$ rpki-client -vvf rpki.apnic.net/member_repository/A912582A/78D7496EDDE811EEA3B0E713C4F9AE02/AEC87CF641F111EFAA3E956BC4F9AE02.roa File: AEC87CF641F111EFAA3E956BC4F9AE02.roa (raw, json) Hash identifier: mXUMVXFLrrSWvJCpuu18ijJfWusFAjCWTTEEiobIVgs= Subject key identifier: 16:24:20:41:F5:21:E9:8F:50:0C:81:0C:39:92:21:8B:6E:91:4A:EF Certificate issuer: /CN=A912582A/serialNumber=7A0FD032BC281210B3C9522B47158D56CCDEA60A Certificate serial: CB Authority key identifier: 7A:0F:D0:32:BC:28:12:10:B3:C9:52:2B:47:15:8D:56:CC:DE:A6:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eg_QMrwoEhCzyVIrRxWNVszepgo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912582A/78D7496EDDE811EEA3B0E713C4F9AE02/AEC87CF641F111EFAA3E956BC4F9AE02.roa Signing time: Sat 29 Mar 2025 05:30:52 +0000 ROA not before: Sat 29 Mar 2025 05:30:52 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 152632 IP address blocks: 202.36.122.0/23 maxlen: 23 202.36.122.0/24 maxlen: 24 202.36.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912582A/78D7496EDDE811EEA3B0E713C4F9AE02/eg_QMrwoEhCzyVIrRxWNVszepgo.crl rsync://rpki.apnic.net/member_repository/A912582A/78D7496EDDE811EEA3B0E713C4F9AE02/eg_QMrwoEhCzyVIrRxWNVszepgo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eg_QMrwoEhCzyVIrRxWNVszepgo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 04:31:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 203 (0xcb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912582A, serialNumber=7A0FD032BC281210B3C9522B47158D56CCDEA60A Validity Not Before: Mar 29 05:30:52 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67e7858b-2e65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4d:fa:3a:48:e9:19:ea:f6:23:15:f1:c8:bf: 44:3f:e8:a5:8e:83:d3:7a:80:2d:db:f8:6a:36:ad: 23:4e:81:ff:2b:9f:be:4d:78:63:5e:c0:a2:f8:f2: 69:e6:dc:db:a0:68:ba:c1:aa:e6:c7:a3:1d:3f:3b: d0:39:d4:06:58:2a:7d:74:1d:7c:4d:c9:f0:f5:25: 26:05:0b:6e:6b:17:a0:8c:33:62:3c:24:b2:37:16: e7:4d:3b:df:4e:c9:05:c9:6c:14:a9:23:a7:cc:8a: 43:65:4a:ca:3b:68:e5:6d:0f:cb:6f:1e:e2:1b:fb: f2:fe:f6:d3:81:92:9d:77:e1:53:27:58:48:fd:ce: 71:35:74:28:ca:ea:f4:21:90:d2:5f:3c:15:e8:ec: e8:75:d2:cd:af:53:54:ee:ab:93:f7:6a:b3:ed:83: 89:4a:0c:bd:f0:48:d1:1a:95:d9:54:75:30:41:43: 8a:4c:3c:59:90:fb:41:0c:fd:48:4a:14:bf:3a:4e: 2f:cf:c4:11:af:19:17:0d:7d:b3:3a:ca:ae:1c:b0: 49:f3:95:16:c4:fa:b9:09:5b:77:95:df:bd:64:60: df:fe:dd:35:47:5b:bc:f6:2f:54:08:56:99:2e:17: ed:58:f5:9a:e8:0e:5b:52:3d:e9:f1:2d:60:8e:b8: 47:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:24:20:41:F5:21:E9:8F:50:0C:81:0C:39:92:21:8B:6E:91:4A:EF X509v3 Authority Key Identifier: keyid:7A:0F:D0:32:BC:28:12:10:B3:C9:52:2B:47:15:8D:56:CC:DE:A6:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912582A/78D7496EDDE811EEA3B0E713C4F9AE02/eg_QMrwoEhCzyVIrRxWNVszepgo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eg_QMrwoEhCzyVIrRxWNVszepgo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912582A/78D7496EDDE811EEA3B0E713C4F9AE02/AEC87CF641F111EFAA3E956BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.36.122.0/23 Signature Algorithm: sha256WithRSAEncryption c8:cd:c3:ae:e6:2b:79:d1:8f:4e:78:1d:74:21:33:d4:ab:87: e5:80:c1:54:3a:43:c2:a6:fc:57:95:1e:ab:20:3a:2e:2f:da: 2a:d4:94:a2:cd:33:42:b5:e2:8e:1d:34:e2:d1:74:9d:92:dd: b5:df:90:8a:6f:c6:b0:62:37:09:da:55:d5:df:7a:dc:f4:86: 44:04:a6:c5:e3:b5:10:42:73:bc:3f:6a:36:e3:96:ab:35:b8: 51:c0:13:b8:e0:d7:24:d5:d9:0e:91:e3:82:55:92:df:a9:0f: 2b:d3:52:40:43:c0:05:9b:cf:e5:1f:9a:c2:91:5e:2b:e2:ed: 36:87:4a:8d:50:33:e7:0e:49:0c:7c:ac:32:e6:1d:09:e7:2c: 3c:1d:dc:d9:43:ce:b6:b0:63:7a:1f:fa:e8:25:8a:31:d0:53: 07:e7:85:3e:2f:96:4c:e5:ce:79:c1:86:3b:fc:74:04:5d:1c: 77:78:73:74:bc:3d:83:43:2b:2e:4d:66:a6:7e:5b:68:06:2c: f6:8a:37:a6:ee:f2:1f:25:d6:d5:e6:c7:f8:73:f5:4a:d4:5f: fa:e1:62:b4:1f:09:3b:92:48:3e:a5:cf:f7:1b:24:fc:2e:47: 69:41:e4:f3:70:96:b1:8b:62:01:cc:a7:7b:fd:bd:f8:10:c4: 4c:1c:4d:8e -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjU4MkExMTAvBgNVBAUTKDdBMEZEMDMyQkMyODEyMTBCM0M5NTIyQjQ3MTU4RDU2 Q0NERUE2MEEwHhcNMjUwMzI5MDUzMDUyWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2U3ODU4Yi0yZTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArU36OkjpGer2IxXxyL9EP+iljoPTeoAt2/hqNq0jToH/K5++TXhjXsCi+PJp 5tzboGi6warmx6MdPzvQOdQGWCp9dB18Tcnw9SUmBQtuaxegjDNiPCSyNxbnTTvf TskFyWwUqSOnzIpDZUrKO2jlbQ/Lbx7iG/vy/vbTgZKdd+FTJ1hI/c5xNXQoyur0 IZDSXzwV6OzoddLNr1NU7quT92qz7YOJSgy98EjRGpXZVHUwQUOKTDxZkPtBDP1I ShS/Ok4vz8QRrxkXDX2zOsquHLBJ85UWxPq5CVt3ld+9ZGDf/t01R1u89i9UCFaZ LhftWPWa6A5bUj3p8S1gjrhH0wIDAQABo4IClTCCApEwHQYDVR0OBBYEFBYkIEH1 IemPUAyBDDmSIYtukUrvMB8GA1UdIwQYMBaAFHoP0DK8KBIQs8lSK0cVjVbM3qYK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTgyQS83OEQ3NDk2RURE RTgxMUVFQTNCMEU3MTNDNEY5QUUwMi9lZ19RTXJ3b0VoQ3p5VklyUnhXTlZzemVw Z28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VnX1FNcndvRWhDenlWSXJSeFdOVnN6ZXBnby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjU4MkEvNzhENzQ5NkVEREU4MTFFRUEzQjBFNzEzQzRGOUFFMDIvQUVDODdDRjY0 MUYxMTFFRkFBM0U5NTZCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAHKJHowDQYJKoZIhvcNAQELBQADggEBAMjNw67mK3nRj054 HXQhM9Srh+WAwVQ6Q8Km/FeVHqsgOi4v2irUlKLNM0K14o4dNOLRdJ2S3bXfkIpv xrBiNwnaVdXfetz0hkQEpsXjtRBCc7w/ajbjlqs1uFHAE7jg1yTV2Q6R44JVkt+p DyvTUkBDwAWbz+UfmsKRXivi7TaHSo1QM+cOSQx8rDLmHQnnLDwd3NlDzrawY3of +uglijHQUwfnhT4vlkzlznnBhjv8dARdHHd4c3S8PYNDKy5NZqZ+W2gGLPaKN6bu 8h8l1tXmx/hz9UrUX/rhYrQfCTuSSD6lz/cbJPwuR2lB5PNwlrGLYgHMp3v9vfgQ xEwcTY4= -----END CERTIFICATE-----Generated at Tue Apr 15 22:51:41 2025 by rpki-client