$ rpki-client -vvf rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/2C1A71D81A9B11EFA4886942C4F9AE02.roa File: 2C1A71D81A9B11EFA4886942C4F9AE02.roa (raw, json) Hash identifier: U6YXVJRAyKVKOBp9fvM3MDDPghC49iE+40CZRqzPtNo= Subject key identifier: D2:28:C0:26:D3:39:7C:BC:49:6F:79:2E:D6:05:91:6F:FC:80:F1:7F Certificate issuer: /CN=A919C3BE/serialNumber=C467CB2CCB9C21A707B5DFBCEABA054C190523AE Certificate serial: 0C82 Authority key identifier: C4:67:CB:2C:CB:9C:21:A7:07:B5:DF:BC:EA:BA:05:4C:19:05:23:AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGfLLMucIacHtd-86roFTBkFI64.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/2C1A71D81A9B11EFA4886942C4F9AE02.roa Signing time: Sun 06 Jul 2025 09:29:53 +0000 ROA not before: Sun 06 Jul 2025 09:29:53 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 135037 IP address blocks: 220.247.129.0/24 maxlen: 24 2407:7380:a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.crl rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGfLLMucIacHtd-86roFTBkFI64.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 18:41:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3202 (0xc82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C3BE, serialNumber=C467CB2CCB9C21A707B5DFBCEABA054C190523AE Validity Not Before: Jul 6 09:29:53 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=686a4210-79b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b6:11:7f:db:74:5c:e5:b1:74:44:4d:b3:83: 86:bc:9c:e6:4f:23:fe:77:ae:4b:70:b8:6f:66:86: ed:3d:fa:03:60:9a:5f:35:0e:fe:b5:77:57:3e:03: 42:3d:34:5f:cc:81:8a:30:66:82:d3:13:87:bb:87: cc:9b:e0:51:a4:23:76:aa:17:06:db:da:11:a8:25: 79:e4:a9:f0:f6:1a:78:8e:49:11:32:01:09:38:aa: 34:55:9e:3a:c1:7a:fc:99:e3:fe:23:d3:b3:a9:e8: eb:03:bd:50:04:db:e1:db:b3:1a:b2:5f:c2:9f:10: a4:e9:10:66:67:9c:bc:f2:37:f0:9a:6c:a6:15:a4: cf:16:64:46:28:bf:a5:31:7e:4b:45:44:68:2c:7a: bc:d5:67:de:d8:15:2d:ad:d8:c3:8c:d8:95:42:8d: 55:2b:7c:00:99:7b:76:8e:98:cb:2b:d5:4d:cf:23: 57:16:13:ef:1a:2a:93:37:5e:47:c3:91:db:9e:fb: 9f:0d:84:49:a0:ca:88:df:66:2f:38:3b:b1:ef:78: 4b:fc:5e:76:ea:a5:1d:b2:ef:73:9e:19:b4:ec:aa: 64:5e:22:9e:5b:a8:24:5a:9f:b3:a3:86:f8:7d:e7: eb:b4:f8:0a:de:fd:56:60:7e:03:fd:ed:37:8b:cc: 5a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:28:C0:26:D3:39:7C:BC:49:6F:79:2E:D6:05:91:6F:FC:80:F1:7F X509v3 Authority Key Identifier: keyid:C4:67:CB:2C:CB:9C:21:A7:07:B5:DF:BC:EA:BA:05:4C:19:05:23:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGfLLMucIacHtd-86roFTBkFI64.