$ rpki-client -vvf rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/9CE444808F2811ECA311FF19C4F9AE02.roa File: 9CE444808F2811ECA311FF19C4F9AE02.roa (raw, json) Hash identifier: Za7CTLhf4UasBzGSp7I8a3g4a+j+NWEqF/KL56/2vS8= Subject key identifier: E8:D7:6E:53:2E:63:2C:CE:80:E8:6D:F3:33:1E:9B:60:47:34:46:08 Certificate issuer: /CN=A914CE75/serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85 Certificate serial: 31DF Authority key identifier: 49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/9CE444808F2811ECA311FF19C4F9AE02.roa Signing time: Wed 30 Apr 2025 15:52:26 +0000 ROA not before: Wed 30 Apr 2025 15:52:26 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 45820 IP address blocks: 59.161.160.0/24 maxlen: 24 115.117.191.0/24 maxlen: 24 115.118.66.0/24 maxlen: 24 121.242.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.crl rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 15:38:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12767 (0x31df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CE75, serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85 Validity Not Before: Apr 30 15:52:26 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6812473a-2628 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6d:e8:e9:ff:43:82:2f:d7:1c:42:d4:ac:ba: 10:ba:a7:e4:94:21:8c:e9:a3:ed:95:7f:c5:0c:cd: 59:f3:12:24:d3:91:7b:86:61:4f:06:09:e9:6d:f6: c6:06:25:ab:de:47:bc:a3:89:fb:42:89:4e:c4:a0: 9e:e6:80:e7:55:b3:5a:f0:21:b4:78:45:b8:1b:3b: 51:35:77:52:7d:ab:2e:de:d6:bc:37:1c:13:e4:cd: 9a:26:c6:14:d0:ad:ab:b1:8a:39:e2:0a:05:bd:28: 28:08:3f:b8:75:e4:22:0d:14:a9:6b:10:32:79:d2: a8:22:1f:c3:9a:91:75:73:23:3d:81:c1:c9:e4:fc: 12:2e:d4:7f:a7:ee:f5:79:7b:e6:88:fc:fc:b6:59: a4:31:ff:5b:25:06:be:15:36:7c:95:c4:64:3d:7d: 34:a5:3d:c8:e6:b0:12:2c:a9:89:53:48:0e:f8:19: 16:fb:e3:27:89:39:03:eb:bf:f2:03:34:97:70:dc: 15:4e:61:f6:b0:bb:5d:fd:a1:19:f2:ee:53:ec:b2: e8:ea:60:0d:67:48:04:82:78:e4:01:4a:83:84:3d: ff:49:11:ca:f7:1d:b3:e0:49:b6:b8:c2:45:ed:92: 0f:ae:b9:55:82:0a:5d:4e:a5:a7:a5:1f:c6:fd:88: ad:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:D7:6E:53:2E:63:2C:CE:80:E8:6D:F3:33:1E:9B:60:47:34:46:08 X509v3 Authority Key Identifier: keyid:49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/9CE444808F2811ECA311FF19C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 59.161.160.0/24 115.117.191.0/24 115.118.66.0/24 121.242.21.0/24 Signature Algorithm: sha256WithRSAEncryption 