$ rpki-client -vvf rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/21C5EC42C27411ED9C3E8009C4F9AE02.roa File: 21C5EC42C27411ED9C3E8009C4F9AE02.roa (raw, json) Hash identifier: 10DFF7xCpxy47ECiljTuKfUMmTINmM368KgsuVpPV2A= Subject key identifier: E6:B9:47:7A:C7:2F:C8:BA:1F:21:88:9D:1A:1D:BE:80:D8:FB:4C:F9 Certificate issuer: /CN=A9136BFF/serialNumber=C14389517F886805A2D485BA412DAD2B52776F72 Certificate serial: 0F42 Authority key identifier: C1:43:89:51:7F:88:68:05:A2:D4:85:BA:41:2D:AD:2B:52:77:6F:72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/21C5EC42C27411ED9C3E8009C4F9AE02.roa Signing time: Wed 04 Jun 2025 18:00:13 +0000 ROA not before: Wed 04 Jun 2025 18:00:13 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 210110 IP address blocks: 43.250.107.0/24 maxlen: 24 103.232.212.0/24 maxlen: 24 103.232.213.0/24 maxlen: 24 2402:3180:8::/45 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.crl rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 17:41:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3906 (0xf42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136BFF, serialNumber=C14389517F886805A2D485BA412DAD2B52776F72 Validity Not Before: Jun 4 18:00:13 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=684089ad-8343 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a4:1a:93:f9:29:f3:69:b9:a0:d0:35:87:7b: 15:c6:03:56:9c:3d:1e:9f:b8:ac:a9:84:38:98:28: ac:48:ec:e7:83:ed:3a:24:c3:cf:a6:57:38:c9:75: ae:53:e8:d8:c6:6d:50:dc:6a:b4:3e:8c:0d:a3:15: a0:eb:ca:ae:b0:14:21:96:52:8b:17:60:ef:e4:a1: b2:7a:2c:19:c7:10:1d:14:f9:45:e9:13:02:bd:c3: 16:b7:e4:ee:d6:33:cf:9a:80:87:c5:1b:81:0c:2a: c5:55:eb:6d:dc:ca:16:a6:aa:8e:43:dd:89:c8:59: 0d:9a:dd:a8:24:e5:a3:3a:bf:f7:80:df:84:f2:52: ec:93:cc:9e:be:c5:48:96:68:ce:7f:3c:b6:f2:e9: 3c:68:8d:01:2b:9f:a6:ad:e0:0a:80:28:b8:4a:ce: 29:3e:5f:76:1f:fd:dc:36:6f:9b:03:7d:a2:b4:11: 6f:b0:0b:1d:55:07:af:b3:e4:6e:72:fa:2f:84:66: 03:82:a8:f1:07:cc:d8:0d:6b:68:f6:da:0d:6b:0c: 19:8e:54:94:b4:2d:8e:9e:8c:88:b8:4a:c6:26:87: cf:0e:cd:e5:e7:ab:58:b4:8f:ff:92:18:0f:35:df: 45:7c:d9:ff:25:c9:ea:8f:d9:76:1d:93:12:cc:80: 64:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:B9:47:7A:C7:2F:C8:BA:1F:21:88:9D:1A:1D:BE:80:D8:FB:4C:F9 X509v3 Authority Key Identifier: keyid:C1:43:89:51:7F:88:68:05:A2:D4:85:BA:41:2D:AD:2B:52:77:6F:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/21C5EC42C27411ED9C3E8009C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.250.107.0/24 103.232.212.0/23 IPv6: 2402:3180:8::/45 Signature Algorithm: sha256WithRSAEncryption 0d:e2:0e:ab:56:71:50:fc:0e:81:38:e3:7f:72:12:6e:b1:3c: 98:39:31:15:b1:54:70:79:2e:94:db:bf:0c:30:7a:d1:b5:2d: 4b:7d:1b:5b:ba:1e:32:01:33:f9:d4:72:63:f2:d6:c8:d0:47: 95:cc:f3:9c:35:c4:02:0f:f7:78:d4:2d:67:8c:fb:e4:72:49: 67:0b:ae:5e:9d:aa:10:b7:83:30:aa:ea:ae:48:7d:04:32:11: f3:a2:9d:fe:79:78:bb:d8:eb:5e:17:6a:8d:0a:96:c3:89:26: 9f:b3:85:e1:78:c6:90:0b:d8:93:5a:3a:91:3b:5f:b7:2a:13: 77:ed:f0:3a:ee:93:4f:db:cc:ac:20:d4:c8:a4:7d:99:65:f3: 70:09:ba:9d:a1:29:1e:a5:71:1a:4d:2e:df:c3:a4:81:f0:59: ec:08:d0:71:38:f3:15:3a:0a:f0:51:79:85:a0:b6:e5:75:34: 4a:06:ed:3f:d5:41:7f:c4:fb:a6:d4:4c:5b:12:44:14:00:b1: d9:4d:bc:fa:5e:d7:60:7b:ea:2c:77:9f:6a:3d:c3:09:b8:76: a8:80:01:df:8e:d7:39:24:e0:41:1f:1f:3d:d0:e0:e8:0d:cb: f4:f0:51:f0:bb:56:0a:e3:b6:a7:06:1c:a1:66:c0:45:4f:60: 72:f1:c5:24 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICD0IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZCRkYxMTAvBgNVBAUTKEMxNDM4OTUxN0Y4ODY4MDVBMkQ0ODVCQTQxMkRBRDJC NTI3NzZGNzIwHhcNMjUwNjA0MTgwMDEzWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODQwODlhZC04MzQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx6Qak/kp82m5oNA1h3sVxgNWnD0en7isqYQ4mCisSOzng+06JMPPplc4yXWu U+jYxm1Q3Gq0PowNoxWg68qusBQhllKLF2Dv5KGyeiwZxxAdFPlF6RMCvcMWt+Tu 1jPPmoCHxRuBDCrFVett3MoWpqqOQ92JyFkNmt2oJOWjOr/3gN+E8lLsk8yevsVI lmjOfzy28uk8aI0BK5+mreAKgCi4Ss4pPl92H/3cNm+bA32itBFvsAsdVQevs+Ru cvovhGYDgqjxB8zYDWto9toNawwZjlSUtC2OnoyIuErGJofPDs3l56tYtI//khgP Nd9FfNn/Jcnqj9l2HZMSzIBkAQIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFOa5R3rH L8i6HyGInRodvoDY+0z5MB8GA1UdIwQYMBaAFMFDiVF/iGgFotSFukEtrStSd29y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkJGRi9FNDJCRUFDMjkz RjAxMUU5QkMwQ0ZGNzFDNEY5QUUwMi93VU9KVVgtSWFBV2kxSVc2UVMydEsxSjNi M0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dVT0pVWC1JYUFXaTFJVzZRUzJ0SzFKM2IzSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzZCRkYvRTQyQkVBQzI5M0YwMTFFOUJDMENGRjcxQzRGOUFFMDIvMjFDNUVDNDJD Mjc0MTFFRDlDM0U4MDA5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBAAr+msDBAFn6NQwDwQCAAIwCQMHAyQCMYAACDANBgkqhkiG 9w0BAQsFAAOCAQEADeIOq1ZxUPwOgTjjf3ISbrE8mDkxFbFUcHkulNu/DDB60bUt S30bW7oeMgEz+dRyY/LWyNBHlczznDXEAg/3eNQtZ4z75HJJZwuuXp2qELeDMKrq rkh9BDIR86Kd/nl4u9jrXhdqjQqWw4kmn7OF4XjGkAvYk1o6kTtftyoTd+3wOu6T T9vMrCDUyKR9mWXzcAm6naEpHqVxGk0u38OkgfBZ7AjQcTjzFToK8FF5haC25XU0 SgbtP9VBf8T7ptRMWxJEFACx2U28+l7XYHvqLHefaj3DCbh2qIAB347XOSTgQR8f PdDg6A3L9PBR8LtWCuO2pwYcoWbARU9gcvHFJA== -----END CERTIFICATE-----Generated at Tue Jun 17 01:29:31 2025 by rpki-client