$ rpki-client -vvf rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/A5D7263C1ECB11EE8FEFEE18C4F9AE02.roa File: A5D7263C1ECB11EE8FEFEE18C4F9AE02.roa (raw, json) Hash identifier: 74FWcR6NsAP5MheQNo+BzCj2nDvP1pHJsxUSbK2vmAE= Subject key identifier: 25:25:6E:6F:46:18:AE:88:73:18:40:6C:05:85:94:4C:2F:06:17:18 Certificate issuer: /CN=A9129969/serialNumber=01666FC7DD875DFFA0E19BC73CBADA8ECF9A5827 Certificate serial: 0174 Authority key identifier: 01:66:6F:C7:DD:87:5D:FF:A0:E1:9B:C7:3C:BA:DA:8E:CF:9A:58:27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWZvx92HXf-g4ZvHPLrajs-aWCc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/A5D7263C1ECB11EE8FEFEE18C4F9AE02.roa Signing time: Thu 17 Apr 2025 06:36:25 +0000 ROA not before: Thu 17 Apr 2025 06:36:25 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 23854 IP address blocks: 103.212.67.0/24 maxlen: 24 119.15.64.0/24 maxlen: 24 119.15.66.0/24 maxlen: 24 119.15.68.0/23 maxlen: 24 119.15.70.0/23 maxlen: 24 203.3.70.0/24 maxlen: 24 203.5.59.0/24 maxlen: 24 203.8.95.0/24 maxlen: 24 203.26.51.0/24 maxlen: 24 203.26.177.0/24 maxlen: 24 203.27.199.0/24 maxlen: 24 203.31.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/AWZvx92HXf-g4ZvHPLrajs-aWCc.crl rsync://rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/AWZvx92HXf-g4ZvHPLrajs-aWCc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWZvx92HXf-g4ZvHPLrajs-aWCc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:15:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 372 (0x174) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129969, serialNumber=01666FC7DD875DFFA0E19BC73CBADA8ECF9A5827 Validity Not Before: Apr 17 06:36:25 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=6800a169-1d74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3b:e2:b4:14:f1:d2:aa:b5:fa:9a:20:1f:58: 2b:c5:dc:26:8c:62:aa:b0:52:5f:0a:7d:1f:5e:74: 23:1d:71:68:68:69:df:7d:a5:8a:25:7c:c6:e5:4c: 3d:51:f0:22:c1:06:f8:8b:05:07:9d:d1:35:72:4a: 76:9a:fb:56:8a:f2:3c:6c:41:2d:44:58:b9:c9:8f: 1d:2c:e0:68:73:3b:bf:33:81:fe:ee:f1:3c:8f:84: cc:83:90:43:6c:e8:3e:a6:a3:e2:aa:f2:3e:bb:82: 92:3f:38:5d:d8:15:ec:f5:ad:e9:a7:fa:77:51:1a: 50:27:7c:fd:f9:75:cf:cc:0a:44:00:86:b8:92:7d: c7:92:2d:14:3e:d5:dd:36:bf:63:ee:b4:51:83:7d: 4d:ed:1b:07:47:3f:3c:5c:eb:a8:f9:d7:5a:4b:84: 4c:41:5c:ed:73:f8:e7:b5:8f:1f:fe:5a:f0:2e:02: 82:15:43:cc:45:ac:fe:f4:d4:44:09:f6:29:ad:f7: 65:64:30:10:d6:d9:39:68:68:6e:0f:fa:36:85:23: 65:d9:99:78:f1:39:85:e2:bd:27:d1:98:9b:c5:1e: 52:68:0c:f9:d9:f2:32:2e:c6:ef:26:3e:b4:0a:9f: e1:68:85:3f:ee:46:10:a4:90:a5:99:76:97:ac:45: 23:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:25:6E:6F:46:18:AE:88:73:18:40:6C:05:85:94:4C:2F:06:17:18 X509v3 Authority Key Identifier: keyid:01:66:6F:C7:DD:87:5D:FF:A0:E1:9B:C7:3C:BA:DA:8E:CF:9A:58:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/AWZvx92HXf-g4ZvHPLrajs-aWCc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWZvx92HXf-g4ZvHPLrajs-aWCc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/A5D7263C1ECB11EE8FEFEE18C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.212.67.0/24 119.15.64.0/24 119.15.66.0/24 119.15.68.0/22 203.3.70.0/24 203.5.59.0/24 203.8.95.0/24 203.26.51.0/24 203.26.177.0/24 203.27.199.0/24 203.31.75.