9d:1d:50:ea:9f:64:08:c3:14:b9:f4:39:84:3a:96:f1:05:d2: 59:a0:87:43:9b:60:95:72:55:27:ba:68:60:b5:5a:00:ed:53: 9a:ce:39:93:52:6c:8a:74:20:86:6b:6e:4a:cd:bc:cf:95:62: ac:ac:e5:1e:c3:d7:0a:c1:80:dc:93:6a:d5:01:2b:49:b1:2f: a0:e5:37:3b:b0:29:3b:89:86:8e:37:3d:62:0d:3b:ea:2e:a4: c8:de:5a:a7:f4:ee:5a:79:cc:b1:71:0f:1e:16:1d:45:f1:fa: d4:31:90:48:40:59:69:6d:f3:46:5a:5b:1e:f0:15:0b:04:00: 7f:2c:95:a1:55:8c:bb:19:30:96:29:fd:02:38:54:41:46:76: c4:d4:d0:08:72:ff:37:ca:33:52:8b:b3:eb:78:0b:40:67:af: 0d:98:e6:78:a6:29:63:80:27:69:0e:48:60:25:da:55:0a:15: 31:e6:2b:96:2a:02:a5:72:f6:4d:6e:f2:be:0e:ca:af:7b:c1: 57:e2:9f:e8:5b:bb:d8:29:b3:1e:b0:3c:cc:0f:b1:59:f0:f1: e8:5d:28:1e:20:c4:6d:dc:09:41:89:9a:cb:95:a6:d7:f8:7e: b3:e0:cc:da:b4:12:2c:18:0e:c0:c9:2a:f5:99:ef:f0:ee:c4: 43:45:a9:b0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICMd8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENFNzUxMTAvBgNVBAUTKDQ5ODkyNTM3RDhCMkMwMzI1QjdCRTA4MUZEOTI4NkM3 OUJFQTZBODUwHhcNMjUwNDMwMTU1MjI2WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODEyNDczYS0yNjI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqW3o6f9Dgi/XHELUrLoQuqfklCGM6aPtlX/FDM1Z8xIk05F7hmFPBgnpbfbG BiWr3ke8o4n7QolOxKCe5oDnVbNa8CG0eEW4GztRNXdSfasu3ta8NxwT5M2aJsYU 0K2rsYo54goFvSgoCD+4deQiDRSpaxAyedKoIh/DmpF1cyM9gcHJ5PwSLtR/p+71 eXvmiPz8tlmkMf9bJQa+FTZ8lcRkPX00pT3I5rASLKmJU0gO+BkW++MniTkD67/y AzSXcNwVTmH2sLtd/aEZ8u5T7LLo6mANZ0gEgnjkAUqDhD3/SRHK9x2z4Em2uMJF 7ZIPrrlVggpdTqWnpR/G/YitFQIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFOjXblMu YyzOgOht8zMem2BHNEYIMB8GA1UdIwQYMBaAFEmJJTfYssAyW3vggf2Shseb6mqF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0U3NS9EMjJFRjNENkZG NEIxMUUyODFCRTA2NjI1OTExRUEzMi9TWWtsTjlpeXdESmJlLUNCX1pLR3g1dnFh b1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NZa2xOOWl5d0RKYmUtQ0JfWktHeDV2cWFvVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NENFNzUvRDIyRUYzRDZGRjRCMTFFMjgxQkUwNjYyNTkxMUVBMzIvOUNFNDQ0ODA4 RjI4MTFFQ0EzMTFGRjE5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBAA7oaADBABzdb8DBABzdkIDBAB58hUwDQYJKoZIhvcNAQEL BQADggEBAJ0dUOqfZAjDFLn0OYQ6lvEF0lmgh0ObYJVyVSe6aGC1WgDtU5rOOZNS bIp0IIZrbkrNvM+VYqys5R7D1wrBgNyTatUBK0mxL6DlNzuwKTuJho43PWINO+ou pMjeWqf07lp5zLFxDx4WHUXx+tQxkEhAWWlt80ZaWx7wFQsEAH8slaFVjLsZMJYp /QI4VEFGdsTU0Ahy/zfKM1KLs+t4C0Bnrw2Y5nimKWOAJ2kOSGAl2lUKFTHmK5Yq AqVy9k1u8r4Oyq97wVfin+hbu9gpsx6wPMwPsVnw8ehdKB4gxG3cCUGJmsuVptf4 frPgzNq0EiwYDsDJKvWZ7/DuxENFqbA= -----END CERTIFICATE-----Generated at Fri May 16 21:47:00 2025 by rpki-client