$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD281/FB4216E8F27011EF9BF8B535C4F9AE02/7CC6D634F27311EF9AAECC3CC4F9AE02.roa File: 7CC6D634F27311EF9AAECC3CC4F9AE02.roa (raw, json) Hash identifier: H0Gt6hkw2JpHPGPBgwlKru1+nCswYpwJdtuwdjPnKvk= Subject key identifier: AE:9A:81:9E:89:29:F5:09:2B:78:73:0C:8A:38:CD:EB:AC:EE:CC:BD Certificate issuer: /CN=A91CD281/serialNumber=74166668BE76B737576316E55D9E6439E671CF47 Certificate serial: 2E Authority key identifier: 74:16:66:68:BE:76:B7:37:57:63:16:E5:5D:9E:64:39:E6:71:CF:47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dBZmaL52tzdXYxblXZ5kOeZxz0c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD281/FB4216E8F27011EF9BF8B535C4F9AE02/7CC6D634F27311EF9AAECC3CC4F9AE02.roa Signing time: Thu 15 May 2025 07:36:44 +0000 ROA not before: Thu 15 May 2025 07:36:44 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 1221 IP address blocks: 203.29.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD281/FB4216E8F27011EF9BF8B535C4F9AE02/dBZmaL52tzdXYxblXZ5kOeZxz0c.crl rsync://rpki.apnic.net/member_repository/A91CD281/FB4216E8F27011EF9BF8B535C4F9AE02/dBZmaL52tzdXYxblXZ5kOeZxz0c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dBZmaL52tzdXYxblXZ5kOeZxz0c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 07:36:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD281, serialNumber=74166668BE76B737576316E55D9E6439E671CF47 Validity Not Before: May 15 07:36:44 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=6825998c-7da1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:0b:1a:24:d3:ea:0e:f6:cb:09:f6:f8:4e:d1: ca:b0:af:80:90:f3:4a:bf:ae:9b:16:42:18:d5:d7: dd:2c:aa:d4:39:0f:13:15:87:e5:75:38:82:2e:75: a0:6f:cc:c4:a9:b0:10:2f:42:d0:f6:2e:67:80:3d: d9:68:3f:89:e9:82:1d:da:53:df:a5:8f:68:3e:32: 89:ff:6f:94:25:58:b0:8e:a7:3c:5e:1c:37:dc:cb: 6e:c7:f8:77:3d:4c:f6:27:7e:37:fe:95:7f:a4:a6: 91:34:5a:77:fb:3c:1f:fa:9f:20:b2:48:e1:60:1b: f5:5b:2d:69:95:c4:d8:49:2b:b8:f6:5b:ca:b9:4c: e1:6c:76:3e:a2:92:50:04:67:d9:3c:7f:61:31:41: 14:1f:a6:82:23:68:31:2c:a1:4d:f9:05:75:f0:ce: 01:29:b8:38:5b:9f:de:73:a7:de:42:b2:37:87:8b: 00:65:07:6c:e5:56:fd:e4:a9:96:88:ad:0e:cd:9b: b7:8a:50:6b:71:ca:0a:4e:af:14:75:2d:fd:db:a5: 29:20:bf:f6:81:ee:22:57:e4:ac:de:32:10:4c:54: 62:42:6c:a2:23:41:fa:10:4a:a5:8f:2a:e6:dc:4e: dd:67:95:ff:73:cb:54:bc:01:eb:c2:19:52:ed:e8: 63:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:9A:81:9E:89:29:F5:09:2B:78:73:0C:8A:38:CD:EB:AC:EE:CC:BD X509v3 Authority Key Identifier: keyid:74:16:66:68:BE:76:B7:37:57:63:16:E5:5D:9E:64:39:E6:71:CF:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD281/FB4216E8F27011EF9BF8B535C4F9AE02/dBZmaL52tzdXYxblXZ5kOeZxz0c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dBZmaL52tzdXYxblXZ5kOeZxz0c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD281/FB4216E8F27011EF9BF8B535C4F9AE02/7CC6D634F27311EF9AAECC3CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.29.94.