$ rpki-client -vvf rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/D5271A183ADB11F0BC52A042C4F9AE02.roa File: D5271A183ADB11F0BC52A042C4F9AE02.roa (raw, json) Hash identifier: Je+up3kY6qu1B3So3Vnq/xOYjMIPNymqMCzCxvb8aL4= Subject key identifier: AF:6A:B8:0B:2E:A0:D4:02:E6:44:C2:EA:52:02:4B:34:2C:E8:AF:B1 Certificate issuer: /CN=A912698E/serialNumber=5DB75B2DF94D04474A6E5E2D4B78CC084BFC2A6C Certificate serial: 11 Authority key identifier: 5D:B7:5B:2D:F9:4D:04:47:4A:6E:5E:2D:4B:78:CC:08:4B:FC:2A:6C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XbdbLflNBEdKbl4tS3jMCEv8Kmw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/D5271A183ADB11F0BC52A042C4F9AE02.roa Signing time: Tue 27 May 2025 09:20:30 +0000 ROA not before: Tue 27 May 2025 09:20:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 21859 IP address blocks: 205.210.164.0/24 maxlen: 24 205.210.166.0/24 maxlen: 24 205.210.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.crl rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XbdbLflNBEdKbl4tS3jMCEv8Kmw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 17:43:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912698E, serialNumber=5DB75B2DF94D04474A6E5E2D4B78CC084BFC2A6C Validity Not Before: May 27 09:20:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=683583dd-4e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:ab:16:22:9d:f2:96:b3:66:53:cf:f1:ea:a6: 38:c6:7b:90:7c:77:5f:a6:11:3d:1a:48:19:98:8e: fa:c1:1f:35:1d:48:22:81:a7:6b:60:27:ab:6d:08: 95:30:e0:0c:c8:9b:be:db:41:ad:70:5a:b5:a1:b9: 24:8b:40:4e:a3:cc:bd:c5:60:9d:1d:81:7c:ee:26: db:87:e3:32:c4:3c:3c:7f:61:e3:f2:cd:a9:ca:76: d9:30:e3:ac:83:f8:cd:d1:6e:50:dc:6d:89:fb:04: b2:56:ed:a0:ab:c2:e1:4b:98:1d:71:b7:17:d7:6d: eb:e7:1f:0c:53:00:9a:ab:b6:9a:85:fd:9f:2c:a4: a6:90:c6:06:3b:53:29:29:1c:59:35:6f:59:31:1d: 59:dd:bd:35:6f:55:e1:f7:54:2f:7d:7f:28:c5:96: 7a:33:2e:f9:f0:b9:be:ad:77:7a:f1:9e:a4:e7:22: ae:c6:51:82:69:a6:9d:a6:91:21:59:ee:6d:94:a3: 4e:8e:a4:d7:e2:b7:af:11:b6:73:9e:bd:ff:67:9e: 3d:c8:46:20:b4:c7:3f:80:b9:a1:bb:8b:e2:1d:47: b6:4b:4b:62:0e:cb:e0:12:f2:d4:29:26:9b:20:a3: 9a:dc:39:60:f1:46:55:57:97:88:77:a0:50:78:fd: 2e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:6A:B8:0B:2E:A0:D4:02:E6:44:C2:EA:52:02:4B:34:2C:E8:AF:B1 X509v3 Authority Key Identifier: keyid:5D:B7:5B:2D:F9:4D:04:47:4A:6E:5E:2D:4B:78:CC:08:4B:FC:2A:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XbdbLflNBEdKbl4tS3jMCEv8Kmw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/D5271A183ADB11F0BC52A042C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 