$ rpki-client -vvf rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/209F6792FBE511EFBBA1A156C4F9AE02.roa File: 209F6792FBE511EFBBA1A156C4F9AE02.roa (raw, json) Hash identifier: GIgOcMZyhtX7VTZ29MPBad48l6w695oI6NBDvDD0h4Q= Subject key identifier: 00:C4:D3:EA:7E:FB:41:8F:37:E8:CF:2A:22:B0:6D:F7:EB:E5:42:28 Certificate issuer: /CN=A91462B5/serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208 Certificate serial: 0387 Authority key identifier: 64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/209F6792FBE511EFBBA1A156C4F9AE02.roa Signing time: Wed 21 May 2025 01:18:20 +0000 ROA not before: Wed 21 May 2025 01:18:20 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 135110 IP address blocks: 157.119.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 01:24:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 903 (0x387) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91462B5, serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208 Validity Not Before: May 21 01:18:20 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=682d29dc-be00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:02:d6:33:e0:91:7b:26:68:05:57:f9:33:42: b7:75:c4:9d:ed:7c:43:65:2a:b2:40:10:48:d3:3a: 41:e8:b5:05:ad:d4:7a:f1:b9:e8:9b:fe:4a:ba:2a: ba:46:80:30:2b:66:83:1b:3b:31:39:09:c8:b1:22: 08:0a:7c:31:15:e5:6f:8b:95:53:7a:14:dd:cf:03: 4d:d4:43:fa:fd:b4:76:78:be:d0:a5:de:c1:93:80: 12:c9:43:33:99:cb:fa:7d:4a:b7:f7:fe:04:d4:f9: df:fe:38:5d:bd:db:e7:c2:0d:aa:e7:e2:c3:e7:fc: 27:25:85:b6:38:93:5a:7a:9c:3d:fe:da:22:c7:97: b1:b7:7f:e6:33:10:ec:84:bd:1e:94:62:34:bc:ef: 21:53:df:37:37:ad:0e:73:73:05:0b:ee:cf:bc:f4: e9:4f:1d:72:0c:45:fc:09:a0:70:b5:ce:53:53:60: 33:3a:6c:7b:12:44:fe:c4:18:76:58:5f:5a:6e:92: a7:a7:f5:7a:11:47:db:77:cd:d8:64:c5:89:cc:ac: af:be:e8:6b:02:af:4e:c2:59:b4:8b:54:7f:ff:61: ee:b4:2d:3c:f3:15:07:84:68:31:ab:83:65:2e:fc: dc:4e:86:18:7c:f5:57:40:ac:d6:d1:c9:1f:46:b2: d7:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:C4:D3:EA:7E:FB:41:8F:37:E8:CF:2A:22:B0:6D:F7:EB:E5:42:28 X509v3 Authority Key Identifier: keyid:64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/209F6792FBE511EFBBA1A156C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.119.21.0/24 Signature Algorithm: sha256WithRSAEncryption bb:d7:a0:d1:b6:12:3d:9c:a1:33:ef:4e:48:32:d5:d4:c3:d0: f2:16:1f:41:88:c8:ef:41:9c:d8:b6:3e:d1:9b:fb:1c:24:99: 11:e2:6f:bd:12:b9:e3:3b:98:a3:f8:a0:8f:4c:de:cf:75:0e: 3c:30:47:3b:98:af:ff:82:43:2b:a3:5a:f8:c9:5f:dc:d9:76: 66:ac:8c:e4:2f:b8:7d:07:3e:ba:2a:c3:8e:f9:67:9b:f6:35: 7f:15:f7:45:9e:74:95:d1:e7:fe:95:89:4c:8f:93:93:01:b3: de:74:bd:9b:08:b4:f8:03:7a:93:97:b4:c9:43:b1:e2:d7:87: 45:a0:1a:07:12:8d:9a:fa:d0:3e:73:a6:17:0f:0e:be:6e:3e: 77:27:f8:b1:33:5a:cd:3b:45:49:5b:54:ba:02:88:58:20:ec: cf:67:4f:21:86:0d:22:8c:d0:20:dd:e0:a4:83:ad:3c:b6:98: e7:e8:ec:97:8b:c8:29:a1:2b:ab:c9:15:5a:02:4c:52:5a:aa: b0:05:62:e9:5a:42:0d:e0:43:cd:5a:6f:ef:da:83:5e:bb:2b: f0:c5:c6:43:29:1e:4d:d3:90:77:da:a8:8f:4c:18:8e:fd:38: 5a:a0:f5:64:86:65:9f:bc:ee:93:b1:72:51:ad:9b:61:c1:50: 05:70:7e:9e -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICA4cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYyQjUxMTAvBgNVBAUTKDY0ODMxOThBNTA1NEQ0QUI3QTAxNjFDRDYzOTFGQTZD MTRCMDAyMDgwHhcNMjUwNTIxMDExODIwWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODJkMjlkYy1iZTAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAowLWM+CReyZoBVf5M0K3dcSd7XxDZSqyQBBI0zpB6LUFrdR68bnom/5Kuiq6 RoAwK2aDGzsxOQnIsSIICnwxFeVvi5VTehTdzwNN1EP6/bR2eL7Qpd7Bk4ASyUMz mcv6fUq39/4E1Pnf/jhdvdvnwg2q5+LD5/wnJYW2OJNaepw9/toix5ext3/mMxDs hL0elGI0vO8hU983N60Oc3MFC+7PvPTpTx1yDEX8CaBwtc5TU2AzOmx7EkT+xBh2 WF9abpKnp/V6EUfbd83YZMWJzKyvvuhrAq9Owlm0i1R//2HutC088xUHhGgxq4Nl LvzcToYYfPVXQKzW0ckfRrLX0wIDAQABo4IClTCCApEwHQYDVR0OBBYEFADE0+p+ +0GPN+jPKiKwbffr5UIoMB8GA1UdIwQYMBaAFGSDGYpQVNSregFhzWOR+mwUsAII MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjJCNS82RDVGRUQ5MkND MkYxMUVDODU1MzgwMzdDNEY5QUUwMi9aSU1aaWxCVTFLdDZBV0hOWTVINmJCU3dB Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pJTVppbEJVMUt0NkFXSE5ZNUg2YkJTd0FnZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDYyQjUvNkQ1RkVEOTJDQzJGMTFFQzg1NTM4MDM3QzRGOUFFMDIvMjA5RjY3OTJG QkU1MTFFRkJCQTFBMTU2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBACddxUwDQYJKoZIhvcNAQELBQADggEBALvXoNG2Ej2coTPv Tkgy1dTD0PIWH0GIyO9BnNi2PtGb+xwkmRHib70SueM7mKP4oI9M3s91DjwwRzuY r/+CQyujWvjJX9zZdmasjOQvuH0HProqw475Z5v2NX8V90WedJXR5/6ViUyPk5MB s950vZsItPgDepOXtMlDseLXh0WgGgcSjZr60D5zphcPDr5uPncn+LEzWs07RUlb VLoCiFgg7M9nTyGGDSKM0CDd4KSDrTy2mOfo7JeLyCmhK6vJFVoCTFJaqrAFYula Qg3gQ81ab+/ag167K/DFxkMpHk3TkHfaqI9MGI79OFqg9WSGZZ+87pOxclGtm2HB UAVwfp4= -----END CERTIFICATE-----Generated at Tue Jun 3 23:48:34 2025 by rpki-client