$ rpki-client -vvf rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/9292865625AA11F0A63D1D85C4F9AE02.roa File: 9292865625AA11F0A63D1D85C4F9AE02.roa (raw, json) Hash identifier: 3k3KaN1j3W/678DW+zVJw9AP9zsgzVJ2wnOYz4kwK+U= Subject key identifier: E9:4C:8A:3E:AE:9D:ED:9F:F3:21:DE:1F:3A:EA:C5:41:79:79:EB:C8 Certificate issuer: /CN=A914EBB2/serialNumber=CD3DF53AA0E9A398595E957015155BCCAC568D15 Certificate serial: DC Authority key identifier: CD:3D:F5:3A:A0:E9:A3:98:59:5E:95:70:15:15:5B:CC:AC:56:8D:15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zT31OqDpo5hZXpVwFRVbzKxWjRU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/9292865625AA11F0A63D1D85C4F9AE02.roa Signing time: Mon 09 Jun 2025 01:58:47 +0000 ROA not before: Mon 09 Jun 2025 01:58:47 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 17476 IP address blocks: 183.90.184.0/24 maxlen: 24 183.90.185.0/24 maxlen: 24 202.36.160.0/23 maxlen: 24 2401:ada0::/32 maxlen: 40 2401:ada0:10::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.crl rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zT31OqDpo5hZXpVwFRVbzKxWjRU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 04:58:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 220 (0xdc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EBB2, serialNumber=CD3DF53AA0E9A398595E957015155BCCAC568D15 Validity Not Before: Jun 9 01:58:47 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=68463fd6-32f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f7:cc:3e:f8:81:cc:37:79:1d:bf:ef:ba:d9: 7c:8b:16:45:20:0e:05:9e:3d:2b:7c:ca:a2:71:a2: fe:19:20:3d:36:4b:49:2a:c1:71:b7:bb:f8:92:1a: 8d:d9:41:5a:0d:08:3b:51:f2:93:52:20:78:c5:48: 09:52:8b:43:1e:0a:d9:31:c7:f4:2e:94:f7:dc:e9: 8b:aa:4d:b5:29:99:a9:1d:05:64:51:85:90:ca:7d: 66:13:72:a1:72:b2:4c:26:54:30:87:47:d5:65:d2: e6:8f:6c:93:95:e2:95:9f:04:df:6c:8c:ba:10:36: dc:97:f6:3f:84:b3:2b:c6:91:97:99:8c:09:5c:5b: 51:6e:f0:fb:c1:73:de:ee:ab:77:87:48:fe:db:8e: bf:86:2d:c5:00:73:33:7b:a0:88:39:26:e7:05:d7: 69:6f:be:b6:21:24:ed:24:eb:17:88:89:f0:50:ed: 2a:5f:14:17:f8:81:05:1d:df:99:12:a7:e2:d4:64: f4:b1:5a:e6:72:cc:f9:70:9d:b9:30:3c:9d:12:2e: 96:0b:d1:f5:16:a1:4d:2f:52:d9:28:f4:b3:e2:7b: 52:11:f8:24:df:dd:15:57:4a:34:82:0c:91:fb:67: 17:2d:c2:2a:52:53:25:56:bb:0a:47:1f:6d:76:83: 93:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:4C:8A:3E:AE:9D:ED:9F:F3:21:DE:1F:3A:EA:C5:41:79:79:EB:C8 X509v3 Authority Key Identifier: keyid:CD:3D:F5:3A:A0:E9:A3:98:59:5E:95:70:15:15:5B:CC:AC:56:8D:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zT31OqDpo5hZXpVwFRVbzKxWjRU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/9292865625AA11F0A63D1D85C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 