1f:80:43:c5:a3:ba:b1:3a: 99:97:fa:31:a5:a1:d5:73:d9:d9:ed:7e:2e:f4:c5:c6:8e:5a: 17:09:12:f0 -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgICCjQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQxNzIxMTAvBgNVBAUTKEY0NUMwRjRGNDY3Q0UxNTc2RTVFRTlFNDFFNTU3NkYw MzQ4QzQ2QTcwHhcNMjUwNDI5MDExNDMyWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02ODEwMjdmNy02ODIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsqT4Qd6o/YBXuKquQ0e6ROLmlqTphLiPVCK9kSMjD9YbFRf/e8BjaY9q/IM4 tTGYZ8Tquhk0R+JRGNpgvWHzuNN1514K2/0IBbYLsB3HtJIqjh/NYiOmOupu99Io zEu7ymkp0QstIiu2Yrx6LMmolX68XSXvqkOMtv18CNpH45FVW5fqKthtiNLIE7tA NAn3PhrbjBo4sIRYjFuc9NuN2trxdSlGi8TdYKlghp7NLNG55mK2N5XRLFwdDAK5 SiSalBzIA5jnqb29rM6hD84A43B2KINGW2lUtIhOrVSeXgX1f66lcqjJkkA3znZR uYDFT7jPO2hM++KhuNIMVd+BcQIDAQABo4ICyTCCAsUwHQYDVR0OBBYEFIqWW+hL sNbvRzDa4T7afjRG8WukMB8GA1UdIwQYMBaAFPRcD09GfOFXbl7p5B5VdvA0jEan MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDE3Mi81OTc2MTI2NDlF NEQxMUVBOUMyM0FGMUZDNEY5QUUwMi85RndQVDBaODRWZHVYdW5rSGxWMjhEU01S cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlGd1BUMFo4NFZkdVh1bmtIbFYyOERTTVJxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzQxNzIvNTk3NjEyNjQ5RTREMTFFQTlDMjNBRjFGQzRGOUFFMDIvNERGMEVCMDAy NDk3MTFGMEE5NTlFQjQyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwUwYIKwYBBQUHAQcBAf8E RDBCMEAEAgABMDoDAwA9CgMDAD0PAwMAPRIDAwB9OwMEBstTQAMEAcuo3jALAwMC 2vwDBAba/QAwCwMDAd6mAwQF3qdAMA0GCSqGSIb3DQEBCwUAA4IBAQAm5N5xxbkH fRMDOdZXPE8FK5dFzeE18cMGP+RI+/jX1w5IMHPTs+FPVAQih9Tk6n29wTzHo32j jobDuYdTO46clcF506eKPzjG8vCLg8UGe6sJoY/7Dc5jov+uPubGuNiKmv4Y8GOJ mSZS4DHQXwFS6rNjHRYHk+wwIalgOjk661K0KxMKq344+E+Q/fwGAkCpT6tFMajn jTrztmt0tyrljtZZGv/Q4UT9TADB5TKo2UrHm/eciVyTZfH9SxPAN6dAImdyyeoh knxe+0FKhtLPAmzHOEVizWvwaJNdTRgQ2zyVH4BDxaO6sTqZl/oxpaHVc9nZ7X4u 9MXGjloXCRLw -----END CERTIFICATE-----Generated at Wed May 14 20:56:27 2025 by rpki-client