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/2C1A71D81A9B11EFA4886942C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.247.129.0/24 IPv6: 2407:7380:a::/48 Signature Algorithm: sha256WithRSAEncryption 8d:75:0b:9a:eb:0c:c4:b1:c6:6f:94:b9:02:fa:99:15:38:98: 45:75:73:e5:79:df:e5:f1:32:e6:a7:51:e4:77:55:f8:11:0a: 63:d9:63:e9:92:c5:53:09:c8:39:a4:8a:bf:fd:be:af:fc:f6: 99:f9:a1:04:29:fe:c6:5a:19:5e:2b:4d:da:c3:fe:86:d8:2b: f0:c1:44:f7:e5:14:0a:48:31:aa:ec:4e:94:f0:67:a2:0a:4d: 74:de:f4:8f:17:fe:c5:1b:d3:34:a7:1e:39:07:b4:1b:ac:d6: e1:cc:43:ef:82:e0:38:92:8b:1f:66:ee:fb:a5:ae:eb:ea:b8: 92:ea:dd:d6:48:81:16:24:31:6e:59:86:57:f5:64:af:78:f4: e9:d3:e0:e8:c1:67:45:c5:51:7d:47:ed:55:69:8e:e8:ad:26: 13:cb:c7:b4:33:e5:2d:98:da:9a:9d:d3:45:bb:b0:72:99:95: b8:85:1b:95:b1:da:32:db:c7:71:1d:d5:ed:f8:0a:2c:2a:79: fd:00:c5:24:8e:20:0a:fc:ec:a0:67:72:21:3b:80:fc:b6:b3: 19:bb:91:9c:bb:f6:55:bb:26:e2:a7:6c:23:02:e2:42:88:cf: 68:68:89:47:8b:17:ad:1e:2d:f9:e2:b6:bd:fc:f7:a8:5b:c9: d4:e4:97:f1 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICDIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUMzQkUxMTAvBgNVBAUTKEM0NjdDQjJDQ0I5QzIxQTcwN0I1REZCQ0VBQkEwNTRD MTkwNTIzQUUwHhcNMjUwNzA2MDkyOTUzWhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODZhNDIxMC03OWIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1bYRf9t0XOWxdERNs4OGvJzmTyP+d65LcLhvZobtPfoDYJpfNQ7+tXdXPgNC PTRfzIGKMGaC0xOHu4fMm+BRpCN2qhcG29oRqCV55Knw9hp4jkkRMgEJOKo0VZ46 wXr8meP+I9OzqejrA71QBNvh27Masl/CnxCk6RBmZ5y88jfwmmymFaTPFmRGKL+l MX5LRURoLHq81Wfe2BUtrdjDjNiVQo1VK3wAmXt2jpjLK9VNzyNXFhPvGiqTN15H w5HbnvufDYRJoMqI32YvODux73hL/F526qUdsu9znhm07KpkXiKeW6gkWp+zo4b4 fefrtPgK3v1WYH4D/e03i8xaPQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFNIowCbT OXy8SW95LtYFkW/8gPF/MB8GA1UdIwQYMBaAFMRnyyzLnCGnB7XfvOq6BUwZBSOu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzNCRS85NDdCMzUwNjA5 MzgxMUVBOTVDQTMxMjlDNEY5QUUwMi94R2ZMTE11Y0lhY0h0ZC04NnJvRlRCa0ZJ NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hHZkxMTXVjSWFjSHRkLTg2cm9GVEJrRkk2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUMzQkUvOTQ3QjM1MDYwOTM4MTFFQTk1Q0EzMTI5QzRGOUFFMDIvMkMxQTcxRDgx QTlCMTFFRkE0ODg2OTQyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBADc94EwDwQCAAIwCQMHACQHc4AACjANBgkqhkiG9w0BAQsF AAOCAQEAjXULmusMxLHGb5S5AvqZFTiYRXVz5Xnf5fEy5qdR5HdV+BEKY9lj6ZLF UwnIOaSKv/2+r/z2mfmhBCn+xloZXitN2sP+htgr8MFE9+UUCkgxquxOlPBnogpN dN70jxf+xRvTNKceOQe0G6zW4cxD74LgOJKLH2bu+6Wu6+q4kurd1kiBFiQxblmG V/Vkr3j06dPg6MFnRcVRfUftVWmO6K0mE8vHtDPlLZjamp3TRbuwcpmVuIUblbHa MtvHcR3V7fgKLCp5/QDFJI4gCvzsoGdyITuA/LazGbuRnLv2Vbsm4qdsIwLiQojP aGiJR4sXrR4t+eK2vfz3qFvJ1OSX8Q== -----END CERTIFICATE-----Generated at Sun Jul 20 15:18:41 2025 by rpki-client