$ rpki-client -vvf rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/F97DB5F229A111F090BC8163C4F9AE02.roa File: F97DB5F229A111F090BC8163C4F9AE02.roa (raw, json) Hash identifier: qSTrfN/t5DWRs97KV7DGaW2piIfbl9N9+lJsbDORhpA= Subject key identifier: 04:74:F4:75:91:DE:76:E7:E4:FB:09:44:60:8C:7A:14:EC:4B:08:18 Certificate issuer: /CN=A9180D79/serialNumber=4E21F5AA8C928C0B6757C03E55B0A5923C4E48AB Certificate serial: 012D Authority key identifier: 4E:21:F5:AA:8C:92:8C:0B:67:57:C0:3E:55:B0:A5:92:3C:4E:48:AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TiH1qoySjAtnV8A-VbClkjxOSKs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/F97DB5F229A111F090BC8163C4F9AE02.roa Signing time: Mon 05 May 2025 11:13:30 +0000 ROA not before: Mon 05 May 2025 11:13:30 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 152605 IP address blocks: 202.77.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.crl rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TiH1qoySjAtnV8A-VbClkjxOSKs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 03:31:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 301 (0x12d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180D79, serialNumber=4E21F5AA8C928C0B6757C03E55B0A5923C4E48AB Validity Not Before: May 5 11:13:30 2025 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=68189d5a-3711 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:7d:d7:90:e6:f4:d3:7b:92:4a:af:7a:b1:ad: a1:79:11:21:c1:a9:83:6c:49:1c:5c:04:72:9a:08: 08:18:fe:5b:02:16:bb:63:15:fc:1a:cc:33:eb:e5: 7b:6c:bf:6a:f5:a3:00:5d:1d:8b:cf:59:96:65:76: 32:32:35:17:db:75:83:4b:eb:ba:21:0e:6a:20:58: 68:40:6d:40:7f:8f:f6:36:d1:c6:7c:f4:7d:44:4d: 80:98:3e:09:83:2f:ce:78:d4:2b:c4:a7:5e:ab:46: 03:ad:d7:97:9b:c0:4f:8f:65:75:dd:81:ab:2d:11: 4d:3e:09:47:6f:5d:79:43:69:c6:6c:29:74:a0:0f: 35:ce:a1:5e:af:98:81:6b:8b:d4:04:18:86:61:d8: 4e:07:d1:d3:41:ef:54:32:44:f7:90:bd:ba:21:ff: 46:27:3c:21:91:ee:fb:2c:e1:66:dc:ab:39:fb:9f: da:ff:72:ad:dc:80:38:76:6f:4b:ac:68:d2:c3:d1: ec:8a:d5:61:c0:f4:ff:c5:4a:ad:84:16:5c:09:b5: bd:4f:94:e2:a3:7c:0e:cf:1b:c4:37:4c:5b:fd:83: 86:5f:cc:c1:88:ca:40:a6:c1:a9:95:cd:01:ed:f6: a2:33:2a:b3:0b:58:a4:fd:9a:6f:ad:b9:2a:b4:a3: 4c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:74:F4:75:91:DE:76:E7:E4:FB:09:44:60:8C:7A:14:EC:4B:08:18 X509v3 Authority Key Identifier: keyid:4E:21:F5:AA:8C:92:8C:0B:67:57:C0:3E:55:B0:A5:92:3C:4E:48:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/TiH1qoySjAtnV8A-VbClkjxOSKs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TiH1qoySjAtnV8A-VbClkjxOSKs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180D79/E18208BC6D9C11EEA02BBB0EC4F9AE02/F97DB5F229A111F090BC8163C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.77.139.