$ rpki-client -vvf rpki.apnic.net/member_repository/A91394E7/F4CFD1DAAC7311EF87FC554CC4F9AE02/F7078BC4B73511EF8537DE81C4F9AE02.roa File: F7078BC4B73511EF8537DE81C4F9AE02.roa (raw, json) Hash identifier: CcfcyuDgdAXzM0C7pRrcqcGTmtCQX9kXzhcOgKQTSNM= Subject key identifier: FC:9C:CD:B1:B3:3E:82:57:7E:40:CF:5C:8C:EA:D3:05:88:B2:48:65 Certificate issuer: /CN=A91394E7/serialNumber=891ED8BAAC2C73BD13ADCAA1A16AAF00D224A877 Certificate serial: 4E Authority key identifier: 89:1E:D8:BA:AC:2C:73:BD:13:AD:CA:A1:A1:6A:AF:00:D2:24:A8:77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iR7Yuqwsc70TrcqhoWqvANIkqHc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91394E7/F4CFD1DAAC7311EF87FC554CC4F9AE02/F7078BC4B73511EF8537DE81C4F9AE02.roa Signing time: Fri 11 Apr 2025 06:42:25 +0000 ROA not before: Fri 11 Apr 2025 06:42:25 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 23921 IP address blocks: 202.38.157.0/24 maxlen: 24 203.31.183.0/24 maxlen: 24 203.92.27.0/24 maxlen: 24 203.190.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91394E7/F4CFD1DAAC7311EF87FC554CC4F9AE02/iR7Yuqwsc70TrcqhoWqvANIkqHc.crl rsync://rpki.apnic.net/member_repository/A91394E7/F4CFD1DAAC7311EF87FC554CC4F9AE02/iR7Yuqwsc70TrcqhoWqvANIkqHc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iR7Yuqwsc70TrcqhoWqvANIkqHc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78 (0x4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91394E7, serialNumber=891ED8BAAC2C73BD13ADCAA1A16AAF00D224A877 Validity Not Before: Apr 11 06:42:25 2025 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=67f8b9d1-2845 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:fc:8a:92:5b:06:13:cb:3f:30:5d:66:0e:d2: 13:02:58:bb:91:2c:c8:07:50:c1:7c:3c:67:82:40: 8f:63:e4:9b:e6:5e:77:79:63:fd:82:00:60:6b:66: 9b:3d:9e:cc:6a:c6:59:b9:cb:5a:33:23:04:66:3e: d9:e7:fd:aa:7b:d8:d3:8e:5d:75:7f:06:d7:61:63: 10:fe:c1:cb:27:51:b4:1b:2d:73:44:10:62:f5:af: a9:01:cd:0c:7a:ab:4f:af:37:6d:9a:1b:2a:75:c3: b5:9d:7c:20:67:94:99:58:55:6a:f3:70:16:e3:f9: 57:03:2f:dc:90:ce:4b:0f:10:6e:27:ee:9c:dc:5b: 8b:c0:34:af:bf:62:94:56:b7:47:61:8d:1c:2f:8b: 3a:ec:08:96:f6:f7:42:03:f0:db:6f:f0:ea:6c:37: a7:78:28:16:e8:cd:63:64:9b:65:92:31:6d:31:19: 72:3a:71:35:b4:9b:31:d8:84:39:4b:1a:69:9f:2b: cb:34:ea:b2:f4:f5:14:ec:87:54:4d:8a:31:92:f8: 15:c5:e9:1f:05:9f:bd:ee:ef:0b:5e:51:a0:1f:44: e4:a3:29:62:3c:73:78:19:3c:75:6f:ea:69:22:b6: 77:b0:1f:b1:26:72:e5:02:4a:89:a2:b2:1f:5e:4c: 80:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:9C:CD:B1:B3:3E:82:57:7E:40:CF:5C:8C:EA:D3:05:88:B2:48:65 X509v3 Authority Key Identifier: keyid:89:1E:D8:BA:AC:2C:73:BD:13:AD:CA:A1:A1:6A:AF:00:D2:24:A8:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91394E7/F4CFD1DAAC7311EF87FC554CC4F9AE02/iR7Yuqwsc70TrcqhoWqvANIkqHc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iR7Yuqwsc70TrcqhoWqvANIkqHc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91394E7/F4CFD1DAAC7311EF87FC554CC4F9AE02/F7078BC4B73511EF8537DE81C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.38.157.0/24 