183.90.184.0/23 202.36.160.0/23 IPv6: 2401:ada0::/32 Signature Algorithm: sha256WithRSAEncryption 52:a5:7c:1d:92:8d:90:40:ff:d9:06:8a:72:e7:61:d8:d7:0c: 38:72:88:f2:d1:56:8e:e7:af:2a:86:d1:09:74:04:63:d1:02: 34:93:26:48:74:ae:2d:3a:3f:72:d6:ab:5b:7f:98:58:28:10: 75:72:f5:2d:4d:6c:83:d3:70:90:66:2f:0a:4a:c4:fb:30:0b: 4b:85:ea:4c:0d:cd:cd:8b:36:16:bf:e9:6a:30:ed:ae:57:08: 50:f7:c8:1d:97:85:7f:fe:cb:e7:c2:d4:a6:4f:8b:f0:71:8f: f1:5f:7f:7b:5b:c0:80:08:6e:1f:8a:4c:04:e0:99:39:65:c3: e0:a5:76:6f:79:d0:a3:ee:df:df:55:d5:e6:91:ea:f3:73:e6: cd:0a:d4:3a:31:50:d0:2c:3c:76:4c:f8:44:9f:46:c4:ee:18: 4b:38:d9:c4:77:31:14:c9:07:8c:17:8f:d1:19:ae:a8:91:9d: cc:b5:ad:a7:bf:8f:5c:51:74:df:78:d5:9d:3e:a9:51:70:db: 1d:15:f8:5c:19:0c:da:d3:2a:91:27:61:b6:06:6d:49:76:f3: dd:61:9f:cf:13:08:ef:ad:16:e5:d5:37:df:b8:a6:81:b3:e5: 7c:10:10:c6:1e:d3:d4:51:1a:7f:94:15:81:21:5b:57:e5:52: b2:3c:70:bc -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICANwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVCQjIxMTAvBgNVBAUTKENEM0RGNTNBQTBFOUEzOTg1OTVFOTU3MDE1MTU1QkND QUM1NjhEMTUwHhcNMjUwNjA5MDE1ODQ3WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODQ2M2ZkNi0zMmYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsvfMPviBzDd5Hb/vutl8ixZFIA4Fnj0rfMqicaL+GSA9NktJKsFxt7v4khqN 2UFaDQg7UfKTUiB4xUgJUotDHgrZMcf0LpT33OmLqk21KZmpHQVkUYWQyn1mE3Kh crJMJlQwh0fVZdLmj2yTleKVnwTfbIy6EDbcl/Y/hLMrxpGXmYwJXFtRbvD7wXPe 7qt3h0j+246/hi3FAHMze6CIOSbnBddpb762ISTtJOsXiInwUO0qXxQX+IEFHd+Z Eqfi1GT0sVrmcsz5cJ25MDydEi6WC9H1FqFNL1LZKPSz4ntSEfgk390VV0o0ggyR +2cXLcIqUlMlVrsKRx9tdoOTfQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFOlMij6u ne2f8yHeHzrqxUF5eevIMB8GA1UdIwQYMBaAFM099Tqg6aOYWV6VcBUVW8ysVo0V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUJCMi9GMzdGMjQ2RTMy OTUxMUVGOUE0ODJGNTVDNEY5QUUwMi96VDMxT3FEcG81aFpYcFZ3RlJWYnpLeFdq UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pUMzFPcURwbzVoWlhwVndGUlZiekt4V2pSVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEVCQjIvRjM3RjI0NkUzMjk1MTFFRjlBNDgyRjU1QzRGOUFFMDIvOTI5Mjg2NTYy NUFBMTFGMEE2M0QxRDg1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAG3WrgDBAHKJKAwDQQCAAIwBwMFACQBraAwDQYJKoZIhvcN AQELBQADggEBAFKlfB2SjZBA/9kGinLnYdjXDDhyiPLRVo7nryqG0Ql0BGPRAjST Jkh0ri06P3LWq1t/mFgoEHVy9S1NbIPTcJBmLwpKxPswC0uF6kwNzc2LNha/6Wow 7a5XCFD3yB2XhX/+y+fC1KZPi/Bxj/Fff3tbwIAIbh+KTATgmTllw+Cldm950KPu 399V1eaR6vNz5s0K1DoxUNAsPHZM+ESfRsTuGEs42cR3MRTJB4wXj9EZrqiRncy1 rae/j1xRdN941Z0+qVFw2x0V+FwZDNrTKpEnYbYGbUl2891hn88TCO+tFuXVN9+4 poGz5XwQEMYe09RRGn+UFYEhW1flUrI8cLw= -----END CERTIFICATE-----Generated at Sat Jun 21 22:23:35 2025 by rpki-client