$ rpki-client -vvf rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/D4FD4D5237DE11EEA2885B71C4F9AE02.roa File: D4FD4D5237DE11EEA2885B71C4F9AE02.roa (raw, json) Hash identifier: UmpNsLSA9Ui51AS15ByfrZUIY+Ti/Tm6lpZ+BOTEjUM= Subject key identifier: 8B:55:42:5B:57:61:AA:B1:F6:72:2E:CF:DC:3B:8B:BA:96:C7:76:F1 Certificate issuer: /CN=A912CB2A/serialNumber=147E9756439D9DB7156134AC78F91C233B9392A7 Certificate serial: 0687 Authority key identifier: 14:7E:97:56:43:9D:9D:B7:15:61:34:AC:78:F9:1C:23:3B:93:92:A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FH6XVkOdnbcVYTSsePkcIzuTkqc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/D4FD4D5237DE11EEA2885B71C4F9AE02.roa Signing time: Thu 12 Jun 2025 22:22:16 +0000 ROA not before: Thu 12 Jun 2025 22:22:16 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 9723 IP address blocks: 121.52.192.0/22 maxlen: 22 121.52.196.0/23 maxlen: 23 121.52.198.0/24 maxlen: 24 121.52.199.0/24 maxlen: 24 202.74.64.0/21 maxlen: 21 2403:6900:c000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.crl rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FH6XVkOdnbcVYTSsePkcIzuTkqc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 22:20:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1671 (0x687) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CB2A, serialNumber=147E9756439D9DB7156134AC78F91C233B9392A7 Validity Not Before: Jun 12 22:22:16 2025 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=684b5318-0b66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:71:1d:3b:d4:e6:e6:12:e6:fc:bf:6b:a7:fd: 3a:b9:dc:8a:44:19:ec:c4:75:b1:fe:dc:39:3e:6b: 99:1e:21:09:80:9d:bc:64:23:61:75:ad:4a:f4:b0: 0c:b1:e5:13:71:c8:1f:3c:22:2d:d1:d4:f3:f7:e8: 1f:cb:03:51:f8:3f:49:ad:a7:ef:db:48:71:76:a0: 45:84:66:72:3b:39:5a:60:06:4c:e7:16:1f:97:0c: fe:65:57:2f:fb:5a:ca:16:14:bb:53:a6:52:65:b9: 08:a1:35:87:dc:8c:38:30:24:96:f5:fd:54:20:93: e1:42:10:31:5d:e2:4b:02:8f:a6:1c:2d:fd:b8:71: c2:f4:9e:93:21:32:1f:51:18:66:a6:34:c9:02:5e: cc:fa:53:e9:b8:64:91:c0:e8:37:d8:13:5f:3d:ae: 1f:a3:4b:76:27:9c:d0:ef:2d:ca:ca:9d:6d:d6:37: c9:47:df:fd:06:31:ae:91:78:c0:35:93:22:ec:ed: 69:2f:68:dc:cf:e2:86:e7:6f:7e:1c:44:83:8b:bf: ee:68:19:f9:8b:a7:71:e0:c5:0c:54:80:50:0e:52: 4c:02:3a:a9:25:e8:cd:7e:f7:ff:b1:46:e6:1f:57: 86:e2:16:cf:70:10:4f:7a:16:8d:06:4f:71:dc:f0: 97:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:55:42:5B:57:61:AA:B1:F6:72:2E:CF:DC:3B:8B:BA:96:C7:76:F1 X509v3 Authority Key Identifier: keyid:14:7E:97:56:43:9D:9D:B7:15:61:34:AC:78:F9:1C:23:3B:93:92:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FH6XVkOdnbcVYTSsePkcIzuTkqc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/D4FD4D5237DE11EEA2885B71C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 