$ rpki-client -vvf rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/8F1629524FD411EB9F1A0673C4F9AE02.roa File: 8F1629524FD411EB9F1A0673C4F9AE02.roa (raw, json) Hash identifier: 0+1qqFR2dQAbs8bJZhkVHckF6TnHu8C+B8873r1KDqA= Subject key identifier: EF:98:70:AA:99:42:FC:1D:18:20:1B:54:82:EE:9C:BC:CF:D7:3F:A1 Certificate issuer: /CN=A917C6D9/serialNumber=6969D150AD03482081BB1BD7C13BE5F00DC53A38 Certificate serial: 06C0 Authority key identifier: 69:69:D1:50:AD:03:48:20:81:BB:1B:D7:C1:3B:E5:F0:0D:C5:3A:38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWnRUK0DSCCBuxvXwTvl8A3FOjg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/8F1629524FD411EB9F1A0673C4F9AE02.roa Signing time: Thu 06 Mar 2025 22:13:11 +0000 ROA not before: Thu 06 Mar 2025 22:13:11 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 18001 IP address blocks: 103.87.12.0/22 maxlen: 22 116.204.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/aWnRUK0DSCCBuxvXwTvl8A3FOjg.crl rsync://rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/aWnRUK0DSCCBuxvXwTvl8A3FOjg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWnRUK0DSCCBuxvXwTvl8A3FOjg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:50:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1728 (0x6c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C6D9, serialNumber=6969D150AD03482081BB1BD7C13BE5F00DC53A38 Validity Not Before: Mar 6 22:13:11 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67ca1df7-16a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:71:95:bd:ac:e4:da:ab:58:2e:3a:24:38:66: a0:c4:30:ef:7d:64:9c:da:d8:fb:ee:eb:94:69:e6: 19:cd:ed:3a:ab:c7:70:eb:e1:7b:60:31:82:d4:90: ee:d0:07:d3:a7:cd:45:c3:ab:e1:a6:c2:4b:3e:d5: 5c:93:3f:cf:27:eb:7c:6b:f5:25:f0:95:14:44:1b: ef:d6:d7:07:62:92:9d:d5:0c:3b:55:5e:7d:dd:03: fb:8a:89:b0:32:ad:4e:39:b6:15:7a:3e:22:27:68: 14:18:32:63:6f:57:a7:cb:c0:c5:ac:b9:45:69:60: 5a:97:b5:02:c6:c0:b4:a2:ec:16:44:73:69:f0:be: 79:cb:38:8d:20:3f:f1:71:cc:c4:fa:6f:50:79:5a: 69:4b:2e:b8:44:a3:ef:98:49:f2:26:85:07:94:12: 47:7b:b1:62:fa:62:59:6a:f3:48:19:c2:55:f6:f6: cd:0b:60:fd:93:75:68:00:c6:13:19:dd:c4:e7:e2: 6d:af:56:7f:cf:81:52:81:48:31:c2:98:e8:3a:ab: 43:2d:fa:24:96:76:bc:dc:72:29:7d:8e:9e:ea:2a: f6:56:86:a6:ae:fb:fb:17:e0:fb:bd:28:08:c1:19: fc:9f:15:72:9e:0c:a6:d8:86:3e:fc:c5:cf:da:bb: 34:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:98:70:AA:99:42:FC:1D:18:20:1B:54:82:EE:9C:BC:CF:D7:3F:A1 X509v3 Authority Key Identifier: keyid:69:69:D1:50:AD:03:48:20:81:BB:1B:D7:C1:3B:E5:F0:0D:C5:3A:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/aWnRUK0DSCCBuxvXwTvl8A3FOjg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWnRUK0DSCCBuxvXwTvl8A3FOjg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/8F1629524FD411EB9F1A0673C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.87.12.0/22 