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:f1:10:ec:b7:d7:c4:d9:82:27:77:cd:30:1d:0e:49:57:14: d9:eb:27:c5:2e:10:77:e9:58:51:51:0d:99:b5:a4:4b:8c:92: 20:a7:f8:27:03:aa:c7:e4:60:f4:11:21:4d:61:22:ef:1f:65: 3c:d0:36:b6:24:48:7f:29:0f:ae:ab:a0:71:f1:1d:97:a0:85: 32:98:81:d4:b1:5c:00:58:fa:44:8f:df:8d:5d:28:37:9d:d5: 2a:0e:39:66:f4:8a:2a:82:e4:8b:d7:17:b2:c3:a9:13:a6:0f: 98:2c:51:8b:84:cd:51:27:57:95:81:5d:e9:e9:82:e4:19:60: f0:34:fe:aa:36:eb:ba:8a:89:dd:63:8d:b8:be:cf:67:4a:e3: 7d:c1:48:76:1e:83:f8:a7:2c:95:66:30:ac:a7:2a:bf:0b:57: 6f:a8:05:13:72:d9:ea:76:83:5f:7f:e3:94:d8:a9:c9:4f:a9: 95:62:88:4d:74:1c:d6:0d:b1:65:f3:b2:e8:26:03:ed:87:e7: 13:87:e0:2c:84:21:e6:20:ec:9e:45:bf:c5:90:ea:b7:1c:76: aa:b6:d8:6a:cc:77:1e:d6:00:31:3e:99:54:44:6f:1e:59:f6: 99:76:f8:ae:cc:31:96:38:96:e9:02:e6:f8:b8:35:01:a5:6e: 58:e5:51:94 -----BEGIN CERTIFICATE----- MIIFrTCCBJWgAwIBAgICAXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk5NjkxMTAvBgNVBAUTKDAxNjY2RkM3REQ4NzVERkZBMEUxOUJDNzNDQkFEQThF Q0Y5QTU4MjcwHhcNMjUwNDE3MDYzNjI1WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODAwYTE2OS0xZDc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArDvitBTx0qq1+pogH1grxdwmjGKqsFJfCn0fXnQjHXFoaGnffaWKJXzG5Uw9 UfAiwQb4iwUHndE1ckp2mvtWivI8bEEtRFi5yY8dLOBoczu/M4H+7vE8j4TMg5BD bOg+pqPiqvI+u4KSPzhd2BXs9a3pp/p3URpQJ3z9+XXPzApEAIa4kn3Hki0UPtXd Nr9j7rRRg31N7RsHRz88XOuo+ddaS4RMQVztc/jntY8f/lrwLgKCFUPMRaz+9NRE CfYprfdlZDAQ1tk5aGhuD/o2hSNl2Zl48TmF4r0n0ZibxR5SaAz52fIyLsbvJj60 Cp/haIU/7kYQpJClmXaXrEUjZwIDAQABo4IC0TCCAs0wHQYDVR0OBBYEFCUlbm9G GK6IcxhAbAWFlEwvBhcYMB8GA1UdIwQYMBaAFAFmb8fdh13/oOGbxzy62o7Pmlgn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTk2OS9DRjM5NUMzODFD NkExMUVFQkY2MkFDMERDNEY5QUUwMi9BV1p2eDkySFhmLWc0WnZIUExyYWpzLWFX Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FXWnZ4OTJIWGYtZzRadkhQTHJhanMtYVdDYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Mjk5NjkvQ0YzOTVDMzgxQzZBMTFFRUJGNjJBQzBEQzRGOUFFMDIvQTVENzI2M0Mx RUNCMTFFRThGRUZFRTE4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwWwYIKwYBBQUHAQcBAf8E TDBKMEgEAgABMEIDBABn1EMDBAB3D0ADBAB3D0IDBAJ3D0QDBADLA0YDBADLBTsD BADLCF8DBADLGjMDBADLGrEDBADLG8cDBADLH0swDQYJKoZIhvcNAQELBQADggEB ABvxEOy318TZgid3zTAdDklXFNnrJ8UuEHfpWFFRDZm1pEuMkiCn+CcDqsfkYPQR IU1hIu8fZTzQNrYkSH8pD66roHHxHZeghTKYgdSxXABY+kSP341dKDed1SoOOWb0 iiqC5IvXF7LDqROmD5gsUYuEzVEnV5WBXenpguQZYPA0/qo267qKid1jjbi+z2dK 433BSHYeg/inLJVmMKynKr8LV2+oBRNy2ep2g19/45TYqclPqZViiE10HNYNsWXz sugmA+2H5xOH4CyEIeYg7J5Fv8WQ6rccdqq22GrMdx7WADE+mVREbx5Z9pl2+K7M MZY4lukC5vi4NQGlbljlUZQ= -----END CERTIFICATE-----Generated at Sat Apr 26 15:04:43 2025 by rpki-client