$ rpki-client -vvf rpki.apnic.net/member_repository/A911C005/8CA68276AAE711EAA9122B0EC4F9AE02/B0071914AAE811EA8412810FC4F9AE02.roa File: B0071914AAE811EA8412810FC4F9AE02.roa (raw, json) Hash identifier: cT6sVy2cPkGv5IyoVyqlT1wpNogGAW7RrVuiP5uIBJw= Subject key identifier: B0:DD:C2:62:86:CE:48:7F:D9:22:CE:7B:6D:B7:25:4A:FC:A5:7C:EC Certificate issuer: /CN=A911C005/serialNumber=830DCFCB5A9AA0C7FA7D7AB9989DA2343DED2C22 Certificate serial: 08CB Authority key identifier: 83:0D:CF:CB:5A:9A:A0:C7:FA:7D:7A:B9:98:9D:A2:34:3D:ED:2C:22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gw3Py1qaoMf6fXq5mJ2iND3tLCI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C005/8CA68276AAE711EAA9122B0EC4F9AE02/B0071914AAE811EA8412810FC4F9AE02.roa Signing time: Tue 04 Feb 2025 20:19:29 +0000 ROA not before: Tue 04 Feb 2025 20:19:29 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 9474 IP address blocks: 202.140.64.0/19 maxlen: 19 202.140.64.0/20 maxlen: 20 202.140.69.0/24 maxlen: 24 202.140.72.0/24 maxlen: 24 202.140.76.0/24 maxlen: 24 202.140.78.0/24 maxlen: 24 202.140.80.0/21 maxlen: 21 202.140.88.0/21 maxlen: 21 202.140.90.0/24 maxlen: 24 202.140.92.0/24 maxlen: 24 202.140.94.0/24 maxlen: 24 202.140.96.0/19 maxlen: 19 202.140.101.0/24 maxlen: 24 202.140.107.0/24 maxlen: 24 202.140.108.0/24 maxlen: 24 202.140.110.0/24 maxlen: 24 202.140.112.0/24 maxlen: 24 202.140.114.0/24 maxlen: 24 2403:fa00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C005/8CA68276AAE711EAA9122B0EC4F9AE02/gw3Py1qaoMf6fXq5mJ2iND3tLCI.crl rsync://rpki.apnic.net/member_repository/A911C005/8CA68276AAE711EAA9122B0EC4F9AE02/gw3Py1qaoMf6fXq5mJ2iND3tLCI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gw3Py1qaoMf6fXq5mJ2iND3tLCI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:09:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2251 (0x8cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C005, serialNumber=830DCFCB5A9AA0C7FA7D7AB9989DA2343DED2C22 Validity Not Before: Feb 4 20:19:29 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=67a27650-ad01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:11:1f:51:18:15:2c:d1:b3:cb:18:80:9c:61: 30:89:a8:79:c5:1a:59:e5:13:c5:97:0b:45:c0:6e: 07:2a:e4:74:97:65:fc:8b:20:54:f5:f2:28:74:41: 40:0d:d9:41:de:35:11:f3:e0:0e:4e:29:93:b3:54: 58:bf:d6:c5:99:b9:14:42:e6:03:2d:fe:74:90:3d: d0:fe:76:dd:f8:31:59:ad:75:3d:7e:63:16:20:0c: 4e:68:04:12:70:c4:5f:6f:fc:21:52:68:aa:f9:f0: 30:db:dc:5e:19:49:5b:f6:b5:01:93:7b:df:44:1e: c0:9b:6e:33:70:b5:a4:90:45:2b:4c:0f:89:5f:02: ce:c1:a6:23:e5:95:3b:cf:19:12:65:ff:fe:84:04: bc:88:c6:64:81:01:4f:e8:29:15:35:ca:6b:02:32: 1c:02:95:ea:92:9a:f0:a7:44:55:16:61:e1:6b:c8: c4:8f:4f:e4:83:94:be:28:85:a1:c4:6c:c6:4e:98: 8b:be:91:d1:aa:be:c0:84:5d:dd:e9:a9:8e:d1:1f: 91:3e:36:2b:91:8a:27:07:f1:3a:0a:b9:3e:68:67: c1:c8:23:e8:f1:f1:d4:b6:74:e2:07:18:bf:74:bb: 79:b4:63:0c:78:fe:48:73:12:b0:d5:35:1f:0e:8f: 79:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:DD:C2:62:86:CE:48:7F:D9:22:CE:7B:6D:B7:25:4A:FC:A5:7C:EC X509v3 Authority