$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/0BD5724C3A3211EDA1B7D863C4F9AE02.roa File: 0BD5724C3A3211EDA1B7D863C4F9AE02.roa (raw, json) Hash identifier: fAK+FFlWiNwXpZxoR/fBUifFc7pGdoPqK+aChKWzCZE= Subject key identifier: B4:6B:76:1C:F1:03:41:59:4B:6A:09:A7:73:95:58:CF:A1:E5:59:1D Certificate issuer: /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B Certificate serial: 3781 Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/0BD5724C3A3211EDA1B7D863C4F9AE02.roa Signing time: Tue 20 May 2025 00:03:11 +0000 ROA not before: Tue 20 May 2025 00:03:11 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 139648 IP address blocks: 61.107.200.0/22 maxlen: 24 119.59.0.0/20 maxlen: 20 119.59.0.0/24 maxlen: 24 119.59.1.0/24 maxlen: 24 119.59.2.0/24 maxlen: 24 119.59.3.0/24 maxlen: 24 119.59.4.0/24 maxlen: 24 119.59.5.0/24 maxlen: 24 119.59.6.0/24 maxlen: 24 119.59.7.0/24 maxlen: 24 119.59.8.0/24 maxlen: 24 119.59.9.0/24 maxlen: 24 119.59.10.0/24 maxlen: 24 119.59.11.0/24 maxlen: 24 119.59.12.0/24 maxlen: 24 119.59.13.0/24 maxlen: 24 119.59.14.0/24 maxlen: 24 119.59.15.0/24 maxlen: 24 119.59.16.0/24 maxlen: 24 119.59.17.0/24 maxlen: 24 119.59.18.0/24 maxlen: 24 119.59.19.0/24 maxlen: 24 119.59.20.0/24 maxlen: 24 119.59.21.0/24 maxlen: 24 119.59.22.0/24 maxlen: 24 119.59.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 14:21:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14209 (0x3781) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B Validity Not Before: May 20 00:03:11 2025 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=682bc6bf-e316 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:fe:b2:01:ba:4b:f9:7a:d4:7a:ec:89:91:f2: 20:65:ba:37:df:70:80:3c:41:86:1b:f4:5d:ba:9f: 64:7f:96:39:5e:a4:f5:76:5d:9b:61:f6:92:1a:9e: 34:45:71:22:92:18:d1:aa:82:bf:4a:e1:78:19:bf: ba:81:cf:b2:3e:85:47:73:b0:3d:55:96:c6:66:8d: e9:0d:6a:bc:43:cd:58:33:2f:70:ff:e1:ed:a5:f8: 40:41:13:48:ca:13:b5:1d:d0:d0:54:d8:37:f3:f8: ee:13:85:25:a4:c6:79:ca:b1:fa:b8:da:cd:d5:d6: 05:e1:99:98:97:2b:d0:32:b6:e9:1c:06:d8:8c:6e: 9a:ab:e3:e8:44:18:19:57:c5:67:bf:7f:b5:c5:27: cc:82:1b:e5:59:44:b8:36:88:a2:a6:d5:a1:e2:f3: f8:bc:76:fb:13:ee:76:a6:b4:00:d3:ca:f9:e8:70: 14:3a:8b:39:0c:7d:f1:a4:13:2f:ce:22:6d:83:8a: f6:47:45:14:05:5f:a0:c2:7f:07:2d:37:2d:8a:9b: 1a:0e:a2:8d:ed:13:c3:e8:96:21:c7:3f:0f:09:6d: f5:89:6f:df:4b:53:24:2d:77:c2:a9:d2:37:4a:c4: c1:66:ff:84:ea:49:53:e6:0a:b9:29:62:75:1d:8c: f0:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:6B:76:1C:F1:03:41:59:4B:6A:09:A7:73:95:58:CF:A1:E5:59:1D X509v3 Authority Key Identifier: keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/0BD5724C3A3211EDA1B7D863C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.107.200.0/22 