$ rpki-client -vvf rpki.apnic.net/member_repository/A915DA76/AABA34981D8B11E2AA756AE608B02CD2/67AFCD36F73911EE8BEC0A76C4F9AE02.roa File: 67AFCD36F73911EE8BEC0A76C4F9AE02.roa (raw, json) Hash identifier: VVrcitZ2B7U6+APe/mOfl0d7tYYMkpvIARKDnYAu3Cs= Subject key identifier: 5E:45:A0:87:0D:D5:E1:F7:50:0E:55:35:F4:7A:7D:80:0C:94:3B:2A Certificate issuer: /CN=A915DA76/serialNumber=4DEBB8E1222BE0E3F23AEDB75245E0F97B87C74D Certificate serial: 3475 Authority key identifier: 4D:EB:B8:E1:22:2B:E0:E3:F2:3A:ED:B7:52:45:E0:F9:7B:87:C7:4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Teu44SIr4OPyOu23UkXg-XuHx00.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915DA76/AABA34981D8B11E2AA756AE608B02CD2/67AFCD36F73911EE8BEC0A76C4F9AE02.roa Signing time: Wed 26 Mar 2025 14:50:46 +0000 ROA not before: Wed 26 Mar 2025 14:50:46 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 23703 IP address blocks: 202.78.16.0/20 maxlen: 20 202.78.31.0/24 maxlen: 24 2405:d980::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915DA76/AABA34981D8B11E2AA756AE608B02CD2/Teu44SIr4OPyOu23UkXg-XuHx00.crl rsync://rpki.apnic.net/member_repository/A915DA76/AABA34981D8B11E2AA756AE608B02CD2/Teu44SIr4OPyOu23UkXg-XuHx00.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Teu44SIr4OPyOu23UkXg-XuHx00.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 14:34:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13429 (0x3475) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915DA76, serialNumber=4DEBB8E1222BE0E3F23AEDB75245E0F97B87C74D Validity Not Before: Mar 26 14:50:46 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67e41446-8e89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:74:78:c3:14:f4:48:8e:d6:a2:78:f7:84:c2: fc:a6:52:b6:70:92:08:7c:7e:fa:11:ae:3b:b4:15: 23:0d:c1:70:a2:fb:ca:b2:f4:82:3d:f0:2c:ed:72: 06:4f:76:62:95:44:1b:50:7a:5b:d0:85:88:0c:82: a0:6e:97:d2:fd:b5:d6:d6:6a:75:74:be:9b:08:27: b4:5b:3c:89:f2:48:fe:5d:55:7f:04:76:2c:f2:04: 20:c2:b7:1b:f3:d5:00:bb:69:7f:29:38:02:fd:c9: ea:41:06:7b:e1:50:c7:bd:b0:08:d4:d3:73:3e:48: d3:47:01:99:0e:69:70:0b:8f:c6:02:2c:57:b3:96: 4a:d9:33:b1:7a:c0:bf:ff:7c:89:d9:d3:35:76:62: 7d:c2:63:e6:e8:a4:99:7c:e3:48:c7:e7:26:de:fe: f5:bf:c4:e8:3f:58:c7:d5:2d:df:08:ee:da:04:cc: b4:b5:26:4e:88:93:9e:0d:61:c2:7d:41:5c:55:39: be:01:a5:b1:a9:3f:f0:e4:7a:b2:54:8e:e2:ce:1b: 96:a4:68:66:86:b3:aa:87:c1:e5:c2:8e:23:63:15: 5c:14:3a:f8:f0:82:33:b5:e9:35:4f:1a:0b:16:fd: 48:9c:e0:c6:65:37:da:be:a3:fe:79:c4:78:fe:22: 54:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:45:A0:87:0D:D5:E1:F7:50:0E:55:35:F4:7A:7D:80:0C:94:3B:2A X509v3 Authority Key Identifier: keyid:4D:EB:B8:E1:22:2B:E0:E3:F2:3A:ED:B7:52:45:E0:F9:7B:87:C7:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915DA76/AABA34981D8B11E2AA756AE608B02CD2/Teu44SIr4OPyOu23UkXg-XuHx00.