$ rpki-client -vvf rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/2CF180F0809511EFB8A82822C4F9AE02.roa File: 2CF180F0809511EFB8A82822C4F9AE02.roa (raw, json) Hash identifier: HLuyZRv6VF6qFq88g7pPhaPeJ2Pt9n+iaV4TOkNRhbg= Subject key identifier: AA:AE:46:C8:04:90:03:F4:B6:37:32:CB:69:9F:DC:B6:50:AA:2A:D9 Certificate issuer: /CN=A914254C/serialNumber=7B3F60D9B1A28002A07875CAB58A21457073E17F Certificate serial: 1681 Authority key identifier: 7B:3F:60:D9:B1:A2:80:02:A0:78:75:CA:B5:8A:21:45:70:73:E1:7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ez9g2bGigAKgeHXKtYohRXBz4X8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/2CF180F0809511EFB8A82822C4F9AE02.roa Signing time: Sat 10 May 2025 16:57:55 +0000 ROA not before: Sat 10 May 2025 16:57:55 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 15830 IP address blocks: 27.111.208.0/20 maxlen: 20 27.111.224.0/22 maxlen: 22 27.111.232.0/21 maxlen: 21 101.97.64.0/22 maxlen: 22 101.97.72.0/21 maxlen: 21 101.97.80.0/21 maxlen: 21 118.103.180.0/22 maxlen: 22 202.79.192.0/22 maxlen: 22 202.79.196.0/23 maxlen: 23 202.79.200.0/21 maxlen: 21 202.79.208.0/20 maxlen: 20 202.79.208.0/22 maxlen: 22 202.79.213.0/24 maxlen: 24 202.79.214.0/23 maxlen: 23 202.79.216.0/21 maxlen: 21 2403:b100::/32 maxlen: 32 2403:b101::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/ez9g2bGigAKgeHXKtYohRXBz4X8.crl rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/ez9g2bGigAKgeHXKtYohRXBz4X8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ez9g2bGigAKgeHXKtYohRXBz4X8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 16:50:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5761 (0x1681) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914254C, serialNumber=7B3F60D9B1A28002A07875CAB58A21457073E17F Validity Not Before: May 10 16:57:55 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=681f8593-4f62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:58:c4:26:d5:a5:0d:f6:2a:d7:a2:f3:7a:84: 0d:39:17:76:55:50:6e:c3:36:4f:b0:90:dd:0e:75: 29:c4:99:1a:19:c9:50:fa:ff:b8:ea:ab:f8:b6:7e: bd:29:b5:63:6c:d2:12:04:91:07:1e:4e:f0:4a:80: 9b:64:ab:7b:f1:39:c2:92:35:7a:d8:8d:fd:c4:9f: 94:ae:65:8e:ba:e9:cd:f1:f2:33:4e:f9:11:01:fc: 20:12:93:37:07:4c:8e:a7:a3:f9:87:6b:ec:3a:ab: 91:ab:9d:97:fc:6f:b7:46:e5:4a:a4:74:2e:22:73: 91:2d:02:98:a4:b4:ce:5c:12:90:63:3a:c1:6b:a9: 78:6b:f4:c7:44:3f:fb:11:dd:b4:4c:e8:6c:28:ba: 65:17:5a:f8:0f:0a:97:7f:cf:83:38:b2:a2:a8:ac: 95:a0:b2:aa:23:d2:a0:c4:e5:6c:7d:47:17:2f:96: ad:70:e2:8f:a7:c7:ff:ce:ca:80:a3:11:a0:b4:5d: 45:26:b6:8f:02:34:f9:cd:ef:4e:6f:86:20:56:8b: 59:14:dd:72:fb:18:04:af:3a:0b:10:d3:c0:34:69: 92:3c:7b:b5:2d:97:7b:b2:06:a7:7d:d8:0b:14:5d: c2:6f:61:08:ee:3e:49:a2:86:f6:97:ff:d9:35:5f: f7:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:AE:46:C8:04:90:03:F4:B6:37:32:CB:69:9F:DC:B6:50:AA:2A:D9 X509v3 Authority Key Identifier: