$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/9D4131DE13D511EF883BC527C4F9AE02.roa File: 9D4131DE13D511EF883BC527C4F9AE02.roa (raw, json) Hash identifier: olmc/o09ErYiChJbWXMyIgbGCNghcLiwj8HQmo8o9wc= Subject key identifier: 7A:9E:93:F3:56:F0:FB:11:A9:BC:ED:C5:35:28:06:D6:71:C8:9B:B3 Certificate issuer: /CN=A912A3E1/serialNumber=F35268F976E8AE71FEFA66CA4516361C58AE1D91 Certificate serial: 0C58 Authority key identifier: F3:52:68:F9:76:E8:AE:71:FE:FA:66:CA:45:16:36:1C:58:AE:1D:91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81Jo-XbornH--mbKRRY2HFiuHZE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/9D4131DE13D511EF883BC527C4F9AE02.roa Signing time: Tue 06 May 2025 18:28:36 +0000 ROA not before: Tue 06 May 2025 18:28:36 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 202.77.88.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/81Jo-XbornH--mbKRRY2HFiuHZE.crl rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/81Jo-XbornH--mbKRRY2HFiuHZE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81Jo-XbornH--mbKRRY2HFiuHZE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 18:30:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3160 (0xc58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A3E1, serialNumber=F35268F976E8AE71FEFA66CA4516361C58AE1D91 Validity Not Before: May 6 18:28:36 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681a54d3-b606 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2f:af:b8:ec:b3:9a:a6:68:b5:8a:6e:08:b3: cd:e0:60:52:dd:0a:48:bf:56:50:82:42:05:e8:3c: 6c:46:8b:02:2a:7c:52:42:a3:28:93:f9:34:0f:cf: 3a:76:50:0c:b0:10:f7:f2:fb:d9:c1:66:c6:d9:f2: ba:7d:3b:ff:f0:79:3e:b5:60:5e:bd:33:14:2b:b1: 09:b1:bb:09:62:09:97:ae:d3:48:aa:03:9f:b2:dd: 85:9b:ed:9c:26:a0:fa:50:e3:22:43:c6:23:72:cc: 35:85:15:89:82:86:1d:d1:9c:ac:20:24:20:d9:d9: 8f:68:f4:6b:48:ac:49:8a:76:34:bf:1a:0f:9a:a3: 49:63:ec:83:20:7d:ff:73:d2:f9:69:77:e9:13:75: b5:e9:b2:0c:a9:f9:ef:82:e8:23:64:50:18:9a:ee: d0:57:10:40:75:2c:94:40:d7:61:93:6f:74:22:a2: a4:89:12:0f:fa:9b:3d:91:b4:83:d3:22:44:f3:8f: 15:6e:5d:67:94:31:2c:62:9a:c1:30:cb:77:0d:41: 18:b4:c3:99:00:46:a8:26:65:67:a6:3a:b6:66:a2: 3b:8a:f3:5d:61:93:c0:b0:46:2d:19:eb:4e:47:ff: 0c:c8:df:cd:8e:aa:9a:0f:83:a8:a8:a8:fc:12:c7: 80:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:9E:93:F3:56:F0:FB:11:A9:BC:ED:C5:35:28:06:D6:71:C8:9B:B3 X509v3 Authority Key Identifier: keyid:F3:52:68:F9:76:E8:AE:71:FE:FA:66:CA:45:16:36:1C:58:AE:1D:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/81Jo-XbornH--mbKRRY2HFiuHZE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81Jo-XbornH--mbKRRY2HFiuHZE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/9D4131DE13D511EF883BC527C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.77.88.0/22 