$ rpki-client -vvf rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/F0F715D8D91811EFAD9B2462C4F9AE02.roa File: F0F715D8D91811EFAD9B2462C4F9AE02.roa (raw, json) Hash identifier: Ny12vEBqpwaRq5+I0g6PLZP16p/vMcEe0/tRUqpINSs= Subject key identifier: A6:37:61:CA:75:28:7A:95:3D:56:2E:1E:0B:3B:13:AD:75:FB:3B:40 Certificate issuer: /CN=A91356BB/serialNumber=2CCA13540F013B93B23C9DF14D9617DA40CB2677 Certificate serial: 0517 Authority key identifier: 2C:CA:13:54:0F:01:3B:93:B2:3C:9D:F1:4D:96:17:DA:40:CB:26:77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/F0F715D8D91811EFAD9B2462C4F9AE02.roa Signing time: Sun 01 Jun 2025 00:33:19 +0000 ROA not before: Sun 01 Jun 2025 00:33:19 +0000 ROA not after: Wed 01 Oct 2025 00:00:00 +0000 asID: 14618 IP address blocks: 203.20.192.0/24 maxlen: 24 203.20.193.0/24 maxlen: 24 203.20.194.0/24 maxlen: 24 203.20.195.0/24 maxlen: 24 203.20.196.0/24 maxlen: 24 203.20.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.crl rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 00:33:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1303 (0x517) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91356BB, serialNumber=2CCA13540F013B93B23C9DF14D9617DA40CB2677 Validity Not Before: Jun 1 00:33:19 2025 GMT Not After : Oct 1 00:00:00 2025 GMT Subject: CN=683b9fcf-ed1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:9a:03:7f:e1:1f:f2:72:e3:cf:0b:3e:1b:c6: 1d:44:3b:af:5f:63:57:1c:bf:31:ae:1f:8b:8d:9b: 45:33:1e:1d:bb:07:96:bd:b5:11:30:8f:f0:12:6d: fa:f1:0c:69:c2:de:16:9d:8f:5a:33:09:64:31:c2: fd:cc:e3:59:04:07:c6:c5:d6:77:0b:0f:4c:86:41: 9f:e7:f0:93:43:a7:19:a3:e4:9d:a3:78:a8:a7:13: 48:48:66:60:25:3b:43:c5:74:57:c0:df:30:33:2c: 59:10:4a:cd:5b:38:49:3b:73:d8:d7:2e:d4:0d:e8: cc:07:69:ef:e9:7f:26:77:34:f7:82:b2:64:25:68: 6f:af:91:58:00:20:14:2c:0b:09:83:82:25:c6:1b: 3c:a4:8d:5f:18:5c:2f:40:a7:d0:32:0f:21:4e:af: 06:c4:56:ea:af:6e:f6:f0:b9:61:c2:a3:4e:7c:3a: be:86:53:b7:86:29:a1:9e:b6:fa:d3:bb:f8:e1:47: b0:15:56:d6:7d:5f:dd:50:b8:a9:c8:56:13:73:c6: b2:96:72:72:a7:01:5d:c6:a5:08:be:24:29:44:d7: 7f:f1:ba:a4:1a:1c:f3:b1:f7:47:e0:80:74:de:f1: 96:39:af:42:ca:b7:88:eb:eb:e3:74:3b:ea:0b:f4: a2:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:37:61:CA:75:28:7A:95:3D:56:2E:1E:0B:3B:13:AD:75:FB:3B:40 X509v3 Authority Key Identifier: keyid:2C:CA:13:54:0F:01:3B:93:B2:3C:9D:F1:4D:96:17:DA:40:CB:26:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/F0F715D8D91811EFAD9B2462C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.20.192.0-203.20.196.255 203.20.198.