205.210.164.0/24 205.210.166.0/23 Signature Algorithm: sha256WithRSAEncryption 9f:c5:04:62:a4:e7:82:ca:0a:e5:7c:b3:ec:7f:41:63:4e:8d: 9b:b8:12:26:15:7a:44:95:b5:08:2c:e1:48:c2:b1:34:f0:f5: db:a1:4a:01:7e:78:25:3b:86:94:5e:94:86:63:c8:dd:4e:4c: ca:94:e8:b5:a5:78:ad:f5:ae:b9:96:e4:7d:a5:56:0b:5f:31: 94:6a:dc:fe:69:fa:db:72:5b:82:a2:93:cb:bf:e2:25:10:4e: f8:49:4d:e5:c2:d3:fd:8e:d8:fa:88:5c:37:f0:4e:a3:a4:0d: b6:fe:c8:be:bb:fd:c5:dc:5c:cc:5f:6c:7d:fb:4d:56:85:2e: c4:4a:f0:38:4f:30:1b:e1:29:f8:48:59:dd:6b:be:a0:a7:46: 8c:ff:62:3f:a2:ec:7f:ae:5f:6c:ea:bc:8e:ab:9a:33:8f:8a: eb:39:7a:47:be:90:36:a0:d2:75:66:a9:1f:a2:8d:3c:5a:c9: e2:f3:f8:ea:6e:33:64:22:c4:1b:3e:87:b1:5d:89:1f:cd:25: ea:e9:e2:44:ae:96:af:10:29:1c:be:e0:e5:a6:60:54:5d:43: 8e:83:a0:15:15:80:11:55:10:0b:ab:00:6a:a8:55:1e:58:ee: bb:2c:09:b0:0f:4a:7e:c2:57:4e:0f:b6:55:70:6a:25:bd:cd: ee:ee:7c:9a -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy Njk4RTExMC8GA1UEBRMoNURCNzVCMkRGOTREMDQ0NzRBNkU1RTJENEI3OENDMDg0 QkZDMkE2QzAeFw0yNTA1MjcwOTIwMzBaFw0yNjA3MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4MzU4M2RkLTRlMjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDhqxYinfKWs2ZTz/HqpjjGe5B8d1+mET0aSBmYjvrBHzUdSCKBp2tgJ6ttCJUw 4AzIm77bQa1wWrWhuSSLQE6jzL3FYJ0dgXzuJtuH4zLEPDx/YePyzanKdtkw46yD +M3RblDcbYn7BLJW7aCrwuFLmB1xtxfXbevnHwxTAJqrtpqF/Z8spKaQxgY7Uykp HFk1b1kxHVndvTVvVeH3VC99fyjFlnozLvnwub6td3rxnqTnIq7GUYJppp2mkSFZ 7m2Uo06OpNfit68RtnOevf9nnj3IRiC0xz+AuaG7i+IdR7ZLS2IOy+AS8tQpJpsg o5rcOWDxRlVXl4h3oFB4/S7zAgMBAAGjggKbMIIClzAdBgNVHQ4EFgQUr2q4Cy6g 1ALmRMLqUgJLNCzor7EwHwYDVR0jBBgwFoAUXbdbLflNBEdKbl4tS3jMCEv8Kmww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI2OThFLzA5NUY2QzhDMjY3 QzExRjA5Njc3RjgwQkM0RjlBRTAyL1hiZGJMZmxOQkVkS2JsNHRTM2pNQ0V2OEtt dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWGJkYkxmbE5CRWRLYmw0dFMzak1DRXY4S213LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Njk4RS8wOTVGNkM4QzI2N0MxMUYwOTY3N0Y4MEJDNEY5QUUwMi9ENTI3MUExODNB REIxMUYwQkM1MkEwNDJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQW MBQwEgQCAAEwDAMEAM3SpAMEAc3SpjANBgkqhkiG9w0BAQsFAAOCAQEAn8UEYqTn gsoK5Xyz7H9BY06Nm7gSJhV6RJW1CCzhSMKxNPD126FKAX54JTuGlF6UhmPI3U5M ypTotaV4rfWuuZbkfaVWC18xlGrc/mn623JbgqKTy7/iJRBO+ElN5cLT/Y7Y+ohc N/BOo6QNtv7Ivrv9xdxczF9sfftNVoUuxErwOE8wG+Ep+EhZ3Wu+oKdGjP9iP6Ls f65fbOq8jquaM4+K6zl6R76QNqDSdWapH6KNPFrJ4vP46m4zZCLEGz6HsV2JH80l 6uniRK6WrxApHL7g5aZgVF1DjoOgFRWAEVUQC6sAaqhVHljuuywJsA9KfsJXTg+2 VXBqJb3N7u58mg== -----END CERTIFICATE-----Generated at Thu Jun 5 19:19:27 2025 by rpki-client