$ rpki-client -vvf rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/85ED6FDE476E11F0ABD0B828C4F9AE02.roa File: 85ED6FDE476E11F0ABD0B828C4F9AE02.roa (raw, json) Hash identifier: T7K5hlXhiQKLbHefN8F1BTawvXJvcTGAVy+jievS/vQ= Subject key identifier: 68:12:7D:E5:38:76:BD:6B:F3:E7:61:7A:93:AB:32:67:CD:70:AD:31 Certificate issuer: /CN=A912C738/serialNumber=7FB23916037E9332966376F2E075541224162AF4 Certificate serial: 05CB Authority key identifier: 7F:B2:39:16:03:7E:93:32:96:63:76:F2:E0:75:54:12:24:16:2A:F4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f7I5FgN-kzKWY3by4HVUEiQWKvQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/85ED6FDE476E11F0ABD0B828C4F9AE02.roa Signing time: Thu 12 Jun 2025 09:20:47 +0000 ROA not before: Thu 12 Jun 2025 09:20:47 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 16509 IP address blocks: 199.166.34.0/23 maxlen: 23 199.166.36.0/23 maxlen: 23 199.166.37.0/24 maxlen: 24 207.189.185.0/24 maxlen: 24 207.189.186.0/24 maxlen: 24 207.189.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.crl rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f7I5FgN-kzKWY3by4HVUEiQWKvQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 22:44:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1483 (0x5cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C738, serialNumber=7FB23916037E9332966376F2E075541224162AF4 Validity Not Before: Jun 12 09:20:47 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=684a9bee-ef34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e3:42:06:f9:28:64:64:23:5b:85:ca:63:07: f2:a0:e6:f3:e3:9a:87:56:1d:0a:86:a4:d6:29:06: 6c:80:dd:d3:1d:2e:21:cd:17:eb:66:0d:37:bd:e6: 8b:e7:27:61:25:2c:23:64:15:53:f4:97:39:85:05: c4:ab:91:e3:9c:74:14:11:39:39:24:52:16:63:aa: d8:16:8b:2d:1d:90:1e:00:79:c6:ea:7d:59:63:23: 92:00:c8:68:f5:e7:9a:18:e5:35:b5:d3:a1:db:31: 13:ea:a5:54:07:b3:4d:aa:8f:76:ef:f8:08:ae:53: d3:e7:06:6a:eb:b3:f7:74:4c:2c:f9:3a:f0:11:1d: 78:3e:b8:cb:13:07:63:63:1e:f4:b0:cd:0c:c4:f1: fb:07:52:dd:26:12:b9:9e:d4:e6:16:a5:6f:0b:bf: 80:d4:d0:f1:7c:48:84:c7:5b:a5:b1:e6:7b:86:a2: 21:03:79:ec:66:10:cf:0e:0c:93:8a:da:7b:4c:7d: 75:c2:ee:b9:72:bf:66:83:8d:db:ad:df:5a:d1:20: 4d:86:6c:6c:75:7c:63:53:45:39:1c:27:17:80:f1: a1:99:6f:85:c2:f3:bd:25:95:28:4e:79:08:51:f5: 32:2e:18:a0:5f:32:5e:2f:7d:19:de:d1:60:d4:62: 0a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:12:7D:E5:38:76:BD:6B:F3:E7:61:7A:93:AB:32:67:CD:70:AD:31 X509v3 Authority Key Identifier: keyid:7F:B2:39:16:03:7E:93:32:96:63:76:F2:E0:75:54:12:24:16:2A:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f7I5FgN-kzKWY3by4HVUEiQWKvQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/85ED6FDE476E11F0ABD0B828C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 