$ rpki-client -vvf rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/7E2725DAAC7611EAB766A74CC4F9AE02.roa File: 7E2725DAAC7611EAB766A74CC4F9AE02.roa (raw, json) Hash identifier: pRnYMFn3MsmdKZMCcupGBS8xip66wFsc4Vhu+CVQM8s= Subject key identifier: 32:F2:24:F5:3A:14:66:EC:C8:ED:76:0A:3F:CA:F6:0C:88:ED:D6:E4 Certificate issuer: /CN=A918495F/serialNumber=90C22F7393850E8ECF6B5F1E320D07B2D1ACD8FD Certificate serial: 17D3 Authority key identifier: 90:C2:2F:73:93:85:0E:8E:CF:6B:5F:1E:32:0D:07:B2:D1:AC:D8:FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/7E2725DAAC7611EAB766A74CC4F9AE02.roa Signing time: Thu 08 May 2025 17:17:46 +0000 ROA not before: Thu 08 May 2025 17:17:46 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 19905 IP address blocks: 219.76.7.0/24 maxlen: 24 219.76.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.crl rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 16:31:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6099 (0x17d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918495F, serialNumber=90C22F7393850E8ECF6B5F1E320D07B2D1ACD8FD Validity Not Before: May 8 17:17:46 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=681ce739-5383 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:93:29:94:0c:d1:13:be:ce:e1:cf:46:02:b6: fa:5f:27:45:b9:5c:76:40:61:9f:c9:bd:42:95:4a: 19:9f:12:d3:46:ce:45:c2:c5:36:c2:c9:25:61:0d: df:69:aa:fb:d2:52:5b:47:7a:da:d2:b5:9b:d7:2c: 2f:64:2a:45:d3:a9:c9:03:94:3f:07:ba:d9:8c:b5: 2a:74:41:f0:ab:15:5a:27:2d:bc:6a:e5:5b:20:71: 21:b7:1a:f5:f2:b0:41:e2:51:22:11:a0:1c:3d:fd: 39:8e:80:85:01:5c:fa:d1:1e:3e:c0:c2:d0:46:dd: 3a:d5:71:95:df:e6:df:be:37:70:8a:01:bd:72:fb: 34:70:41:52:e3:39:92:dd:14:a1:6f:82:3d:56:62: 5f:5c:91:5f:00:c8:78:fe:28:70:64:bd:4f:5e:11: 4f:ef:34:b7:c4:59:34:83:58:cf:1a:a9:c5:bc:ee: 30:4a:9d:d2:75:02:6a:c2:62:63:56:e3:7a:a9:9b: a3:7f:8f:d5:cd:29:18:1b:77:52:b3:62:12:7b:af: 98:45:d5:e5:d7:3b:a8:ce:8e:d9:d3:77:fe:95:77: 0a:49:01:65:34:c0:6e:3a:91:c2:c0:0c:e5:13:75: 4e:44:f5:b6:c0:9a:5a:b4:2c:91:f3:0e:45:05:1d: 9d:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:F2:24:F5:3A:14:66:EC:C8:ED:76:0A:3F:CA:F6:0C:88:ED:D6:E4 X509v3 Authority Key Identifier: keyid:90:C2:2F:73:93:85:0E:8E:CF:6B:5F:1E:32:0D:07:B2:D1:AC:D8:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/7E2725DAAC7611EAB766A74CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.76.7.0/24 219.76.111.0/24 Signature Algorithm: sha256WithRSAEncryption 