$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/BFDC8CE68AAB11EF93DB792CC4F9AE02.roa File: BFDC8CE68AAB11EF93DB792CC4F9AE02.roa (raw, json) Hash identifier: CMKFuI+fT2TiVZX5THndiqiuzXOq1BiaXeo9ex4urp8= Subject key identifier: 96:58:80:50:4B:E2:65:13:04:E6:66:FF:75:7A:96:34:44:08:A5:26 Certificate issuer: /CN=A919536C/serialNumber=71F40218C1AF47C5E993A21A2B29284E4C32C934 Certificate serial: 01B4 Authority key identifier: 71:F4:02:18:C1:AF:47:C5:E9:93:A2:1A:2B:29:28:4E:4C:32:C9:34 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/BFDC8CE68AAB11EF93DB792CC4F9AE02.roa Signing time: Mon 23 Jun 2025 03:22:06 +0000 ROA not before: Mon 23 Jun 2025 03:22:06 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 18256 IP address blocks: 87.124.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 436 (0x1b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919536C, serialNumber=71F40218C1AF47C5E993A21A2B29284E4C32C934 Validity Not Before: Jun 23 03:22:06 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=6858c85e-a582 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:76:eb:28:e0:ee:19:23:b9:ce:26:77:c5:4c: 5f:40:d4:d9:92:cf:12:83:b5:4d:0a:2a:ae:f3:b5: 5e:02:2d:d0:02:b3:2e:48:e3:62:bd:9f:11:5f:7f: ec:9e:ce:14:2c:bb:dc:b1:32:c8:37:79:82:bb:f1: bb:9a:dc:fc:85:01:6f:dd:6f:9a:46:04:92:29:84: 2b:85:55:7a:12:fd:72:5a:1b:0d:d7:f9:0c:09:f6: 20:63:2e:10:fb:e6:86:a9:68:67:b8:52:7d:f0:89: 87:3b:c0:40:07:8c:34:cc:1a:5c:c7:1e:7c:6a:86: 5e:0b:34:e5:86:e3:ec:05:9e:4c:20:cb:03:2c:f1: 62:f3:9c:0d:bf:73:8e:16:b7:38:93:9f:3f:48:47: 33:20:0a:e9:3d:27:b8:47:1d:97:95:0d:40:32:df: a2:0d:a7:34:69:58:8a:8d:7a:f1:50:e0:79:d6:ec: 6f:57:88:92:3c:cb:0a:ef:bb:0e:87:3d:10:2c:34: 50:91:4f:37:f8:69:f7:88:6e:95:9d:ed:49:32:52: 68:f4:bb:db:d2:08:91:79:06:c6:97:2b:06:dc:b9: fa:40:65:06:23:0c:e2:a6:75:1e:c2:bb:b1:a6:49: 60:41:9d:8d:67:28:a8:71:52:bd:a9:ba:1a:9d:7d: 3f:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:58:80:50:4B:E2:65:13:04:E6:66:FF:75:7A:96:34:44:08:A5:26 X509v3 Authority Key Identifier: keyid:71:F4:02:18:C1:AF:47:C5:E9:93:A2:1A:2B:29:28:4E:4C:32:C9:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/BFDC8CE68AAB11EF93DB792CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 87.124.71.0/24 Signature Algorithm: sha256WithRSAEncryption 89:10:f0:7c:84:6b:a7:9c:28:ee:36:07:75:71:b0:f0:ea:d9: 