$ rpki-client -vvf rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/D4FD4D5237DE11EEA2885B71C4F9AE02.roa File: D4FD4D5237DE11EEA2885B71C4F9AE02.roa (raw, json) Hash identifier: GHQh5SwHOMcXY1DsAhaLHUPHu9zL3ZFCXoLdxoLJfeA= Subject key identifier: 5C:81:AC:E1:1C:46:A4:28:5F:14:7D:B9:EE:0E:F9:5D:1F:27:5C:A0 Certificate issuer: /CN=A912CB2A/serialNumber=147E9756439D9DB7156134AC78F91C233B9392A7 Certificate serial: 0659 Authority key identifier: 14:7E:97:56:43:9D:9D:B7:15:61:34:AC:78:F9:1C:23:3B:93:92:A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FH6XVkOdnbcVYTSsePkcIzuTkqc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/D4FD4D5237DE11EEA2885B71C4F9AE02.roa Signing time: Thu 20 Mar 2025 23:03:07 +0000 ROA not before: Thu 20 Mar 2025 23:03:07 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 9723 IP address blocks: 121.52.192.0/22 maxlen: 22 121.52.196.0/23 maxlen: 23 121.52.198.0/24 maxlen: 24 121.52.199.0/24 maxlen: 24 202.74.64.0/21 maxlen: 21 2403:6900:c000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.crl rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FH6XVkOdnbcVYTSsePkcIzuTkqc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 21:11:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1625 (0x659) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CB2A Validity Not Before: Mar 20 23:03:07 2025 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=67dc9eab-6785 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:8d:4b:06:d4:ae:7c:c9:8b:72:37:db:26:89: 42:25:f2:6a:ad:34:6c:3d:24:3d:e6:3b:bb:66:c6: 44:7f:08:52:70:96:6a:68:93:fb:41:7b:10:46:3b: 24:4a:b0:bc:a6:b0:22:b1:16:d1:62:54:0e:7b:1a: 4b:fd:00:a6:09:28:05:3d:a2:e7:18:52:1b:84:a2: 1c:57:27:6a:f2:49:7a:1f:c3:6c:49:65:fa:34:f0: a2:d1:00:5f:5d:b7:0c:f2:b6:d3:63:3e:2e:d9:7e: d4:30:de:59:81:44:1e:12:57:08:6f:dc:d1:39:c1: e6:10:06:06:5b:80:32:2b:88:d3:e1:dc:d1:0c:ff: 1d:b6:59:8e:25:21:cb:fc:c1:e7:8f:96:6d:fc:fb: bb:38:af:8e:ad:84:12:c7:dd:18:8f:f8:f3:1e:33: 0e:6a:89:73:1c:f8:0a:c6:44:bb:43:f5:ce:08:77: 0b:c9:76:a8:7b:ab:b4:fe:67:1f:d0:c2:cc:49:39: 27:79:d3:31:ae:a2:2a:64:b2:1a:d9:29:18:2a:1f: 54:0b:21:e0:f4:46:a3:bd:5d:13:4f:f3:60:5d:97: 35:68:8e:39:ab:8a:fc:51:2e:e6:77:ab:6b:90:13: cb:35:44:fa:22:5e:15:f6:58:3f:f9:ca:4c:a1:6c: 01:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:81:AC:E1:1C:46:A4:28:5F:14:7D:B9:EE:0E:F9:5D:1F:27:5C:A0 X509v3 Authority Key Identifier: keyid:14:7E:97:56:43:9D:9D:B7:15:61:34:AC:78:F9:1C:23:3B:93:92:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FH6XVkOdnbcVYTSsePkcIzuTkqc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/D4FD4D5237DE11EEA2885B71C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 