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:7e:41:76:88:75:28:c3:1e:14:7c:9c:13:b4:a4:87:42:f3: 6e:17:5f:04:11:3e:78:ba:9b:0c:67:a3:2f:ab:e0:f1:a1:c1: b5:75:68:47:20:4d:42:fe:40:4c:e2:70:7a:0e:69:b1:f0:51: f1:fe:6b:2a:e7:9c:fb:21:67:49:15:ac:18:4a:34:e1:22:21: 6e:63:37:05:df:f4:4a:18:18:17:46:16:cf:08:36:2e:f1:5d: d7:24:b2:88:aa:8e:93:5c:d6:51:8b:a8:ff:0c:80:ab:36:45: db:bc:f8:83:62:24:b9:bf:22:f0:14:04:73:96:34:7a:94:49: f2:48:d9:a1:e4:5d:4c:e6:8d:d5:f9:58:9d:97:13:6e:94:35: 42:df:cb:a3:fb:60:f2:f4:1c:d9:62:08:02:d2:ba:0b:76:3a: 71:c8:2b:5a:64:38:cc:ba:ca:4b:af:9f:05:88:d5:79:df:72: de:98:1e:8f:76:06:84:c6:f2:7a:d0:40:c3:af:b5:74:f9:82: a1:2d:aa:5a:1e:9e:03:8b:a8:4f:3e:99:61:a2:bf:ab:7d:b1: 8c:9e:40:0d:c8:70:1d:21:28:05:bc:94:bc:8f:9d:9d:c3:a5: 58:f6:a5:a1:5c:c1:7b:c7:99:e5:c5:40:39:a4:da:23:5c:0c: 45:df:86:87 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RDI4MTExMC8GA1UEBRMoNzQxNjY2NjhCRTc2QjczNzU3NjMxNkU1NUQ5RTY0MzlF NjcxQ0Y0NzAeFw0yNTA1MTUwNzM2NDRaFw0yNjA3MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY4MjU5OThjLTdkYTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCnCxok0+oO9ssJ9vhO0cqwr4CQ80q/rpsWQhjV190sqtQ5DxMVh+V1OIIudaBv zMSpsBAvQtD2LmeAPdloP4npgh3aU9+lj2g+Mon/b5QlWLCOpzxeHDfcy27H+Hc9 TPYnfjf+lX+kppE0Wnf7PB/6nyCySOFgG/VbLWmVxNhJK7j2W8q5TOFsdj6iklAE Z9k8f2ExQRQfpoIjaDEsoU35BXXwzgEpuDhbn95zp95CsjeHiwBlB2zlVv3kqZaI rQ7Nm7eKUGtxygpOrxR1Lf3bpSkgv/aB7iJX5KzeMhBMVGJCbKIjQfoQSqWPKubc Tt1nlf9zy1S8AevCGVLt6GPZAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUrpqBnokp 9QkreHMMijjN66zuzL0wHwYDVR0jBBgwFoAUdBZmaL52tzdXYxblXZ5kOeZxz0cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNEMjgxL0ZCNDIxNkU4RjI3 MDExRUY5QkY4QjUzNUM0RjlBRTAyL2RCWm1hTDUydHpkWFl4YmxYWjVrT2VaeHow Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZEJabWFMNTJ0emRYWXhibFhaNWtPZVp4ejBjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDI4MS9GQjQyMTZFOEYyNzAxMUVGOUJGOEI1MzVDNEY5QUUwMi83Q0M2RDYzNEYy NzMxMUVGOUFBRUNDM0NDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAMsdXjANBgkqhkiG9w0BAQsFAAOCAQEAfH5Bdoh1KMMeFHyc E7Skh0LzbhdfBBE+eLqbDGejL6vg8aHBtXVoRyBNQv5ATOJweg5psfBR8f5rKuec +yFnSRWsGEo04SIhbmM3Bd/0ShgYF0YWzwg2LvFd1ySyiKqOk1zWUYuo/wyAqzZF 27z4g2Ikub8i8BQEc5Y0epRJ8kjZoeRdTOaN1flYnZcTbpQ1Qt/Lo/tg8vQc2WII AtK6C3Y6ccgrWmQ4zLrKS6+fBYjVed9y3pgej3YGhMbyetBAw6+1dPmCoS2qWh6e A4uoTz6ZYaK/q32xjJ5ADchwHSEoBbyUvI+dncOlWPaloVzBe8eZ5cVAOaTaI1wM Rd+Ghw== -----END CERTIFICATE-----Generated at Fri May 16 13:25:51 2025 by rpki-client