$ rpki-client -vvf rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/16DFC2548D6C11EDBB1B1C4FC4F9AE02.roa File: 16DFC2548D6C11EDBB1B1C4FC4F9AE02.roa (raw, json) Hash identifier: ziWoAY2hbvtxePvnZWAtSB5jp5zkw3S8bF9M6H2eX84= Subject key identifier: FA:D8:B5:E8:B2:22:93:B3:4D:08:AE:83:63:C0:8C:15:51:D6:3C:16 Certificate issuer: /CN=A9154EC0/serialNumber=C63BA03107C13D189C79E0E74A8C7B847A5C7471 Certificate serial: 01A9 Authority key identifier: C6:3B:A0:31:07:C1:3D:18:9C:79:E0:E7:4A:8C:7B:84:7A:5C:74:71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjugMQfBPRiceeDnSox7hHpcdHE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/16DFC2548D6C11EDBB1B1C4FC4F9AE02.roa Signing time: Wed 19 Feb 2025 04:45:56 +0000 ROA not before: Wed 19 Feb 2025 04:45:56 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 9898 IP address blocks: 202.36.16.0/21 maxlen: 24 202.36.24.0/22 maxlen: 24 2400:d0e0::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.crl rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjugMQfBPRiceeDnSox7hHpcdHE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Apr 2025 02:09:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 425 (0x1a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154EC0 Validity Not Before: Feb 19 04:45:56 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=67b56203-f79c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b8:07:57:cc:e3:95:42:0a:c6:32:9b:19:30: 83:34:73:83:11:ae:e5:ff:be:59:bb:1d:89:c9:8a: a7:f3:55:0d:44:71:1b:9c:f4:62:cb:13:b4:27:e7: 7a:b1:25:05:d5:71:0a:dd:67:b0:e6:02:f8:28:ec: e3:5c:84:af:cf:86:81:e6:26:fa:ae:9c:84:62:38: e9:4a:b8:39:d7:5d:1f:5d:0d:19:44:5f:3d:69:6a: b9:d6:e8:4b:8c:5c:78:c8:59:29:0e:cb:a6:4c:e7: 03:d2:5f:5a:f4:54:6f:4e:7e:04:e5:bb:fd:61:d6: 83:27:54:67:e6:8e:89:72:d1:8b:03:9b:ee:d8:d7: f3:b9:c6:df:dd:3b:e9:ad:cf:4c:a1:b3:ab:b2:c5: a6:46:fb:f1:09:7f:5c:92:2b:34:ba:ee:92:52:17: 9e:be:70:66:0f:f1:a1:75:48:47:0c:90:b8:1a:35: b7:54:bd:52:fe:78:58:32:a6:75:01:4e:0e:63:75: 56:bd:ec:c5:97:63:94:bb:75:85:2d:88:a8:a2:62: 4b:02:5d:4d:51:c3:e7:17:57:3d:55:74:65:bf:f7: 5c:f7:e8:a2:19:de:c0:fc:13:e6:fb:e8:93:b4:dc: 83:34:5f:6f:fe:80:c3:d0:ad:fc:4a:49:e6:be:c6: 05:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:D8:B5:E8:B2:22:93:B3:4D:08:AE:83:63:C0:8C:15:51:D6:3C:16 X509v3 Authority Key Identifier: keyid:C6:3B:A0:31:07:C1:3D:18:9C:79:E0:E7:4A:8C:7B:84:7A:5C:74:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjugMQfBPRiceeDnSox7hHpcdHE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/16DFC2548D6C11EDBB1B1C4FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.36.16.0-202.36.27.255 