$ rpki-client -vvf rpki.apnic.net/member_repository/A912DFBA/DB9CE678029811EB9823AE82C4F9AE02/CEA093C66CA311ED9DD6425CC4F9AE02.roa File: CEA093C66CA311ED9DD6425CC4F9AE02.roa (raw, json) Hash identifier: 3rvQwF7VOidxONOxWbJzlS69h1FDkR177X5kmaAbyhg= Subject key identifier: 8F:CE:CB:62:5A:23:83:4C:C9:A6:DC:7B:37:8F:54:C4:68:8F:E9:26 Certificate issuer: /CN=A912DFBA/serialNumber=AE4E30CC0D0501A5AE664ADB159053ACECF0ACFD Certificate serial: 079D Authority key identifier: AE:4E:30:CC:0D:05:01:A5:AE:66:4A:DB:15:90:53:AC:EC:F0:AC:FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rk4wzA0FAaWuZkrbFZBTrOzwrP0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DFBA/DB9CE678029811EB9823AE82C4F9AE02/CEA093C66CA311ED9DD6425CC4F9AE02.roa Signing time: Wed 16 Apr 2025 21:01:29 +0000 ROA not before: Wed 16 Apr 2025 21:01:29 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 132256 IP address blocks: 202.127.210.0/24 maxlen: 24 202.127.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DFBA/DB9CE678029811EB9823AE82C4F9AE02/rk4wzA0FAaWuZkrbFZBTrOzwrP0.crl rsync://rpki.apnic.net/member_repository/A912DFBA/DB9CE678029811EB9823AE82C4F9AE02/rk4wzA0FAaWuZkrbFZBTrOzwrP0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rk4wzA0FAaWuZkrbFZBTrOzwrP0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:06:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1949 (0x79d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DFBA, serialNumber=AE4E30CC0D0501A5AE664ADB159053ACECF0ACFD Validity Not Before: Apr 16 21:01:29 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=68001aa9-e20a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:33:5e:31:61:82:fe:0b:54:d3:b8:3f:95:c1: ba:8d:3a:a0:17:e9:c0:c5:41:8f:fb:f4:51:86:9c: b8:00:eb:39:a2:b4:3d:8b:2d:ac:e9:05:b1:e8:b6: e9:74:eb:8d:3c:eb:9f:e7:6d:45:44:cf:61:99:79: 39:33:0a:5e:37:d3:60:db:31:62:13:d4:5d:ce:ed: 07:9c:b8:16:2d:e4:84:51:8f:ff:ea:a3:81:25:ac: 66:b6:97:c3:6b:4b:69:f6:04:b3:b9:a5:04:58:33: 7b:c2:82:28:d5:57:9f:4e:ce:28:e8:3c:d6:4e:53: f7:48:e6:9f:a3:03:8c:14:6f:2b:c7:87:a9:53:8d: c3:65:a6:1b:5e:a4:e8:37:7c:c1:45:0a:f6:85:18: b0:62:c7:ae:c5:40:ee:f7:03:bd:4d:6c:70:06:14: 9b:81:08:53:a7:16:a5:cf:92:c6:6d:00:74:ae:5f: 0b:69:8a:8e:57:08:94:e9:2f:92:11:76:04:f1:36: ee:5b:53:e3:84:0c:f2:7d:16:2d:49:74:66:6d:d2: 8c:8f:f0:ee:6b:07:23:d0:36:bf:db:fc:cd:16:b6: 19:1b:9c:85:96:d7:52:12:ba:ea:f9:0c:3f:a2:70: dc:72:61:91:b2:a9:c9:49:c8:f7:f4:91:be:79:fe: be:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:CE:CB:62:5A:23:83:4C:C9:A6:DC:7B:37:8F:54:C4:68:8F:E9:26 X509v3 Authority Key Identifier: keyid:AE:4E:30:CC:0D:05:01:A5:AE:66:4A:DB:15:90:53:AC:EC:F0:AC:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DFBA/DB9CE678029811EB9823AE82C4F9AE02/rk4wzA0FAaWuZkrbFZBTrOzwrP0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rk4wzA0FAaWuZkrbFZBTrOzwrP0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DFBA/DB9CE678029811EB9823AE82C4F9AE02/CEA093C66CA311ED9DD6425CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.127.210.0/23 Signature Algorithm: sha256WithRSAEncryption 1e:b3:18:8e:f4:e2:9b:b0:cc:8d:46:d1:cf:53:cc:ed:dd:76: 29:9b:66:86:81:ef:4a:f4:c8:f9:47:96:84:87:9f:40:a2:3c: 0d:f6:05:25:bd:68:86:5d:8a:45:0c:63:ce:5d:24:e7:c2:74: 9c:2b:7f:e8:bf:b2:a3:a4:45:28:89:c2:a0:98:2a:93:48:16: 62:1d:cb:5c:b2:79:7d:f5:cf:5d:8a:ba:33:25:93:b9:35:51: ec:68:49:6b:79:b9:d5:75:d4:4e:2e:82:f0:ac:54:ae:16:e6: 4d:35:0d:e9:b0:6e:14:c9:96:66:35:9a:63:ba:cd:5c:58:28: 74:a7:a3:83:c1:fa:40:16:3e:53:4d:39:3b:3e:e8:1f:a0:3f: 79:2b:12:00:4f:b9:6f:c0:e8:2a:7f:76:96:4d:c6:18:bc:43: 06:e5:9b:b2:43:8d:f4:61:42:a7:78:62:7e:a6:8b:c1:b9:5b: 5c:8f:6f:76:38:26:28:a6:c4:a2:4a:5b:a1:b1:85:ff:67:4c: c4:12:7c:77:8f:1f:cc:b5:6d:e7:a6:f6:b1:9a:7a:de:e1:df: be:2e:22:f5:f3:57:48:a6:61:d4:e7:93:1a:ce:75:6d:60:ef: ef:9c:a7:0d:6a:5a:8d:26:c7:8f:88:46:b6:1a:e3:e2:32:39: e5:f1:c1:a7 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB50wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRGQkExMTAvBgNVBAUTKEFFNEUzMENDMEQwNTAxQTVBRTY2NEFEQjE1OTA1M0FD RUNGMEFDRkQwHhcNMjUwNDE2MjEwMTI5WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02ODAwMWFhOS1lMjBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArDNeMWGC/gtU07g/lcG6jTqgF+nAxUGP+/RRhpy4AOs5orQ9iy2s6QWx6Lbp dOuNPOuf521FRM9hmXk5MwpeN9Ng2zFiE9Rdzu0HnLgWLeSEUY//6qOBJaxmtpfD a0tp9gSzuaUEWDN7woIo1VefTs4o6DzWTlP3SOafowOMFG8rx4epU43DZaYbXqTo N3zBRQr2hRiwYseuxUDu9wO9TWxwBhSbgQhTpxalz5LGbQB0rl8LaYqOVwiU6S+S EXYE8TbuW1PjhAzyfRYtSXRmbdKMj/Duawcj0Da/2/zNFrYZG5yFltdSErrq+Qw/ onDccmGRsqnJScj39JG+ef6+QQIDAQABo4IClTCCApEwHQYDVR0OBBYEFI/Oy2Ja I4NMyabcezePVMRoj+kmMB8GA1UdIwQYMBaAFK5OMMwNBQGlrmZK2xWQU6zs8Kz9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREZCQS9EQjlDRTY3ODAy OTgxMUVCOTgyM0FFODJDNEY5QUUwMi9yazR3ekEwRkFhV3Vaa3JiRlpCVHJPendy UDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JrNHd6QTBGQWFXdVprcmJGWkJUck96d3JQMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkRGQkEvREI5Q0U2NzgwMjk4MTFFQjk4MjNBRTgyQzRGOUFFMDIvQ0VBMDkzQzY2 Q0EzMTFFRDlERDY0MjVDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAHKf9IwDQYJKoZIhvcNAQELBQADggEBAB6zGI704puwzI1G 0c9TzO3ddimbZoaB70r0yPlHloSHn0CiPA32BSW9aIZdikUMY85dJOfCdJwrf+i/ sqOkRSiJwqCYKpNIFmIdy1yyeX31z12KujMlk7k1UexoSWt5udV11E4ugvCsVK4W 5k01DemwbhTJlmY1mmO6zVxYKHSno4PB+kAWPlNNOTs+6B+gP3krEgBPuW/A6Cp/ dpZNxhi8Qwblm7JDjfRhQqd4Yn6mi8G5W1yPb3Y4JiimxKJKW6Gxhf9nTMQSfHeP H8y1beem9rGaet7h374uIvXzV0imYdTnkxrOdW1g7++cpw1qWo0mx4+IRrYa4+Iy OeXxwac= -----END CERTIFICATE-----Generated at Sat Apr 26 13:01:22 2025 by rpki-client