$ rpki-client -vvf rpki.apnic.net/member_repository/A917F051/5AAD9D7ED8DD11ECA5DD0C50C4F9AE02/3EABAF20D8E311EC8F274181C4F9AE02.roa File: 3EABAF20D8E311EC8F274181C4F9AE02.roa (raw, json) Hash identifier: D/07ECvWp7oQg2+1KPxjiVqoD+wojBNXOMz248kJJ/8= Subject key identifier: 93:FB:1F:F8:7C:63:C2:78:16:5D:A6:F2:A4:5A:23:84:AA:4F:27:10 Certificate issuer: /CN=A917F051/serialNumber=84DA8927CDEF503396F52720194EB931209D3F3A Certificate serial: 02F0 Authority key identifier: 84:DA:89:27:CD:EF:50:33:96:F5:27:20:19:4E:B9:31:20:9D:3F:3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hNqJJ83vUDOW9ScgGU65MSCdPzo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F051/5AAD9D7ED8DD11ECA5DD0C50C4F9AE02/3EABAF20D8E311EC8F274181C4F9AE02.roa Signing time: Mon 31 Mar 2025 01:28:19 +0000 ROA not before: Mon 31 Mar 2025 01:28:19 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 58626 IP address blocks: 202.5.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F051/5AAD9D7ED8DD11ECA5DD0C50C4F9AE02/hNqJJ83vUDOW9ScgGU65MSCdPzo.crl rsync://rpki.apnic.net/member_repository/A917F051/5AAD9D7ED8DD11ECA5DD0C50C4F9AE02/hNqJJ83vUDOW9ScgGU65MSCdPzo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hNqJJ83vUDOW9ScgGU65MSCdPzo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:56:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 752 (0x2f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F051, serialNumber=84DA8927CDEF503396F52720194EB931209D3F3A Validity Not Before: Mar 31 01:28:19 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67e9efb3-2d83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:d2:68:fc:4e:94:0b:85:ae:e7:03:53:56:32: 11:1a:d1:75:69:92:03:73:ae:3a:fb:c6:0f:58:e1: f2:99:d3:6d:39:a0:ad:4e:8e:55:5f:08:57:15:d2: 47:18:85:7f:6b:c4:62:5c:73:18:80:58:50:4a:ae: 9c:0a:a1:38:df:0b:8f:b3:01:44:f1:aa:bb:37:9d: 2c:ee:b5:7d:3c:35:c0:c9:9f:ab:e3:34:9d:05:0d: a2:23:49:f2:8b:eb:2e:59:24:63:08:d2:c9:bd:20: ee:71:67:fe:83:b8:22:90:ea:3d:56:66:f7:18:9b: 64:59:a8:ed:62:73:9e:71:c5:a6:f8:19:bb:9d:99: f0:c3:3d:c5:d1:8c:5a:b3:9d:00:6e:44:0b:e6:8c: ef:da:86:c1:e3:b1:48:38:0f:ee:12:78:a8:9a:2f: 5f:53:26:d1:bb:cc:2a:8d:11:9e:8b:ce:69:71:02: ea:27:24:fb:31:80:ac:b6:75:26:e6:44:d2:3f:0a: 6f:c8:3b:0a:61:96:41:aa:f2:06:8d:38:3c:9c:7e: 66:85:9d:c1:69:c0:1a:cc:86:02:13:56:10:2e:8f: bf:45:73:1e:c9:23:94:29:42:dc:46:04:88:2e:8f: dd:a1:42:08:7a:f8:8a:59:aa:ab:e4:af:8d:82:cd: 1b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:FB:1F:F8:7C:63:C2:78:16:5D:A6:F2:A4:5A:23:84:AA:4F:27:10 X509v3 Authority Key Identifier: keyid:84:DA:89:27:CD:EF:50:33:96:F5:27:20:19:4E:B9:31:20:9D:3F:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F051/5AAD9D7ED8DD11ECA5DD0C50C4F9AE02/hNqJJ83vUDOW9ScgGU65MSCdPzo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hNqJJ83vUDOW9ScgGU65MSCdPzo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F051/5AAD9D7ED8DD11ECA5DD0C50C4F9AE02/3EABAF20D8E311EC8F274181C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.5.133.0/24 Signature Algorithm: sha256WithRSAEncryption a4:09:71:1b:ed:a0:36:64:1a:ec:24:f0:ff:f8:55:bf:c8:2e: 5c:06:da:17:4c:3b:5e:29:9a:5f:09:fc:16:5e:0c:39:b2:d3: 90:f8:52:b1:0f:f9:cd:db:71:b2:27:d3:d1:5f:f1:e7:b3:e2: 6d:1d:63:d8:cf:ea:53:72:11:7d:e5:36:92:ff:d6:19:84:83: 78:0f:2d:89:64:4e:ee:42:7a:75:26:b3:9f:e1:b6:1f:5c:34: e3:fb:20:bd:81:e3:54:01:71:33:9c:47:fa:3b:f6:9e:e3:0e: 77:f8:9e:7b:f6:94:be:f8:b5:76:8d:83:44:25:b8:6d:34:aa: 34:5c:59:b7:4d:8d:6c:55:0e:3e:48:e4:08:7e:fa:aa:89:0c: 21:1b:0c:06:3d:0a:f3:dc:77:6a:f8:7d:32:eb:91:d8:11:cd: 1f:64:79:49:e5:1d:04:93:3c:e7:e4:73:d0:bd:df:66:34:b3: d4:88:6a:b4:04:39:ce:e9:3e:8d:e6:25:89:6b:85:f9:2e:88: 18:64:f5:2a:6d:75:18:e9:38:34:55:e9:db:93:ac:c6:51:0b: a1:5f:36:84:dd:68:3b:2e:29:26:85:d8:64:30:15:8e:de:1a: d5:9d:c3:f4:83:ed:f9:45:4d:47:75:97:1f:7a:28:bb:f3:ff: ab:59:19:c9 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAvAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0YwNTExMTAvBgNVBAUTKDg0REE4OTI3Q0RFRjUwMzM5NkY1MjcyMDE5NEVCOTMx MjA5RDNGM0EwHhcNMjUwMzMxMDEyODE5WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2U5ZWZiMy0yZDgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3NJo/E6UC4Wu5wNTVjIRGtF1aZIDc646+8YPWOHymdNtOaCtTo5VXwhXFdJH GIV/a8RiXHMYgFhQSq6cCqE43wuPswFE8aq7N50s7rV9PDXAyZ+r4zSdBQ2iI0ny i+suWSRjCNLJvSDucWf+g7gikOo9Vmb3GJtkWajtYnOeccWm+Bm7nZnwwz3F0Yxa s50AbkQL5ozv2obB47FIOA/uEniomi9fUybRu8wqjRGei85pcQLqJyT7MYCstnUm 5kTSPwpvyDsKYZZBqvIGjTg8nH5mhZ3BacAazIYCE1YQLo+/RXMeySOUKULcRgSI Lo/doUIIeviKWaqr5K+Ngs0b8wIDAQABo4IClTCCApEwHQYDVR0OBBYEFJP7H/h8 Y8J4Fl2m8qRaI4SqTycQMB8GA1UdIwQYMBaAFITaiSfN71AzlvUnIBlOuTEgnT86 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjA1MS81QUFEOUQ3RUQ4 REQxMUVDQTVERDBDNTBDNEY5QUUwMi9oTnFKSjgzdlVET1c5U2NnR1U2NU1TQ2RQ em8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hOcUpKODN2VURPVzlTY2dHVTY1TVNDZFB6by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0YwNTEvNUFBRDlEN0VEOEREMTFFQ0E1REQwQzUwQzRGOUFFMDIvM0VBQkFGMjBE OEUzMTFFQzhGMjc0MTgxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADKBYUwDQYJKoZIhvcNAQELBQADggEBAKQJcRvtoDZkGuwk 8P/4Vb/ILlwG2hdMO14pml8J/BZeDDmy05D4UrEP+c3bcbIn09Ff8eez4m0dY9jP 6lNyEX3lNpL/1hmEg3gPLYlkTu5CenUms5/hth9cNOP7IL2B41QBcTOcR/o79p7j Dnf4nnv2lL74tXaNg0QluG00qjRcWbdNjWxVDj5I5Ah++qqJDCEbDAY9CvPcd2r4 fTLrkdgRzR9keUnlHQSTPOfkc9C932Y0s9SIarQEOc7pPo3mJYlrhfkuiBhk9Spt dRjpODRV6duTrMZRC6FfNoTdaDsuKSaF2GQwFY7eGtWdw/SD7flFTUd1lx96KLvz /6tZGck= -----END CERTIFICATE-----Generated at Tue Apr 22 19:04:05 2025 by rpki-client