$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/5ECF5AFE37CC11F0AE950A5FC4F9AE02.roa File: 5ECF5AFE37CC11F0AE950A5FC4F9AE02.roa (raw, json) Hash identifier: npjQiEYYdVjWG8dKeFVFQ6M5ppQB2z0yEbCwP4ngirc= Subject key identifier: 44:C0:EA:2A:48:79:32:26:44:E8:E5:26:35:BE:28:67:4B:EC:19:FD Certificate issuer: /CN=A91BF312/serialNumber=F0297D0E4531A1D62A95AF5D2F22EF2408DAD29C Certificate serial: 07B0 Authority key identifier: F0:29:7D:0E:45:31:A1:D6:2A:95:AF:5D:2F:22:EF:24:08:DA:D2:9C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Cl9DkUxodYqla9dLyLvJAja0pw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/5ECF5AFE37CC11F0AE950A5FC4F9AE02.roa Signing time: Fri 20 Jun 2025 06:23:18 +0000 ROA not before: Fri 20 Jun 2025 06:23:18 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 40605 IP address blocks: 139.5.178.0/24 maxlen: 24 139.5.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.crl rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Cl9DkUxodYqla9dLyLvJAja0pw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 21:34:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1968 (0x7b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF312, serialNumber=F0297D0E4531A1D62A95AF5D2F22EF2408DAD29C Validity Not Before: Jun 20 06:23:18 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6854fe55-33b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9c:09:a4:b0:8f:97:12:6c:3a:24:9a:06:df: 83:d3:f3:6a:78:cb:64:ea:53:fd:87:84:a7:f5:b6: 2e:6e:76:1c:8f:7a:ed:30:b5:d3:41:ff:b1:82:0a: 5b:43:3a:d5:6b:42:1d:7b:73:3e:7a:44:af:ea:15: 56:7e:91:1b:31:8a:f3:84:17:8e:8f:a4:93:22:71: 30:43:d3:f7:a1:f1:5f:fd:79:d9:f5:fd:2b:97:36: 8f:df:8e:a3:d5:7d:fa:9d:03:48:7e:fd:5e:ca:c2: a6:6d:78:9e:ce:48:2c:14:26:e2:7f:ca:b4:bf:31: cf:f2:98:26:df:cb:88:6b:c8:46:97:40:d1:23:cd: 7e:98:4b:54:e3:e5:d8:43:64:6a:ab:cb:dc:c8:53: 4e:82:f9:ed:3e:1d:77:3e:df:03:00:fb:43:7b:d8: 53:51:c4:4f:8f:d4:ad:ca:21:99:8c:ce:26:61:d9: f8:fb:4a:92:86:8e:95:b5:d2:06:86:89:1f:7a:62: 71:ea:ff:78:c7:97:a7:94:0a:9d:d8:e7:84:28:8d: e1:ae:dc:68:96:ab:e7:3d:8d:b8:97:22:f2:6c:23: 4a:cf:c9:02:fe:f6:a9:12:86:e3:6b:37:c3:e0:00: ff:c0:5b:d9:4f:41:07:03:0a:84:1d:f7:6c:22:c3: f4:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:C0:EA:2A:48:79:32:26:44:E8:E5:26:35:BE:28:67:4B:EC:19:FD X509v3 Authority Key Identifier: keyid:F0:29:7D:0E:45:31:A1:D6:2A:95:AF:5D:2F:22:EF:24:08:DA:D2:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Cl9DkUxodYqla9dLyLvJAja0pw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/5ECF5AFE37CC11F0AE950A5FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 