Key Identifier: keyid:83:0D:CF:CB:5A:9A:A0:C7:FA:7D:7A:B9:98:9D:A2:34:3D:ED:2C:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C005/8CA68276AAE711EAA9122B0EC4F9AE02/gw3Py1qaoMf6fXq5mJ2iND3tLCI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gw3Py1qaoMf6fXq5mJ2iND3tLCI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C005/8CA68276AAE711EAA9122B0EC4F9AE02/B0071914AAE811EA8412810FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.140.64.0/18 IPv6: 2403:fa00::/32 Signature Algorithm: sha256WithRSAEncryption 56:81:41:b3:ed:ed:8d:49:8a:a0:b6:c1:a5:1a:05:fd:9f:c0: fb:7d:05:76:23:ac:12:31:2b:f8:31:9d:89:2b:fd:11:ab:f3: 6e:15:63:2c:b5:e0:4d:83:be:03:4e:d6:59:c5:90:d6:5c:18: 72:7d:dc:63:19:bc:34:87:6a:5d:3b:28:04:5e:fc:f9:23:b7: de:ed:cd:0d:55:8c:14:2f:0d:4c:fe:8c:49:ab:92:fb:ac:12: de:de:df:d9:88:0a:c5:2b:ec:9d:ca:6c:ad:78:24:bb:79:30: 90:44:f5:b6:7a:e5:f2:e3:22:04:da:86:00:25:04:8a:91:d5: af:69:16:0f:95:d1:32:71:21:08:12:52:7c:a1:d8:2c:f5:36: 45:b7:12:ac:81:5b:90:42:9f:69:4f:94:0b:ae:2e:86:e9:bc: 7d:88:4c:a9:e2:21:6e:14:76:42:d8:12:31:85:af:29:41:df: c6:c8:cd:ac:52:b7:c4:96:b9:f6:f7:29:a2:ca:4f:4d:e2:a8: 53:0d:5e:17:73:fe:52:f2:63:d5:f7:c1:b4:b0:23:6f:18:cc: a9:46:4c:e1:22:b3:74:84:ca:4b:dc:36:f4:eb:28:05:8d:14: 14:31:31:e2:39:cf:a7:a1:cc:51:a3:c0:32:ea:86:33:ce:f0: 33:93:d9:6d -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICCMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMwMDUxMTAvBgNVBAUTKDgzMERDRkNCNUE5QUEwQzdGQTdEN0FCOTk4OURBMjM0 M0RFRDJDMjIwHhcNMjUwMjA0MjAxOTI5WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2EyNzY1MC1hZDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtBEfURgVLNGzyxiAnGEwiah5xRpZ5RPFlwtFwG4HKuR0l2X8iyBU9fIodEFA DdlB3jUR8+AOTimTs1RYv9bFmbkUQuYDLf50kD3Q/nbd+DFZrXU9fmMWIAxOaAQS cMRfb/whUmiq+fAw29xeGUlb9rUBk3vfRB7Am24zcLWkkEUrTA+JXwLOwaYj5ZU7 zxkSZf/+hAS8iMZkgQFP6CkVNcprAjIcApXqkprwp0RVFmHha8jEj0/kg5S+KIWh xGzGTpiLvpHRqr7AhF3d6amO0R+RPjYrkYonB/E6Crk+aGfByCPo8fHUtnTiBxi/ dLt5tGMMeP5IcxKw1TUfDo95WwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFLDdwmKG zkh/2SLOe223JUr8pXzsMB8GA1UdIwQYMBaAFIMNz8tamqDH+n16uZidojQ97Swi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzAwNS84Q0E2ODI3NkFB RTcxMUVBQTkxMjJCMEVDNEY5QUUwMi9ndzNQeTFxYW9NZjZmWHE1bUoyaU5EM3RM Q0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2d3M1B5MXFhb01mNmZYcTVtSjJpTkQzdExDSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUMwMDUvOENBNjgyNzZBQUU3MTFFQUE5MTIyQjBFQzRGOUFFMDIvQjAwNzE5MTRB QUU4MTFFQTg0MTI4MTBGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAbKjEAwDQQCAAIwBwMFACQD+gAwDQYJKoZIhvcNAQELBQAD ggEBAFaBQbPt7Y1JiqC2waUaBf2fwPt9BXYjrBIxK/gxnYkr/RGr824VYyy14E2D vgNO1lnFkNZcGHJ93GMZvDSHal07KARe/Pkjt97tzQ1VjBQvDUz+jEmrkvusEt7e 39mICsUr7J3KbK14JLt5MJBE9bZ65fLjIgTahgAlBIqR1a9pFg+V0TJxIQgSUnyh 2Cz1NkW3EqyBW5BCn2lPlAuuLobpvH2ITKniIW4UdkLYEjGFrylB38bIzaxSt8SW ufb3KaLKT03iqFMNXhdz/lLyY9X3wbSwI28YzKlGTOEis3SEykvcNvTrKAWNFBQx MeI5z6ehzFGjwDLqhjPO8DOT2W0= -----END CERTIFICATE-----Generated at Tue Apr 22 11:15:47 2025 by rpki-client