$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/B8F80AE47A7111EFB66E5A5EC4F9AE02.roa File: B8F80AE47A7111EFB66E5A5EC4F9AE02.roa (raw, json) Hash identifier: TGyJb3hl/QrckCR9Qj8VxHP6JP5BXsHy9Ho/aKDW5AE= Subject key identifier: B9:13:04:ED:76:23:AB:D2:75:95:A9:05:BD:95:3F:CD:0B:45:FE:DA Certificate issuer: /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206 Certificate serial: 37B4 Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/B8F80AE47A7111EFB66E5A5EC4F9AE02.roa Signing time: Fri 18 Apr 2025 14:50:43 +0000 ROA not before: Fri 18 Apr 2025 14:50:43 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 149419 IP address blocks: 111.88.168.0/24 maxlen: 24 111.88.169.0/24 maxlen: 24 111.88.170.0/24 maxlen: 24 111.88.171.0/24 maxlen: 24 111.88.239.0/24 maxlen: 24 115.186.62.0/24 maxlen: 24 115.186.117.0/24 maxlen: 24 115.186.118.0/24 maxlen: 24 115.186.119.0/24 maxlen: 24 115.186.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 14:30:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14260 (0x37b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206 Validity Not Before: Apr 18 14:50:43 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=680266c3-188c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:da:3f:22:c4:87:db:23:5b:9d:f1:9e:3a:35: bf:d4:0e:94:05:7c:06:37:92:4f:50:f3:e7:cf:40: 76:b7:f0:88:89:f7:6c:36:d2:4c:bf:66:5b:4a:4b: a6:9a:68:69:52:49:d9:a6:bf:13:c4:f2:61:79:b1: 13:6c:a3:cf:0e:6d:25:fd:d5:42:60:50:40:61:3e: fd:dc:56:d9:c9:db:2d:42:22:50:7a:94:bb:aa:15: e9:bd:83:3a:b9:c2:71:e0:51:16:7f:16:c9:c2:21: ad:3f:af:4a:bc:63:5b:a8:f0:99:7a:f7:7a:2b:be: c2:86:51:4d:aa:61:d8:91:8b:1c:97:da:13:de:9a: b1:42:ed:bf:f0:93:4c:83:1b:1e:b5:85:a1:f1:9f: 74:a8:47:60:ff:e0:7d:0c:0a:bc:b2:f3:a9:2a:f2: 06:ad:07:99:d8:ed:56:4c:28:e9:1d:6d:c2:79:15: b2:53:d8:c9:84:9d:58:97:24:26:25:fb:11:bc:3b: e9:a8:e1:02:e5:cc:8b:4d:9e:6c:9d:c2:b1:e0:7c: a1:6f:12:62:e9:b6:bd:53:f8:d1:ef:69:5b:71:a9: f0:65:42:cd:8f:95:57:9a:12:42:de:ea:26:22:92: 69:73:ae:68:39:ef:04:d8:0e:d8:f0:68:ac:63:d4: 05:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:13:04:ED:76:23:AB:D2:75:95:A9:05:BD:95:3F:CD:0B:45:FE:DA X509v3 Authority Key Identifier: keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/B8F80AE47A7111EFB66E5A5EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 111.88.168.0/22 111.88.239.0/24 115.186.62.0/24 115.186.117.0-115.186.120.255 Signature Algorithm: sha256WithRSAEncryption 72:1f:eb:ff:52:c7:62:fa:ad:cb:13:df:fa:54:7a:22:de:55: 