121.52.192.0/21 202.74.64.0/21 IPv6: 2403:6900:c000::/36 Signature Algorithm: sha256WithRSAEncryption 95:a6:f7:77:87:3c:35:cc:30:09:7d:08:bb:ee:0d:6c:57:44: 72:89:25:7f:49:63:2a:54:8c:4a:54:8d:b3:97:e8:23:ce:f1: f9:e5:ca:42:62:fa:dd:f6:34:cb:a6:d7:08:4c:01:b8:29:9a: 5c:e1:e4:6f:5a:3f:93:39:e3:19:73:3e:32:25:27:59:7d:f0: 15:92:ca:11:e8:f6:0a:fc:80:1f:62:e3:69:58:aa:e1:47:8f: d4:e2:e2:3a:53:a4:94:90:85:4a:35:07:b4:f7:8d:d4:3a:f3: 12:bc:19:91:53:5b:65:33:03:83:58:08:02:9c:31:61:bb:55: 54:21:d2:11:3a:3a:87:33:24:66:c5:47:94:cf:6d:78:97:9a: 9a:e6:d8:3a:38:3a:16:57:af:c3:31:2c:fc:f8:45:0f:b5:68: 9f:3f:7c:a0:df:b2:77:1f:1a:18:16:8b:1b:69:dc:28:fe:05: 12:58:32:e1:c0:82:5d:6d:25:41:8f:d1:6b:02:52:ba:86:97: e7:64:ca:3c:7a:cc:c8:91:e5:cb:5e:6e:88:5c:bc:6a:44:3a: 74:5d:cf:4d:df:3e:b5:cf:69:d6:4e:2c:ea:87:d9:61:44:50: 25:b7:c8:0a:b1:10:d6:1b:5c:50:00:18:98:b9:68:2d:9c:51: e8:5a:5e:3e -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICBlkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNCMkExMTAvBgNVBAUTKDE0N0U5NzU2NDM5RDlEQjcxNTYxMzRBQzc4RjkxQzIz M0I5MzkyQTcwHhcNMjUwMzIwMjMwMzA3WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2RjOWVhYi02Nzg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApI1LBtSufMmLcjfbJolCJfJqrTRsPSQ95ju7ZsZEfwhScJZqaJP7QXsQRjsk SrC8prAisRbRYlQOexpL/QCmCSgFPaLnGFIbhKIcVydq8kl6H8NsSWX6NPCi0QBf XbcM8rbTYz4u2X7UMN5ZgUQeElcIb9zROcHmEAYGW4AyK4jT4dzRDP8dtlmOJSHL /MHnj5Zt/Pu7OK+OrYQSx90Yj/jzHjMOaolzHPgKxkS7Q/XOCHcLyXaoe6u0/mcf 0MLMSTknedMxrqIqZLIa2SkYKh9UCyHg9EajvV0TT/NgXZc1aI45q4r8US7md6tr kBPLNUT6Il4V9lg/+cpMoWwBmwIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFFyBrOEc RqQoXxR9ue4O+V0fJ1ygMB8GA1UdIwQYMBaAFBR+l1ZDnZ23FWE0rHj5HCM7k5Kn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0IyQS9FMDFDN0E4NDkw RTAxMUVCQTEwNTg3MUZDNEY5QUUwMi9GSDZYVmtPZG5iY1ZZVFNzZVBrY0l6dVRr cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZINlhWa09kbmJjVllUU3NlUGtjSXp1VGtxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkNCMkEvRTAxQzdBODQ5MEUwMTFFQkExMDU4NzFGQzRGOUFFMDIvRDRGRDRENTIz N0RFMTFFRUEyODg1QjcxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNQYIKwYBBQUHAQcBAf8E JjAkMBIEAgABMAwDBAN5NMADBAPKSkAwDgQCAAIwCAMGBCQDaQDAMA0GCSqGSIb3 DQEBCwUAA4IBAQCVpvd3hzw1zDAJfQi77g1sV0RyiSV/SWMqVIxKVI2zl+gjzvH5 5cpCYvrd9jTLptcITAG4KZpc4eRvWj+TOeMZcz4yJSdZffAVksoR6PYK/IAfYuNp WKrhR4/U4uI6U6SUkIVKNQe0943UOvMSvBmRU1tlMwODWAgCnDFhu1VUIdIROjqH MyRmxUeUz214l5qa5tg6ODoWV6/DMSz8+EUPtWifP3yg37J3HxoYFosbadwo/gUS WDLhwIJdbSVBj9FrAlK6hpfnZMo8eszIkeXLXm6IXLxqRDp0Xc9N3z61z2nWTizq h9lhRFAlt8gKsRDWG1xQABiYuWgtnFHoWl4+ -----END CERTIFICATE-----Generated at Sat Apr 5 03:01:25 2025 by rpki-client