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:b8:04:59:bc:07:03:7c:a6:94:60:8c:1c:6c:0f:76:96:a9: 34:50:8a:4a:9a:c9:7f:8f:48:38:d8:8d:77:bf:81:1c:5e:95: 0a:30:c9:94:ae:64:d6:71:6b:ec:64:5e:d0:4b:58:d8:7e:53: 65:cf:33:d7:cb:6d:cd:4f:c3:97:25:46:3f:0e:0e:ca:49:63: 02:0f:c4:11:7b:01:8f:5b:2d:3a:a0:70:a1:8a:1e:9e:8b:7d: 28:78:43:ae:b4:e9:79:07:ca:05:38:25:91:be:3a:ff:a2:d6: 37:f3:d6:8a:30:c8:22:05:73:03:b0:5f:a7:02:b6:ae:f4:f0: 0f:b2:f1:7e:91:13:3c:77:65:d2:cd:a2:e5:5c:d4:17:58:d0: f0:11:0a:39:0f:65:f1:cc:44:d6:c1:f0:4a:8b:1a:87:db:f3: 7a:69:e3:e6:99:28:f5:e9:95:5b:69:68:e7:d1:d4:a2:18:b7: a6:1f:eb:a1:c9:08:c5:5f:35:f9:ac:64:d9:66:56:09:ab:50: ab:66:03:77:b8:5d:6f:a6:f4:4b:41:3c:46:a4:f5:19:6f:be: ab:2d:78:0c:b8:a6:40:ff:7e:20:e8:bb:7b:d2:73:b8:e0:5a: 80:38:49:78:a6:36:42:d2:6b:c5:eb:f4:78:6c:46:c1:e3:b2: a1:1b:3e:10 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODBENzkxMTAvBgNVBAUTKDRFMjFGNUFBOEM5MjhDMEI2NzU3QzAzRTU1QjBBNTky M0M0RTQ4QUIwHhcNMjUwNTA1MTExMzMwWhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODE4OWQ1YS0zNzExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6n3XkOb003uSSq96sa2heREhwamDbEkcXARymggIGP5bAha7YxX8Gswz6+V7 bL9q9aMAXR2Lz1mWZXYyMjUX23WDS+u6IQ5qIFhoQG1Af4/2NtHGfPR9RE2AmD4J gy/OeNQrxKdeq0YDrdeXm8BPj2V13YGrLRFNPglHb115Q2nGbCl0oA81zqFer5iB a4vUBBiGYdhOB9HTQe9UMkT3kL26If9GJzwhke77LOFm3Ks5+5/a/3Kt3IA4dm9L rGjSw9HsitVhwPT/xUqthBZcCbW9T5Tio3wOzxvEN0xb/YOGX8zBiMpApsGplc0B 7faiMyqzC1ik/ZpvrbkqtKNMfQIDAQABo4IClTCCApEwHQYDVR0OBBYEFAR09HWR 3nbn5PsJRGCMehTsSwgYMB8GA1UdIwQYMBaAFE4h9aqMkowLZ1fAPlWwpZI8Tkir MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MEQ3OS9FMTgyMDhCQzZE OUMxMUVFQTAyQkJCMEVDNEY5QUUwMi9UaUgxcW95U2pBdG5WOEEtVmJDbGtqeE9T S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RpSDFxb3lTakF0blY4QS1WYkNsa2p4T1NLcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODBENzkvRTE4MjA4QkM2RDlDMTFFRUEwMkJCQjBFQzRGOUFFMDIvRjk3REI1RjIy OUExMTFGMDkwQkM4MTYzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADKTYswDQYJKoZIhvcNAQELBQADggEBAF+4BFm8BwN8ppRg jBxsD3aWqTRQikqayX+PSDjYjXe/gRxelQowyZSuZNZxa+xkXtBLWNh+U2XPM9fL bc1Pw5clRj8ODspJYwIPxBF7AY9bLTqgcKGKHp6LfSh4Q6606XkHygU4JZG+Ov+i 1jfz1oowyCIFcwOwX6cCtq708A+y8X6REzx3ZdLNouVc1BdY0PARCjkPZfHMRNbB 8EqLGofb83pp4+aZKPXplVtpaOfR1KIYt6Yf66HJCMVfNfmsZNlmVgmrUKtmA3e4 XW+m9EtBPEak9RlvvqsteAy4pkD/fiDou3vSc7jgWoA4SXimNkLSa8Xr9HhsRsHj sqEbPhA= -----END CERTIFICATE-----Generated at Mon May 12 19:28:31 2025 by rpki-client