$ rpki-client -vvf rpki.apnic.net/member_repository/A917D9FC/7A302D0042B111EC9F24A06EC4F9AE02/AD94C92242BA11ECB1E8FF11C4F9AE02.roa File: AD94C92242BA11ECB1E8FF11C4F9AE02.roa (raw, json) Hash identifier: v+UfHJBNUMJhgU+Hq/Ni7UlIWeTPSw4kY7gKtnOeoHo= Subject key identifier: 06:DF:6B:50:43:C8:31:A8:76:C6:AB:67:E7:E6:B2:FD:D0:74:F4:BE Certificate issuer: /CN=A917D9FC/serialNumber=D1A1EFD224135AEB09839EA8BDB8CDC599CE657F Certificate serial: 047E Authority key identifier: D1:A1:EF:D2:24:13:5A:EB:09:83:9E:A8:BD:B8:CD:C5:99:CE:65:7F Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0aHv0iQTWusJg56ovbjNxZnOZX8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D9FC/7A302D0042B111EC9F24A06EC4F9AE02/AD94C92242BA11ECB1E8FF11C4F9AE02.roa Signing time: Wed 30 Apr 2025 16:55:11 +0000 ROA not before: Wed 30 Apr 2025 16:55:11 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9287 IP address blocks: 185.54.88.0/22 maxlen: 22 185.54.88.0/24 maxlen: 24 185.54.89.0/24 maxlen: 24 185.54.90.0/24 maxlen: 24 185.54.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D9FC/7A302D0042B111EC9F24A06EC4F9AE02/0aHv0iQTWusJg56ovbjNxZnOZX8.crl rsync://rpki.apnic.net/member_repository/A917D9FC/7A302D0042B111EC9F24A06EC4F9AE02/0aHv0iQTWusJg56ovbjNxZnOZX8.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0aHv0iQTWusJg56ovbjNxZnOZX8.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 16:38:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1150 (0x47e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D9FC, serialNumber=D1A1EFD224135AEB09839EA8BDB8CDC599CE657F Validity Not Before: Apr 30 16:55:11 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681255ef-c0c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:dd:d5:98:d4:ec:8f:f0:dd:d2:8f:b4:dd:ff: 85:2e:9e:c1:c3:45:81:09:28:0a:ca:a9:85:76:14: 86:35:f9:18:7a:ca:cd:e7:f1:0e:5f:3a:1e:f0:50: 06:97:0e:eb:5a:6e:f0:7b:5d:7a:81:ba:8f:ce:b3: 20:02:71:f8:14:b6:b7:18:f2:76:8c:52:a7:ca:15: 76:65:9b:11:b3:dd:e0:95:31:c3:26:d1:fc:5d:3f: cd:d1:e9:78:81:f2:bb:0d:15:bc:5d:1d:4b:d5:4a: 99:b9:3b:59:25:9f:de:4a:92:6d:e9:a1:26:e6:f8: 81:bb:b3:6d:ef:f9:3e:90:42:e6:d0:80:36:38:14: 4c:b0:b9:8f:d4:32:7b:32:63:fc:b5:59:9a:74:56: 0f:56:bd:bb:fe:34:53:b6:86:f3:00:48:2a:08:19: d2:ae:b0:a4:2a:60:84:52:09:fc:5a:39:ba:9a:89: 5c:be:7c:36:b9:eb:84:76:f4:73:0b:2b:00:43:28: 58:c2:96:ed:f8:60:3a:d5:02:69:75:1b:fd:3c:4e: 19:63:70:f0:be:09:c0:41:07:5c:a0:3c:59:9d:76: 45:ea:56:02:44:20:95:b8:9f:3f:c0:d5:2b:15:b7: 6c:dd:5b:95:ef:c8:d4:32:bc:19:15:f5:66:d1:1b: f9:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:DF:6B:50:43:C8:31:A8:76:C6:AB:67:E7:E6:B2:FD:D0:74:F4:BE X509v3 Authority Key Identifier: keyid:D1:A1:EF:D2:24:13:5A:EB:09:83:9E:A8:BD:B8:CD:C5:99:CE:65:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D9FC/7A302D0042B111EC9F24A06EC4F9AE02/0aHv0iQTWusJg56ovbjNxZnOZX8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0aHv0iQTWusJg56ovbjNxZnOZX8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D9FC/7A302D0042B111EC9F24A06EC4F9AE02/AD94C92242BA11ECB1E8FF11C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 185.54.88.0/22 Signature Algorithm: sha256WithRSAEncryption b1:42:34:d1:11:d9:17:69:70:19:62:d6:ae:d1:b3:bf:e5:a7: e4:da:23:57:70:eb:31:f7:bf:0f:32:2c:67:40:f4:da:3b:bf: 1e:9c:cd:0c:b5:c8:54:19:fb:8c:8b:68:64:7b:1f:08:9a:9c: b7:a2:f5:13:d2:ca:3b:7d:92:76:0e:6b:75:07:ca:59:fa:8a: b7:06:22:0b:fb:ef:c8:b6:e3:97:d9:ec:28:ea:a4:0c:b1:a6: 10:0d:23:45:9a:ac:95:6d:30:54:30:29:38:50:b2:32:33:b5: 20:d4:d5:49:31:c4:ce:3b:25:14:9e:b8:e2:c1:b0:d1:ff:88: 38:67:2e:06:91:3b:20:0e:47:5a:d0:30:16:61:94:5f:4f:7a: 49:48:52:6e:b5:a3:60:ef:f2:27:7e:56:bb:dd:ef:d8:72:1a: b0:c2:1d:86:5b:f3:ef:0a:3b:a3:54:07:07:3b:d3:94:42:e4: cf:c8:37:be:81:d8:b9:37:87:2e:ab:81:90:17:74:c2:7c:31: cf:6b:43:41:9e:15:f8:78:99:ee:77:79:6c:36:e7:87:81:ca: a2:0d:d4:bd:ce:4c:b3:23:e7:66:f7:43:52:82:53:62:25:a8: 4e:97:99:8a:06:01:6a:4b:f8:2b:14:ea:86:87:71:93:49:02: 84:54:40:39 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBH4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q5RkMxMTAvBgNVBAUTKEQxQTFFRkQyMjQxMzVBRUIwOTgzOUVBOEJEQjhDREM1 OTlDRTY1N0YwHhcNMjUwNDMwMTY1NTExWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODEyNTVlZi1jMGM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy93VmNTsj/Dd0o+03f+FLp7Bw0WBCSgKyqmFdhSGNfkYesrN5/EOXzoe8FAG lw7rWm7we116gbqPzrMgAnH4FLa3GPJ2jFKnyhV2ZZsRs93glTHDJtH8XT/N0el4 gfK7DRW8XR1L1UqZuTtZJZ/eSpJt6aEm5viBu7Nt7/k+kELm0IA2OBRMsLmP1DJ7 MmP8tVmadFYPVr27/jRTtobzAEgqCBnSrrCkKmCEUgn8Wjm6molcvnw2ueuEdvRz CysAQyhYwpbt+GA61QJpdRv9PE4ZY3DwvgnAQQdcoDxZnXZF6lYCRCCVuJ8/wNUr Fbds3VuV78jUMrwZFfVm0Rv5OwIDAQABo4IClTCCApEwHQYDVR0OBBYEFAbfa1BD yDGodsarZ+fmsv3QdPS+MB8GA1UdIwQYMBaAFNGh79IkE1rrCYOeqL24zcWZzmV/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDlGQy83QTMwMkQwMDQy QjExMUVDOUYyNEEwNkVDNEY5QUUwMi8wYUh2MGlRVFd1c0pnNTZvdmJqTnhabk9a WDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzBhSHYwaVFUV3VzSmc1Nm92YmpOeFpuT1pYOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0Q5RkMvN0EzMDJEMDA0MkIxMTFFQzlGMjRBMDZFQzRGOUFFMDIvQUQ5NEM5MjI0 MkJBMTFFQ0IxRThGRjExQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAK5NlgwDQYJKoZIhvcNAQELBQADggEBALFCNNER2RdpcBli 1q7Rs7/lp+TaI1dw6zH3vw8yLGdA9No7vx6czQy1yFQZ+4yLaGR7HwianLei9RPS yjt9knYOa3UHyln6ircGIgv778i245fZ7CjqpAyxphANI0WarJVtMFQwKThQsjIz tSDU1UkxxM47JRSeuOLBsNH/iDhnLgaROyAOR1rQMBZhlF9PeklIUm61o2Dv8id+ Vrvd79hyGrDCHYZb8+8KO6NUBwc705RC5M/IN76B2Lk3hy6rgZAXdMJ8Mc9rQ0Ge Ffh4me53eWw254eByqIN1L3OTLMj52b3Q1KCU2IlqE6XmYoGAWpL+CsU6oaHcZNJ AoRUQDk= -----END CERTIFICATE-----Generated at Fri May 9 06:15:36 2025 by rpki-client