0c:0f:23:f3:b9:f1:b3:3e:53:99:6d:d7:c3:de:6b:f8:15:34: 57:a5:33:4e:89:67:b1:b3:13:e0:0b:40:db:48:aa:c7:8e:ca: 4a:10:61:7e:c3:1d:05:ca:4a:19:a9:98:34:08:dd:36:5f:c4: 43:c3:09:ae:f8:a7:02:5c:f9:1c:44:d9:79:b4:74:d3:9f:28: 5c:e0:bd:6f:52:db:2f:95:e3:4c:45:e0:6d:d0:f7:c0:c0:13: fd:05:dd:b1:fc:90:be:7c:e4:68:56:74:80:85:16:62:14:23: 6b:db:d6:5a:1c:63:d7:e9:64:7e:56:37:5b:17:c9:2e:57:fb: 29:35:aa:24:6a:ea:88:b0:87:17:f0:55:53:24:25:d9:ec:c9: a9:ce:0f:a1:80:2b:dc:35:0a:16:2f:70:6d:1b:4b:53:5f:69: 61:2e:97:e9:40:79:ea:70:2a:8e:0a:f2:45:b8:53:c6:6f:db: 62:2f:5e:17:76:1f:19:5a:65:51:02:42:1e:a6:db:eb:81:42: 38:d5:12:c5:8b:c4:4d:fd:83:56:79:7a:8f:b7:1b:37:07:56: 17:69:57:5e:92:e8:7e:2b:6f:dd:1e:b2:12:d3:3c:db:72:9b: b3:3c:b3:60 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTUzNkMxMTAvBgNVBAUTKDcxRjQwMjE4QzFBRjQ3QzVFOTkzQTIxQTJCMjkyODRF NEMzMkM5MzQwHhcNMjUwNjIzMDMyMjA2WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODU4Yzg1ZS1hNTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAznbrKODuGSO5ziZ3xUxfQNTZks8Sg7VNCiqu87VeAi3QArMuSONivZ8RX3/s ns4ULLvcsTLIN3mCu/G7mtz8hQFv3W+aRgSSKYQrhVV6Ev1yWhsN1/kMCfYgYy4Q ++aGqWhnuFJ98ImHO8BAB4w0zBpcxx58aoZeCzTlhuPsBZ5MIMsDLPFi85wNv3OO Frc4k58/SEczIArpPSe4Rx2XlQ1AMt+iDac0aViKjXrxUOB51uxvV4iSPMsK77sO hz0QLDRQkU83+Gn3iG6Vne1JMlJo9Lvb0giReQbGlysG3Ln6QGUGIwzipnUewrux pklgQZ2NZyiocVK9qboanX0/rwIDAQABo4IClTCCApEwHQYDVR0OBBYEFJZYgFBL 4mUTBOZm/3V6ljRECKUmMB8GA1UdIwQYMBaAFHH0AhjBr0fF6ZOiGispKE5MMsk0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTM2Qy82REUzQ0U3QzM2 NjAxMUVFODhFMEY1MzBDNEY5QUUwMi9jZlFDR01HdlI4WHBrNklhS3lrb1Rrd3l5 VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2NmUUNHTUd2UjhYcGs2SWFLeWtvVGt3eXlUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTUzNkMvNkRFM0NFN0MzNjYwMTFFRTg4RTBGNTMwQzRGOUFFMDIvQkZEQzhDRTY4 QUFCMTFFRjkzREI3OTJDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABXfEcwDQYJKoZIhvcNAQELBQADggEBAIkQ8HyEa6ecKO42 B3VxsPDq2QwPI/O58bM+U5lt18Pea/gVNFelM06JZ7GzE+ALQNtIqseOykoQYX7D HQXKShmpmDQI3TZfxEPDCa74pwJc+RxE2Xm0dNOfKFzgvW9S2y+V40xF4G3Q98DA E/0F3bH8kL585GhWdICFFmIUI2vb1locY9fpZH5WN1sXyS5X+yk1qiRq6oiwhxfw VVMkJdnsyanOD6GAK9w1ChYvcG0bS1NfaWEul+lAeepwKo4K8kW4U8Zv22IvXhd2 HxlaZVECQh6m2+uBQjjVEsWLxE39g1Z5eo+3GzcHVhdpV16S6H4rb90eshLTPNty m7M8s2A= -----END CERTIFICATE-----Generated at Fri Jul 4 08:26:42 2025 by rpki-client