$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/5C696C684ABB11EFB64F1B36C4F9AE02.roa File: 5C696C684ABB11EFB64F1B36C4F9AE02.roa (raw, json) Hash identifier: DpJlRaFGhxdvGqVu7m9VIpzHXrpSWXkrTNeb5efv6ao= Subject key identifier: 05:D4:C7:8D:5B:FE:B4:BD:0D:34:6A:3D:6B:31:F0:D0:73:AC:11:72 Certificate issuer: /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206 Certificate serial: 37B1 Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/5C696C684ABB11EFB64F1B36C4F9AE02.roa Signing time: Fri 18 Apr 2025 14:50:41 +0000 ROA not before: Fri 18 Apr 2025 14:50:41 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 141031 IP address blocks: 111.88.0.0/24 maxlen: 24 111.88.1.0/24 maxlen: 24 115.186.2.0/23 maxlen: 24 115.186.4.0/22 maxlen: 24 115.186.8.0/23 maxlen: 24 115.186.76.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 14:30:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14257 (0x37b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206 Validity Not Before: Apr 18 14:50:41 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=680266c0-1a66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5c:f1:f5:a3:f4:b5:3d:85:62:49:c2:05:03: db:4b:21:c2:f4:e2:fc:de:06:05:2c:ee:33:35:7e: fb:51:aa:39:99:74:d3:91:54:71:d2:dc:6c:dc:6a: a7:92:d6:67:bf:6f:f8:93:56:4b:90:55:fb:52:d1: 58:78:cf:c8:46:03:df:89:74:67:18:f4:12:40:89: fc:e8:8e:98:12:46:52:d1:2e:28:e0:0a:e0:88:1b: 5d:96:0b:9c:ca:c2:f6:26:7f:54:ad:b0:fc:9d:83: 9f:12:99:fd:39:ca:7c:e8:47:23:cd:ac:bd:38:ed: 04:bb:85:f3:7d:62:dd:31:9f:73:8f:e7:de:ff:5d: 36:06:42:f2:ee:38:f4:9a:85:4d:1a:c1:d1:6c:b7: 4b:72:74:29:c2:57:38:34:4a:98:86:25:9f:19:9b: 1f:38:29:3d:38:51:d6:dc:c5:07:e3:ad:0c:7d:5e: 32:2f:e2:eb:9b:e3:e0:0d:bd:66:4f:50:72:37:e8: 69:63:22:58:94:cc:0e:c1:bd:b8:9b:9a:d2:1e:9a: 3e:3c:1d:2e:42:dd:1e:e8:95:86:a3:9b:9c:07:9f: cc:ed:00:ca:e5:95:3e:25:48:77:1b:12:ef:f3:a7: b0:46:40:e1:15:2b:b2:69:46:2c:e9:f6:df:60:35: f7:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:D4:C7:8D:5B:FE:B4:BD:0D:34:6A:3D:6B:31:F0:D0:73:AC:11:72 X509v3 Authority Key Identifier: keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/5C696C684ABB11EFB64F1B36C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 111.88.0.0/23 115.186.2.0-115.186.9.255 115.186.76.0/22 Signature Algorithm: sha256WithRSAEncryption 08:aa:bd:45:e5:19:ee:bf:21:3e:67:be:f0:f2:23:cc:6d:73: f6:d1:0f:07:59:1c:37:19:f6:b7:83:65:a9:50:11:b8:f8:d3: 