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Teu44SIr4OPyOu23UkXg-XuHx00.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DA76/AABA34981D8B11E2AA756AE608B02CD2/67AFCD36F73911EE8BEC0A76C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.78.16.0/20 IPv6: 2405:d980::/32 Signature Algorithm: sha256WithRSAEncryption 1f:2d:39:c4:c0:28:1b:2f:b6:c3:67:f4:60:34:16:74:40:52: 99:a6:18:10:99:ff:b1:b8:c6:d3:c1:c1:4a:dd:2a:d3:60:4c: 4a:9a:58:23:2d:51:7e:58:d3:0c:18:5c:64:52:df:31:e1:50: b2:6e:f9:b1:59:e9:61:2d:73:f9:bb:74:61:35:12:c6:73:68: 57:f9:6a:e4:88:e8:fc:30:f2:de:b2:1f:9e:88:d0:24:22:5f: 79:a0:6e:14:b1:13:cb:ab:c8:72:0f:56:ce:27:31:81:77:a7: d4:62:df:db:14:cc:63:5c:63:a0:d7:b4:71:0b:fa:fa:66:52: b8:27:98:64:cf:68:0f:e0:f3:34:53:58:2c:ea:cf:b6:25:cc: ff:a1:78:43:97:9f:02:e4:c6:71:7a:7e:15:e0:eb:55:64:c3: 8d:ee:bd:0c:b0:58:5a:4c:6f:51:6d:e1:93:f5:a5:fa:da:3b: d0:58:e7:4a:43:e2:bf:2a:2e:9a:c7:c6:74:ec:69:37:e5:87: a9:ed:cc:c0:a0:de:66:85:6d:57:61:0b:d4:aa:9a:41:6b:0f: b5:9b:72:8e:6f:1a:3e:ce:57:d1:92:a8:23:e6:d0:f4:3f:cf: 12:ac:74:e2:ad:a1:88:d3:a2:33:a1:ef:7c:e5:13:73:d7:8c: 17:76:77:30 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICNHUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NURBNzYxMTAvBgNVBAUTKDRERUJCOEUxMjIyQkUwRTNGMjNBRURCNzUyNDVFMEY5 N0I4N0M3NEQwHhcNMjUwMzI2MTQ1MDQ2WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2U0MTQ0Ni04ZTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw3R4wxT0SI7Wonj3hML8plK2cJIIfH76Ea47tBUjDcFwovvKsvSCPfAs7XIG T3ZilUQbUHpb0IWIDIKgbpfS/bXW1mp1dL6bCCe0WzyJ8kj+XVV/BHYs8gQgwrcb 89UAu2l/KTgC/cnqQQZ74VDHvbAI1NNzPkjTRwGZDmlwC4/GAixXs5ZK2TOxesC/ /3yJ2dM1dmJ9wmPm6KSZfONIx+cm3v71v8ToP1jH1S3fCO7aBMy0tSZOiJOeDWHC fUFcVTm+AaWxqT/w5HqyVI7izhuWpGhmhrOqh8Hlwo4jYxVcFDr48IIztek1TxoL Fv1InODGZTfavqP+ecR4/iJU+QIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFF5FoIcN 1eH3UA5VNfR6fYAMlDsqMB8GA1UdIwQYMBaAFE3ruOEiK+Dj8jrtt1JF4Pl7h8dN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1REE3Ni9BQUJBMzQ5ODFE OEIxMUUyQUE3NTZBRTYwOEIwMkNEMi9UZXU0NFNJcjRPUHlPdTIzVWtYZy1YdUh4 MDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RldTQ0U0lyNE9QeU91MjNVa1hnLVh1SHgwMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NURBNzYvQUFCQTM0OTgxRDhCMTFFMkFBNzU2QUU2MDhCMDJDRDIvNjdBRkNEMzZG NzM5MTFFRThCRUMwQTc2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBATKThAwDQQCAAIwBwMFACQF2YAwDQYJKoZIhvcNAQELBQAD ggEBAB8tOcTAKBsvtsNn9GA0FnRAUpmmGBCZ/7G4xtPBwUrdKtNgTEqaWCMtUX5Y 0wwYXGRS3zHhULJu+bFZ6WEtc/m7dGE1EsZzaFf5auSI6Pww8t6yH56I0CQiX3mg bhSxE8uryHIPVs4nMYF3p9Ri39sUzGNcY6DXtHEL+vpmUrgnmGTPaA/g8zRTWCzq z7YlzP+heEOXnwLkxnF6fhXg61Vkw43uvQywWFpMb1Ft4ZP1pfraO9BY50pD4r8q LprHxnTsaTflh6ntzMCg3maFbVdhC9SqmkFrD7Wbco5vGj7OV9GSqCPm0PQ/zxKs dOKtoYjTojOh73zlE3PXjBd2dzA= -----END CERTIFICATE-----Generated at Sat Apr 26 08:13:15 2025 by rpki-client