$ rpki-client -vvf rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/8037BC50EB2E11EDB835EF4AC4F9AE02.roa File: 8037BC50EB2E11EDB835EF4AC4F9AE02.roa (raw, json) Hash identifier: 9AUbM37b5CiLCdaFctD08Xg1S7rAzz8NUfqZj75vIUI= Subject key identifier: 31:D4:69:FB:07:C6:76:98:A4:6B:A1:EB:59:C9:0E:4E:57:BE:77:E9 Certificate issuer: /CN=A9119DCB/serialNumber=1723DCB41A04268A587AACE8CFD9DAE5F9F51DF7 Certificate serial: 07AF Authority key identifier: 17:23:DC:B4:1A:04:26:8A:58:7A:AC:E8:CF:D9:DA:E5:F9:F5:1D:F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/8037BC50EB2E11EDB835EF4AC4F9AE02.roa Signing time: Fri 06 Jun 2025 21:41:06 +0000 ROA not before: Fri 06 Jun 2025 21:41:06 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 45863 IP address blocks: 27.123.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.crl rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Jun 2025 21:41:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1967 (0x7af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119DCB, serialNumber=1723DCB41A04268A587AACE8CFD9DAE5F9F51DF7 Validity Not Before: Jun 6 21:41:06 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=68436072-c0b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e4:70:63:61:3d:60:4a:38:a2:44:bd:e6:4d: cd:bb:3e:0b:67:3e:40:a2:80:fb:ab:1e:8a:71:d0: 55:60:51:99:de:53:48:a2:ce:10:6a:78:95:b4:54: 83:a2:15:39:65:76:aa:2f:4c:76:97:50:69:dc:20: ec:84:3f:b4:96:e2:bb:b0:18:5e:44:ff:66:d1:1c: ec:41:e0:b2:bd:9c:99:4a:90:d4:7b:28:ba:5c:47: 2a:e6:6d:44:ad:0c:1a:a6:06:c0:19:02:56:2c:4c: d8:50:c9:2c:e8:5b:1f:67:3b:de:0b:26:a9:f8:af: fb:ce:e8:ea:3d:33:e0:82:33:04:98:2b:c1:9c:9c: 0a:3f:17:cc:4b:1d:9f:64:0b:bc:f7:3a:51:9c:5a: f3:e9:87:4b:10:bd:8e:da:75:b7:69:eb:35:eb:99: 7c:5f:42:b2:41:2a:5f:75:6f:af:ba:68:1c:46:2f: 8c:82:41:2f:5a:40:2e:02:20:b3:72:e0:94:da:21: fa:e2:82:cb:40:8c:03:37:fb:77:16:c2:2b:3f:1a: 8a:ea:5e:22:7e:7b:92:42:1c:5e:c2:ad:01:8a:03: 93:83:18:99:64:a3:a9:90:d0:e1:a2:ae:da:a2:e4: 22:3b:39:31:91:14:19:7b:a8:a4:7c:80:93:fe:53: 3f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:D4:69:FB:07:C6:76:98:A4:6B:A1:EB:59:C9:0E:4E:57:BE:77:E9 X509v3 Authority Key Identifier: keyid:17:23:DC:B4:1A:04:26:8A:58:7A:AC:E8:CF:D9:DA:E5:F9:F5:1D:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/8037BC50EB2E11EDB835EF4AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.123.32.0/24 Signature Algorithm: sha256WithRSAEncryption