$ rpki-client -vvf rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/FD2941A0BBC311EEBE58430EC4F9AE02.roa File: FD2941A0BBC311EEBE58430EC4F9AE02.roa (raw, json) Hash identifier: y9g4n21UCTqNjGbPSMXx3pzlzLx/iVjZI0pRarDixiQ= Subject key identifier: D4:6B:70:7D:0A:5B:B5:B5:68:BD:01:05:6D:EC:1B:80:EE:E6:54:8E Certificate issuer: /CN=A912FCD6/serialNumber=53BF0DD780DB038ECE14D40459BAB9C68F69853B Certificate serial: 223B Authority key identifier: 53:BF:0D:D7:80:DB:03:8E:CE:14:D4:04:59:BA:B9:C6:8F:69:85:3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/FD2941A0BBC311EEBE58430EC4F9AE02.roa Signing time: Wed 28 May 2025 16:39:50 +0000 ROA not before: Wed 28 May 2025 16:39:50 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 133752 IP address blocks: 180.210.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.crl rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 15:51:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8763 (0x223b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FCD6, serialNumber=53BF0DD780DB038ECE14D40459BAB9C68F69853B Validity Not Before: May 28 16:39:50 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=68373c56-b885 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c1:ac:64:d3:b3:7c:3e:37:ab:4b:48:40:61: c6:1f:62:21:73:f8:42:f0:5f:29:23:bb:b7:15:35: f9:a2:c3:7b:0e:ed:6e:b0:07:a8:f1:c6:ac:3f:fb: 0d:b5:fd:ec:1e:7b:ce:24:bb:8c:48:e4:93:10:b1: 64:f4:17:9a:4c:be:35:1e:cd:2e:55:69:05:96:0a: 06:39:96:f2:92:a0:9e:88:74:c7:50:fa:69:db:89: 3a:0a:b0:b3:11:77:de:89:2d:e0:58:fc:35:58:f2: 38:25:01:c1:08:a3:df:c1:6c:66:5f:78:05:e4:d9: bc:89:40:26:75:07:17:6d:d7:11:97:c9:14:bb:b0: 45:9d:ee:d6:0f:e6:7b:2d:76:69:b0:7d:58:72:cc: 4f:fc:cc:c3:7b:af:8e:70:1a:a9:7c:f7:2c:ee:b4: a9:f4:44:c4:df:44:90:bb:bc:04:4f:e3:46:28:14: ba:6d:6b:84:57:93:00:85:e4:de:f7:18:0a:10:9d: 3e:c3:b6:95:81:07:83:89:46:6e:f2:d7:09:09:b2: 13:23:65:8f:db:64:5f:bf:71:e2:0f:7e:23:9d:f1: cb:d0:5e:8b:00:77:92:5b:30:78:c6:c8:f1:46:29: 71:76:32:58:16:97:b5:c9:30:0e:64:9e:48:b7:ee: ce:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:6B:70:7D:0A:5B:B5:B5:68:BD:01:05:6D:EC:1B:80:EE:E6:54:8E X509v3 Authority Key Identifier: keyid:53:BF:0D:D7:80:DB:03:8E:CE:14:D4:04:59:BA:B9:C6:8F:69:85:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/FD2941A0BBC311EEBE58430EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 180.210.220.0/24 Signature Algorithm: sha256WithRSAEncryption 