IPv6: 2400:d0e0::/32 Signature Algorithm: sha256WithRSAEncryption 58:7c:ef:f9:bf:1b:16:e5:2d:86:b1:5f:f5:4c:64:85:af:5a: bc:28:74:61:20:4c:c1:f5:52:96:50:41:1f:7b:ce:a0:2a:78: c7:bc:6a:5e:02:e9:37:e8:02:7b:f2:dc:05:57:cf:0a:c2:1a: 24:de:3e:cf:b2:30:91:64:50:5b:c1:54:f6:c4:ab:05:78:ee: 10:5e:74:2d:10:56:b2:f7:47:df:07:f7:9c:56:e9:c2:01:fe: ef:80:44:46:be:21:86:b4:d7:35:17:1a:26:b6:82:67:d0:92: 67:5c:58:b7:de:a8:24:57:ac:8e:82:76:d3:58:50:2c:b4:a7: 65:cb:bc:ef:69:35:cb:ef:03:0c:26:11:82:1b:5a:f5:ec:92: 85:6c:c8:38:c9:86:5c:4b:85:5c:fa:77:d7:a1:b8:b1:05:9d: cf:a8:4c:48:55:c9:0a:2b:9b:94:a5:df:47:94:77:99:c8:6a: 25:1c:a5:c5:4f:7d:55:21:9c:25:6c:c7:26:a2:ac:93:3e:da: 71:c6:23:be:71:73:d9:51:33:8c:61:80:e7:92:83:66:7f:10: 36:39:04:44:70:bc:19:3a:71:f5:d2:90:db:64:9a:3e:ba:de: d3:d9:75:28:57:48:7f:ae:3b:b7:49:c3:3c:df:04:37:e5:52: f0:12:24:db -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICAakwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTRFQzAxMTAvBgNVBAUTKEM2M0JBMDMxMDdDMTNEMTg5Qzc5RTBFNzRBOEM3Qjg0 N0E1Qzc0NzEwHhcNMjUwMjE5MDQ0NTU2WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2I1NjIwMy1mNzljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy7gHV8zjlUIKxjKbGTCDNHODEa7l/75Zux2JyYqn81UNRHEbnPRiyxO0J+d6 sSUF1XEK3Wew5gL4KOzjXISvz4aB5ib6rpyEYjjpSrg5110fXQ0ZRF89aWq51uhL jFx4yFkpDsumTOcD0l9a9FRvTn4E5bv9YdaDJ1Rn5o6JctGLA5vu2Nfzucbf3Tvp rc9MobOrssWmRvvxCX9ckis0uu6SUheevnBmD/GhdUhHDJC4GjW3VL1S/nhYMqZ1 AU4OY3VWvezFl2OUu3WFLYioomJLAl1NUcPnF1c9VXRlv/dc9+iiGd7A/BPm++iT tNyDNF9v/oDD0K38SknmvsYFCQIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFPrYteiy IpOzTQiug2PAjBVR1jwWMB8GA1UdIwQYMBaAFMY7oDEHwT0YnHng50qMe4R6XHRx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NEVDMC9EQUU2NzQwQzdG M0IxMUVEQTdBM0VDNjhDNEY5QUUwMi94anVnTVFmQlBSaWNlZURuU294N2hIcGNk SEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hqdWdNUWZCUFJpY2VlRG5Tb3g3aEhwY2RIRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTRFQzAvREFFNjc0MEM3RjNCMTFFREE3QTNFQzY4QzRGOUFFMDIvMTZERkMyNTQ4 RDZDMTFFREJCMUIxQzRGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBQEAgABMA4wDAMEBMokEAMEAsokGDANBAIAAjAHAwUAJADQ4DANBgkqhkiG 9w0BAQsFAAOCAQEAWHzv+b8bFuUthrFf9Uxkha9avCh0YSBMwfVSllBBH3vOoCp4 x7xqXgLpN+gCe/LcBVfPCsIaJN4+z7IwkWRQW8FU9sSrBXjuEF50LRBWsvdH3wf3 nFbpwgH+74BERr4hhrTXNRcaJraCZ9CSZ1xYt96oJFesjoJ201hQLLSnZcu872k1 y+8DDCYRghta9eyShWzIOMmGXEuFXPp316G4sQWdz6hMSFXJCiublKXfR5R3mchq JRylxU99VSGcJWzHJqKskz7accYjvnFz2VEzjGGA55KDZn8QNjkERHC8GTpx9dKQ 22SaPrre09l1KFdIf647t0nDPN8EN+VS8BIk2w== -----END CERTIFICATE-----Generated at Mon Apr 7 13:58:31 2025 by rpki-client