keyid:7B:3F:60:D9:B1:A2:80:02:A0:78:75:CA:B5:8A:21:45:70:73:E1:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/ez9g2bGigAKgeHXKtYohRXBz4X8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ez9g2bGigAKgeHXKtYohRXBz4X8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/2CF180F0809511EFB8A82822C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.111.208.0-27.111.227.255 27.111.232.0/21 101.97.64.0/22 101.97.72.0-101.97.87.255 118.103.180.0/22 202.79.192.0-202.79.197.255 202.79.200.0-202.79.223.255 IPv6: 2403:b100::-2403:b101:ff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 61:a5:ff:59:68:9f:24:09:2b:08:c2:b3:f1:33:06:f9:87:3e: 4c:5f:e9:7b:87:9b:65:9c:47:2b:3b:09:12:a7:79:9e:bc:a0: ac:fb:05:d2:04:71:90:c0:2c:f1:ad:b7:a5:e7:11:ef:33:29: c2:52:6d:25:1e:e1:02:44:c2:06:e6:a2:59:57:0b:de:0d:2b: a0:6a:c7:d3:91:c4:b3:c2:8c:a3:a2:ab:cf:df:57:62:01:e4: a5:80:f2:64:4f:9f:d7:fb:ac:8f:f2:f7:9b:b3:7a:f0:56:0b: f9:d0:ef:b5:b9:66:36:a2:cd:32:bb:45:25:1a:6e:c9:e0:31: 37:4b:58:94:d9:48:19:2f:73:7e:37:84:09:51:f5:32:49:bb: a8:85:84:7b:2e:c9:b0:9a:74:45:6c:21:16:43:9c:5b:a4:87: e4:5c:91:94:98:63:d2:aa:d5:eb:d3:15:1f:4e:84:c1:03:58: 82:6c:f5:a4:b8:67:dc:d3:bc:6c:c0:49:c1:54:9c:f8:79:0f: 97:07:82:d7:89:0d:77:61:e9:a6:0d:11:bd:60:6a:2f:07:4c: 2b:53:60:a5:ff:b2:05:cb:21:dd:d3:da:e5:39:0c:85:a9:30: 18:d7:02:6c:2a:85:b7:b2:1b:e5:3f:32:29:bc:eb:cc:18:f6: a2:3d:fd:39 -----BEGIN CERTIFICATE----- MIIFzTCCBLWgAwIBAgICFoEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI1NEMxMTAvBgNVBAUTKDdCM0Y2MEQ5QjFBMjgwMDJBMDc4NzVDQUI1OEEyMTQ1 NzA3M0UxN0YwHhcNMjUwNTEwMTY1NzU1WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFmODU5My00ZjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA01jEJtWlDfYq16LzeoQNORd2VVBuwzZPsJDdDnUpxJkaGclQ+v+46qv4tn69 KbVjbNISBJEHHk7wSoCbZKt78TnCkjV62I39xJ+UrmWOuunN8fIzTvkRAfwgEpM3 B0yOp6P5h2vsOquRq52X/G+3RuVKpHQuInORLQKYpLTOXBKQYzrBa6l4a/THRD/7 Ed20TOhsKLplF1r4DwqXf8+DOLKiqKyVoLKqI9KgxOVsfUcXL5atcOKPp8f/zsqA oxGgtF1FJraPAjT5ze9Ob4YgVotZFN1y+xgErzoLENPANGmSPHu1LZd7sganfdgL FF3Cb2EI7j5Joob2l//ZNV/3lQIDAQABo4IC8TCCAu0wHQYDVR0OBBYEFKquRsgE kAP0tjcyy2mf3LZQqirZMB8GA1UdIwQYMBaAFHs/YNmxooACoHh1yrWKIUVwc+F/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjU0Qy81QTU2NEQ0ODE5 RTgxMUU4Qjk2NTBDN0VDNEY5QUUwMi9lejlnMmJHaWdBS2dlSFhLdFlvaFJYQno0 WDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V6OWcyYkdpZ0FLZ2VIWEt0WW9oUlhCejRYOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDI1NEMvNUE1NjRENDgxOUU4MTFFOEI5NjUwQzdFQzRGOUFFMDIvMkNGMTgwRjA4 MDk1MTFFRkI4QTgyODIyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwewYIKwYBBQUHAQcBAf8E bDBqMFAEAgABMEowDAMEBBtv0AMEAhtv4AMEAxtv6AMEAmVhQDAMAwQDZWFIAwQD ZWFQAwQCdme0MAwDBAbKT8ADBAHKT8QwDAMEA8pPyAMEBcpPwDAWBAIAAjAQMA4D BAAkA7EDBgAkA7EBADANBgkqhkiG9w0BAQsFAAOCAQEAYaX/WWifJAkrCMKz8TMG +Yc+TF/pe4ebZZxHKzsJEqd5nrygrPsF0gRxkMAs8a23pecR7zMpwlJtJR7hAkTC BuaiWVcL3g0roGrH05HEs8KMo6Krz99XYgHkpYDyZE+f1/usj/L3m7N68FYL+dDv tblmNqLNMrtFJRpuyeAxN0tYlNlIGS9zfjeECVH1Mkm7qIWEey7JsJp0RWwhFkOc W6SH5FyRlJhj0qrV69MVH06EwQNYgmz1pLhn3NO8bMBJwVSc+HkPlweC14kNd2Hp pg0RvWBqLwdMK1Ngpf+yBcsh3dPa5TkMhakwGNcCbCqFt7Ib5T8yKbzrzBj2oj39 OQ== -----END CERTIFICATE-----Generated at Fri May 16 08:14:17 2025 by rpki-client