$ rpki-client -vvf rpki.apnic.net/member_repository/A912D4AE/D7B2F82C134711E58655A526C4F9AE02/4AD1B6D2C3D911ED861C5356C4F9AE02.roa File: 4AD1B6D2C3D911ED861C5356C4F9AE02.roa (raw, json) Hash identifier: I8f+DwZj5FOfOPdJZNNwgd12PVcO07q38Jd2BAvcM6Y= Subject key identifier: F0:83:BE:EC:C4:95:A9:12:AF:EE:38:BE:D1:09:2D:1B:65:A3:91:04 Certificate issuer: /CN=A912D4AE/serialNumber=6207F6EFF0099786E30A035B1B5B903C163F597E Certificate serial: 2584 Authority key identifier: 62:07:F6:EF:F0:09:97:86:E3:0A:03:5B:1B:5B:90:3C:16:3F:59:7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ygf27_AJl4bjCgNbG1uQPBY_WX4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D4AE/D7B2F82C134711E58655A526C4F9AE02/4AD1B6D2C3D911ED861C5356C4F9AE02.roa Signing time: Thu 24 Apr 2025 16:12:50 +0000 ROA not before: Thu 24 Apr 2025 16:12:50 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 38566 IP address blocks: 36.255.144.0/22 maxlen: 22 36.255.146.0/23 maxlen: 23 103.7.24.0/22 maxlen: 22 103.7.24.0/23 maxlen: 23 103.7.24.0/24 maxlen: 24 103.7.25.0/24 maxlen: 24 103.7.26.0/23 maxlen: 23 103.7.26.0/24 maxlen: 24 103.7.27.0/24 maxlen: 24 2403:7500::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D4AE/D7B2F82C134711E58655A526C4F9AE02/Ygf27_AJl4bjCgNbG1uQPBY_WX4.crl rsync://rpki.apnic.net/member_repository/A912D4AE/D7B2F82C134711E58655A526C4F9AE02/Ygf27_AJl4bjCgNbG1uQPBY_WX4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ygf27_AJl4bjCgNbG1uQPBY_WX4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:12:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9604 (0x2584) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D4AE, serialNumber=6207F6EFF0099786E30A035B1B5B903C163F597E Validity Not Before: Apr 24 16:12:50 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=680a6302-172d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:51:a3:02:5a:78:e2:9a:48:b8:7e:6f:ab:76: 28:a8:80:2e:c2:92:de:15:d8:d0:97:51:3d:7f:5e: 5a:08:ef:27:23:96:ae:dd:b2:51:c9:c2:27:98:da: e7:0a:ad:71:57:52:4c:6c:e3:23:8d:db:84:b5:7b: 30:22:1a:0d:ae:83:d1:99:94:a7:b9:f8:20:84:db: fa:7f:23:41:83:8d:14:4b:2b:5f:d2:7e:5e:9c:33: 6d:99:1a:38:08:20:b5:31:c2:13:d5:3d:b9:34:05: 38:1e:d7:cd:f8:0e:12:c6:75:02:ed:fe:e7:5f:b8: 3d:d5:bc:b6:8f:fa:07:b9:8f:a1:93:d9:c4:a9:f7: a7:ee:50:0a:59:29:82:8c:d1:f0:e0:27:9c:51:89: d9:b3:9b:33:b8:eb:b6:24:eb:3f:51:04:e4:f3:0e: 0c:1f:1b:40:29:e3:5d:cb:f1:9d:bb:93:2c:76:27: 72:52:96:b3:a8:41:89:8f:28:bd:85:fd:d2:f2:f7: 38:4a:81:fd:59:80:b6:25:c3:c1:8c:8e:59:b8:0a: 68:d6:90:3e:94:29:6b:4c:54:3f:f3:b3:8c:bd:8d: b8:b5:dc:07:e1:93:ac:61:25:a4:e1:04:46:10:d7: d4:fd:ff:a1:54:1a:0f:60:7c:59:9c:92:f9:41:c8: e7:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:83:BE:EC:C4:95:A9:12:AF:EE:38:BE:D1:09:2D:1B:65:A3:91:04 X509v3 Authority Key Identifier: keyid:62:07:F6:EF:F0:09:97:86:E3:0A:03:5B:1B:5B:90:3C:16:3F:59:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D4AE/D7B2F82C134711E58655A526C4F9AE02/Ygf27_AJl4bjCgNbG1uQPBY_WX4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ygf27_AJl4bjCgNbG1uQPBY_WX4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D4AE/D7B2F82C134711E58655A526C4F9AE02/4AD1B6D2C3D911ED861C5356C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 36.255.144.0/22 103.7.24.0/22 IPv6: 2403:7500::/32 Signature Algorithm: sha256WithRSAEncryption 0b:3b:b3:e8:6e:10:b8:dd:fd:d9:5a:5a:31:3e:d3:17:0b:90: 1a:bb:2d:f3:f1:32:a4:98:60:7f:e9:18:9c:56:5a:b0:e4:2b: 13:d5:3d:d7:2f:09:91:17:e8:b9:cd:74:e3:30:c8:1b:e8:2d: 52:22:15:f1:7a:01:f2:ad:9a:ad:d2:06:3a:00:61:c3:e1:42: bc:ed:88:df:f6:83:1a:4c:93:c7:38:a6:41:8a:8e:88:80:db: b5:fe:7c:d6:02:42:f9:7e:c4:5a:a6:df:6b:19:bf:30:55:0f: da:e9:98:98:c9:a6:90:39:ad:42:80:57:69:21:e1:16:b9:ac: ef:b5:a2:53:89:62:29:46:61:c1:c6:15:8d:0b:6e:41:4e:c9: d9:c2:71:0a:85:2b:a4:dd:aa:11:5b:0f:76:b7:39:7c:48:1b: 6f:15:29:01:2f:4f:50:91:c3:d3:bf:7a:ad:15:bc:cc:9a:9e: 3c:fe:cf:e3:ee:fb:8a:b4:58:49:5d:48:2b:01:ac:ec:16:b5: 39:2e:49:f8:4d:11:d9:85:1f:87:96:83:23:c2:6a:e1:ee:93: 1d:e6:e3:27:06:32:92:7f:b6:2c:1f:37:22:64:49:17:66:3b: 45:ab:cb:79:dc:b5:42:3e:dc:b0:7f:c9:87:81:e4:79:83:b6: 08:06:37:99 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICJYQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQ0QUUxMTAvBgNVBAUTKDYyMDdGNkVGRjAwOTk3ODZFMzBBMDM1QjFCNUI5MDND MTYzRjU5N0UwHhcNMjUwNDI0MTYxMjUwWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODBhNjMwMi0xNzJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1VGjAlp44ppIuH5vq3YoqIAuwpLeFdjQl1E9f15aCO8nI5au3bJRycInmNrn Cq1xV1JMbOMjjduEtXswIhoNroPRmZSnufgghNv6fyNBg40USytf0n5enDNtmRo4 CCC1McIT1T25NAU4HtfN+A4SxnUC7f7nX7g91by2j/oHuY+hk9nEqfen7lAKWSmC jNHw4CecUYnZs5szuOu2JOs/UQTk8w4MHxtAKeNdy/Gdu5MsdidyUpazqEGJjyi9 hf3S8vc4SoH9WYC2JcPBjI5ZuApo1pA+lClrTFQ/87OMvY24tdwH4ZOsYSWk4QRG ENfU/f+hVBoPYHxZnJL5QcjnJwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFPCDvuzE lakSr+44vtEJLRtlo5EEMB8GA1UdIwQYMBaAFGIH9u/wCZeG4woDWxtbkDwWP1l+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDRBRS9EN0IyRjgyQzEz NDcxMUU1ODY1NUE1MjZDNEY5QUUwMi9ZZ2YyN19BSmw0YmpDZ05iRzF1UVBCWV9X WDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lnZjI3X0FKbDRiakNnTmJHMXVRUEJZX1dYNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkQ0QUUvRDdCMkY4MkMxMzQ3MTFFNTg2NTVBNTI2QzRGOUFFMDIvNEFEMUI2RDJD M0Q5MTFFRDg2MUM1MzU2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAIk/5ADBAJnBxgwDQQCAAIwBwMFACQDdQAwDQYJKoZIhvcN AQELBQADggEBAAs7s+huELjd/dlaWjE+0xcLkBq7LfPxMqSYYH/pGJxWWrDkKxPV PdcvCZEX6LnNdOMwyBvoLVIiFfF6AfKtmq3SBjoAYcPhQrztiN/2gxpMk8c4pkGK joiA27X+fNYCQvl+xFqm32sZvzBVD9rpmJjJppA5rUKAV2kh4Ra5rO+1olOJYilG YcHGFY0LbkFOydnCcQqFK6TdqhFbD3a3OXxIG28VKQEvT1CRw9O/eq0VvMyanjz+ z+Pu+4q0WEldSCsBrOwWtTkuSfhNEdmFH4eWgyPCauHukx3m4ycGMpJ/tiwfNyJk SRdmO0Wry3nctUI+3LB/yYeB5HmDtggGN5k= -----END CERTIFICATE-----Generated at Sat Apr 26 08:15:45 2025 by rpki-client