116.204.212.0/22 Signature Algorithm: sha256WithRSAEncryption 0f:ce:a2:57:ba:11:30:11:32:ae:18:ab:79:6e:df:bb:d0:39: ee:a5:6f:f5:fe:21:c4:a2:88:e0:c6:83:fd:82:f3:26:ed:16: d3:51:36:7c:b0:b2:3e:46:84:03:35:24:bd:64:fc:19:17:eb: 67:83:68:a7:b3:66:a7:ca:2f:77:20:58:50:d8:4e:8a:ef:2c: 22:3c:cb:e2:5c:8c:4f:aa:8e:58:10:d8:5a:ab:5d:50:4a:6c: cd:91:74:4d:61:6a:32:b5:51:e2:7f:20:68:aa:b4:00:f7:de: d3:52:cf:34:bc:29:28:f0:16:fb:a4:7d:9c:e9:b9:ca:a0:c8: e1:bd:ab:5a:25:a9:b5:67:65:9c:15:0b:f7:be:9d:18:a4:ef: 77:b8:c7:a5:65:46:58:33:3f:43:0c:58:c3:e0:14:1f:fa:3a: d0:47:dc:bb:e5:d2:c2:dd:22:bc:39:e0:ab:fb:4b:4b:74:57: cc:cc:c0:f8:3a:0a:93:88:04:31:12:9f:19:19:a3:94:f5:a8: c9:68:4f:2a:68:e9:2c:9c:09:0f:0e:94:da:62:f1:ae:7a:f3: f4:c4:1f:35:6e:27:3d:dc:ff:95:fa:81:4e:5c:79:c3:7f:4a: 8e:0c:65:5d:5d:f0:a9:71:67:4b:6e:ea:dc:89:27:69:b6:47: fb:31:91:63 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBsAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M2RDkxMTAvBgNVBAUTKDY5NjlEMTUwQUQwMzQ4MjA4MUJCMUJEN0MxM0JFNUYw MERDNTNBMzgwHhcNMjUwMzA2MjIxMzExWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2NhMWRmNy0xNmE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvHGVvazk2qtYLjokOGagxDDvfWSc2tj77uuUaeYZze06q8dw6+F7YDGC1JDu 0AfTp81Fw6vhpsJLPtVckz/PJ+t8a/Ul8JUURBvv1tcHYpKd1Qw7VV593QP7iomw Mq1OObYVej4iJ2gUGDJjb1eny8DFrLlFaWBal7UCxsC0ouwWRHNp8L55yziNID/x cczE+m9QeVppSy64RKPvmEnyJoUHlBJHe7Fi+mJZavNIGcJV9vbNC2D9k3VoAMYT Gd3E5+Jtr1Z/z4FSgUgxwpjoOqtDLfoklna83HIpfY6e6ir2Voamrvv7F+D7vSgI wRn8nxVyngym2IY+/MXP2rs00wIDAQABo4ICmzCCApcwHQYDVR0OBBYEFO+YcKqZ QvwdGCAbVILunLzP1z+hMB8GA1UdIwQYMBaAFGlp0VCtA0gggbsb18E75fANxTo4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzZEOS82QTVGMTMyNDRG RDExMUVCQUZCMTY3NkJDNEY5QUUwMi9hV25SVUswRFNDQ0J1eHZYd1R2bDhBM0ZP amcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FXblJVSzBEU0NDQnV4dlh3VHZsOEEzRk9qZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0M2RDkvNkE1RjEzMjQ0RkQxMTFFQkFGQjE2NzZCQzRGOUFFMDIvOEYxNjI5NTI0 RkQ0MTFFQjlGMUEwNjczQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJnVwwDBAJ0zNQwDQYJKoZIhvcNAQELBQADggEBAA/Oole6 ETARMq4Yq3lu37vQOe6lb/X+IcSiiODGg/2C8ybtFtNRNnywsj5GhAM1JL1k/BkX 62eDaKezZqfKL3cgWFDYTorvLCI8y+JcjE+qjlgQ2FqrXVBKbM2RdE1hajK1UeJ/ IGiqtAD33tNSzzS8KSjwFvukfZzpucqgyOG9q1olqbVnZZwVC/e+nRik73e4x6Vl RlgzP0MMWMPgFB/6OtBH3Lvl0sLdIrw54Kv7S0t0V8zMwPg6CpOIBDESnxkZo5T1 qMloTypo6SycCQ8OlNpi8a568/TEHzVuJz3c/5X6gU5cecN/So4MZV1d8KlxZ0tu 6tyJJ2m2R/sxkWM= -----END CERTIFICATE-----Generated at Sat Apr 26 13:44:03 2025 by rpki-client