$ rpki-client -vvf rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/150612CA903711EEB0B65F74C4F9AE02.roa File: 150612CA903711EEB0B65F74C4F9AE02.roa (raw, json) Hash identifier: SULJZKojbxFj8K8KbcU3ma/BTiutIQmKdFqidvy+Rfw= Subject key identifier: 1F:2F:11:31:29:67:D5:CB:0E:FB:D2:46:44:32:B0:89:3A:BE:85:D3 Certificate issuer: /CN=A91AABB1/serialNumber=EB7FE9892DF000255FCF3AC0B2B4D12AEA6FF806 Certificate serial: 35C0 Authority key identifier: EB:7F:E9:89:2D:F0:00:25:5F:CF:3A:C0:B2:B4:D1:2A:EA:6F:F8:06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/150612CA903711EEB0B65F74C4F9AE02.roa Signing time: Wed 04 Jun 2025 15:10:51 +0000 ROA not before: Wed 04 Jun 2025 15:10:51 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 17806 IP address blocks: 114.130.0.0/17 maxlen: 24 114.130.6.0/25 maxlen: 26 114.130.6.128/25 maxlen: 26 114.130.11.0/26 maxlen: 26 114.130.125.0/25 maxlen: 27 114.130.192.0/19 maxlen: 19 114.130.223.0/24 maxlen: 24 2403:ec00::/32 maxlen: 40 2403:ec00::/44 maxlen: 48 2403:ec00:8::/64 maxlen: 64 2403:ec00:8:1::/64 maxlen: 64 2403:ec00:25::/48 maxlen: 48 2403:ec00:34::/48 maxlen: 48 2403:ec00:35::/48 maxlen: 48 2403:ec00:36::/48 maxlen: 48 2403:ec00:37::/48 maxlen: 48 2403:ec00:38::/48 maxlen: 48 2403:ec00:39::/48 maxlen: 48 2403:ec00:50::/48 maxlen: 48 2403:ec00:51::/48 maxlen: 48 2403:ec00:100::/41 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.crl rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Jun 2025 14:54:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13760 (0x35c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AABB1, serialNumber=EB7FE9892DF000255FCF3AC0B2B4D12AEA6FF806 Validity Not Before: Jun 4 15:10:51 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=684061fb-8f0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:05:77:24:8a:ad:93:92:3d:57:db:f8:f8:3e: 88:1e:d5:ce:00:29:91:2f:c2:24:e5:b8:e5:5b:47: 21:68:c6:31:22:c1:bd:e0:39:cb:3e:01:d1:5a:6b: 51:30:33:94:d8:50:9c:54:53:1f:7e:04:c9:a9:3f: 6b:5b:51:77:18:ab:ba:e9:95:be:e2:0d:9a:b1:40: 75:87:00:10:9c:fb:59:48:b6:ca:e9:a0:6d:5f:0f: f7:61:6e:37:6e:1f:94:81:a3:28:dc:84:fa:cd:c5: c4:ef:c3:bf:b4:98:c9:11:b3:10:de:cb:81:eb:a6: 73:ed:2c:0c:c3:28:1b:3e:62:ca:95:76:58:7c:d9: b6:5d:e3:65:16:97:7f:0a:ef:a6:3a:cb:7e:78:c0: 96:98:7e:67:0f:4c:10:ad:a2:e4:24:d0:e1:46:ed: 4f:e3:3a:6e:cf:ab:8b:45:67:9f:24:17:20:e8:2c: 78:c7:a6:ee:f3:3d:41:c9:9a:7e:6b:e2:38:12:c4: 52:07:30:db:3a:db:5d:3b:dc:86:d8:eb:eb:da:7c: 71:dc:6d:6c:86:35:24:e9:ca:4c:31:10:2a:0e:4e: 54:65:75:8b:b2:8b:c8:80:e7:ac:61:9a:f3:a6:47: 66:47:3f:4f:09:fc:1b:fc:cf:75:ff:ee:4c:eb:ec: 70:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:2F:11:31:29:67:D5:CB:0E:FB:D2:46:44:32:B0:89:3A:BE:85:D3 X509v3 Authority Key Identifier: keyid:EB:7F:E9:89:2D:F0:00:25:5F:CF:3A:C0:B2:B4:D1:2A:EA:6F:F8:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/150612CA903711EEB0B65F74C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 114.130.0.0/17 114.130.192.0/19 IPv6: 2403:ec00::/32 Signature Algorithm: sha256WithRSAEncryption 27:93:e1:ef:32:a3:ec:38:f8:2a:3b:78:c2:e1:37:1e:4b:67: 03:b1:ab:54:ef:af:f9:7c:f6:66:cc:73:cb:ab:27:35:7c:c1: 65:5c:c0:8b:7d:6c:11:a5:81:e1:9f:1f:a3:e6:1a:a8:fd:55: 64:83:56:99:66:de:0d:13:8e:89:51:76:ba:74:52:00:5f:02: 3f:78:e0:a9:60:dc:27:f2:31:5f:f6:02:a4:e2:6d:4a:15:d4: f5:e2:d8:ac:1f:f5:a6:3c:0f:29:c8:38:b2:39:eb:73:ef:54: 11:8e:ff:32:22:41:23:46:bc:dd:c1:46:89:1b:d0:70:9e:ad: 08:ae:42:80:0e:b4:99:41:2d:c3:17:a2:79:2f:70:ba:a0:18: e8:aa:36:31:31:99:08:64:97:3c:0e:22:bb:f7:33:3b:ae:da: 0e:2a:f6:54:70:6d:aa:24:6a:eb:e3:30:36:83:53:dd:d7:8c: ac:b3:53:ba:b3:b2:de:13:d3:c4:e2:c4:50:64:4e:e6:79:b5: d1:18:90:7b:62:0e:2b:33:2d:58:fe:80:23:65:1b:f7:e6:cb: a6:4b:60:06:73:3c:ed:1a:86:3d:ca:22:da:5f:02:04:f5:1a: b2:54:ff:8a:52:de:31:45:0b:e4:e4:1c:df:24:8c:d3:92:f9: 8e:32:b4:83 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICNcAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFCQjExMTAvBgNVBAUTKEVCN0ZFOTg5MkRGMDAwMjU1RkNGM0FDMEIyQjREMTJB RUE2RkY4MDYwHhcNMjUwNjA0MTUxMDUxWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODQwNjFmYi04ZjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0wV3JIqtk5I9V9v4+D6IHtXOACmRL8Ik5bjlW0chaMYxIsG94DnLPgHRWmtR MDOU2FCcVFMffgTJqT9rW1F3GKu66ZW+4g2asUB1hwAQnPtZSLbK6aBtXw/3YW43 bh+UgaMo3IT6zcXE78O/tJjJEbMQ3suB66Zz7SwMwygbPmLKlXZYfNm2XeNlFpd/ Cu+mOst+eMCWmH5nD0wQraLkJNDhRu1P4zpuz6uLRWefJBcg6Cx4x6bu8z1ByZp+ a+I4EsRSBzDbOttdO9yG2Ovr2nxx3G1shjUk6cpMMRAqDk5UZXWLsovIgOesYZrz pkdmRz9PCfwb/M91/+5M6+xwtQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFB8vETEp Z9XLDvvSRkQysIk6voXTMB8GA1UdIwQYMBaAFOt/6Ykt8AAlX886wLK00Srqb/gG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUJCMS84ODc0RTlFODFE OTgxMUUyOTc4OEE5ODIwOEIwMkNEMi82M19waVMzd0FDVmZ6enJBc3JUUkt1cHYt QVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzYzX3BpUzN3QUNWZnp6ckFzclRSS3Vwdi1BWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUFCQjEvODg3NEU5RTgxRDk4MTFFMjk3ODhBOTgyMDhCMDJDRDIvMTUwNjEyQ0E5 MDM3MTFFRUIwQjY1Rjc0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAdyggADBAVygsAwDQQCAAIwBwMFACQD7AAwDQYJKoZIhvcN AQELBQADggEBACeT4e8yo+w4+Co7eMLhNx5LZwOxq1Tvr/l89mbMc8urJzV8wWVc wIt9bBGlgeGfH6PmGqj9VWSDVplm3g0TjolRdrp0UgBfAj944Klg3CfyMV/2AqTi bUoV1PXi2Kwf9aY8DynIOLI563PvVBGO/zIiQSNGvN3BRokb0HCerQiuQoAOtJlB LcMXonkvcLqgGOiqNjExmQhklzwOIrv3Mzuu2g4q9lRwbaokauvjMDaDU93XjKyz U7qzst4T08TixFBkTuZ5tdEYkHtiDiszLVj+gCNlG/fmy6ZLYAZzPO0ahj3KItpf AgT1GrJU/4pS3jFFC+TkHN8kjNOS+Y4ytIM= -----END CERTIFICATE-----Generated at Sat Jun 21 23:54:08 2025 by rpki-client