139.5.178.0/23 Signature Algorithm: sha256WithRSAEncryption 66:3f:0a:68:73:df:b5:aa:32:e7:c7:da:d7:d1:51:56:cc:b4: ae:c6:36:f2:3e:6c:14:ed:9f:d9:bb:3a:01:fa:2f:72:7c:d0: 0d:93:30:20:5b:f6:58:66:af:01:8a:59:4c:1a:9d:2a:f2:3d: 69:65:46:67:f5:b5:2f:98:a2:29:c6:12:ad:cd:6d:74:83:57: fc:a0:26:8e:4b:4a:5f:27:1f:5b:bf:d2:df:df:0c:d5:a4:19: 71:ee:00:70:fd:88:43:96:88:ee:3b:d3:46:28:0d:27:e7:3b: 85:01:39:bb:b9:fe:fa:10:9d:92:24:4a:79:c3:69:e7:95:5e: 54:9d:30:d3:d0:d0:60:12:62:69:35:d0:41:e6:a6:b3:f7:da: 00:23:92:f6:22:ea:45:e5:27:ac:9b:38:36:91:71:98:a9:e1: 95:00:da:76:8b:1b:17:89:ef:bd:df:5c:da:63:db:82:03:95: fd:65:f4:fb:5e:5a:26:e7:8d:00:f3:ec:01:0f:b7:97:d2:db: a5:d3:f6:c9:99:17:e1:0c:5b:dd:c8:f9:b6:c4:2c:9b:1c:5b: 2d:00:46:22:13:ec:f1:80:95:b7:dd:35:86:ac:63:5b:45:dd: 0c:3d:67:a4:7c:09:7a:a2:bd:5c:56:72:48:81:8b:af:71:ab: 11:05:80:45 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB7AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkYzMTIxMTAvBgNVBAUTKEYwMjk3RDBFNDUzMUExRDYyQTk1QUY1RDJGMjJFRjI0 MDhEQUQyOUMwHhcNMjUwNjIwMDYyMzE4WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODU0ZmU1NS0zM2IzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw5wJpLCPlxJsOiSaBt+D0/NqeMtk6lP9h4Sn9bYubnYcj3rtMLXTQf+xggpb QzrVa0Ide3M+ekSv6hVWfpEbMYrzhBeOj6STInEwQ9P3ofFf/XnZ9f0rlzaP346j 1X36nQNIfv1eysKmbXiezkgsFCbif8q0vzHP8pgm38uIa8hGl0DRI81+mEtU4+XY Q2Rqq8vcyFNOgvntPh13Pt8DAPtDe9hTUcRPj9StyiGZjM4mYdn4+0qSho6VtdIG hokfemJx6v94x5enlAqd2OeEKI3hrtxolqvnPY24lyLybCNKz8kC/vapEobjazfD 4AD/wFvZT0EHAwqEHfdsIsP0AwIDAQABo4IClTCCApEwHQYDVR0OBBYEFETA6ipI eTImROjlJjW+KGdL7Bn9MB8GA1UdIwQYMBaAFPApfQ5FMaHWKpWvXS8i7yQI2tKc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjMxMi9BQTkyQjk3ODBD MjkxMUVCOTU0MERENjFDNEY5QUUwMi84Q2w5RGtVeG9kWXFsYTlkTHlMdkpBamEw cHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhDbDlEa1V4b2RZcWxhOWRMeUx2SkFqYTBwdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkYzMTIvQUE5MkI5NzgwQzI5MTFFQjk1NDBERDYxQzRGOUFFMDIvNUVDRjVBRkUz N0NDMTFGMEFFOTUwQTVGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGLBbIwDQYJKoZIhvcNAQELBQADggEBAGY/Cmhz37WqMufH 2tfRUVbMtK7GNvI+bBTtn9m7OgH6L3J80A2TMCBb9lhmrwGKWUwanSryPWllRmf1 tS+YoinGEq3NbXSDV/ygJo5LSl8nH1u/0t/fDNWkGXHuAHD9iEOWiO4700YoDSfn O4UBObu5/voQnZIkSnnDaeeVXlSdMNPQ0GASYmk10EHmprP32gAjkvYi6kXlJ6yb ODaRcZip4ZUA2naLGxeJ773fXNpj24IDlf1l9PteWibnjQDz7AEPt5fS26XT9smZ F+EMW93I+bbELJscWy0ARiIT7PGAlbfdNYasY1tF3Qw9Z6R8CXqivVxWckiBi69x qxEFgEU= -----END CERTIFICATE-----Generated at Thu Jul 3 07:31:36 2025 by rpki-client