$ rpki-client -vvf rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/6AA381F62A8011F087319941C4F9AE02.roa File: 6AA381F62A8011F087319941C4F9AE02.roa (raw, json) Hash identifier: edOe4Pd+g7p8X6EYnFF9uJf2QAgork21e9Vqmz6PKRs= Subject key identifier: 28:E9:6E:3D:C5:A4:90:DD:D0:7F:10:2D:70:34:EC:7C:51:A9:72:06 Certificate issuer: /CN=A9172A52/serialNumber=674AC57C099876A06657180B34E24E6EEE884411 Certificate serial: A0 Authority key identifier: 67:4A:C5:7C:09:98:76:A0:66:57:18:0B:34:E2:4E:6E:EE:88:44:11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0rFfAmYdqBmVxgLNOJObu6IRBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/6AA381F62A8011F087319941C4F9AE02.roa Signing time: Tue 06 May 2025 13:45:48 +0000 ROA not before: Tue 06 May 2025 13:45:48 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 396982 IP address blocks: 113.212.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.crl rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0rFfAmYdqBmVxgLNOJObu6IRBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 06:03:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160 (0xa0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172A52, serialNumber=674AC57C099876A06657180B34E24E6EEE884411 Validity Not Before: May 6 13:45:48 2025 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=681a128c-f3e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:d0:49:b2:05:47:a4:7a:89:a2:59:78:bb:3a: a2:88:e1:27:51:0e:95:15:0f:4f:1a:9d:04:f2:40: 7a:fa:d0:26:bc:2e:8d:58:48:1d:bb:be:ba:a5:c6: 3a:5b:2f:f6:2c:61:e8:40:46:06:ac:20:88:72:f3: 4e:25:b3:45:5e:2a:64:d8:4f:8e:19:25:29:ea:92: 4e:3d:d8:f5:c1:a9:8b:a7:63:48:cf:62:ba:97:a0: 53:ff:e3:0d:12:2e:d4:f3:f7:d3:f2:1d:18:ee:3a: 34:7e:c8:a2:5f:e8:08:c2:f0:e9:62:86:5f:b1:f5: 09:26:d3:56:b2:6e:db:aa:e8:97:c0:2e:ef:66:80: 8c:41:12:9c:0f:5d:5b:29:ac:85:7d:64:87:c1:3d: 97:a6:61:e2:ad:2d:b4:36:a4:b6:79:68:75:a3:67: 35:b8:03:cb:be:da:8d:95:cf:a6:c4:22:0e:ef:3d: 36:69:a5:1c:53:82:0c:ed:e8:6d:53:91:e3:20:32: ed:7b:88:bc:61:0b:24:39:ad:35:41:a2:e1:da:45: 6f:2b:9c:ae:a7:41:10:6a:67:ad:57:3a:70:e3:42: 24:37:50:9d:68:b0:b6:65:74:a2:44:69:b1:47:b3: ab:9c:5a:3f:0b:2a:38:8c:b5:f6:1a:74:c4:37:28: ba:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:E9:6E:3D:C5:A4:90:DD:D0:7F:10:2D:70:34:EC:7C:51:A9:72:06 X509v3 Authority Key Identifier: keyid:67:4A:C5:7C:09:98:76:A0:66:57:18:0B:34:E2:4E:6E:EE:88:44:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0rFfAmYdqBmVxgLNOJObu6IRBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/6AA381F62A8011F087319941C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 113.212.76.