$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/2AFAC78029B311F0AF325E4AC4F9AE02.roa File: 2AFAC78029B311F0AF325E4AC4F9AE02.roa (raw, json) Hash identifier: 0hIgW5CG8iPnwbJI81kYoFtj1lu0dvTdP0H3VWyhfX8= Subject key identifier: 2C:E4:B1:0B:ED:83:BC:87:E6:8F:FB:B5:BE:AB:05:F0:3A:82:28:78 Certificate issuer: /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206 Certificate serial: 37D6 Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/2AFAC78029B311F0AF325E4AC4F9AE02.roa Signing time: Mon 05 May 2025 13:16:34 +0000 ROA not before: Mon 05 May 2025 13:16:34 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 149419 IP address blocks: 111.88.239.0/24 maxlen: 24 115.186.62.0/24 maxlen: 24 115.186.117.0/24 maxlen: 24 115.186.118.0/24 maxlen: 24 115.186.119.0/24 maxlen: 24 115.186.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 14:30:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14294 (0x37d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206 Validity Not Before: May 5 13:16:34 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6818ba32-8326 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a7:62:e6:85:2e:b8:f6:4c:17:26:ac:e2:35: 7c:9c:99:01:fc:d9:ab:36:f3:4c:a5:23:d1:57:87: 2b:a4:44:53:f4:ab:d1:29:2e:cb:44:dc:3e:28:d9: 65:d6:8a:87:f2:5b:2a:89:32:45:43:c8:44:c7:29: da:aa:87:08:d0:de:3a:d0:79:51:3c:06:0a:d5:95: 7b:43:c5:55:4b:fc:42:67:f1:08:c0:62:ae:a9:d4: 58:a2:2d:de:1c:53:08:69:f8:e1:50:4b:5d:54:fe: fd:82:5c:67:c4:a1:cf:a5:31:cf:22:06:33:92:b5: 85:6d:6b:a0:9c:c5:79:7c:cb:09:b2:83:6c:f9:a5: 25:1b:08:8b:2a:be:c2:08:cf:bb:ae:d6:3e:3b:2c: 39:c4:ac:99:4b:b8:c0:34:b0:ba:19:7e:c7:4c:d7: 5d:10:bb:af:0d:d6:c9:7f:50:40:fc:d1:82:20:40: 93:67:7c:7c:47:89:4e:96:6a:fe:e4:6b:1b:3b:d5: 01:60:e5:54:7f:fc:28:09:21:f6:40:f4:04:8b:89: f1:c7:e7:a4:05:66:f5:11:ed:09:b7:90:8b:85:ab: 45:c4:a9:c3:b3:79:90:8b:91:c5:7c:82:94:26:2b: 13:0e:6d:95:88:ee:3e:11:41:16:a1:8c:a0:ae:35: b8:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:E4:B1:0B:ED:83:BC:87:E6:8F:FB:B5:BE:AB:05:F0:3A:82:28:78 X509v3 Authority Key Identifier: keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/2AFAC78029B311F0AF325E4AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 111.88.239.0/24 115.186.62.0/24 115.186.117.0-115.186.120.255 Signature Algorithm: sha256WithRSAEncryption 19:5f:2c:08:63:08:86:15:a2:0a:ec:bb:af:8e:9b:46:d6:7b: bc:c8:f7:a4:28:fc:58:ba:70:33:2e:64:27:d4:26:1f:a0:5d: d3:a6:17:ef:e6:d8:91:05:1c:8b:7a:8c:38:49:3a:11:73:8c: 0a:4c:47:1a:c7:55:35:f8:0b:d0:c9:98:48:e0:bb:2f:a3:aa: fa:1f:11:a4:f7:45:76:51:41:5a:21:ab:fc:cd:5b:2e:80:54: 22:47:8b:ee:ef:b6:18:c9:88:38:b7:90:32:20:4a:2d:0e:d9: e7:87:7e:d2:dc:b0:d5:64:82:56:83:6c:7a:6e:b3:1e:f9:99: 9d:a0:da:9a:1f:eb:65:27:37:7e:a3:75:b3:ce:66:b0:ce:88: 27:39:d3:c5:f4:ac:be:de:e6:74:12:e4:90:da:de:aa:f7:59: 5e:88:17:64:3d:20:ed:9d:4a:84:24:77:dd:0d:6b:0f:af:b8: cd:30:fb:d9:ec:9a:d6:e2:8f:af:19:b0:4c:1e:ad:e6:e0:18: 89:05:29:fd:24:d4:25:ed:c7:25:c6:45:38:30:34:a0:27:66: d0:90:35:03:fb:90:31:0b:cb:6d:7c:84:72:e5:93:00:cc:cd: a6:05:ed:9e:7a:5d:86:b3:74:8b:51:d9:ce:75:56:41:60:18: c4:25:00:ec -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgICN9YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM4M0IxMTAvBgNVBAUTKEU3NkVCMjU2QzBGQ0IwN0UyOTA3OTc4MzQzRTlBRDlE RDIxRkUyMDYwHhcNMjUwNTA1MTMxNjM0WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODE4YmEzMi04MzI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA16di5oUuuPZMFyas4jV8nJkB/NmrNvNMpSPRV4crpERT9KvRKS7LRNw+KNll 1oqH8lsqiTJFQ8hExynaqocI0N460HlRPAYK1ZV7Q8VVS/xCZ/EIwGKuqdRYoi3e HFMIafjhUEtdVP79glxnxKHPpTHPIgYzkrWFbWugnMV5fMsJsoNs+aUlGwiLKr7C CM+7rtY+Oyw5xKyZS7jANLC6GX7HTNddELuvDdbJf1BA/NGCIECTZ3x8R4lOlmr+ 5GsbO9UBYOVUf/woCSH2QPQEi4nxx+ekBWb1Ee0Jt5CLhatFxKnDs3mQi5HFfIKU JisTDm2ViO4+EUEWoYygrjW4gQIDAQABo4ICqTCCAqUwHQYDVR0OBBYEFCzksQvt g7yH5o/7tb6rBfA6gih4MB8GA1UdIwQYMBaAFOduslbA/LB+KQeXg0PprZ3SH+IG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzgzQi9FNEUxMEI0QTFE ODgxMUUyQTAxMkNCRTEwOEIwMkNEMi81MjZ5VnNEOHNINHBCNWVEUS1tdG5kSWY0 Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzUyNnlWc0Q4c0g0cEI1ZURRLW10bmRJZjRnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkM4M0IvRTRFMTBCNEExRDg4MTFFMkEwMTJDQkUxMDhCMDJDRDIvMkFGQUM3ODAy OUIzMTFGMEFGMzI1RTRBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMwYIKwYBBQUHAQcBAf8E JDAiMCAEAgABMBoDBABvWO8DBABzuj4wDAMEAHO6dQMEAHO6eDANBgkqhkiG9w0B AQsFAAOCAQEAGV8sCGMIhhWiCuy7r46bRtZ7vMj3pCj8WLpwMy5kJ9QmH6Bd06YX 7+bYkQUci3qMOEk6EXOMCkxHGsdVNfgL0MmYSOC7L6Oq+h8RpPdFdlFBWiGr/M1b LoBUIkeL7u+2GMmIOLeQMiBKLQ7Z54d+0tyw1WSCVoNsem6zHvmZnaDamh/rZSc3 fqN1s85msM6IJznTxfSsvt7mdBLkkNreqvdZXogXZD0g7Z1KhCR33Q1rD6+4zTD7 2eya1uKPrxmwTB6t5uAYiQUp/STUJe3HJcZFODA0oCdm0JA1A/uQMQvLbXyEcuWT AMzNpgXtnnpdhrN0i1HZznVWQWAYxCUA7A== -----END CERTIFICATE-----Generated at Mon May 12 03:15:30 2025 by rpki-client