$ rpki-client -vvf rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/0D4D857E3B9211F0857DC432C4F9AE02.roa File: 0D4D857E3B9211F0857DC432C4F9AE02.roa (raw, json) Hash identifier: 0YA+4PX9JYpc8QBE3JHr5LKBbRzHe9X88/5AFsZZNig= Subject key identifier: B4:95:47:2F:4C:1C:9D:3E:3C:B7:31:4C:B8:96:30:9C:A3:3B:C3:5C Certificate issuer: /CN=A914781A/serialNumber=59314703092845FCBD0BFBAEEF87D83FC66ED1D7 Certificate serial: 1373 Authority key identifier: 59:31:47:03:09:28:45:FC:BD:0B:FB:AE:EF:87:D8:3F:C6:6E:D1:D7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WTFHAwkoRfy9C_uu74fYP8Zu0dc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/0D4D857E3B9211F0857DC432C4F9AE02.roa Signing time: Wed 28 May 2025 07:04:53 +0000 ROA not before: Wed 28 May 2025 07:04:52 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 134089 IP address blocks: 167.179.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.crl rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WTFHAwkoRfy9C_uu74fYP8Zu0dc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 14:58:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4979 (0x1373) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914781A, serialNumber=59314703092845FCBD0BFBAEEF87D83FC66ED1D7 Validity Not Before: May 28 07:04:52 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=6836b594-0e3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:01:04:8d:8f:a7:c1:e0:70:e4:51:ef:22:d1: d6:91:a0:e5:09:d2:42:83:64:06:fa:e5:12:95:f3: 80:20:35:62:7c:d5:ba:65:f6:b5:0b:3b:6b:d0:7b: 54:70:c6:78:1d:0c:3d:d0:75:1a:3c:2c:aa:2f:90: bd:cb:e2:af:ca:0b:9f:21:e1:d9:a4:1e:ca:21:28: ae:04:aa:2c:2f:f6:da:70:8c:61:26:dd:79:21:b8: e8:f3:d3:33:03:67:7e:de:01:5c:41:2f:7a:4c:60: 44:89:77:f7:f5:18:d3:c9:0d:be:00:ce:2d:70:20: 1d:7d:b5:5d:21:19:c0:d3:c5:f8:44:36:ec:d9:50: e2:cc:7b:4b:06:7f:fa:8d:b8:0d:34:5b:ef:26:4d: 30:35:04:64:8a:2a:e7:ad:99:78:18:ce:b8:ac:cc: cd:bb:f7:74:81:1f:d7:bb:81:8c:09:9d:71:65:09: c5:b3:8d:37:bf:86:52:bd:ec:42:6a:39:76:58:46: c0:b3:19:8c:d5:7b:b2:cc:4d:4e:d2:35:2d:09:86: 48:00:d6:8c:fd:ed:74:bc:24:36:e0:83:c7:24:2a: e5:0d:ad:6a:8f:b8:65:0e:1d:02:ec:ad:90:5d:70: 47:44:cf:ec:fd:51:68:bf:9f:68:a9:aa:e0:60:31: 19:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:95:47:2F:4C:1C:9D:3E:3C:B7:31:4C:B8:96:30:9C:A3:3B:C3:5C X509v3 Authority Key Identifier: keyid:59:31:47:03:09:28:45:FC:BD:0B:FB:AE:EF:87:D8:3F:C6:6E:D1:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WTFHAwkoRfy9C_uu74fYP8Zu0dc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/0D4D857E3B9211F0857DC432C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 