$ rpki-client -vvf rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/200B2C4804AB11EB8AAF5923C4F9AE02.roa File: 200B2C4804AB11EB8AAF5923C4F9AE02.roa (raw, json) Hash identifier: lEnvEsVQKg7+MGcOwWT2W3WslnVR/yrmJySbJOft9Z8= Subject key identifier: 05:03:BD:38:6C:7F:C1:55:0A:A8:03:48:27:AE:9C:B1:58:C5:A1:15 Certificate issuer: /CN=A914CE75/serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85 Certificate serial: 31E1 Authority key identifier: 49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/200B2C4804AB11EB8AAF5923C4F9AE02.roa Signing time: Wed 30 Apr 2025 15:52:31 +0000 ROA not before: Wed 30 Apr 2025 15:52:31 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 4797 IP address blocks: 121.240.174.0/24 maxlen: 24 202.54.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.crl rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 15:38:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12769 (0x31e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CE75, serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85 Validity Not Before: Apr 30 15:52:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6812473f-b8fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:de:25:fe:1a:d2:eb:fb:b4:89:20:f9:cd:da: 33:94:4a:b4:5b:6f:a2:cf:c5:14:c7:71:c3:3e:18: 9c:6c:e6:45:7e:cb:94:9a:4b:9f:2b:7a:89:db:79: 09:70:26:66:e6:b0:70:69:db:61:ad:90:78:78:b7: 64:88:3a:e5:e9:2f:ec:58:83:6d:8a:5a:97:f1:da: ca:7e:7b:49:18:90:79:47:e1:db:8b:e8:45:fa:84: 6a:ef:78:b4:4f:4d:d7:6d:5b:89:21:17:42:57:bd: c2:8b:83:1b:aa:c8:f2:ca:34:88:51:68:6b:be:81: 4b:7e:7d:56:ad:d3:72:9a:fa:1a:d1:b6:d9:fb:fc: 98:7c:8b:4c:59:b7:85:73:91:b8:37:08:f9:a0:32: 03:d3:85:b3:8b:65:4a:ad:db:8a:e7:1c:c9:8c:64: dc:b6:80:ae:a6:e7:74:7e:9b:85:96:62:f8:03:39: db:8e:8a:d0:75:70:8c:63:2f:0d:25:3a:7b:37:37: bc:8b:c4:97:f1:98:c9:7f:0b:54:ea:5c:d7:44:03: 6d:5c:3f:ee:55:3a:12:da:b8:63:4b:0a:3a:1c:2a: 73:4e:d7:14:05:30:ce:ae:9d:f5:c3:35:6d:9b:12: ae:d9:97:85:25:16:15:bd:34:79:6c:82:ba:ce:08: 2c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:03:BD:38:6C:7F:C1:55:0A:A8:03:48:27:AE:9C:B1:58:C5:A1:15 X509v3 Authority Key Identifier: keyid:49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/200B2C4804AB11EB8AAF5923C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 121.240.174.0/24 202.54.210.0/24 Signature Algorithm: sha256WithRSAEncryption 78:bd:36:f7:43:4a:74:54:88:2f:dd:81:d7:ea:a4:65:d4:9e: 65:e9:cf:f2:9d:08:05:5b:89:8b:36:94:41:63:45:b7:55:8b: 89:e5:64:1c:e8:8b:4b:75:77:58:68:6a:f4:de:ea:56:aa:d7: 8a:73:46:ee:fe:30:91:72:b7:12:c1:9a:fb:2f:4c:58:31:91: cb:ab:6f:46:c3:2f:23:3a:a5:2d:4d:d7:e4:32:93:ae:ba:6d: f3:e2:76:c8:a5:7f:50:d8:ef:61:ef:8a:71:91:4a:5a:be:b9: 46:07:a9:e5:0e:c1:1e:bd:70:86:3b:ab:ce:bd:16:a9:14:65: 49:c9:fe:f8:97:92:fd:48:fc:c7:b4:4e:8c:8f:e6:4e:a2:03: b6:1a:43:1e:2a:09:79:45:70:d7:0e:ff:6b:3e:cf:ca:5b:4c: f9:a3:15:74:e1:11:ff:6f:28:09:0a:e7:de:d7:b5:85:1b:5c: d8:80:10:bb:21:81:23:d3:36:e8:49:20:b8:df:06:69:35:de: 79:e8:97:29:f9:25:02:0b:39:db:c8:5d:95:d6:1e:b0:88:6c: d1:c9:1f:a4:cf:08:70:ea:a0:d9:e2:65:59:10:e7:0e:6d:69: 7e:59:2b:31:11:1c:6c:02:98:d1:ee:25:15:3d:bd:a5:91:ec: 60:7e:1a:4b -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICMeEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENFNzUxMTAvBgNVBAUTKDQ5ODkyNTM3RDhCMkMwMzI1QjdCRTA4MUZEOTI4NkM3 OUJFQTZBODUwHhcNMjUwNDMwMTU1MjMxWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODEyNDczZi1iOGZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArN4l/hrS6/u0iSD5zdozlEq0W2+iz8UUx3HDPhicbOZFfsuUmkufK3qJ23kJ cCZm5rBwadthrZB4eLdkiDrl6S/sWINtilqX8drKfntJGJB5R+Hbi+hF+oRq73i0 T03XbVuJIRdCV73Ci4MbqsjyyjSIUWhrvoFLfn1WrdNymvoa0bbZ+/yYfItMWbeF c5G4Nwj5oDID04Wzi2VKrduK5xzJjGTctoCupud0fpuFlmL4AznbjorQdXCMYy8N JTp7Nze8i8SX8ZjJfwtU6lzXRANtXD/uVToS2rhjSwo6HCpzTtcUBTDOrp31wzVt mxKu2ZeFJRYVvTR5bIK6zggs6QIDAQABo4ICmzCCApcwHQYDVR0OBBYEFAUDvThs f8FVCqgDSCeunLFYxaEVMB8GA1UdIwQYMBaAFEmJJTfYssAyW3vggf2Shseb6mqF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0U3NS9EMjJFRjNENkZG NEIxMUUyODFCRTA2NjI1OTExRUEzMi9TWWtsTjlpeXdESmJlLUNCX1pLR3g1dnFh b1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NZa2xOOWl5d0RKYmUtQ0JfWktHeDV2cWFvVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NENFNzUvRDIyRUYzRDZGRjRCMTFFMjgxQkUwNjYyNTkxMUVBMzIvMjAwQjJDNDgw NEFCMTFFQjhBQUY1OTIzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAB58K4DBADKNtIwDQYJKoZIhvcNAQELBQADggEBAHi9NvdD SnRUiC/dgdfqpGXUnmXpz/KdCAVbiYs2lEFjRbdVi4nlZBzoi0t1d1hoavTe6laq 14pzRu7+MJFytxLBmvsvTFgxkcurb0bDLyM6pS1N1+Qyk666bfPidsilf1DY72Hv inGRSlq+uUYHqeUOwR69cIY7q869FqkUZUnJ/viXkv1I/Me0ToyP5k6iA7YaQx4q CXlFcNcO/2s+z8pbTPmjFXThEf9vKAkK597XtYUbXNiAELshgSPTNuhJILjfBmk1 3nnolyn5JQILOdvIXZXWHrCIbNHJH6TPCHDqoNniZVkQ5w5taX5ZKzERHGwCmNHu JRU9vaWR7GB+Gks= -----END CERTIFICATE-----Generated at Fri May 16 18:16:26 2025 by rpki-client