20:4b:5a:22:4f:60:f1:ff:c1:e6:ea:62:32:8a:ff:dc:3d:67: fe:30:6a:46:a9:20:c3:18:83:a2:06:40:4b:f9:a3:16:7b:76: 58:68:7a:78:9c:4b:96:98:ce:32:d4:e2:80:33:bc:94:11:72: ad:25:ff:c6:86:53:04:23:50:df:a8:8a:9b:14:0f:3d:85:fb: 6f:05:f0:b9:5a:39:32:b2:d2:74:c9:0f:fd:e8:45:c5:e0:28: 6f:2c:63:b8:4a:44:2d:03:2e:1a:bf:04:2e:94:b0:e0:d9:80: 98:bc:15:12:fb:22:23:71:16:71:38:73:2b:14:00:50:19:ec: c7:80:2a:20:4b:a1:80:a0:09:f5:6e:83:dc:ef:01:b9:06:fb: f1:14:9e:ab:e3:9b:6b:ad:9f:48:7a:30:a9:43:d9:82:07:5e: 4e:01:ff:10:d0:c2:3b:54:f3:4c:0f:8d:13:24:cf:62:40:57: 6b:5c:57:68:62:d8:06:29:6a:d0:67:ee:b1:eb:b9:5a:3a:4d: 7c:3b:6f:4c:d4:e9:78:16:8b:55:75:2c:a3:e4:20:54:6c:f1: 4d:28:65:af -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgICN7EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM4M0IxMTAvBgNVBAUTKEU3NkVCMjU2QzBGQ0IwN0UyOTA3OTc4MzQzRTlBRDlE RDIxRkUyMDYwHhcNMjUwNDE4MTQ1MDQxWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODAyNjZjMC0xYTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv1zx9aP0tT2FYknCBQPbSyHC9OL83gYFLO4zNX77Uao5mXTTkVRx0txs3Gqn ktZnv2/4k1ZLkFX7UtFYeM/IRgPfiXRnGPQSQIn86I6YEkZS0S4o4ArgiBtdlguc ysL2Jn9UrbD8nYOfEpn9Ocp86Ecjzay9OO0Eu4XzfWLdMZ9zj+fe/102BkLy7jj0 moVNGsHRbLdLcnQpwlc4NEqYhiWfGZsfOCk9OFHW3MUH460MfV4yL+Lrm+PgDb1m T1ByN+hpYyJYlMwOwb24m5rSHpo+PB0uQt0e6JWGo5ucB5/M7QDK5ZU+JUh3GxLv 86ewRkDhFSuyaUYs6fbfYDX3EwIDAQABo4ICqTCCAqUwHQYDVR0OBBYEFAXUx41b /rS9DTRqPWsx8NBzrBFyMB8GA1UdIwQYMBaAFOduslbA/LB+KQeXg0PprZ3SH+IG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzgzQi9FNEUxMEI0QTFE ODgxMUUyQTAxMkNCRTEwOEIwMkNEMi81MjZ5VnNEOHNINHBCNWVEUS1tdG5kSWY0 Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzUyNnlWc0Q4c0g0cEI1ZURRLW10bmRJZjRnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkM4M0IvRTRFMTBCNEExRDg4MTFFMkEwMTJDQkUxMDhCMDJDRDIvNUM2OTZDNjg0 QUJCMTFFRkI2NEYxQjM2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMwYIKwYBBQUHAQcBAf8E JDAiMCAEAgABMBoDBAFvWAAwDAMEAXO6AgMEAXO6CAMEAnO6TDANBgkqhkiG9w0B AQsFAAOCAQEACKq9ReUZ7r8hPme+8PIjzG1z9tEPB1kcNxn2t4NlqVARuPjTIEta Ik9g8f/B5upiMor/3D1n/jBqRqkgwxiDogZAS/mjFnt2WGh6eJxLlpjOMtTigDO8 lBFyrSX/xoZTBCNQ36iKmxQPPYX7bwXwuVo5MrLSdMkP/ehFxeAobyxjuEpELQMu Gr8ELpSw4NmAmLwVEvsiI3EWcThzKxQAUBnsx4AqIEuhgKAJ9W6D3O8BuQb78RSe q+Oba62fSHowqUPZggdeTgH/ENDCO1TzTA+NEyTPYkBXa1xXaGLYBilq0Gfuseu5 WjpNfDtvTNTpeBaLVXUso+QgVGzxTShlrw== -----END CERTIFICATE-----Generated at Sat Apr 26 12:34:04 2025 by rpki-client