$ rpki-client -vvf rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/125E6676E15B11ECA05C9236C4F9AE02.roa File: 125E6676E15B11ECA05C9236C4F9AE02.roa (raw, json) Hash identifier: dSI8zY9bytp5eBJksSVe4bOFa/6h1+FUTuMvCdJDftM= Subject key identifier: 31:12:A2:A0:14:72:8B:8E:85:7C:89:97:13:E2:97:77:CA:5A:D9:F8 Certificate issuer: /CN=A91853D3/serialNumber=4E1B840F5C66016CED7E62EEC61B8322A321B6B6 Certificate serial: 053D Authority key identifier: 4E:1B:84:0F:5C:66:01:6C:ED:7E:62:EE:C6:1B:83:22:A3:21:B6:B6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/125E6676E15B11ECA05C9236C4F9AE02.roa Signing time: Tue 06 May 2025 23:33:37 +0000 ROA not before: Tue 06 May 2025 23:33:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 2697 IP address blocks: 144.16.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.crl rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 23:37:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1341 (0x53d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91853D3, serialNumber=4E1B840F5C66016CED7E62EEC61B8322A321B6B6 Validity Not Before: May 6 23:33:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681a9c50-6ea3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:15:16:be:3b:db:a5:5d:b9:8e:42:0e:c3:d2: 93:f9:a2:b1:d9:5c:02:de:75:f3:6c:d9:06:a1:6f: 9c:13:bc:8d:91:87:f1:0a:dd:7b:eb:ce:ae:aa:a3: e9:11:5e:49:43:c2:8f:98:6a:d5:39:96:3b:09:00: de:f8:45:38:da:67:51:be:c2:c8:b7:20:d0:ce:6c: 22:2a:4b:a8:e2:69:c8:14:3c:a1:b0:ce:9b:9e:73: 22:2b:78:73:5a:94:3b:28:0c:95:b6:e7:08:4a:fb: 79:dc:96:dc:b7:3c:d9:e4:03:5d:72:ce:b7:12:43: 9f:02:85:77:7e:21:d9:47:32:bf:eb:b3:72:64:1e: 38:6a:cd:c1:c6:f4:26:2d:56:01:8e:60:9c:5c:92: 6f:85:4b:6c:a7:7e:88:42:6f:ab:ba:0b:8f:6d:35: 04:e6:c7:7d:da:aa:8d:1a:24:29:ae:ce:d4:cc:eb: 6d:ce:e8:c2:32:b8:07:4b:5f:13:88:2c:b8:85:9e: aa:87:70:e4:bd:c5:3c:61:81:4e:ff:24:a0:de:9b: 78:39:40:3d:ec:eb:be:ff:65:34:1b:74:b3:90:f2: 59:ed:5d:ea:bf:f2:71:1a:f0:a7:3c:02:50:28:f4: bd:91:c9:f1:62:3d:5c:26:b5:7a:e8:10:7c:90:04: 75:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:12:A2:A0:14:72:8B:8E:85:7C:89:97:13:E2:97:77:CA:5A:D9:F8 X509v3 Authority Key Identifier: keyid:4E:1B:84:0F:5C:66:01:6C:ED:7E:62:EE:C6:1B:83:22:A3:21:B6:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/125E6676E15B11ECA05C9236C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 144.16.0.0/16 Signature Algorithm: sha256WithRSAEncryption 64:e1:8e:2a:57:bd:ee:ca:2d:b1:6c:68:43:3d:c9:9b:1f:98: f6:9c:79:51:4f:a0:b6:9b:49:81:4f:ad:cc:6b:b0:5c:1a:48: c4:90:7a:68:ca:7a:b0:b7:80:e3:75:9c:5b:6f:53:dc:c3:26: d3:60:2e:51:0a:a8:c6:13:2c:32:ff:9f:bf:72:8b:ce:8d:9f: 84:09:02:82:fb:01:32:62:2e:10:47:ce:0d:de:de:17:dd:c3: 0e:e1:dc:b3:84:01:8d:4f:f3:d0:ce:32:63:98:50:e8:29:88: b7:b4:ac:3e:47:41:35:2d:38:2b:cf:47:2c:e9:09:1b:74:79: 13:c0:b4:b9:11:8a:c7:c4:98:ae:5d:e5:d7:e3:5f:60:dd:e1: f4:d7:f6:11:7a:80:47:c0:b5:80:78:fa:25:ab:bc:72:df:bb: b5:b6:b9:7b:ff:36:6a:4d:86:97:eb:a3:60:e2:e6:4c:6a:e2: 0c:d7:0a:f9:22:5c:91:9e:48:82:7e:d8:f3:95:06:ab:c3:c5: 68:6d:16:e4:32:eb:42:54:14:44:0e:65:1f:32:30:93:ef:10: 0e:d0:a1:e6:5b:a4:7c:e3:ef:84:d8:fb:73:e5:87:92:1e:0b: a6:f7:03:03:4b:5e:14:f9:58:a1:fe:57:d6:ee:d2:b1:0c:1b: 60:fd:2e:e7 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgICBT0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODUzRDMxMTAvBgNVBAUTKDRFMUI4NDBGNUM2NjAxNkNFRDdFNjJFRUM2MUI4MzIy QTMyMUI2QjYwHhcNMjUwNTA2MjMzMzM3WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFhOWM1MC02ZWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1RUWvjvbpV25jkIOw9KT+aKx2VwC3nXzbNkGoW+cE7yNkYfxCt17686uqqPp EV5JQ8KPmGrVOZY7CQDe+EU42mdRvsLItyDQzmwiKkuo4mnIFDyhsM6bnnMiK3hz WpQ7KAyVtucISvt53JbctzzZ5ANdcs63EkOfAoV3fiHZRzK/67NyZB44as3BxvQm LVYBjmCcXJJvhUtsp36IQm+ruguPbTUE5sd92qqNGiQprs7UzOttzujCMrgHS18T iCy4hZ6qh3DkvcU8YYFO/ySg3pt4OUA97Ou+/2U0G3SzkPJZ7V3qv/JxGvCnPAJQ KPS9kcnxYj1cJrV66BB8kAR13QIDAQABo4IClDCCApAwHQYDVR0OBBYEFDESoqAU couOhXyJlxPil3fKWtn4MB8GA1UdIwQYMBaAFE4bhA9cZgFs7X5i7sYbgyKjIba2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTNEMy82NDgyREI3QzAw MEExMUVDOEMyODcyNTJDNEY5QUUwMi9UaHVFRDF4bUFXenRmbUx1eGh1RElxTWh0 clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RodUVEMXhtQVd6dGZtTHV4aHVESXFNaHRyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODUzRDMvNjQ4MkRCN0MwMDBBMTFFQzhDMjg3MjUyQzRGOUFFMDIvMTI1RTY2NzZF MTVCMTFFQ0EwNUM5MjM2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8E DzANMAsEAgABMAUDAwCQEDANBgkqhkiG9w0BAQsFAAOCAQEAZOGOKle97sotsWxo Qz3Jmx+Y9px5UU+gtptJgU+tzGuwXBpIxJB6aMp6sLeA43WcW29T3MMm02AuUQqo xhMsMv+fv3KLzo2fhAkCgvsBMmIuEEfODd7eF93DDuHcs4QBjU/z0M4yY5hQ6CmI t7SsPkdBNS04K89HLOkJG3R5E8C0uRGKx8SYrl3l1+NfYN3h9Nf2EXqAR8C1gHj6 Jau8ct+7tba5e/82ak2Gl+ujYOLmTGriDNcK+SJckZ5Ign7Y85UGq8PFaG0W5DLr QlQURA5lHzIwk+8QDtCh5lukfOPvhNj7c+WHkh4LpvcDA0teFPlYof5X1u7SsQwb YP0u5w== -----END CERTIFICATE-----Generated at Thu May 15 19:06:56 2025 by rpki-client