$ rpki-client -vvf rpki.apnic.net/member_repository/A919DAF2/26EC6DDAD3DA11E58C5CD40FC4F9AE02/FF59EC70144911EFA2053B27C4F9AE02.roa File: FF59EC70144911EFA2053B27C4F9AE02.roa (raw, json) Hash identifier: 87Wd3ufHux4x6En79V3HJ0yy+yl6nx7Qh9e0Kc4SLtA= Subject key identifier: AE:9E:ED:D8:2F:AA:12:8E:3B:6C:C0:F4:BF:C4:18:34:F7:20:CB:6F Certificate issuer: /CN=A919DAF2/serialNumber=139CC1DB6B9D24B93B14928A7518D04EB3B26A3A Certificate serial: 21FC Authority key identifier: 13:9C:C1:DB:6B:9D:24:B9:3B:14:92:8A:75:18:D0:4E:B3:B2:6A:3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E5zB22udJLk7FJKKdRjQTrOyajo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DAF2/26EC6DDAD3DA11E58C5CD40FC4F9AE02/FF59EC70144911EFA2053B27C4F9AE02.roa Signing time: Tue 06 May 2025 16:23:36 +0000 ROA not before: Tue 06 May 2025 16:23:36 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 151815 IP address blocks: 202.134.176.0/24 maxlen: 24 202.134.177.0/24 maxlen: 24 202.134.178.0/24 maxlen: 24 202.134.179.0/24 maxlen: 24 202.134.180.0/24 maxlen: 24 202.134.181.0/24 maxlen: 24 202.134.182.0/24 maxlen: 24 202.134.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DAF2/26EC6DDAD3DA11E58C5CD40FC4F9AE02/E5zB22udJLk7FJKKdRjQTrOyajo.crl rsync://rpki.apnic.net/member_repository/A919DAF2/26EC6DDAD3DA11E58C5CD40FC4F9AE02/E5zB22udJLk7FJKKdRjQTrOyajo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E5zB22udJLk7FJKKdRjQTrOyajo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 15:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8700 (0x21fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DAF2, serialNumber=139CC1DB6B9D24B93B14928A7518D04EB3B26A3A Validity Not Before: May 6 16:23:36 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681a3788-71b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6a:1e:d6:ea:8d:89:46:5c:01:12:1a:72:03: d8:0e:0a:32:69:7b:4f:05:5e:ef:98:8b:db:78:31: 72:33:e9:a5:61:d7:fe:7a:dd:97:f9:f0:a6:b7:9f: e0:9a:bb:6d:26:55:1c:d7:0b:b2:0f:d7:b6:e8:3f: 2c:61:c9:82:f9:14:68:2b:10:e4:e7:ef:c7:bd:81: 92:b7:00:a1:b2:19:ec:e2:95:f8:ca:0a:9e:83:02: f6:30:1f:b7:6c:ad:f6:1d:31:40:82:99:fd:01:5d: 55:53:68:a1:19:c7:f5:eb:35:ad:ca:19:18:c3:5b: c3:1d:64:94:f5:67:05:f5:85:39:15:28:d0:0f:42: b0:ea:c7:68:d8:bd:c8:06:e1:30:91:55:f4:98:6f: 69:7e:6b:3d:f4:97:9b:d9:c3:fe:f8:9f:a2:35:08: 70:47:42:c0:67:68:68:70:9c:90:bb:60:ee:9a:81: 5d:66:22:8d:b5:aa:f1:2a:14:e8:90:50:f0:d1:fb: f0:23:6a:1c:ed:0d:af:d6:8c:16:e1:c1:cc:08:ab: c3:a7:8d:78:6d:e4:bd:b0:c7:f1:20:25:9c:e7:76: 69:58:25:a6:cc:fb:47:05:a5:c5:7b:dd:42:cb:bf: 8a:a4:6e:b9:0f:5b:e2:97:d8:68:1d:b1:1b:2e:e0: ae:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:9E:ED:D8:2F:AA:12:8E:3B:6C:C0:F4:BF:C4:18:34:F7:20:CB:6F X509v3 Authority Key Identifier: keyid:13:9C:C1:DB:6B:9D:24:B9:3B:14:92:8A:75:18:D0:4E:B3:B2:6A:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DAF2/26EC6DDAD3DA11E58C5CD40FC4F9AE02/E5zB22udJLk7FJKKdRjQTrOyajo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E5zB22udJLk7FJKKdRjQTrOyajo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DAF2/26EC6DDAD3DA11E58C5CD40FC4F9AE02/FF59EC70144911EFA2053B27C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.134.176.0/21 Signature Algorithm: sha256WithRSAEncryption 1d:1a:ec:64:01:d2:c1:4e:31:92:c5:99:b2:ed:48:ba:7c:06: 36:d9:84:c2:cc:0d:90:ce:f0:9d:85:d5:f9:e4:aa:55:e8:ec: e2:35:c7:10:32:55:92:7b:95:5d:b5:00:18:04:3a:50:dd:98: 60:7f:55:db:0c:54:dc:c8:ca:ea:48:8a:27:aa:99:7d:d4:4f: e9:81:48:0e:25:a9:1b:3e:d0:7f:84:fc:0b:1c:d7:8a:5e:87: a8:3d:cb:01:d2:a9:43:50:e4:26:c4:7f:35:39:a7:5f:17:c0: 4a:9e:ef:d5:62:ad:01:06:c0:e9:04:05:33:72:2e:3d:c0:50: 72:2d:0c:bf:90:98:82:79:79:8a:8a:39:a7:8a:4a:2f:e9:16: 33:65:52:b2:f2:59:9f:ad:d8:6f:75:32:57:79:c8:4f:0d:0c: 92:d1:11:fb:05:70:0a:a5:69:22:1b:e8:54:2d:ad:ad:93:66: 91:a0:30:e9:0c:78:fd:47:40:6c:70:c8:83:80:19:6a:14:f1: 74:d6:0e:38:38:2e:07:68:21:ce:51:ec:07:8c:b1:58:72:e6: da:b2:b9:45:81:06:4f:1f:af:52:b4:bd:27:2c:98:20:a5:08: e2:c6:0c:c6:2e:9d:26:07:3e:13:b6:75:47:67:e6:df:a2:5c: 4f:a6:21:eb -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICIfwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURBRjIxMTAvBgNVBAUTKDEzOUNDMURCNkI5RDI0QjkzQjE0OTI4QTc1MThEMDRF QjNCMjZBM0EwHhcNMjUwNTA2MTYyMzM2WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFhMzc4OC03MWI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsWoe1uqNiUZcARIacgPYDgoyaXtPBV7vmIvbeDFyM+mlYdf+et2X+fCmt5/g mrttJlUc1wuyD9e26D8sYcmC+RRoKxDk5+/HvYGStwChshns4pX4ygqegwL2MB+3 bK32HTFAgpn9AV1VU2ihGcf16zWtyhkYw1vDHWSU9WcF9YU5FSjQD0Kw6sdo2L3I BuEwkVX0mG9pfms99Jeb2cP++J+iNQhwR0LAZ2hocJyQu2DumoFdZiKNtarxKhTo kFDw0fvwI2oc7Q2v1owW4cHMCKvDp414beS9sMfxICWc53ZpWCWmzPtHBaXFe91C y7+KpG65D1vil9hoHbEbLuCufQIDAQABo4IClTCCApEwHQYDVR0OBBYEFK6e7dgv qhKOO2zA9L/EGDT3IMtvMB8GA1UdIwQYMBaAFBOcwdtrnSS5OxSSinUY0E6zsmo6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REFGMi8yNkVDNkREQUQz REExMUU1OEM1Q0Q0MEZDNEY5QUUwMi9FNXpCMjJ1ZEpMazdGSktLZFJqUVRyT3lh am8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U1ekIyMnVkSkxrN0ZKS0tkUmpRVHJPeWFqby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OURBRjIvMjZFQzZEREFEM0RBMTFFNThDNUNENDBGQzRGOUFFMDIvRkY1OUVDNzAx NDQ5MTFFRkEyMDUzQjI3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAPKhrAwDQYJKoZIhvcNAQELBQADggEBAB0a7GQB0sFOMZLF mbLtSLp8BjbZhMLMDZDO8J2F1fnkqlXo7OI1xxAyVZJ7lV21ABgEOlDdmGB/VdsM VNzIyupIiieqmX3UT+mBSA4lqRs+0H+E/Asc14peh6g9ywHSqUNQ5CbEfzU5p18X wEqe79VirQEGwOkEBTNyLj3AUHItDL+QmIJ5eYqKOaeKSi/pFjNlUrLyWZ+t2G91 Mld5yE8NDJLREfsFcAqlaSIb6FQtra2TZpGgMOkMeP1HQGxwyIOAGWoU8XTWDjg4 LgdoIc5R7AeMsVhy5tqyuUWBBk8fr1K0vScsmCClCOLGDMYunSYHPhO2dUdn5t+i XE+mIes= -----END CERTIFICATE-----Generated at Sun May 11 13:42:44 2025 by rpki-client