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:00:48:03:e8:4f:1c:cb:6f:e1:81:0b:4e:4d:6b:37:8d:26: 63:a8:f6:20:89:e9:b6:82:17:a6:f5:af:b3:28:56:28:aa:27: f4:1f:03:c7:4f:7d:af:44:9c:86:07:84:35:6c:71:90:5a:1d: 9a:ab:0a:44:65:1d:72:2f:d3:6e:9e:ce:20:36:e9:2a:94:ff: 55:94:e1:2f:3c:a4:fd:7d:03:df:76:d2:d1:61:d7:04:c0:3b: c1:7e:54:89:8b:0f:9a:a5:b2:9a:f6:22:c2:78:fe:bf:e2:90: cf:82:31:a9:08:6b:e9:4b:30:39:b4:1d:ac:71:79:d0:e3:e6: 3d:b6:79:84:e0:f1:27:9f:99:d5:1c:85:eb:24:bc:ef:dd:8e: 27:11:b2:12:45:81:0e:f7:82:0d:42:6d:55:38:0f:13:95:44: 29:fe:ee:ae:2d:8d:57:80:90:41:c0:3e:6d:da:2a:1b:4f:18: 30:4f:45:82:0a:03:e0:eb:96:1e:5a:9d:63:83:5d:84:ee:f1: 45:b7:eb:06:bf:99:bb:8d:f1:b3:9b:df:ca:14:e0:9e:44:4b: 8b:c5:af:13:fb:95:6b:af:8f:c5:ed:f3:00:18:ea:f4:2c:1f: 76:b6:3e:8d:dd:cb:67:58:0a:e8:7c:29:77:c0:5a:b4:50:dd: 9b:b5:02:8e -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgICBRcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU2QkIxMTAvBgNVBAUTKDJDQ0ExMzU0MEYwMTNCOTNCMjNDOURGMTREOTYxN0RB NDBDQjI2NzcwHhcNMjUwNjAxMDAzMzE5WhcNMjUxMDAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODNiOWZjZi1lZDFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8JoDf+Ef8nLjzws+G8YdRDuvX2NXHL8xrh+LjZtFMx4duweWvbURMI/wEm36 8Qxpwt4WnY9aMwlkMcL9zONZBAfGxdZ3Cw9MhkGf5/CTQ6cZo+Sdo3iopxNISGZg JTtDxXRXwN8wMyxZEErNWzhJO3PY1y7UDejMB2nv6X8mdzT3grJkJWhvr5FYACAU LAsJg4Ilxhs8pI1fGFwvQKfQMg8hTq8GxFbqr2728LlhwqNOfDq+hlO3himhnrb6 07v44UewFVbWfV/dULipyFYTc8aylnJypwFdxqUIviQpRNd/8bqkGhzzsfdH4IB0 3vGWOa9CyreI6+vjdDvqC/SijQIDAQABo4ICozCCAp8wHQYDVR0OBBYEFKY3Ycp1 KHqVPVYuHgs7E611+ztAMB8GA1UdIwQYMBaAFCzKE1QPATuTsjyd8U2WF9pAyyZ3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTZCQi81Q0VBNTQ5NDE2 RDUxMUVDQTdGM0Y0NkFDNEY5QUUwMi9MTW9UVkE4Qk81T3lQSjN4VFpZWDJrRExK bmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xNb1RWQThCTzVPeVBKM3hUWllYMmtETEpuYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzU2QkIvNUNFQTU0OTQxNkQ1MTFFQ0E3RjNGNDZBQzRGOUFFMDIvRjBGNzE1RDhE OTE4MTFFRkFEOUIyNDYyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLQYIKwYBBQUHAQcBAf8E HjAcMBoEAgABMBQwDAMEBssUwAMEAMsUxAMEAMsUxjANBgkqhkiG9w0BAQsFAAOC AQEAWgBIA+hPHMtv4YELTk1rN40mY6j2IInptoIXpvWvsyhWKKon9B8Dx099r0Sc hgeENWxxkFodmqsKRGUdci/Tbp7OIDbpKpT/VZThLzyk/X0D33bS0WHXBMA7wX5U iYsPmqWymvYiwnj+v+KQz4IxqQhr6UswObQdrHF50OPmPbZ5hODxJ5+Z1RyF6yS8 792OJxGyEkWBDveCDUJtVTgPE5VEKf7uri2NV4CQQcA+bdoqG08YME9FggoD4OuW HlqdY4NdhO7xRbfrBr+Zu43xs5vfyhTgnkRLi8WvE/uVa6+Pxe3zABjq9CwfdrY+ jd3LZ1gK6Hwpd8BatFDdm7UCjg== -----END CERTIFICATE-----Generated at Mon Jun 2 05:53:37 2025 by rpki-client