167.179.251.0/24 Signature Algorithm: sha256WithRSAEncryption 45:ca:b5:07:3f:65:16:14:32:29:b0:4b:c1:71:f1:2f:b8:5c: 34:ef:95:b7:35:51:80:99:d9:03:fa:77:94:a7:c7:8d:85:89: c3:c0:55:d7:81:b3:11:e3:0b:fd:e0:08:47:98:b2:d4:95:3e: 27:80:2e:b6:d7:19:24:41:d4:3d:16:fc:7b:01:e5:11:ae:98: 44:7e:5f:21:6f:45:fc:6d:a1:61:17:97:57:2a:70:ce:8c:bd: 8b:5f:00:d6:c8:88:12:17:29:53:7b:8f:d5:a0:2d:66:35:c5: 7f:d7:1e:1a:db:e0:a7:7b:c5:cb:a6:1a:bd:3d:e9:2b:24:93: b2:e4:bc:81:9b:15:dc:2f:9e:33:b4:d2:d8:d9:c9:e8:81:2c: d3:89:d1:53:61:66:50:20:02:18:90:42:71:8e:0c:a5:35:0f: 0f:89:b6:ce:11:5c:94:dc:12:d1:38:5e:d8:76:38:de:62:83: ee:a4:b2:7a:6e:1f:bc:db:46:d3:2d:48:a4:c9:e5:01:1e:7f: 35:41:80:02:2d:1d:3c:0b:f6:c9:69:cd:ea:d1:63:50:0f:1a: 02:16:51:95:68:4a:23:2e:f9:de:63:22:7d:9d:01:38:a8:9a: d7:ac:31:1f:e0:bb:c7:cc:0b:09:3b:c6:6b:28:9a:6d:bc:93: 75:81:eb:cc -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICE3MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc4MUExMTAvBgNVBAUTKDU5MzE0NzAzMDkyODQ1RkNCRDBCRkJBRUVGODdEODNG QzY2RUQxRDcwHhcNMjUwNTI4MDcwNDUyWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODM2YjU5NC0wZTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAywEEjY+nweBw5FHvItHWkaDlCdJCg2QG+uUSlfOAIDVifNW6Zfa1Cztr0HtU cMZ4HQw90HUaPCyqL5C9y+KvygufIeHZpB7KISiuBKosL/bacIxhJt15Ibjo89Mz A2d+3gFcQS96TGBEiXf39RjTyQ2+AM4tcCAdfbVdIRnA08X4RDbs2VDizHtLBn/6 jbgNNFvvJk0wNQRkiirnrZl4GM64rMzNu/d0gR/Xu4GMCZ1xZQnFs403v4ZSvexC ajl2WEbAsxmM1XuyzE1O0jUtCYZIANaM/e10vCQ24IPHJCrlDa1qj7hlDh0C7K2Q XXBHRM/s/VFov59oqargYDEZFwIDAQABo4IClTCCApEwHQYDVR0OBBYEFLSVRy9M HJ0+PLcxTLiWMJyjO8NcMB8GA1UdIwQYMBaAFFkxRwMJKEX8vQv7ru+H2D/GbtHX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzgxQS80RUVDNUI3RUE2 QjQxMUU4QjQzQTE0NjdDNEY5QUUwMi9XVEZIQXdrb1JmeTlDX3V1NzRmWVA4WnUw ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1dURkhBd2tvUmZ5OUNfdXU3NGZZUDhadTBkYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDc4MUEvNEVFQzVCN0VBNkI0MTFFOEI0M0ExNDY3QzRGOUFFMDIvMEQ0RDg1N0Uz QjkyMTFGMDg1N0RDNDMyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBACns/swDQYJKoZIhvcNAQELBQADggEBAEXKtQc/ZRYUMimw S8Fx8S+4XDTvlbc1UYCZ2QP6d5Snx42FicPAVdeBsxHjC/3gCEeYstSVPieALrbX GSRB1D0W/HsB5RGumER+XyFvRfxtoWEXl1cqcM6MvYtfANbIiBIXKVN7j9WgLWY1 xX/XHhrb4Kd7xcumGr096Sskk7LkvIGbFdwvnjO00tjZyeiBLNOJ0VNhZlAgAhiQ QnGODKU1Dw+Jts4RXJTcEtE4Xth2ON5ig+6ksnpuH7zbRtMtSKTJ5QEefzVBgAIt HTwL9slpzerRY1APGgIWUZVoSiMu+d5jIn2dATiomtesMR/gu8fMCwk7xmsomm28 k3WB68w= -----END CERTIFICATE-----Generated at Thu Jun 5 20:06:08 2025 by rpki-client