$ rpki-client -vvf rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/69FDEAC6645511EFB98C143DC4F9AE02.roa File: 69FDEAC6645511EFB98C143DC4F9AE02.roa (raw, json) Hash identifier: OL9yx105s7LK6EsnOhe+XLOZ40wASVHJwc15W55t9pM= Subject key identifier: C3:FC:57:AC:30:9D:2A:90:AE:00:B7:2D:3D:B6:C2:91:D9:E1:7A:5F Certificate issuer: /CN=A917E678/serialNumber=FF3341972DD8A1F6871EDE869A3A1DD92528AEB6 Certificate serial: 0CD9 Authority key identifier: FF:33:41:97:2D:D8:A1:F6:87:1E:DE:86:9A:3A:1D:D9:25:28:AE:B6 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_zNBly3YofaHHt6Gmjod2SUorrY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/69FDEAC6645511EFB98C143DC4F9AE02.roa Signing time: Thu 15 May 2025 06:39:45 +0000 ROA not before: Thu 15 May 2025 06:39:45 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 141180 IP address blocks: 87.119.2.0/24 maxlen: 24 87.119.3.0/24 maxlen: 24 87.119.4.0/24 maxlen: 24 87.119.5.0/24 maxlen: 24 87.119.6.0/24 maxlen: 24 87.119.7.0/24 maxlen: 24 87.119.8.0/24 maxlen: 24 87.119.10.0/24 maxlen: 24 87.119.11.0/24 maxlen: 24 87.119.13.0/24 maxlen: 24 87.119.14.0/24 maxlen: 24 87.119.15.0/24 maxlen: 24 87.119.16.0/24 maxlen: 24 87.119.17.0/24 maxlen: 24 87.119.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.crl rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_zNBly3YofaHHt6Gmjod2SUorrY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 16:53:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3289 (0xcd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E678, serialNumber=FF3341972DD8A1F6871EDE869A3A1DD92528AEB6 Validity Not Before: May 15 06:39:45 2025 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=68258c31-512b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:34:90:f7:e9:fc:22:9b:30:f3:fa:f0:69:9d: da:75:53:3f:0c:5b:48:91:0d:26:7a:09:28:66:37: 61:4d:e3:5b:72:6b:e7:83:05:dc:23:a0:13:f3:33: 67:0f:95:1c:7c:94:5f:b2:f9:b6:2e:03:a8:9c:6c: e8:fe:f1:9c:f7:56:1a:63:a7:d3:cc:8b:6e:ee:8c: 96:7e:43:89:e7:a8:6e:41:3e:68:1e:3d:f5:59:7e: 64:25:da:fc:bc:09:48:44:e7:dc:20:b6:9e:3e:6d: 01:1b:ca:43:83:95:f1:b7:ec:2f:c3:dd:a2:f9:1c: 99:fc:72:80:74:d9:88:7f:94:84:46:63:4a:eb:17: c3:f9:01:cb:3e:15:a0:c3:27:8a:8f:4d:ce:f4:61: a3:25:e1:de:13:58:7a:4a:30:4c:16:6d:01:58:a7: 05:ba:b9:07:60:3c:fa:a2:3f:b6:c2:3f:20:49:94: e8:7c:a1:65:50:67:c2:14:f4:91:20:13:e7:0b:92: ab:a2:7d:9c:41:5c:c0:e1:a8:ee:9b:24:d3:43:ff: 8a:a9:ad:59:1c:3a:e8:df:b7:e2:0e:26:28:6f:e8: 52:be:24:76:be:b9:73:08:04:9f:1b:7d:31:0a:79: ac:01:b9:ec:2d:bf:81:74:67:7f:37:21:92:a2:06: 04:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:FC:57:AC:30:9D:2A:90:AE:00:B7:2D:3D:B6:C2:91:D9:E1:7A:5F X509v3 Authority Key Identifier: keyid:FF:33:41:97:2D:D8:A1:F6:87:1E:DE:86:9A:3A:1D:D9:25:28:AE:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_zNBly3YofaHHt6Gmjod2SUorrY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/69FDEAC6645511EFB98C143DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 87.119.2.0-87.119.8.255 87.119.10.0/23 87.119.13.0-87.119.18.255 Signature Algorithm: sha256WithRSAEncryption 3f:e9:f6:db:c2:57:29:b3:e5:fc:ed:6c:7e:c5:c5:96:87:65: f0:e1:a3:73:5a:67:78:be:7c:49:e2:1d:6b:72:65:af:1a:13: 82:35:ab:4c:cb:2e:e4:1b:f5:c3:1c:ed:7e:0d:09:f3:30:b4: 8e:01:2f:28:09:8a:69:c6:bc:f8:6c:5a:7a:9b:11:be:64:f0: 4e:0c:72:c8:df:46:ba:be:c9:3e:fe:4d:23:4d:aa:0a:81:11: 2b:45:03:c1:14:ac:3b:e0:d2:5c:5c:fb:08:87:11:f1:1d:4d: 12:66:b9:8b:c4:b3:3a:b2:ce:a2:c3:58:e2:1a:5f:39:55:f4: 2a:46:a5:93:10:fd:f4:43:25:a8:0f:ff:c8:4c:78:8d:8c:07: b7:81:ab:55:56:20:31:29:11:41:af:a2:07:18:c7:1a:89:fc: a9:23:4d:3a:0f:4f:72:13:fa:ff:44:b9:50:a5:a6:41:f6:70: 3b:d5:58:b6:a3:e2:bd:14:b0:fa:d5:e0:2b:eb:11:89:c3:16: cf:12:f2:b8:a3:a7:ab:21:81:e2:5f:66:19:2d:b1:1c:9f:a7: 79:de:49:da:6b:55:bc:a4:9f:2f:90:40:5b:02:dd:f1:71:16: 4d:a8:eb:b2:48:05:0d:db:42:7a:e7:bb:97:b1:d2:e3:4a:61: ce:b2:33:d0 -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgICDNkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U2NzgxMTAvBgNVBAUTKEZGMzM0MTk3MkREOEExRjY4NzFFREU4NjlBM0ExREQ5 MjUyOEFFQjYwHhcNMjUwNTE1MDYzOTQ1WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODI1OGMzMS01MTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2DSQ9+n8Ipsw8/rwaZ3adVM/DFtIkQ0megkoZjdhTeNbcmvngwXcI6AT8zNn D5UcfJRfsvm2LgOonGzo/vGc91YaY6fTzItu7oyWfkOJ56huQT5oHj31WX5kJdr8 vAlIROfcILaePm0BG8pDg5Xxt+wvw92i+RyZ/HKAdNmIf5SERmNK6xfD+QHLPhWg wyeKj03O9GGjJeHeE1h6SjBMFm0BWKcFurkHYDz6oj+2wj8gSZTofKFlUGfCFPSR IBPnC5Kron2cQVzA4ajumyTTQ/+Kqa1ZHDro37fiDiYob+hSviR2vrlzCASfG30x CnmsAbnsLb+BdGd/NyGSogYEBwIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFMP8V6ww nSqQrgC3LT22wpHZ4XpfMB8GA1UdIwQYMBaAFP8zQZct2KH2hx7ehpo6HdklKK62 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTY3OC9CRUIzMzNGQTIy NTExMUVBQjJDQjg0NjlDNEY5QUUwMi9fek5CbHkzWW9mYUhIdDZHbWpvZDJTVW9y clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL196TkJseTNZb2ZhSEh0Nkdtam9kMlNVb3JyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0U2NzgvQkVCMzMzRkEyMjUxMTFFQUIyQ0I4NDY5QzRGOUFFMDIvNjlGREVBQzY2 NDU1MTFFRkI5OEMxNDNEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOwYIKwYBBQUHAQcBAf8E LDAqMCgEAgABMCIwDAMEAVd3AgMEAFd3CAMEAVd3CjAMAwQAV3cNAwQAV3cSMA0G CSqGSIb3DQEBCwUAA4IBAQA/6fbbwlcps+X87Wx+xcWWh2Xw4aNzWmd4vnxJ4h1r cmWvGhOCNatMyy7kG/XDHO1+DQnzMLSOAS8oCYppxrz4bFp6mxG+ZPBODHLI30a6 vsk+/k0jTaoKgRErRQPBFKw74NJcXPsIhxHxHU0SZrmLxLM6ss6iw1jiGl85VfQq RqWTEP30QyWoD//ITHiNjAe3gatVViAxKRFBr6IHGMcaifypI006D09yE/r/RLlQ paZB9nA71Vi2o+K9FLD61eAr6xGJwxbPEvK4o6erIYHiX2YZLbEcn6d53knaa1W8 pJ8vkEBbAt3xcRZNqOuySAUN20J657uXsdLjSmHOsjPQ -----END CERTIFICATE-----Generated at Fri Jun 20 13:34:32 2025 by rpki-client