$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8525/52212610612F11E7BD2EDA0BC4F9AE02/3A21C144E51211EBB1225278C4F9AE02.roa File: 3A21C144E51211EBB1225278C4F9AE02.roa (raw, json) Hash identifier: nW5GBU8+whiRwJPpyl+4Uvg+meP7sM49SIVv5JyITRM= Subject key identifier: A5:88:B4:6A:15:9F:92:E6:99:15:64:E4:F1:FD:55:67:0E:67:F7:76 Certificate issuer: /CN=A91E8525/serialNumber=E71A9F214E80C9BC3B2D239FF8B9AAB713F6EDB7 Certificate serial: 19C9 Authority key identifier: E7:1A:9F:21:4E:80:C9:BC:3B:2D:23:9F:F8:B9:AA:B7:13:F6:ED:B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xqfIU6Aybw7LSOf-LmqtxP27bc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8525/52212610612F11E7BD2EDA0BC4F9AE02/3A21C144E51211EBB1225278C4F9AE02.roa Signing time: Thu 08 May 2025 16:41:08 +0000 ROA not before: Thu 08 May 2025 16:41:08 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 9249 IP address blocks: 113.11.240.0/21 maxlen: 21 113.11.240.0/24 maxlen: 24 113.11.241.0/24 maxlen: 24 113.11.242.0/24 maxlen: 24 113.11.243.0/24 maxlen: 24 113.11.244.0/24 maxlen: 24 113.11.245.0/24 maxlen: 24 113.11.246.0/23 maxlen: 24 202.80.32.0/20 maxlen: 20 202.80.32.0/23 maxlen: 24 202.80.34.0/23 maxlen: 24 202.80.36.0/23 maxlen: 24 202.80.40.0/23 maxlen: 24 202.80.42.0/23 maxlen: 24 202.80.44.0/22 maxlen: 22 202.80.44.0/24 maxlen: 24 202.80.45.0/24 maxlen: 24 202.80.46.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8525/52212610612F11E7BD2EDA0BC4F9AE02/5xqfIU6Aybw7LSOf-LmqtxP27bc.crl rsync://rpki.apnic.net/member_repository/A91E8525/52212610612F11E7BD2EDA0BC4F9AE02/5xqfIU6Aybw7LSOf-LmqtxP27bc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xqfIU6Aybw7LSOf-LmqtxP27bc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 16:28:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6601 (0x19c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8525, serialNumber=E71A9F214E80C9BC3B2D239FF8B9AAB713F6EDB7 Validity Not Before: May 8 16:41:08 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=681cdea3-3f5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:63:9a:6f:6e:82:f0:16:c0:93:eb:1a:32:6f: df:27:b9:42:02:6e:67:06:d9:62:44:3d:50:c4:5b: 53:5a:32:c7:36:f5:d8:12:48:17:51:10:a4:33:b3: e4:3a:ff:c9:5d:16:a3:d6:67:83:66:ba:3a:20:3b: 88:c7:d5:bc:29:00:df:c8:e2:94:cb:ca:50:65:d4: ef:4f:26:39:08:b4:7d:f8:19:39:a7:19:78:01:e9: 7c:53:e0:36:c8:10:f2:05:e1:02:c7:7c:6f:4d:56: 7e:26:de:2b:4c:0c:c1:dc:ce:77:d1:69:6d:8c:61: b7:5d:ef:7e:cf:b8:d3:06:65:8a:50:18:4b:99:81: 42:13:fb:eb:ca:75:05:d4:05:21:69:74:2d:db:68: bb:5e:32:d4:d2:03:1b:1f:cd:2a:f5:e7:52:bc:b1: 44:b2:a1:8a:66:97:9e:22:05:34:6c:62:58:c8:9b: 7d:81:2f:bf:4e:0e:f9:d0:b9:2f:24:74:f9:bd:28: d4:26:75:11:2b:ab:7e:a5:7c:4a:9e:e7:dc:3c:b0: 2b:56:ed:34:83:33:69:ce:56:dd:c6:77:77:60:00: 71:b3:5d:73:d7:ab:b7:85:43:27:e0:20:8d:7e:6d: ae:51:81:47:62:0c:23:ca:64:4e:14:ef:b9:ad:32: 8c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:88:B4:6A:15:9F:92:E6:99:15:64:E4:F1:FD:55:67:0E:67:F7:76 X509v3 Authority Key Identifier: keyid:E7:1A:9F:21:4E:80:C9:BC:3B:2D:23:9F:F8:B9:AA:B7:13:F6:ED:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8525/52212610612F11E7BD2EDA0BC4F9AE02/5xqfIU6Aybw7LSOf-LmqtxP27bc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xqfIU6Aybw7LSOf-LmqtxP27bc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8525/52212610612F11E7BD2EDA0BC4F9AE02/3A21C144E51211EBB1225278C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 113.11.240.0/21 202.80.32.0/20 Signature Algorithm: sha256WithRSAEncryption bf:13:3f:f6:19:0c:33:90:da:c5:a3:17:89:1e:02:5a:c9:00: 2e:dd:58:a6:67:8d:5d:56:24:c2:09:74:d5:b0:10:0b:7b:da: 21:c9:9f:ee:f1:71:17:21:d8:2e:4c:1f:e6:d3:bc:ed:82:e3: fc:f5:22:e5:71:c4:e9:bc:9c:09:52:79:7d:2a:c1:55:15:d9: 9a:e7:5b:f3:41:1c:45:59:33:2e:bb:3d:88:97:d7:ec:81:ac: d8:c3:69:1b:5f:c9:7e:0b:ac:54:a0:11:d6:77:d1:cb:64:c0: b6:d3:27:f7:c6:43:d1:d5:72:82:3c:34:de:aa:a5:2a:8b:8b: 8c:e5:2a:97:9f:49:69:9d:27:ca:81:14:e4:88:d9:f4:03:dc: 8f:1d:6d:f3:d1:ba:b4:33:09:3e:42:cc:29:df:11:12:c4:74: 85:df:d4:9d:ea:5f:2d:bb:97:7b:65:12:9f:b4:f6:00:4c:e9: a0:ab:ba:fa:1d:b9:04:e4:4d:fb:f0:e3:24:e6:20:e9:e4:1f: 17:a2:0d:e6:f7:d1:ea:6c:91:ff:03:a3:0a:89:f8:c0:60:87: 62:3e:4c:62:3d:ac:ef:8b:6a:5e:10:a3:29:13:e7:15:e4:fd: 38:73:76:e4:79:6b:ae:9e:c1:fe:94:96:24:68:c4:b8:9c:03: 96:39:7b:12 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICGckwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg1MjUxMTAvBgNVBAUTKEU3MUE5RjIxNEU4MEM5QkMzQjJEMjM5RkY4QjlBQUI3 MTNGNkVEQjcwHhcNMjUwNTA4MTY0MTA4WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFjZGVhMy0zZjVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwWOab26C8BbAk+saMm/fJ7lCAm5nBtliRD1QxFtTWjLHNvXYEkgXURCkM7Pk Ov/JXRaj1meDZro6IDuIx9W8KQDfyOKUy8pQZdTvTyY5CLR9+Bk5pxl4Ael8U+A2 yBDyBeECx3xvTVZ+Jt4rTAzB3M530WltjGG3Xe9+z7jTBmWKUBhLmYFCE/vrynUF 1AUhaXQt22i7XjLU0gMbH80q9edSvLFEsqGKZpeeIgU0bGJYyJt9gS+/Tg750Lkv JHT5vSjUJnURK6t+pXxKnufcPLArVu00gzNpzlbdxnd3YABxs11z16u3hUMn4CCN fm2uUYFHYgwjymROFO+5rTKMqwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFKWItGoV n5LmmRVk5PH9VWcOZ/d2MB8GA1UdIwQYMBaAFOcanyFOgMm8Oy0jn/i5qrcT9u23 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODUyNS81MjIxMjYxMDYx MkYxMUU3QkQyRURBMEJDNEY5QUUwMi81eHFmSVU2QXlidzdMU09mLUxtcXR4UDI3 YmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV4cWZJVTZBeWJ3N0xTT2YtTG1xdHhQMjdiYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTg1MjUvNTIyMTI2MTA2MTJGMTFFN0JEMkVEQTBCQzRGOUFFMDIvM0EyMUMxNDRF NTEyMTFFQkIxMjI1Mjc4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBANxC/ADBATKUCAwDQYJKoZIhvcNAQELBQADggEBAL8TP/YZ DDOQ2sWjF4keAlrJAC7dWKZnjV1WJMIJdNWwEAt72iHJn+7xcRch2C5MH+bTvO2C 4/z1IuVxxOm8nAlSeX0qwVUV2ZrnW/NBHEVZMy67PYiX1+yBrNjDaRtfyX4LrFSg EdZ30ctkwLbTJ/fGQ9HVcoI8NN6qpSqLi4zlKpefSWmdJ8qBFOSI2fQD3I8dbfPR urQzCT5CzCnfERLEdIXf1J3qXy27l3tlEp+09gBM6aCruvoduQTkTfvw4yTmIOnk HxeiDeb30epskf8DowqJ+MBgh2I+TGI9rO+Lal4QoykT5xXk/ThzduR5a66ewf6U liRoxLicA5Y5exI= -----END CERTIFICATE-----Generated at Fri May 16 13:51:30 2025 by rpki-client