63:46:5f:29:d9:42:cc:98:d7:3b:5f:31:f3:aa:89:7f:dd:db: 3a:c0:30:fd:02:c9:aa:47:2e:07:ea:4d:7d:85:cc:e4:6a:2f: 81:37:a0:bf:83:cc:13:78:5a:de:f8:a6:59:d1:ce:5e:56:b1: ad:61:0d:15:dd:44:96:2c:43:51:22:cc:a6:b3:c7:1b:29:89: f4:c4:9d:5d:58:1b:ab:2f:9a:51:dd:3d:d0:9d:4e:96:80:76: d5:95:a6:a3:8d:3c:87:df:2a:dc:1e:a1:03:e4:57:46:11:c2: d7:9c:68:a4:71:d1:b2:c7:36:15:b4:04:55:99:dc:b8:0a:15: 92:9c:f7:03:7a:c5:d2:ae:a1:a2:36:9b:af:cd:4d:62:62:f1: 91:ae:01:99:83:53:d8:84:a0:bd:b6:6f:74:5e:fa:90:9b:fb: dd:32:ea:05:51:da:b2:81:09:cb:bd:79:2b:0c:9a:00:22:bc: ce:c8:73:06:1e:e5:81:41:ae:4b:6c:08:af:21:44:33:c9:f9: 6a:f2:d4:ba:01:e7:24:4c:9e:64:b0:25:43:03:5e:e4:22:7f: 8d:1d:41:89:93:f9:4b:c3:da:11:24:71:5c:fb:be:63:71:e2: 65:41:0f:17 -----BEGIN CERTIFICATE----- MIIFizCCBHOgAwIBAgICN7QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM4M0IxMTAvBgNVBAUTKEU3NkVCMjU2QzBGQ0IwN0UyOTA3OTc4MzQzRTlBRDlE RDIxRkUyMDYwHhcNMjUwNDE4MTQ1MDQzWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODAyNjZjMy0xODhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1No/IsSH2yNbnfGeOjW/1A6UBXwGN5JPUPPnz0B2t/CIifdsNtJMv2ZbSkum mmhpUknZpr8TxPJhebETbKPPDm0l/dVCYFBAYT793FbZydstQiJQepS7qhXpvYM6 ucJx4FEWfxbJwiGtP69KvGNbqPCZevd6K77ChlFNqmHYkYscl9oT3pqxQu2/8JNM gxsetYWh8Z90qEdg/+B9DAq8svOpKvIGrQeZ2O1WTCjpHW3CeRWyU9jJhJ1YlyQm JfsRvDvpqOEC5cyLTZ5sncKx4HyhbxJi6ba9U/jR72lbcanwZULNj5VXmhJC3uom IpJpc65oOe8E2A7Y8GisY9QFEwIDAQABo4ICrzCCAqswHQYDVR0OBBYEFLkTBO12 I6vSdZWpBb2VP80LRf7aMB8GA1UdIwQYMBaAFOduslbA/LB+KQeXg0PprZ3SH+IG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzgzQi9FNEUxMEI0QTFE ODgxMUUyQTAxMkNCRTEwOEIwMkNEMi81MjZ5VnNEOHNINHBCNWVEUS1tdG5kSWY0 Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzUyNnlWc0Q4c0g0cEI1ZURRLW10bmRJZjRnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkM4M0IvRTRFMTBCNEExRDg4MTFFMkEwMTJDQkUxMDhCMDJDRDIvQjhGODBBRTQ3 QTcxMTFFRkI2NkU1QTVFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOQYIKwYBBQUHAQcBAf8E KjAoMCYEAgABMCADBAJvWKgDBABvWO8DBABzuj4wDAMEAHO6dQMEAHO6eDANBgkq hkiG9w0BAQsFAAOCAQEAch/r/1LHYvqtyxPf+lR6It5VY0ZfKdlCzJjXO18x86qJ f93bOsAw/QLJqkcuB+pNfYXM5GovgTegv4PME3ha3vimWdHOXlaxrWENFd1ElixD USLMprPHGymJ9MSdXVgbqy+aUd090J1OloB21ZWmo408h98q3B6hA+RXRhHC15xo pHHRssc2FbQEVZncuAoVkpz3A3rF0q6hojabr81NYmLxka4BmYNT2ISgvbZvdF76 kJv73TLqBVHasoEJy715KwyaACK8zshzBh7lgUGuS2wIryFEM8n5avLUugHnJEye ZLAlQwNe5CJ/jR1BiZP5S8PaESRxXPu+Y3HiZUEPFw== -----END CERTIFICATE-----Generated at Sat Apr 26 12:25:34 2025 by rpki-client