$ rpki-client -vvf rpki.apnic.net/member_repository/A913E62B/61B35616240411F0A4D07273C4F9AE02/CFED56A4240411F0B73CB374C4F9AE02.roa File: CFED56A4240411F0B73CB374C4F9AE02.roa (raw, json) Hash identifier: Zn3nz0esus3n+Qr7MjHUDFZOowDDsYzs6GVur4c4Gdw= Subject key identifier: 93:3E:10:D0:C3:17:59:B2:B7:44:4A:8E:DD:9C:35:68:39:69:5F:47 Certificate issuer: /CN=A913E62B/serialNumber=F2E073092976058EB98656141437F8FB68B7215D Certificate serial: 0C Authority key identifier: F2:E0:73:09:29:76:05:8E:B9:86:56:14:14:37:F8:FB:68:B7:21:5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8uBzCSl2BY65hlYUFDf4-2i3IV0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E62B/61B35616240411F0A4D07273C4F9AE02/CFED56A4240411F0B73CB374C4F9AE02.roa Signing time: Wed 07 May 2025 07:43:57 +0000 ROA not before: Wed 07 May 2025 07:43:57 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 38038 IP address blocks: 203.34.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E62B/61B35616240411F0A4D07273C4F9AE02/8uBzCSl2BY65hlYUFDf4-2i3IV0.crl rsync://rpki.apnic.net/member_repository/A913E62B/61B35616240411F0A4D07273C4F9AE02/8uBzCSl2BY65hlYUFDf4-2i3IV0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8uBzCSl2BY65hlYUFDf4-2i3IV0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 07:22:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12 (0xc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E62B, serialNumber=F2E073092976058EB98656141437F8FB68B7215D Validity Not Before: May 7 07:43:57 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681b0f3c-8054 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:80:5b:90:da:b9:29:10:80:ab:74:7c:fe:a6: ac:49:63:d7:12:cf:3a:a0:d2:72:e2:33:42:5b:54: 28:71:38:c0:92:54:7b:99:13:e8:bf:a3:91:eb:d6: 8a:df:11:e1:83:ba:ee:87:77:84:57:8b:01:74:6c: d2:cc:fb:48:b4:17:95:87:74:32:1a:f8:a1:3e:26: 12:67:48:55:74:f9:51:65:98:41:be:3b:d4:17:bc: 47:72:33:45:f6:c1:29:2d:7c:1b:07:20:d3:52:6e: 2f:cd:a4:41:1e:f3:8f:ea:e0:5e:46:fd:9f:a7:40: 2d:a4:5f:ca:4e:0e:5e:40:96:98:95:f6:c3:9e:2a: 31:6b:d7:94:f0:40:12:c3:97:c6:e1:b3:10:47:30: bf:99:13:88:c1:05:81:c5:b0:89:ed:87:78:d2:3d: ad:75:29:a0:97:7e:26:b1:8f:af:16:d3:71:e1:22: 3f:67:8e:23:55:50:25:cb:29:70:2d:6e:c0:95:94: 92:c3:d4:ee:86:24:9e:1d:32:9b:f1:81:92:4f:9d: e0:60:d0:6c:6d:6f:79:72:d4:a8:75:32:bb:89:c2: 95:84:32:18:3c:d4:83:b6:d3:50:c1:b1:f1:fa:97: 56:e2:2c:6e:1e:03:86:f4:2f:28:34:d5:77:61:4d: 11:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:3E:10:D0:C3:17:59:B2:B7:44:4A:8E:DD:9C:35:68:39:69:5F:47 X509v3 Authority Key Identifier: keyid:F2:E0:73:09:29:76:05:8E:B9:86:56:14:14:37:F8:FB:68:B7:21:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E62B/61B35616240411F0A4D07273C4F9AE02/8uBzCSl2BY65hlYUFDf4-2i3IV0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8uBzCSl2BY65hlYUFDf4-2i3IV0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E62B/61B35616240411F0A4D07273C4F9AE02/CFED56A4240411F0B73CB374C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.34.212.0/24 Signature Algorithm: sha256WithRSAEncryption 04:b9:ba:8b:dc:d2:9c:24:14:d4:e8:c0:f3:b5:33:1a:14:2e: 32:2d:94:33:b0:a8:8f:7a:28:65:e6:6a:49:2e:f4:13:a2:ae: fd:9d:d2:ff:24:70:77:6a:b0:ae:fd:20:65:a6:67:53:d7:75: f8:b9:7a:6c:5e:ce:8c:16:31:2d:a1:cd:bf:e1:37:6f:e7:c0: fe:12:72:dc:7a:2e:59:14:3f:4d:82:5b:b4:f3:ec:3a:c5:b0: 6c:40:99:b5:8b:be:fa:ce:00:5a:f3:0e:91:2a:34:a1:62:24: 30:ea:94:7a:7a:91:8a:09:24:8d:8c:1d:d9:e3:e1:2f:06:72: d8:70:cb:69:fe:34:9d:dc:3c:0e:e6:7d:a9:0f:44:99:42:86: 74:c8:7d:91:52:9b:38:ad:c5:8c:c6:5d:61:d8:f2:5f:d3:84: 6f:15:af:bd:7e:ad:29:cb:df:ef:56:35:00:49:4a:3a:33:aa: d1:6e:2d:aa:cf:d6:df:29:ba:fe:45:3e:3c:58:ae:ad:8b:7a: 2e:8f:79:42:9b:e7:10:6b:22:1d:97:53:1c:ad:0e:d1:0f:52: 26:57:19:89:5d:2a:19:f3:5b:b1:32:4b:53:90:e4:17:4c:de: 2c:7d:0a:ad:ca:ea:b3:b0:65:8e:9a:c3:25:e5:f6:58:52:c3: 7d:d0:0d:43 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBDDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz RTYyQjExMC8GA1UEBRMoRjJFMDczMDkyOTc2MDU4RUI5ODY1NjE0MTQzN0Y4RkI2 OEI3MjE1RDAeFw0yNTA1MDcwNzQzNTdaFw0yNjA3MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4MWIwZjNjLTgwNTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSgFuQ2rkpEICrdHz+pqxJY9cSzzqg0nLiM0JbVChxOMCSVHuZE+i/o5Hr1orf EeGDuu6Hd4RXiwF0bNLM+0i0F5WHdDIa+KE+JhJnSFV0+VFlmEG+O9QXvEdyM0X2 wSktfBsHINNSbi/NpEEe84/q4F5G/Z+nQC2kX8pODl5AlpiV9sOeKjFr15TwQBLD l8bhsxBHML+ZE4jBBYHFsInth3jSPa11KaCXfiaxj68W03HhIj9njiNVUCXLKXAt bsCVlJLD1O6GJJ4dMpvxgZJPneBg0Gxtb3ly1Kh1MruJwpWEMhg81IO201DBsfH6 l1biLG4eA4b0Lyg01XdhTRHNAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUkz4Q0MMX WbK3REqO3Zw1aDlpX0cwHwYDVR0jBBgwFoAU8uBzCSl2BY65hlYUFDf4+2i3IV0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNFNjJCLzYxQjM1NjE2MjQw NDExRjBBNEQwNzI3M0M0RjlBRTAyLzh1QnpDU2wyQlk2NWhsWVVGRGY0LTJpM0lW MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOHVCekNTbDJCWTY1aGxZVUZEZjQtMmkzSVYwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTYyQi82MUIzNTYxNjI0MDQxMUYwQTREMDcyNzNDNEY5QUUwMi9DRkVENTZBNDI0 MDQxMUYwQjczQ0IzNzRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAMsi1DANBgkqhkiG9w0BAQsFAAOCAQEABLm6i9zSnCQU1OjA 87UzGhQuMi2UM7Coj3ooZeZqSS70E6Ku/Z3S/yRwd2qwrv0gZaZnU9d1+Ll6bF7O jBYxLaHNv+E3b+fA/hJy3HouWRQ/TYJbtPPsOsWwbECZtYu++s4AWvMOkSo0oWIk MOqUenqRigkkjYwd2ePhLwZy2HDLaf40ndw8DuZ9qQ9EmUKGdMh9kVKbOK3FjMZd YdjyX9OEbxWvvX6tKcvf71Y1AElKOjOq0W4tqs/W3ym6/kU+PFiurYt6Lo95Qpvn EGsiHZdTHK0O0Q9SJlcZiV0qGfNbsTJLU5DkF0zeLH0Krcrqs7BljprDJeX2WFLD fdANQw== -----END CERTIFICATE-----Generated at Wed May 14 04:05:15 2025 by rpki-client