37:35:9a:ab:8b:4a:cb:d7:7f:cf:2b:c9:f9:e8:bb:68:22:70: d6:74:16:69:4c:49:b8:89:ff:b8:7c:d6:ea:03:ad:05:2b:88: bd:2b:a2:48:6f:c7:c9:0d:33:1f:e5:f3:df:f0:02:97:31:3e: f5:15:62:a6:2c:bd:ec:af:dd:cb:45:1b:4e:16:33:89:74:cd: 89:49:04:98:55:e4:6e:ff:45:48:6a:94:75:6a:ab:57:37:e9: ca:0b:83:0a:e7:c7:37:47:04:11:83:47:94:92:90:cc:f1:d0: fa:29:44:17:c4:46:a5:e7:5e:cf:bc:e9:5e:37:33:62:7e:96: 50:5a:44:7a:89:f3:4b:45:08:5b:6d:69:c2:4e:39:6b:0c:f0: 20:bf:28:24:87:00:ca:14:1c:73:a8:59:ec:22:41:67:8e:0d: 03:71:b9:4b:67:d2:d0:ce:aa:57:61:97:b4:1e:eb:c2:da:55: 66:b4:3e:f8:c5:8d:cc:52:48:b9:48:3f:ca:5a:85:09:0c:fb: 12:89:50:7f:9d:6e:ca:ab:47:9c:9d:a2:a7:59:96:44:23:67: 23:f4:8f:3e:de:e2:da:90:b7:77:53:ed:45:4a:34:d5:eb:bc: df:4f:d1:56:4b:66:87:b0:4f:26:00:43:86:a4:d5:fe:76:20: b0:f8:9b:59 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICF9MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ5NUYxMTAvBgNVBAUTKDkwQzIyRjczOTM4NTBFOEVDRjZCNUYxRTMyMEQwN0Iy RDFBQ0Q4RkQwHhcNMjUwNTA4MTcxNzQ2WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFjZTczOS01MzgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuJMplAzRE77O4c9GArb6XydFuVx2QGGfyb1ClUoZnxLTRs5FwsU2wsklYQ3f aar70lJbR3ra0rWb1ywvZCpF06nJA5Q/B7rZjLUqdEHwqxVaJy28auVbIHEhtxr1 8rBB4lEiEaAcPf05joCFAVz60R4+wMLQRt061XGV3+bfvjdwigG9cvs0cEFS4zmS 3RShb4I9VmJfXJFfAMh4/ihwZL1PXhFP7zS3xFk0g1jPGqnFvO4wSp3SdQJqwmJj VuN6qZujf4/VzSkYG3dSs2ISe6+YRdXl1zuozo7Z03f+lXcKSQFlNMBuOpHCwAzl E3VORPW2wJpatCyR8w5FBR2diQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFDLyJPU6 FGbsyO12Cj/K9gyI7dbkMB8GA1UdIwQYMBaAFJDCL3OThQ6Oz2tfHjINB7LRrNj9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDk1Ri84NDhDODU3Q0RG RUMxMUU3QTI3QTIyMTNDNEY5QUUwMi9rTUl2YzVPRkRvN1BhMThlTWcwSHN0R3My UDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tNSXZjNU9GRG83UGExOGVNZzBIc3RHczJQMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODQ5NUYvODQ4Qzg1N0NERkVDMTFFN0EyN0EyMjEzQzRGOUFFMDIvN0UyNzI1REFB Qzc2MTFFQUI3NjZBNzRDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBADbTAcDBADbTG8wDQYJKoZIhvcNAQELBQADggEBADc1mquL SsvXf88ryfnou2gicNZ0FmlMSbiJ/7h81uoDrQUriL0rokhvx8kNMx/l89/wApcx PvUVYqYsveyv3ctFG04WM4l0zYlJBJhV5G7/RUhqlHVqq1c36coLgwrnxzdHBBGD R5SSkMzx0PopRBfERqXnXs+86V43M2J+llBaRHqJ80tFCFttacJOOWsM8CC/KCSH AMoUHHOoWewiQWeODQNxuUtn0tDOqldhl7Qe68LaVWa0PvjFjcxSSLlIP8pahQkM +xKJUH+dbsqrR5ydoqdZlkQjZyP0jz7e4tqQt3dT7UVKNNXrvN9P0VZLZoewTyYA Q4ak1f52ILD4m1k= -----END CERTIFICATE-----Generated at Sun May 11 16:56:42 2025 by rpki-client