$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/412F31BCF4A711EFB38B1B47C4F9AE02.roa File: 412F31BCF4A711EFB38B1B47C4F9AE02.roa (raw, json) Hash identifier: sb5PfPWK6dXGpDNW8cweOOSlpOJXLYznSUeQxJ22Wfw= Subject key identifier: 5E:C9:30:E4:6C:4F:40:1B:81:80:70:57:52:1A:3D:80:F4:7E:F6:23 Certificate issuer: /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B Certificate serial: 3789 Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/412F31BCF4A711EFB38B1B47C4F9AE02.roa Signing time: Thu 29 May 2025 06:03:01 +0000 ROA not before: Thu 29 May 2025 06:03:01 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 17579 IP address blocks: 150.183.12.0/24 maxlen: 24 203.230.1.0/24 maxlen: 24 210.119.23.0/24 maxlen: 24 210.119.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 14:23:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14217 (0x3789) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B Validity Not Before: May 29 06:03:01 2025 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=6837f895-3f9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:92:b5:75:bf:11:1a:03:33:c4:0e:ff:1c:00: 67:8f:8c:b8:16:73:75:c1:67:52:03:a4:1e:27:4d: 14:c3:fe:de:8b:76:bf:11:84:32:7c:28:4e:f6:f4: 36:20:0e:93:37:a9:b5:a1:79:1b:77:3a:9d:d0:5f: b8:3f:a7:13:a1:95:71:05:55:6d:aa:00:4b:1c:12: ec:ab:5d:1f:b9:a7:a5:88:bf:f7:dc:18:e2:8c:8c: ce:50:51:24:0c:1b:b1:b9:44:83:52:b7:04:26:69: 58:15:74:cd:f1:b2:03:4e:9a:f6:67:13:95:ee:c7: 4d:0e:af:cf:ff:7c:8a:97:b9:6e:5e:c8:28:35:3f: bc:d2:ee:29:70:f1:2f:4c:a8:77:64:68:30:f7:20: 24:ee:16:06:10:bf:08:05:2a:f9:ce:19:fe:b4:ba: 1b:78:44:9b:21:c7:1e:e0:da:25:c9:e9:74:ae:d9: be:c8:7f:f4:df:03:a9:4c:83:48:f5:cc:45:89:d3: ed:99:bc:eb:b8:d3:69:ce:7a:19:2f:0c:27:1e:e1: 34:02:02:d7:a8:a6:b0:7e:3e:60:8c:0f:8c:61:1c: dd:71:da:aa:c5:0f:af:4d:53:bf:59:0d:14:5d:9e: bb:8c:11:9e:d0:c7:8a:72:34:0e:12:08:49:d7:58: 34:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:C9:30:E4:6C:4F:40:1B:81:80:70:57:52:1A:3D:80:F4:7E:F6:23 X509v3 Authority Key Identifier: keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/412F31BCF4A711EFB38B1B47C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 150.183.12.0/24 203.230.1.0/24 210.119.23.0/24 210.119.127.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:a9:74:a4:38:25:98:6d:58:4a:3b:7a:80:ae:b5:f3:91:fa: ae:5e:22:75:d8:2f:6c:43:07:a6:0a:56:20:66:14:30:27:05: bd:32:ac:f6:6d:50:65:bf:5b:06:9d:19:fd:75:86:af:c5:22: fa:3c:05:3e:fb:58:74:5f:34:13:20:a9:ac:de:7d:e4:88:c2: c2:ae:4e:a6:44:0b:5e:5c:8f:22:f4:db:68:3b:da:53:4b:f0: 36:49:97:c3:a9:a2:d6:33:78:67:ab:ef:7b:e6:46:db:26:86: 27:69:25:19:0c:b3:a5:35:b0:ff:ea:dc:44:db:ce:40:6e:5f: 88:3f:de:43:d9:5a:ca:e6:5e:27:0e:8f:d8:16:8b:67:98:33: 17:01:2d:96:3b:56:a6:f5:1f:6f:ff:79:1c:c9:02:3b:fd:0e: f9:0a:40:d8:28:bd:65:52:a0:5b:60:83:6e:55:58:6e:fc:ef: c0:4c:a1:74:4a:48:67:88:1a:25:be:99:60:59:8a:6c:60:08: f3:26:b6:46:a0:64:cb:5f:c9:b3:48:76:45:ea:8b:e8:f4:31: 57:ca:db:f0:b5:c3:ea:77:15:d2:16:a3:9d:b7:1f:3d:2a:86: 0d:c6:3e:da:50:af:38:27:64:5b:fb:92:5c:b8:25:fe:b6:46: d1:54:34:72 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICN4kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGM0UxMTAvBgNVBAUTKEVCMzg5RkIzMzlCMzkwOEQ1NDlBNjUzOTBDOTJFMTVG OURGN0M1NEIwHhcNMjUwNTI5MDYwMzAxWhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODM3Zjg5NS0zZjlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy5K1db8RGgMzxA7/HABnj4y4FnN1wWdSA6QeJ00Uw/7ei3a/EYQyfChO9vQ2 IA6TN6m1oXkbdzqd0F+4P6cToZVxBVVtqgBLHBLsq10fuaeliL/33BjijIzOUFEk DBuxuUSDUrcEJmlYFXTN8bIDTpr2ZxOV7sdNDq/P/3yKl7luXsgoNT+80u4pcPEv TKh3ZGgw9yAk7hYGEL8IBSr5zhn+tLobeESbIcce4Nolyel0rtm+yH/03wOpTINI 9cxFidPtmbzruNNpznoZLwwnHuE0AgLXqKawfj5gjA+MYRzdcdqqxQ+vTVO/WQ0U XZ67jBGe0MeKcjQOEghJ11g0OwIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFF7JMORs T0AbgYBwV1IaPYD0fvYjMB8GA1UdIwQYMBaAFOs4n7M5s5CNVJplOQyS4V+d98VL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS9BQzUyQjc0ODFE ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi82emlmc3ptemtJMVVtbVU1REpMaFg1MzN4 VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ6aWZzem16a0kxVW1tVTVESkxoWDUzM3hVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDlGM0UvQUM1MkI3NDgxRDgyMTFFMkJDNjQxN0Q3MDhCMDJDRDIvNDEyRjMxQkNG NEE3MTFFRkIzOEIxQjQ3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBACWtwwDBADL5gEDBADSdxcDBADSd38wDQYJKoZIhvcNAQEL BQADggEBAFupdKQ4JZhtWEo7eoCutfOR+q5eInXYL2xDB6YKViBmFDAnBb0yrPZt UGW/WwadGf11hq/FIvo8BT77WHRfNBMgqazefeSIwsKuTqZEC15cjyL022g72lNL 8DZJl8OpotYzeGer73vmRtsmhidpJRkMs6U1sP/q3ETbzkBuX4g/3kPZWsrmXicO j9gWi2eYMxcBLZY7Vqb1H2//eRzJAjv9DvkKQNgovWVSoFtgg25VWG7878BMoXRK SGeIGiW+mWBZimxgCPMmtkagZMtfybNIdkXqi+j0MVfK2/C1w+p3FdIWo523Hz0q hg3GPtpQrzgnZFv7kly4Jf62RtFUNHI= -----END CERTIFICATE-----Generated at Wed Jun 4 00:12:00 2025 by rpki-client