199.166.34.0-199.166.37.255 207.189.185.0-207.189.187.255 Signature Algorithm: sha256WithRSAEncryption c0:27:5a:a4:8f:0a:63:ff:68:fe:d6:ce:0f:9a:05:df:b9:6d: bf:ba:7e:fe:9c:c7:15:49:3c:cf:6f:a7:64:20:f1:9b:f5:ff: dd:18:48:ab:21:dc:e2:5c:18:fe:6e:d9:38:e2:35:ac:15:4b: e0:bf:f6:fa:6a:98:f9:6b:c3:47:c3:57:5b:20:c7:62:47:ff: 0e:f6:67:19:c8:38:2a:a6:66:5f:53:1e:94:e9:7a:75:47:f2: 43:30:b1:47:cc:16:cb:91:81:bc:28:8a:9e:58:89:01:88:64: c6:58:77:1f:8b:ed:68:e9:f6:ab:c6:f5:7d:5e:cc:d9:57:6b: d7:f2:51:9f:53:ef:cd:6b:98:da:50:12:04:c1:6e:71:01:14: 75:5f:73:c4:3d:2f:43:bd:b8:35:71:52:37:61:f4:54:e2:a9: 45:8d:a0:26:17:ad:a9:04:3c:39:c0:24:08:1f:6e:ae:44:6d: a8:d5:40:95:84:de:72:b6:8b:ae:9c:05:85:af:0c:e6:71:ce: 2c:21:55:92:cd:7d:f9:4f:e9:f2:1f:42:35:7b:50:c6:1c:21: b4:ed:54:2b:b4:4d:d5:c6:e1:42:63:8e:6a:1e:b4:74:0b:52: 35:95:3f:c0:f4:5b:0a:cb:40:0c:5c:a8:81:3f:d0:61:55:43: ef:3d:af:b1 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICBcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM3MzgxMTAvBgNVBAUTKDdGQjIzOTE2MDM3RTkzMzI5NjYzNzZGMkUwNzU1NDEy MjQxNjJBRjQwHhcNMjUwNjEyMDkyMDQ3WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODRhOWJlZS1lZjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1uNCBvkoZGQjW4XKYwfyoObz45qHVh0KhqTWKQZsgN3THS4hzRfrZg03veaL 5ydhJSwjZBVT9Jc5hQXEq5HjnHQUETk5JFIWY6rYFostHZAeAHnG6n1ZYyOSAMho 9eeaGOU1tdOh2zET6qVUB7NNqo927/gIrlPT5wZq67P3dEws+TrwER14PrjLEwdj Yx70sM0MxPH7B1LdJhK5ntTmFqVvC7+A1NDxfEiEx1ulseZ7hqIhA3nsZhDPDgyT itp7TH11wu65cr9mg43brd9a0SBNhmxsdXxjU0U5HCcXgPGhmW+FwvO9JZUoTnkI UfUyLhigXzJeL30Z3tFg1GIK5wIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFGgSfeU4 dr1r8+dhepOrMmfNcK0xMB8GA1UdIwQYMBaAFH+yORYDfpMylmN28uB1VBIkFir0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzczOC8zMjBDM0E5QUM5 RDExMUVCOERDNUQyMTBDNEY5QUUwMi9mN0k1RmdOLWt6S1dZM2J5NEhWVUVpUVdL dlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2Y3STVGZ04ta3pLV1kzYnk0SFZVRWlRV0t2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkM3MzgvMzIwQzNBOUFDOUQxMTFFQjhEQzVEMjEwQzRGOUFFMDIvODVFRDZGREU0 NzZFMTFGMEFCRDBCODI4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNQYIKwYBBQUHAQcBAf8E JjAkMCIEAgABMBwwDAMEAcemIgMEAcemJDAMAwQAz725AwQCz724MA0GCSqGSIb3 DQEBCwUAA4IBAQDAJ1qkjwpj/2j+1s4PmgXfuW2/un7+nMcVSTzPb6dkIPGb9f/d GEirIdziXBj+btk44jWsFUvgv/b6apj5a8NHw1dbIMdiR/8O9mcZyDgqpmZfUx6U 6Xp1R/JDMLFHzBbLkYG8KIqeWIkBiGTGWHcfi+1o6farxvV9XszZV2vX8lGfU+/N a5jaUBIEwW5xARR1X3PEPS9Dvbg1cVI3YfRU4qlFjaAmF62pBDw5wCQIH26uRG2o 1UCVhN5ytouunAWFrwzmcc4sIVWSzX35T+nyH0I1e1DGHCG07VQrtE3VxuFCY45q HrR0C1I1lT/A9FsKy0AMXKiBP9BhVUPvPa+x -----END CERTIFICATE-----Generated at Sat Jun 14 07:16:49 2025 by rpki-client