$ rpki-client -vvf rpki.apnic.net/member_repository/A917D4C4/439CF87C8D7B11EB8D8BD60BC4F9AE02/6E325DBC0E2F11EDB4659653C4F9AE02.roa File: 6E325DBC0E2F11EDB4659653C4F9AE02.roa (raw, json) Hash identifier: NS8IXL+/osy1aonTB1YcjpMFwDzkEpu3g9yC5lM136w= Subject key identifier: 30:90:17:5A:A4:4F:12:B0:09:76:39:2C:23:4B:0D:D2:7B:AA:E2:B4 Certificate issuer: /CN=A917D4C4/serialNumber=E0C8928F9451520E64D1DED58F07196B5861B286 Certificate serial: 063A Authority key identifier: E0:C8:92:8F:94:51:52:0E:64:D1:DE:D5:8F:07:19:6B:58:61:B2:86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4MiSj5RRUg5k0d7VjwcZa1hhsoY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D4C4/439CF87C8D7B11EB8D8BD60BC4F9AE02/6E325DBC0E2F11EDB4659653C4F9AE02.roa Signing time: Wed 02 Apr 2025 15:10:52 +0000 ROA not before: Wed 02 Apr 2025 15:10:52 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 7573 IP address blocks: 202.6.77.0/24 maxlen: 24 202.12.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D4C4/439CF87C8D7B11EB8D8BD60BC4F9AE02/4MiSj5RRUg5k0d7VjwcZa1hhsoY.crl rsync://rpki.apnic.net/member_repository/A917D4C4/439CF87C8D7B11EB8D8BD60BC4F9AE02/4MiSj5RRUg5k0d7VjwcZa1hhsoY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4MiSj5RRUg5k0d7VjwcZa1hhsoY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 14:48:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1594 (0x63a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D4C4, serialNumber=E0C8928F9451520E64D1DED58F07196B5861B286 Validity Not Before: Apr 2 15:10:52 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=67ed537c-555d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:54:b4:f5:a0:68:dc:f1:d9:44:2d:c6:d9:91: 86:94:cc:7c:d5:0c:4e:24:48:00:1a:de:33:30:d8: 45:10:33:fe:2b:34:31:bd:cc:8b:65:ed:f2:6f:58: 23:fe:12:40:4b:df:d7:66:d9:76:ac:98:bb:41:db: 4f:48:68:b2:09:0d:a6:7c:29:f8:c3:f7:18:9a:b5: ea:20:e2:40:34:a1:4d:9e:b1:6b:ff:b3:60:92:38: 6e:4a:2b:4a:d6:5d:5f:ca:a5:69:94:09:89:f3:10: fe:64:de:e6:8e:b4:22:56:5d:10:2e:67:13:f4:0a: 24:df:d5:0e:6c:69:66:22:55:c1:9d:91:0d:1a:ac: c9:e8:95:cb:70:da:47:cc:e7:91:50:20:00:eb:56: 5f:48:78:3a:27:b7:11:12:0f:13:46:6d:98:02:30: 55:c3:74:0f:e4:e5:72:53:2e:a4:bc:c2:69:ec:09: ed:1d:98:2b:b7:66:0c:40:09:05:87:b5:39:fc:93: 22:52:db:3b:12:4c:df:31:c7:19:4c:30:88:24:1b: 39:6c:06:fa:14:82:0b:8b:aa:da:c0:91:93:3a:70: 95:93:92:e7:5e:ca:bf:94:b7:eb:23:95:f0:d9:d1: b8:31:f2:0a:95:9a:1f:6f:f8:1a:23:f7:6a:f0:ad: 15:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:90:17:5A:A4:4F:12:B0:09:76:39:2C:23:4B:0D:D2:7B:AA:E2:B4 X509v3 Authority Key Identifier: keyid:E0:C8:92:8F:94:51:52:0E:64:D1:DE:D5:8F:07:19:6B:58:61:B2:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D4C4/439CF87C8D7B11EB8D8BD60BC4F9AE02/4MiSj5RRUg5k0d7VjwcZa1hhsoY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4MiSj5RRUg5k0d7VjwcZa1hhsoY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D4C4/439CF87C8D7B11EB8D8BD60BC4F9AE02/6E325DBC0E2F11EDB4659653C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.6.77.0/24 202.12.92.0/24 Signature Algorithm: sha256WithRSAEncryption 81:41:f0:96:e7:09:7a:5a:5e:eb:a6:22:1e:d4:72:8a:5d:73: 47:7d:39:d6:36:b8:b4:11:d2:89:69:98:c3:df:48:dd:b7:61: aa:e7:41:b4:f8:92:f3:b1:f1:f6:0a:6b:a9:64:b1:7c:71:47: 17:46:14:2d:74:f8:db:3b:72:9e:68:01:05:76:34:5e:43:60: e1:f7:23:2b:db:9e:64:f4:e4:81:9b:0f:be:73:61:9f:fc:4c: ec:c4:68:1d:23:34:78:4d:ba:2b:19:bc:c8:b6:03:16:da:5b: 39:93:6b:e4:5e:97:e5:56:ad:50:8c:1c:93:2b:b3:a1:81:33: cb:14:32:92:11:24:a0:1b:73:da:e2:28:44:9b:5f:71:e5:b0: c9:ea:63:f8:74:8d:53:7f:55:9d:26:7e:1d:1a:f7:61:42:c3: aa:f2:34:ab:f3:18:c1:21:f6:67:b1:ee:68:7a:a1:b5:3b:2f: ac:f7:95:33:4f:d7:d5:08:ea:a0:1e:5f:b0:3f:bd:8f:05:c4: 07:d1:4d:f3:e9:1e:5c:9c:1d:f1:99:3b:40:dc:99:f5:e2:4f: 9a:96:87:83:5a:cc:82:10:3b:ad:00:36:5c:50:08:92:ad:52: 55:5c:5e:35:4a:66:f0:3f:70:66:fb:6b:d0:c5:df:d5:4d:4f: a6:ed:f7:29 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBjowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q0QzQxMTAvBgNVBAUTKEUwQzg5MjhGOTQ1MTUyMEU2NEQxREVENThGMDcxOTZC NTg2MUIyODYwHhcNMjUwNDAyMTUxMDUyWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2VkNTM3Yy01NTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzlS09aBo3PHZRC3G2ZGGlMx81QxOJEgAGt4zMNhFEDP+KzQxvcyLZe3yb1gj /hJAS9/XZtl2rJi7QdtPSGiyCQ2mfCn4w/cYmrXqIOJANKFNnrFr/7NgkjhuSitK 1l1fyqVplAmJ8xD+ZN7mjrQiVl0QLmcT9Aok39UObGlmIlXBnZENGqzJ6JXLcNpH zOeRUCAA61ZfSHg6J7cREg8TRm2YAjBVw3QP5OVyUy6kvMJp7AntHZgrt2YMQAkF h7U5/JMiUts7EkzfMccZTDCIJBs5bAb6FIILi6rawJGTOnCVk5LnXsq/lLfrI5Xw 2dG4MfIKlZofb/gaI/dq8K0V8wIDAQABo4ICmzCCApcwHQYDVR0OBBYEFDCQF1qk TxKwCXY5LCNLDdJ7quK0MB8GA1UdIwQYMBaAFODIko+UUVIOZNHe1Y8HGWtYYbKG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDRDNC80MzlDRjg3QzhE N0IxMUVCOEQ4QkQ2MEJDNEY5QUUwMi80TWlTajVSUlVnNWswZDdWandjWmExaGhz b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRNaVNqNVJSVWc1azBkN1Zqd2NaYTFoaHNvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0Q0QzQvNDM5Q0Y4N0M4RDdCMTFFQjhEOEJENjBCQzRGOUFFMDIvNkUzMjVEQkMw RTJGMTFFREI0NjU5NjUzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBADKBk0DBADKDFwwDQYJKoZIhvcNAQELBQADggEBAIFB8Jbn CXpaXuumIh7Ucopdc0d9OdY2uLQR0olpmMPfSN23YarnQbT4kvOx8fYKa6lksXxx RxdGFC10+Ns7cp5oAQV2NF5DYOH3IyvbnmT05IGbD75zYZ/8TOzEaB0jNHhNuisZ vMi2AxbaWzmTa+Rel+VWrVCMHJMrs6GBM8sUMpIRJKAbc9riKESbX3HlsMnqY/h0 jVN/VZ0mfh0a92FCw6ryNKvzGMEh9mex7mh6obU7L6z3lTNP19UI6qAeX7A/vY8F xAfRTfPpHlycHfGZO0DcmfXiT5qWh4NazIIQO60ANlxQCJKtUlVcXjVKZvA/cGb7 a9DF39VNT6bt9yk= -----END CERTIFICATE-----Generated at Fri Apr 18 10:20:47 2025 by rpki-client