$ rpki-client -vvf rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/7BAB9AF01B3D11EE903BB536C4F9AE02.roa File: 7BAB9AF01B3D11EE903BB536C4F9AE02.roa (raw, json) Hash identifier: tLbfqsiqbU5f5RIfXdeZj0H0Fi86hjwtE1k3SMfEBD0= Subject key identifier: 9C:AE:EC:29:E3:C3:52:A6:B0:86:6A:70:64:BD:71:88:FA:47:3E:59 Certificate issuer: /CN=A919EE77/serialNumber=B781A2E7D91EDCA8B030DE3EA89FA4FAF1791F21 Certificate serial: 07BB Authority key identifier: B7:81:A2:E7:D9:1E:DC:A8:B0:30:DE:3E:A8:9F:A4:FA:F1:79:1F:21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/7BAB9AF01B3D11EE903BB536C4F9AE02.roa Signing time: Fri 04 Jul 2025 22:02:20 +0000 ROA not before: Fri 04 Jul 2025 22:02:20 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 133448 IP address blocks: 119.42.33.0/24 maxlen: 24 119.42.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.crl rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 21:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1979 (0x7bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EE77, serialNumber=B781A2E7D91EDCA8B030DE3EA89FA4FAF1791F21 Validity Not Before: Jul 4 22:02:20 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=68684f6b-6e4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:0e:d5:d2:99:2c:03:5d:97:32:bc:48:11:52: 8b:56:3d:7c:b0:33:35:6e:a3:3e:78:1c:e8:c1:cb: 15:42:84:84:3b:79:44:3b:49:7b:6f:3d:ac:bd:e3: c0:3f:ef:fa:bf:4b:4f:70:60:7f:45:3b:38:c9:f2: ec:77:54:10:b5:d5:0e:04:49:4f:b5:61:32:5a:bf: f9:cf:ba:76:73:08:e2:98:77:41:9b:45:e8:be:73: af:d4:73:c2:9c:49:60:96:e8:cf:85:04:65:ab:65: a4:b6:c9:c0:ff:5d:a4:fb:de:fc:8c:c2:b3:06:46: de:56:a1:d3:96:f9:ab:fa:b7:05:b1:46:e6:ca:92: c1:88:ad:da:60:d3:db:5b:a6:81:a7:eb:21:bd:c5: f3:49:76:fb:59:20:38:d8:2a:2e:e9:44:88:24:9e: cb:50:d2:e2:45:b1:b9:1d:67:82:b5:c7:f0:db:a2: 5c:23:6c:ee:a5:cd:a7:b2:75:85:5e:12:b7:18:6f: c9:20:f7:2a:d0:80:d1:d9:82:71:99:2d:8d:92:2f: 27:27:62:4c:99:57:63:0c:b2:78:2c:fd:64:b7:c3: f3:43:c7:46:28:c4:2a:d3:58:c3:a2:85:2e:c1:ab: a2:7a:fd:cf:6f:fe:9c:04:fa:c3:d4:b9:c9:f6:ed: c7:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:AE:EC:29:E3:C3:52:A6:B0:86:6A:70:64:BD:71:88:FA:47:3E:59 X509v3 Authority Key Identifier: keyid:B7:81:A2:E7:D9:1E:DC:A8:B0:30:DE:3E:A8:9F:A4:FA:F1:79:1F:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/7BAB9AF01B3D11EE903BB536C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 119.42.33.0/24 119.42.35.0/24 Signature Algorithm: sha256WithRSAEncryption 