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:ed:99:7e:7f:9a:05:d7:30:7b:10:6e:ad:0b:e8:4e:91:41: 04:b8:a6:91:18:b6:fc:2c:b0:4b:e7:fe:e5:bd:01:ca:ff:fd: c6:c7:0e:66:ac:f5:ba:7c:92:b8:a1:66:78:f4:21:32:44:78: ac:a5:a5:4d:3c:8d:48:75:d3:d2:fa:d3:92:b4:d0:87:e4:ff: 58:e7:46:20:fb:5e:f3:3b:4f:c1:dd:05:80:17:49:5c:44:0e: 5a:0d:95:51:a5:56:4d:fc:c8:d3:84:15:e8:84:c9:4b:54:96: 98:a4:25:4b:25:5a:62:78:a4:dc:dd:26:eb:12:43:d0:7b:f6: 12:ad:d1:e2:59:f5:64:28:35:26:ab:54:e3:08:69:93:28:ed: c4:38:a1:a8:d6:ed:0c:d1:bc:ed:ba:d1:e4:1f:86:d6:c6:57: ea:f9:7e:b6:41:c0:9d:fd:04:d1:cf:92:ae:be:51:65:c8:16: ea:92:b4:06:cd:57:27:ab:57:c5:ac:59:f2:f4:8f:ad:0c:7e: 50:ff:e5:bd:36:26:ee:2b:cd:35:1d:06:2e:6a:17:9e:94:69: d8:5f:ba:ee:f3:c6:bb:0f:85:9e:ed:fd:96:ec:ee:ff:b1:e7: 8d:ae:41:2b:04:75:d7:c7:e0:65:c3:53:7d:6c:ab:b8:d7:65: b2:f5:b3:c2 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJBNTIxMTAvBgNVBAUTKDY3NEFDNTdDMDk5ODc2QTA2NjU3MTgwQjM0RTI0RTZF RUU4ODQ0MTEwHhcNMjUwNTA2MTM0NTQ4WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFhMTI4Yy1mM2UwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA59BJsgVHpHqJoll4uzqiiOEnUQ6VFQ9PGp0E8kB6+tAmvC6NWEgdu766pcY6 Wy/2LGHoQEYGrCCIcvNOJbNFXipk2E+OGSUp6pJOPdj1wamLp2NIz2K6l6BT/+MN Ei7U8/fT8h0Y7jo0fsiiX+gIwvDpYoZfsfUJJtNWsm7bquiXwC7vZoCMQRKcD11b KayFfWSHwT2XpmHirS20NqS2eWh1o2c1uAPLvtqNlc+mxCIO7z02aaUcU4IM7eht U5HjIDLte4i8YQskOa01QaLh2kVvK5yup0EQametVzpw40IkN1CdaLC2ZXSiRGmx R7OrnFo/Cyo4jLX2GnTENyi6FwIDAQABo4IClTCCApEwHQYDVR0OBBYEFCjpbj3F pJDd0H8QLXA07HxRqXIGMB8GA1UdIwQYMBaAFGdKxXwJmHagZlcYCzTiTm7uiEQR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkE1Mi8zRTc2RDdFRTk4 MTkxMUVGQjBEMEREMzRDNEY5QUUwMi9aMHJGZkFtWWRxQm1WeGdMTk9KT2J1NklS QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1owckZmQW1ZZHFCbVZ4Z0xOT0pPYnU2SVJCRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzJBNTIvM0U3NkQ3RUU5ODE5MTFFRkIwRDBERDM0QzRGOUFFMDIvNkFBMzgxRjYy QTgwMTFGMDg3MzE5OTQxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABx1EwwDQYJKoZIhvcNAQELBQADggEBAJztmX5/mgXXMHsQ bq0L6E6RQQS4ppEYtvwssEvn/uW9Acr//cbHDmas9bp8krihZnj0ITJEeKylpU08 jUh109L605K00Ifk/1jnRiD7XvM7T8HdBYAXSVxEDloNlVGlVk38yNOEFeiEyUtU lpikJUslWmJ4pNzdJusSQ9B79hKt0eJZ9WQoNSarVOMIaZMo7cQ4oajW7QzRvO26 0eQfhtbGV+r5frZBwJ39BNHPkq6+UWXIFuqStAbNVyerV8WsWfL0j60MflD/5b02 Ju4rzTUdBi5qF56Uadhfuu7zxrsPhZ7t/Zbs7v+x542uQSsEddfH4GXDU31sq7jX ZbL1s8I= -----END CERTIFICATE-----Generated at Tue May 13 08:23:46 2025 by rpki-client