121.52.192.0/21 202.74.64.0/21 IPv6: 2403:6900:c000::/36 Signature Algorithm: sha256WithRSAEncryption 39:21:7b:9d:ab:f5:4e:35:60:f8:54:b1:15:a3:79:34:11:0f: f1:3d:19:31:1d:f1:5b:12:18:09:04:bb:87:fa:a0:05:d6:7a: b3:ef:5e:6c:39:31:d2:ad:d5:62:c5:6b:d9:67:0e:50:69:20: 61:39:f5:c4:8d:e2:11:09:66:df:19:93:0d:1f:7f:7e:57:44: c1:de:9b:fa:d7:3d:29:47:d3:c7:71:6d:50:2f:4f:cd:1e:55: e8:b5:59:50:4e:4c:42:90:7e:61:8d:a5:98:8e:2b:ed:ce:3c: 1d:cc:98:6a:60:a6:29:56:14:77:0e:83:f2:35:ba:ee:e9:56: ec:c4:5b:40:b9:25:45:8b:b9:42:75:f5:d2:13:58:72:89:66: e5:71:f3:d3:a6:80:12:c4:71:a8:6a:0d:99:a2:35:d9:91:ba: 86:26:14:1e:a1:47:a0:ac:86:10:e4:30:0e:3d:2e:35:a7:c5: 1d:31:d2:cc:5d:0f:89:39:3f:54:b6:4a:8a:60:62:fe:a8:60: 60:c8:8c:b4:5f:3e:bf:86:28:d8:b6:26:ad:f5:38:ab:c1:6e: 6f:1e:9b:9d:7d:74:9c:4c:a5:66:19:cb:d1:e4:cd:ac:a8:9a: 71:cc:d8:78:42:43:17:70:ca:45:fe:65:82:12:32:ca:3e:3b: 81:c2:5d:c9 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICBocwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNCMkExMTAvBgNVBAUTKDE0N0U5NzU2NDM5RDlEQjcxNTYxMzRBQzc4RjkxQzIz M0I5MzkyQTcwHhcNMjUwNjEyMjIyMjE2WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODRiNTMxOC0wYjY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9nEdO9Tm5hLm/L9rp/06udyKRBnsxHWx/tw5PmuZHiEJgJ28ZCNhda1K9LAM seUTccgfPCIt0dTz9+gfywNR+D9Jrafv20hxdqBFhGZyOzlaYAZM5xYflwz+ZVcv +1rKFhS7U6ZSZbkIoTWH3Iw4MCSW9f1UIJPhQhAxXeJLAo+mHC39uHHC9J6TITIf URhmpjTJAl7M+lPpuGSRwOg32BNfPa4fo0t2J5zQ7y3Kyp1t1jfJR9/9BjGukXjA NZMi7O1pL2jcz+KG529+HESDi7/uaBn5i6dx4MUMVIBQDlJMAjqpJejNfvf/sUbm H1eG4hbPcBBPehaNBk9x3PCXZQIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFItVQltX Yaqx9nIuz9w7i7qWx3bxMB8GA1UdIwQYMBaAFBR+l1ZDnZ23FWE0rHj5HCM7k5Kn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0IyQS9FMDFDN0E4NDkw RTAxMUVCQTEwNTg3MUZDNEY5QUUwMi9GSDZYVmtPZG5iY1ZZVFNzZVBrY0l6dVRr cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZINlhWa09kbmJjVllUU3NlUGtjSXp1VGtxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkNCMkEvRTAxQzdBODQ5MEUwMTFFQkExMDU4NzFGQzRGOUFFMDIvRDRGRDRENTIz N0RFMTFFRUEyODg1QjcxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNQYIKwYBBQUHAQcBAf8E JjAkMBIEAgABMAwDBAN5NMADBAPKSkAwDgQCAAIwCAMGBCQDaQDAMA0GCSqGSIb3 DQEBCwUAA4IBAQA5IXudq/VONWD4VLEVo3k0EQ/xPRkxHfFbEhgJBLuH+qAF1nqz 715sOTHSrdVixWvZZw5QaSBhOfXEjeIRCWbfGZMNH39+V0TB3pv61z0pR9PHcW1Q L0/NHlXotVlQTkxCkH5hjaWYjivtzjwdzJhqYKYpVhR3DoPyNbru6VbsxFtAuSVF i7lCdfXSE1hyiWblcfPTpoASxHGoag2ZojXZkbqGJhQeoUegrIYQ5DAOPS41p8Ud MdLMXQ+JOT9UtkqKYGL+qGBgyIy0Xz6/hijYtiat9TirwW5vHpudfXScTKVmGcvR 5M2sqJpxzNh4QkMXcMpF/mWCEjLKPjuBwl3J -----END CERTIFICATE-----Generated at Sun Jun 15 19:16:56 2025 by rpki-client