119.59.0.0-119.59.23.255 Signature Algorithm: sha256WithRSAEncryption 01:8a:28:a8:37:41:4b:35:4f:e0:c1:e7:e2:5e:25:01:1c:3d: 3a:db:b4:54:b9:1a:90:41:fa:d9:df:31:d9:82:e5:d4:29:08: 3e:b1:38:55:3b:35:f1:9d:5f:38:70:35:60:74:5a:97:fc:a2: cb:24:74:50:9c:cc:3a:87:b2:93:57:bc:9b:32:2f:91:3c:e9: 02:c7:14:8c:fc:c9:0b:0f:66:e5:a7:3e:3e:dd:a2:8e:5c:ce: 37:87:28:68:8a:c7:65:c9:4a:9c:35:68:23:47:37:85:40:ba: e1:db:48:fb:bd:81:06:dc:6d:c9:58:7d:54:a2:bc:02:7a:ad: af:b9:9d:8f:5b:1f:25:ed:2a:e8:27:c9:76:80:8a:01:26:4e: 1a:49:fa:fb:ae:83:86:98:25:31:2e:4c:8a:40:53:3b:05:75: f0:e4:85:51:ca:c1:1a:fc:65:85:d3:85:a8:4c:70:fb:dd:9a: 88:8e:47:e0:c5:de:cd:50:a9:2f:80:72:57:da:ba:b4:5e:42: 24:84:5c:fd:d6:90:f6:c9:ce:2b:5f:35:be:ac:7a:62:b5:ce: 5b:b6:35:8e:56:a8:9b:9d:55:0b:3b:04:d9:83:0c:60:17:51: b2:f6:c7:a1:d1:58:ca:57:a5:d1:43:e7:83:49:ba:6b:6e:e8: ff:72:bf:3e -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgICN4EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGM0UxMTAvBgNVBAUTKEVCMzg5RkIzMzlCMzkwOEQ1NDlBNjUzOTBDOTJFMTVG OURGN0M1NEIwHhcNMjUwNTIwMDAwMzExWhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODJiYzZiZi1lMzE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmf6yAbpL+XrUeuyJkfIgZbo333CAPEGGG/Rdup9kf5Y5XqT1dl2bYfaSGp40 RXEikhjRqoK/SuF4Gb+6gc+yPoVHc7A9VZbGZo3pDWq8Q81YMy9w/+HtpfhAQRNI yhO1HdDQVNg38/juE4UlpMZ5yrH6uNrN1dYF4ZmYlyvQMrbpHAbYjG6aq+PoRBgZ V8Vnv3+1xSfMghvlWUS4NoiiptWh4vP4vHb7E+52prQA08r56HAUOos5DH3xpBMv ziJtg4r2R0UUBV+gwn8HLTctipsaDqKN7RPD6JYhxz8PCW31iW/fS1MkLXfCqdI3 SsTBZv+E6klT5gq5KWJ1HYzw8QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFLRrdhzx A0FZS2oJp3OVWM+h5VkdMB8GA1UdIwQYMBaAFOs4n7M5s5CNVJplOQyS4V+d98VL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS9BQzUyQjc0ODFE ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi82emlmc3ptemtJMVVtbVU1REpMaFg1MzN4 VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ6aWZzem16a0kxVW1tVTVESkxoWDUzM3hVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDlGM0UvQUM1MkI3NDgxRDgyMTFFMkJDNjQxN0Q3MDhCMDJDRDIvMEJENTcyNEMz QTMyMTFFREExQjdEODYzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLAYIKwYBBQUHAQcBAf8E HTAbMBkEAgABMBMDBAI9a8gwCwMDAHc7AwQDdzsQMA0GCSqGSIb3DQEBCwUAA4IB AQABiiioN0FLNU/gwefiXiUBHD0627RUuRqQQfrZ3zHZguXUKQg+sThVOzXxnV84 cDVgdFqX/KLLJHRQnMw6h7KTV7ybMi+RPOkCxxSM/MkLD2blpz4+3aKOXM43hyho isdlyUqcNWgjRzeFQLrh20j7vYEG3G3JWH1UorwCeq2vuZ2PWx8l7SroJ8l2gIoB Jk4aSfr7roOGmCUxLkyKQFM7BXXw5IVRysEa/GWF04WoTHD73ZqIjkfgxd7NUKkv gHJX2rq0XkIkhFz91pD2yc4rXzW+rHpitc5btjWOVqibnVULOwTZgwxgF1Gy9seh 0VjKV6XRQ+eDSbprbuj/cr8+ -----END CERTIFICATE-----Generated at Mon Jun 2 06:27:53 2025 by rpki-client