Signature Algorithm: sha256WithRSAEncryption 9c:f0:1d:76:a7:55:e6:c5:1e:d7:19:d8:8c:af:37:03:54:c1: a9:6d:f3:ea:a3:aa:bc:42:ac:d1:d3:33:42:ce:0c:ba:fa:04: 48:59:07:91:5b:a6:59:2b:af:cb:df:18:4c:f3:25:b2:86:a8: a2:75:17:3c:8d:ad:3b:a9:dd:26:06:f5:05:3d:0c:b2:10:47: 43:0f:6a:1b:e9:e7:0d:ff:de:19:d2:07:08:3f:e2:89:25:98: 26:5f:42:df:29:a7:67:b4:86:86:05:4d:ae:af:d6:8c:77:18: c5:70:a3:eb:74:de:b7:e1:2a:6a:82:0f:21:91:b7:cf:ab:a5: d7:b5:59:f8:c2:01:7a:af:87:1f:91:81:ff:d5:d0:d4:6d:29: 9d:66:ba:64:83:51:f5:3b:6e:23:f2:8a:83:1b:1b:6d:01:5a: f9:2a:f1:f9:68:8b:98:3d:60:63:63:a7:a3:80:d2:e3:5f:c9: 1a:3a:b9:be:e5:ab:cd:a7:79:45:ac:4b:7b:78:24:00:21:ec: a6:41:5c:bd:c1:2b:98:a8:c1:f1:ca:6f:a9:43:bc:70:b9:c4: 53:6c:ab:a7:10:af:81:61:d0:de:80:2f:c1:f1:f6:48:04:22: 57:98:aa:61:b8:59:9c:53:a8:3f:82:1a:9a:2d:9d:4a:d1:56: cd:b6:ce:82 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDFgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkEzRTExMTAvBgNVBAUTKEYzNTI2OEY5NzZFOEFFNzFGRUZBNjZDQTQ1MTYzNjFD NThBRTFEOTEwHhcNMjUwNTA2MTgyODM2WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFhNTRkMy1iNjA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzC+vuOyzmqZotYpuCLPN4GBS3QpIv1ZQgkIF6DxsRosCKnxSQqMok/k0D886 dlAMsBD38vvZwWbG2fK6fTv/8Hk+tWBevTMUK7EJsbsJYgmXrtNIqgOfst2Fm+2c JqD6UOMiQ8Yjcsw1hRWJgoYd0ZysICQg2dmPaPRrSKxJinY0vxoPmqNJY+yDIH3/ c9L5aXfpE3W16bIMqfnvgugjZFAYmu7QVxBAdSyUQNdhk290IqKkiRIP+ps9kbSD 0yJE848Vbl1nlDEsYprBMMt3DUEYtMOZAEaoJmVnpjq2ZqI7ivNdYZPAsEYtGetO R/8MyN/NjqqaD4OoqKj8EseApQIDAQABo4IClTCCApEwHQYDVR0OBBYEFHqek/NW 8PsRqbztxTUoBtZxyJuzMB8GA1UdIwQYMBaAFPNSaPl26K5x/vpmykUWNhxYrh2R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTNFMS85RkQ1OERBNjA1 QjAxMUVBOTIzNTRCNUFDNEY5QUUwMi84MUpvLVhib3JuSC0tbWJLUlJZMkhGaXVI WkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzgxSm8tWGJvcm5ILS1tYktSUlkySEZpdUhaRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkEzRTEvOUZENThEQTYwNUIwMTFFQTkyMzU0QjVBQzRGOUFFMDIvOUQ0MTMxREUx M0Q1MTFFRjg4M0JDNTI3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBALKTVgwDQYJKoZIhvcNAQELBQADggEBAJzwHXanVebFHtcZ 2IyvNwNUwalt8+qjqrxCrNHTM0LODLr6BEhZB5Fbplkrr8vfGEzzJbKGqKJ1FzyN rTup3SYG9QU9DLIQR0MPahvp5w3/3hnSBwg/4oklmCZfQt8pp2e0hoYFTa6v1ox3 GMVwo+t03rfhKmqCDyGRt8+rpde1WfjCAXqvhx+Rgf/V0NRtKZ1mumSDUfU7biPy ioMbG20BWvkq8floi5g9YGNjp6OA0uNfyRo6ub7lq82neUWsS3t4JAAh7KZBXL3B K5iowfHKb6lDvHC5xFNsq6cQr4Fh0N6AL8Hx9kgEIleYqmG4WZxTqD+CGpotnUrR Vs22zoI= -----END CERTIFICATE-----Generated at Sun Jun 1 04:10:00 2025 by rpki-client