94:54:63:79:57:a7:02:d1:7c:9f:25:0a:82:e3:73:e3:b6:86: dd:96:c3:70:97:6b:e7:00:19:75:85:7d:9c:33:3f:e0:56:03: de:5b:23:ea:e4:0d:28:89:85:d2:8e:9d:f5:d3:e2:69:95:b0: 46:0c:ad:d4:6b:dc:47:f3:7e:a2:e0:4e:d3:4c:2b:48:d4:61: 94:be:62:75:b2:56:59:7e:62:30:e6:cb:99:7a:06:01:62:9c: 35:f7:6c:78:14:cf:83:9b:25:dd:ba:8d:93:59:39:52:6e:51: 76:d6:0f:7c:21:cc:a0:66:5c:23:88:c8:fd:15:ff:2a:6c:17: 7c:51:15:32:1b:6f:7d:1a:8d:c2:a8:db:6e:6e:a9:0f:c2:88: 55:31:cd:02:47:75:d3:a1:a0:a0:74:ff:cc:63:e9:dd:cf:fb: 7f:f6:ea:54:11:6c:1e:88:48:df:65:d5:77:dc:43:ca:83:b0: cc:17:88:94:a0:ba:a1:6d:a5:ab:d0:68:85:b6:2f:d0:bd:d8: 00:64:1d:2d:0c:c5:ff:00:7e:68:a2:ec:9a:3f:12:02:39:2d: d8:01:fe:b3:90:dc:48:4a:18:13:68:60:c2:c3:df:f0:a9:0d: 04:7f:20:60:68:bf:7d:33:80:6e:34:9a:e1:37:eb:f7:43:ce: e9:8e:6a:e6 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICB7swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVFNzcxMTAvBgNVBAUTKEI3ODFBMkU3RDkxRURDQThCMDMwREUzRUE4OUZBNEZB RjE3OTFGMjEwHhcNMjUwNzA0MjIwMjIwWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODY4NGY2Yi02ZTRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAow7V0pksA12XMrxIEVKLVj18sDM1bqM+eBzowcsVQoSEO3lEO0l7bz2svePA P+/6v0tPcGB/RTs4yfLsd1QQtdUOBElPtWEyWr/5z7p2cwjimHdBm0XovnOv1HPC nElglujPhQRlq2WktsnA/12k+978jMKzBkbeVqHTlvmr+rcFsUbmypLBiK3aYNPb W6aBp+shvcXzSXb7WSA42Cou6USIJJ7LUNLiRbG5HWeCtcfw26JcI2zupc2nsnWF XhK3GG/JIPcq0IDR2YJxmS2Nki8nJ2JMmVdjDLJ4LP1kt8PzQ8dGKMQq01jDooUu wauiev3Pb/6cBPrD1LnJ9u3HdwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFJyu7Cnj w1KmsIZqcGS9cYj6Rz5ZMB8GA1UdIwQYMBaAFLeBoufZHtyosDDePqifpPrxeR8h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUU3Ny9EOUJFMDdCQTBD RUQxMUVCQTdGMTExNUJDNEY5QUUwMi90NEdpNTlrZTNLaXdNTjQtcUotay12RjVI eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Q0R2k1OWtlM0tpd01ONC1xSi1rLXZGNUh5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUVFNzcvRDlCRTA3QkEwQ0VEMTFFQkE3RjExMTVCQzRGOUFFMDIvN0JBQjlBRjAx QjNEMTFFRTkwM0JCNTM2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAB3KiEDBAB3KiMwDQYJKoZIhvcNAQELBQADggEBAJRUY3lX pwLRfJ8lCoLjc+O2ht2Ww3CXa+cAGXWFfZwzP+BWA95bI+rkDSiJhdKOnfXT4mmV sEYMrdRr3EfzfqLgTtNMK0jUYZS+YnWyVll+YjDmy5l6BgFinDX3bHgUz4ObJd26 jZNZOVJuUXbWD3whzKBmXCOIyP0V/ypsF3xRFTIbb30ajcKo225uqQ/CiFUxzQJH ddOhoKB0/8xj6d3P+3/26lQRbB6ISN9l1XfcQ8qDsMwXiJSguqFtpavQaIW2L9C9 2ABkHS0Mxf8Afmii7Jo/EgI5LdgB/rOQ3EhKGBNoYMLD3/CpDQR/IGBov30zgG40 muE36/dDzumOauY= -----END CERTIFICATE-----Generated at Wed Jul 23 08:21:18 2025 by rpki-client