203.31.183.0/24 203.92.27.0/24 203.190.25.0/24 Signature Algorithm: sha256WithRSAEncryption e8:46:d8:34:e1:70:ac:d5:79:4b:4d:f2:92:97:3d:77:b7:05: a6:e9:10:f4:55:d9:27:c8:10:4a:a1:01:cb:68:28:fd:f8:76: 4d:f3:35:7a:30:80:6e:2a:64:9e:17:cf:04:11:8d:b5:98:f5: 55:a3:6d:93:b5:55:65:73:d6:94:28:ee:75:2b:fa:e2:8e:fc: 48:a8:b7:51:15:c0:aa:60:5c:ba:ed:7a:e1:80:1e:34:59:ca: b1:21:ad:03:06:1b:1b:7b:df:93:d8:74:9b:4c:63:8c:fb:dd: 02:15:78:11:54:92:a0:3a:d8:f0:24:d9:62:7d:71:43:38:bf: 29:5b:fa:63:d3:dd:d2:ce:bb:fb:87:f7:03:a3:3a:4c:2d:89: 14:40:57:78:c2:be:b2:a1:8d:ba:71:ea:c3:e8:1d:60:c0:6e: 59:90:50:05:73:a5:db:4d:fb:f0:ca:ca:79:d0:1f:96:99:b1: a7:39:c4:75:1a:29:61:ee:cb:88:ee:0b:cc:13:a5:ec:e5:96: 05:1a:df:51:7c:75:57:ca:6e:2d:98:c8:04:ff:d0:4c:1e:2d: 7f:ea:37:8e:8d:18:a5:10:5d:a1:1b:44:06:70:0c:87:04:f7: 87:4a:eb:41:10:a8:38:61:07:6f:bf:b3:8a:5d:7e:9a:a5:13: b6:6b:b2:5c -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgIBTjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz OTRFNzExMC8GA1UEBRMoODkxRUQ4QkFBQzJDNzNCRDEzQURDQUExQTE2QUFGMDBE MjI0QTg3NzAeFw0yNTA0MTEwNjQyMjVaFw0yNTEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY3ZjhiOWQxLTI4NDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+/IqSWwYTyz8wXWYO0hMCWLuRLMgHUMF8PGeCQI9j5JvmXnd5Y/2CAGBrZps9 nsxqxlm5y1ozIwRmPtnn/ap72NOOXXV/BtdhYxD+wcsnUbQbLXNEEGL1r6kBzQx6 q0+vN22aGyp1w7WdfCBnlJlYVWrzcBbj+VcDL9yQzksPEG4n7pzcW4vANK+/YpRW t0dhjRwvizrsCJb290ID8Ntv8OpsN6d4KBbozWNkm2WSMW0xGXI6cTW0mzHYhDlL GmmfK8s06rL09RTsh1RNijGS+BXF6R8Fn73u7wteUaAfROSjKWI8c3gZPHVv6mki tnewH7EmcuUCSomish9eTIBpAgMBAAGjggKnMIICozAdBgNVHQ4EFgQU/JzNsbM+ gld+QM9cjOrTBYiySGUwHwYDVR0jBBgwFoAUiR7Yuqwsc70TrcqhoWqvANIkqHcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM5NEU3L0Y0Q0ZEMURBQUM3 MzExRUY4N0ZDNTU0Q0M0RjlBRTAyL2lSN1l1cXdzYzcwVHJjcWhvV3F2QU5Ja3FI Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaVI3WXVxd3NjNzBUcmNxaG9XcXZBTklrcUhjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTRFNy9GNENGRDFEQUFDNzMxMUVGODdGQzU1NENDNEY5QUUwMi9GNzA3OEJDNEI3 MzUxMUVGODUzN0RFODFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAxBggrBgEFBQcBBwEB/wQi MCAwHgQCAAEwGAMEAMomnQMEAMsftwMEAMtcGwMEAMu+GTANBgkqhkiG9w0BAQsF AAOCAQEA6EbYNOFwrNV5S03ykpc9d7cFpukQ9FXZJ8gQSqEBy2go/fh2TfM1ejCA bipknhfPBBGNtZj1VaNtk7VVZXPWlCjudSv64o78SKi3URXAqmBcuu164YAeNFnK sSGtAwYbG3vfk9h0m0xjjPvdAhV4EVSSoDrY8CTZYn1xQzi/KVv6Y9Pd0s67+4f3 A6M6TC2JFEBXeMK+sqGNunHqw+gdYMBuWZBQBXOl20378MrKedAflpmxpznEdRop Ye7LiO4LzBOl7OWWBRrfUXx1V8puLZjIBP/QTB4tf+o3jo0YpRBdoRtEBnAMhwT3 h0rrQRCoOGEHb7+zil1+mqUTtmuyXA== -----END CERTIFICATE-----Generated at Sat Apr 26 07:48:30 2025 by rpki-client