$ rpki-client -vvf rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/FC35CE340A4711F0809C3032C4F9AE02.roa File: FC35CE340A4711F0809C3032C4F9AE02.roa (raw, json) Hash identifier: TYw7pVipg0tBF5NEai8ggwulJFGrtpH064BJjOwSImo= Subject key identifier: B9:F2:E8:90:10:0B:7D:66:0F:F5:E0:AB:41:6E:59:8B:02:A2:21:4F Certificate issuer: /CN=A9142DA4/serialNumber=BB4C9665E75F9E19DAD46F8B609D3444FB68ED47 Certificate serial: 0349 Authority key identifier: BB:4C:96:65:E7:5F:9E:19:DA:D4:6F:8B:60:9D:34:44:FB:68:ED:47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0yWZedfnhna1G-LYJ00RPto7Uc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/FC35CE340A4711F0809C3032C4F9AE02.roa Signing time: Wed 26 Mar 2025 13:41:14 +0000 ROA not before: Wed 26 Mar 2025 13:41:14 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 55872 IP address blocks: 115.187.96.0/19 maxlen: 19 118.82.128.0/17 maxlen: 17 118.82.128.0/18 maxlen: 18 118.82.136.0/21 maxlen: 21 118.82.144.0/20 maxlen: 20 118.82.160.0/20 maxlen: 20 118.82.176.0/21 maxlen: 21 118.82.184.0/22 maxlen: 22 118.82.188.0/23 maxlen: 23 118.82.192.0/18 maxlen: 18 118.82.192.0/21 maxlen: 21 118.82.200.0/21 maxlen: 21 118.82.208.0/21 maxlen: 21 118.82.216.0/21 maxlen: 21 118.82.232.0/21 maxlen: 21 118.82.240.0/21 maxlen: 21 119.235.32.0/21 maxlen: 21 202.65.162.0/23 maxlen: 23 202.65.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/u0yWZedfnhna1G-LYJ00RPto7Uc.crl rsync://rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/u0yWZedfnhna1G-LYJ00RPto7Uc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0yWZedfnhna1G-LYJ00RPto7Uc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 841 (0x349) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142DA4, serialNumber=BB4C9665E75F9E19DAD46F8B609D3444FB68ED47 Validity Not Before: Mar 26 13:41:14 2025 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=67e403fa-39e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:9f:26:f6:4c:b3:b5:18:5f:30:a3:cf:f9:ab: df:bd:ad:39:00:67:42:31:ca:22:cd:19:7a:1d:64: c8:e9:28:88:5a:15:ae:3e:b1:37:61:7f:e8:b6:a3: 5a:27:94:ae:5f:97:2a:3e:65:7a:74:73:90:61:09: 17:21:0a:06:66:a2:fc:a1:9c:f7:28:26:e0:f4:b0: b7:10:12:76:e6:0a:f3:63:29:04:41:60:37:e0:74: 42:97:5f:80:fc:3f:5b:fa:fd:90:83:14:4d:79:44: 09:ad:ad:0c:fe:a0:cb:d4:07:7e:3c:49:01:ae:f0: 17:23:bc:b7:46:28:ab:50:c1:e9:0c:fe:2e:04:87: 8f:4e:5d:4f:69:a8:dd:6e:67:ba:f6:c5:45:a2:4d: 2a:01:50:6b:e3:9b:2e:12:c7:3e:df:e4:61:2a:d3: 44:f8:3f:f1:69:70:37:43:41:80:e9:1b:85:54:3e: 80:dc:e2:03:09:8c:37:2c:79:7e:4f:d8:f7:c3:dc: 7b:fd:a2:70:6b:70:84:82:f6:7f:b8:a5:6b:53:9c: 45:5b:91:f4:92:4b:70:6c:de:2c:25:37:35:bb:50: 2a:3a:98:18:48:c6:b6:3f:3c:24:cc:b6:3c:56:87: ec:f4:30:df:57:31:83:b7:e4:c6:26:02:52:aa:36: 55:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:F2:E8:90:10:0B:7D:66:0F:F5:E0:AB:41:6E:59:8B:02:A2:21:4F X509v3 Authority Key Identifier: keyid:BB:4C:96:65:E7:5F:9E:19:DA:D4:6F:8B:60:9D:34:44:FB:68:ED:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/u0yWZedfnhna1G-LYJ00RPto7Uc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0yWZedfnhna1G-LYJ00RPto7Uc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/FC35CE340A4711F0809C3032C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 115.187.96.0/19 118.82.128.0/17 119.235.32.0/21 202.65.162.0-202.65.167.255 Signature Algorithm: sha256WithRSAEncryption bf:fd:bf:1e:02:d2:0d:b1:3c:dd:fe:4f:6b:06:04:9e:ff:7a: 4e:37:73:ad:bf:fb:73:04:28:a8:f0:8c:f7:87:ed:3f:26:8e: 5a:07:c1:48:2d:cf:83:d9:31:bd:d5:2d:59:bf:7b:72:0a:b7: 63:7c:ec:9a:f8:ca:a6:bd:f4:56:61:b3:0e:25:eb:b6:83:96: 5d:56:b3:e0:f1:3a:be:f7:c5:29:f2:4b:05:a0:af:87:ca:9b: 53:3b:72:47:3c:5e:88:ae:51:05:13:8a:0a:8f:01:6f:2f:00: 7e:23:57:86:6f:54:b1:5e:b5:2e:68:66:19:d7:ba:f2:32:d7: 2f:83:69:45:04:ac:1e:44:43:30:ae:90:af:8f:91:d1:b3:20: e9:23:1e:02:90:14:09:10:9e:c3:86:d4:6e:5e:37:51:33:04: 2b:df:16:e9:17:c5:e7:93:3e:f4:9c:37:fc:a6:8b:5c:6a:68: 76:0f:e1:3e:06:78:c0:ab:65:72:aa:3f:ff:f8:41:f0:d3:f5: 2f:87:7a:f0:7a:d0:89:88:a5:9f:de:bc:7f:45:08:f9:fb:50: 87:be:a0:2b:09:5a:60:47:66:55:f2:2e:ea:d1:5b:08:c3:db: 19:d6:69:4c:1b:db:3d:0f:38:6d:a7:6b:be:93:58:0c:fc:0d: 74:ae:9e:cd -----BEGIN CERTIFICATE----- MIIFizCCBHOgAwIBAgICA0kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJEQTQxMTAvBgNVBAUTKEJCNEM5NjY1RTc1RjlFMTlEQUQ0NkY4QjYwOUQzNDQ0 RkI2OEVENDcwHhcNMjUwMzI2MTM0MTE0WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2U0MDNmYS0zOWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwp8m9kyztRhfMKPP+avfva05AGdCMcoizRl6HWTI6SiIWhWuPrE3YX/otqNa J5SuX5cqPmV6dHOQYQkXIQoGZqL8oZz3KCbg9LC3EBJ25grzYykEQWA34HRCl1+A /D9b+v2QgxRNeUQJra0M/qDL1Ad+PEkBrvAXI7y3RiirUMHpDP4uBIePTl1Paajd bme69sVFok0qAVBr45suEsc+3+RhKtNE+D/xaXA3Q0GA6RuFVD6A3OIDCYw3LHl+ T9j3w9x7/aJwa3CEgvZ/uKVrU5xFW5H0kktwbN4sJTc1u1AqOpgYSMa2PzwkzLY8 Vofs9DDfVzGDt+TGJgJSqjZVVQIDAQABo4ICrzCCAqswHQYDVR0OBBYEFLny6JAQ C31mD/Xgq0FuWYsCoiFPMB8GA1UdIwQYMBaAFLtMlmXnX54Z2tRvi2CdNET7aO1H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkRBNC84QUQ0OUY3RUJB RTgxMUVDQTgyRjE0MUNDNEY5QUUwMi91MHlXWmVkZm5obmExRy1MWUowMFJQdG83 VWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UweVdaZWRmbmhuYTFHLUxZSjAwUlB0bzdVYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDJEQTQvOEFENDlGN0VCQUU4MTFFQ0E4MkYxNDFDQzRGOUFFMDIvRkMzNUNFMzQw QTQ3MTFGMDgwOUMzMDMyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOQYIKwYBBQUHAQcBAf8E KjAoMCYEAgABMCADBAVzu2ADBAd2UoADBAN36yAwDAMEAcpBogMEA8pBoDANBgkq hkiG9w0BAQsFAAOCAQEAv/2/HgLSDbE83f5PawYEnv96Tjdzrb/7cwQoqPCM94ft PyaOWgfBSC3Pg9kxvdUtWb97cgq3Y3zsmvjKpr30VmGzDiXrtoOWXVaz4PE6vvfF KfJLBaCvh8qbUztyRzxeiK5RBROKCo8Bby8AfiNXhm9UsV61LmhmGde68jLXL4Np RQSsHkRDMK6Qr4+R0bMg6SMeApAUCRCew4bUbl43UTMEK98W6RfF55M+9Jw3/KaL XGpodg/hPgZ4wKtlcqo///hB8NP1L4d68HrQiYiln968f0UI+ftQh76gKwlaYEdm VfIu6tFbCMPbGdZpTBvbPQ84badrvpNYDPwNdK6ezQ== -----END CERTIFICATE-----Generated at Sat Apr 26 14:53:28 2025 by rpki-client