ba:05:11:b2:70:49:5f:ae:54:e3:b9:de:e5:cf:e3:f0:d5:2b: 95:22:69:28:88:12:4e:61:85:a7:4a:bd:e0:5d:14:70:f3:8d: 97:f0:d1:f2:de:9d:32:9a:f5:a4:61:ab:fd:1c:7a:8c:0c:08: cf:65:62:56:bd:e7:f0:fd:99:ec:66:f3:65:d5:8c:cc:00:47: 43:69:be:8b:aa:de:e8:b0:8d:e1:2d:35:dd:67:44:27:74:18: 50:f3:ac:66:6f:d8:ae:66:02:6d:86:83:f7:16:fe:f6:46:8c: a8:a2:65:b5:1e:3d:d8:83:0e:29:a9:7d:38:a9:04:c4:2f:6b: e6:44:88:c5:43:0c:5d:17:a9:97:1b:6d:62:ee:aa:59:7d:8b: 0a:dc:92:81:0e:61:6b:8f:2c:11:d7:db:52:bb:cb:f2:02:1c: 86:03:a9:64:66:72:3e:d0:6f:44:d0:4d:2d:39:de:e9:c4:f7: 52:ac:fe:5f:fa:94:02:6d:59:9d:c1:64:86:ff:a2:cf:5e:ac: 4c:23:a4:6b:ec:98:6d:de:39:9d:c1:9f:c1:71:cf:da:10:3b: 72:b3:b2:1e:5e:28:2d:25:f3:c1:4e:28:fe:b5:52:c3:8d:5d: 27:b9:4c:49:77:aa:04:23:54:07:f2:0c:8f:1d:eb:56:14:38: 26:01:f3:7b -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB68wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTlEQ0IxMTAvBgNVBAUTKDE3MjNEQ0I0MUEwNDI2OEE1ODdBQUNFOENGRDlEQUU1 RjlGNTFERjcwHhcNMjUwNjA2MjE0MTA2WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODQzNjA3Mi1jMGI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwORwY2E9YEo4okS95k3Nuz4LZz5AooD7qx6KcdBVYFGZ3lNIos4QaniVtFSD ohU5ZXaqL0x2l1Bp3CDshD+0luK7sBheRP9m0RzsQeCyvZyZSpDUeyi6XEcq5m1E rQwapgbAGQJWLEzYUMks6FsfZzveCyap+K/7zujqPTPggjMEmCvBnJwKPxfMSx2f ZAu89zpRnFrz6YdLEL2O2nW3aes165l8X0KyQSpfdW+vumgcRi+MgkEvWkAuAiCz cuCU2iH64oLLQIwDN/t3FsIrPxqK6l4ifnuSQhxewq0BigOTgxiZZKOpkNDhoq7a ouQiOzkxkRQZe6ikfICT/lM/JQIDAQABo4IClTCCApEwHQYDVR0OBBYEFDHUafsH xnaYpGuh61nJDk5XvnfpMB8GA1UdIwQYMBaAFBcj3LQaBCaKWHqs6M/Z2uX59R33 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOURDQi9FNEMwRjU2QzE4 N0YxMUVCQUUyOTY5MkVDNEY5QUUwMi9GeVBjdEJvRUpvcFllcXpvejluYTVmbjFI ZmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Z5UGN0Qm9FSm9wWWVxem96OW5hNWZuMUhmYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTlEQ0IvRTRDMEY1NkMxODdGMTFFQkFFMjk2OTJFQzRGOUFFMDIvODAzN0JDNTBF QjJFMTFFREI4MzVFRjRBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAbeyAwDQYJKoZIhvcNAQELBQADggEBALoFEbJwSV+uVOO5 3uXP4/DVK5UiaSiIEk5hhadKveBdFHDzjZfw0fLenTKa9aRhq/0ceowMCM9lYla9 5/D9mexm82XVjMwAR0Npvouq3uiwjeEtNd1nRCd0GFDzrGZv2K5mAm2Gg/cW/vZG jKiiZbUePdiDDimpfTipBMQva+ZEiMVDDF0XqZcbbWLuqll9iwrckoEOYWuPLBHX 21K7y/ICHIYDqWRmcj7Qb0TQTS053unE91Ks/l/6lAJtWZ3BZIb/os9erEwjpGvs mG3eOZ3Bn8Fxz9oQO3Kzsh5eKC0l88FOKP61UsONXSe5TEl3qgQjVAfyDI8d61YU OCYB83s= -----END CERTIFICATE-----Generated at Sun Jun 8 17:48:27 2025 by rpki-client