14:fb:85:1d:4f:28:b1:a2:b6:ee:96:d7:da:fb:76:5a:2e:7d: 71:84:5e:bc:a1:89:0d:52:51:3a:a0:83:c8:9d:ac:d0:0c:24: 97:6d:32:88:59:a8:ff:f2:f6:7d:3c:dc:7c:cc:c8:81:3d:44: 14:e9:b2:6c:63:e0:67:a5:f2:50:ab:29:df:e3:dc:24:e7:a8: 92:2c:a6:75:3b:1d:1b:46:65:0f:87:ca:6d:0a:8c:91:35:82: 9c:88:76:7a:90:74:69:f9:40:b2:f9:17:7a:d2:c2:3d:a8:c8: 89:d9:4e:87:79:e9:41:6f:1f:50:4d:33:d8:02:04:5a:11:29: 64:70:0c:d5:52:4c:86:fd:a6:ce:a0:2a:df:0d:d9:fa:51:9c: 49:b5:cf:a5:95:e8:2c:cb:b3:3c:ba:f8:18:ee:84:47:ce:59: 75:a2:29:67:80:ae:86:3e:51:b7:b1:56:b9:c3:82:00:f5:d4: 0c:dc:1d:03:cf:89:1b:b1:32:75:5d:64:6a:dc:f1:50:36:1d: 43:5d:a4:48:03:fe:65:aa:01:ef:15:01:cd:74:cd:df:be:0a: 97:66:e4:b3:65:11:15:83:cd:00:ad:b8:0e:52:e4:e8:15:50: 27:a1:94:23:5b:2c:63:19:1f:e3:02:4b:92:8b:01:0e:ff:db: 9e:96:80:30 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICIjswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZDRDYxMTAvBgNVBAUTKDUzQkYwREQ3ODBEQjAzOEVDRTE0RDQwNDU5QkFCOUM2 OEY2OTg1M0IwHhcNMjUwNTI4MTYzOTUwWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODM3M2M1Ni1iODg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyMGsZNOzfD43q0tIQGHGH2Ihc/hC8F8pI7u3FTX5osN7Du1usAeo8casP/sN tf3sHnvOJLuMSOSTELFk9BeaTL41Hs0uVWkFlgoGOZbykqCeiHTHUPpp24k6CrCz EXfeiS3gWPw1WPI4JQHBCKPfwWxmX3gF5Nm8iUAmdQcXbdcRl8kUu7BFne7WD+Z7 LXZpsH1YcsxP/MzDe6+OcBqpfPcs7rSp9ETE30SQu7wET+NGKBS6bWuEV5MAheTe 9xgKEJ0+w7aVgQeDiUZu8tcJCbITI2WP22Rfv3HiD34jnfHL0F6LAHeSWzB4xsjx RilxdjJYFpe1yTAOZJ5It+7OaQIDAQABo4IClTCCApEwHQYDVR0OBBYEFNRrcH0K W7W1aL0BBW3sG4Du5lSOMB8GA1UdIwQYMBaAFFO/DdeA2wOOzhTUBFm6ucaPaYU7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkNENi8xRTlFMUFBQ0Qy RUExMUU1QUZCMUUyNENDNEY5QUUwMi9VNzhOMTREYkE0N09GTlFFV2JxNXhvOXBo VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1U3OE4xNERiQTQ3T0ZOUUVXYnE1eG85cGhUcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkZDRDYvMUU5RTFBQUNEMkVBMTFFNUFGQjFFMjRDQzRGOUFFMDIvRkQyOTQxQTBC QkMzMTFFRUJFNTg0MzBFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAC00twwDQYJKoZIhvcNAQELBQADggEBABT7hR1PKLGitu6W 19r7dloufXGEXryhiQ1SUTqgg8idrNAMJJdtMohZqP/y9n083HzMyIE9RBTpsmxj 4Gel8lCrKd/j3CTnqJIspnU7HRtGZQ+Hym0KjJE1gpyIdnqQdGn5QLL5F3rSwj2o yInZTod56UFvH1BNM9gCBFoRKWRwDNVSTIb9ps6gKt8N2fpRnEm1z6WV6CzLszy6 +BjuhEfOWXWiKWeAroY+UbexVrnDggD11AzcHQPPiRuxMnVdZGrc8VA2HUNdpEgD /mWqAe8VAc10zd++Cpdm5LNlERWDzQCtuA5S5OgVUCehlCNbLGMZH+MCS5KLAQ7/ 256WgDA= -----END CERTIFICATE-----Generated at Mon Jun 2 06:58:28 2025 by rpki-client