$ rpki-client -vvf rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/682125602A4311EBBD69BE46C4F9AE02.roa File: 682125602A4311EBBD69BE46C4F9AE02.roa (raw, json) Hash identifier: YyMxfaGjaUTR1RTEiaJ/8xWo+/v0LKLkSrPTK2mFwLE= Subject key identifier: 21:96:44:56:73:A6:93:CF:7B:F8:C3:0C:39:D0:99:96:D9:D9:F6:BA Certificate issuer: /CN=A914DC5D/serialNumber=20F2531A7BA8212D2BB0900D576372D33F846928 Certificate serial: 088E Authority key identifier: 20:F2:53:1A:7B:A8:21:2D:2B:B0:90:0D:57:63:72:D3:3F:84:69:28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/682125602A4311EBBD69BE46C4F9AE02.roa Signing time: Tue 20 May 2025 21:51:00 +0000 ROA not before: Tue 20 May 2025 21:51:00 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 55932 IP address blocks: 203.151.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 21:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2190 (0x88e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DC5D, serialNumber=20F2531A7BA8212D2BB0900D576372D33F846928 Validity Not Before: May 20 21:51:00 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=682cf944-5cf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ef:d1:35:d9:05:c8:2e:30:8d:c6:ea:26:16: 17:2a:d6:a3:b2:a2:b5:16:36:4e:72:af:79:16:c7: 05:b8:28:23:ed:ca:15:de:e9:59:c9:dc:13:ee:31: d9:b8:21:4c:ff:24:8b:5f:af:a7:0e:05:3f:c6:26: 67:9d:cc:40:88:c7:15:d6:2d:b2:e1:c7:47:9b:69: 25:1c:9b:37:77:05:e3:fb:2c:eb:26:42:a1:9b:d5: 52:f0:60:c8:bc:cf:73:3c:5b:31:1e:d9:cd:7e:ec: 11:c1:c0:f1:26:e8:6d:a1:ff:4f:4a:8a:fe:0d:20: ec:dd:c6:02:0a:5e:fd:04:11:ea:6c:ed:a6:dc:00: b6:4c:d7:71:fb:f8:cf:11:71:76:a6:87:58:52:8d: 56:1e:e3:a0:3e:44:59:5a:46:10:80:62:f6:de:db: a2:dd:9f:3a:00:fa:4e:a5:8e:28:61:59:1f:5c:7e: 94:b2:76:8b:8b:2e:f6:54:8b:fa:3b:0f:13:34:eb: 38:2f:bc:48:c9:6f:48:14:8d:0d:92:3a:0e:f7:3d: 6a:71:8c:c6:dd:e5:56:2f:62:3b:67:ae:ff:1e:db: 15:74:62:f2:b6:4f:cc:c1:2e:2d:19:15:a1:02:90: e2:95:7b:b7:fe:e3:7d:8c:16:b1:b0:2a:53:4a:1a: 45:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:96:44:56:73:A6:93:CF:7B:F8:C3:0C:39:D0:99:96:D9:D9:F6:BA X509v3 Authority Key Identifier: keyid:20:F2:53:1A:7B:A8:21:2D:2B:B0:90:0D:57:63:72:D3:3F:84:69:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/682125602A4311EBBD69BE46C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.151.159.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:5d:2a:b4:96:80:ed:b2:cf:63:2f:1a:5d:95:03:3d:33:97: 63:e3:95:d0:44:32:fb:48:2e:b6:74:35:f4:e4:f8:04:c3:e6: 4f:f2:ad:ab:91:cc:3f:ba:b2:96:18:41:c9:14:a7:d8:a3:0b: 90:33:a7:37:de:7a:77:32:8d:ae:c3:55:02:70:d1:40:eb:0b: 4e:da:53:9c:d7:91:f7:be:ad:aa:99:ca:97:2d:2f:fb:46:d6: 3e:1a:59:86:50:0c:0e:61:11:98:1f:30:a2:8b:7c:e1:a8:d7: de:44:3e:1a:03:a5:34:01:97:68:2e:2b:d8:19:c6:a8:be:b7: bf:c0:09:52:1e:0f:07:af:95:b8:bf:26:38:4e:22:95:b4:15: 5c:8f:cf:c9:81:4b:45:30:47:b9:90:df:40:1a:39:70:f6:11: a0:26:05:f9:f2:04:a4:68:11:7d:e5:22:4f:e4:38:ab:c4:3e: 4f:f3:2b:f8:2a:3e:01:db:ee:95:08:4b:8e:e9:c5:ff:f6:0e: a8:b3:66:cd:56:56:67:1f:0d:60:ef:3c:de:6c:fd:6a:68:0a: b2:bc:02:c0:39:3f:3b:87:b4:cd:96:93:c7:19:3b:15:f8:b1: 7a:64:a7:a3:bc:54:1b:e9:e1:4f:c5:0e:5a:0b:31:b2:e6:dd: 2e:e1:94:4f -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NERDNUQxMTAvBgNVBAUTKDIwRjI1MzFBN0JBODIxMkQyQkIwOTAwRDU3NjM3MkQz M0Y4NDY5MjgwHhcNMjUwNTIwMjE1MTAwWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODJjZjk0NC01Y2YzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArO/RNdkFyC4wjcbqJhYXKtajsqK1FjZOcq95FscFuCgj7coV3ulZydwT7jHZ uCFM/ySLX6+nDgU/xiZnncxAiMcV1i2y4cdHm2klHJs3dwXj+yzrJkKhm9VS8GDI vM9zPFsxHtnNfuwRwcDxJuhtof9PSor+DSDs3cYCCl79BBHqbO2m3AC2TNdx+/jP EXF2podYUo1WHuOgPkRZWkYQgGL23tui3Z86APpOpY4oYVkfXH6UsnaLiy72VIv6 Ow8TNOs4L7xIyW9IFI0NkjoO9z1qcYzG3eVWL2I7Z67/HtsVdGLytk/MwS4tGRWh ApDilXu3/uN9jBaxsCpTShpF+QIDAQABo4IClTCCApEwHQYDVR0OBBYEFCGWRFZz ppPPe/jDDDnQmZbZ2fa6MB8GA1UdIwQYMBaAFCDyUxp7qCEtK7CQDVdjctM/hGko MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REM1RC8zOUU3MTQ2QzJB MzMxMUVCOTI5REMwN0NDNEY5QUUwMi9JUEpUR251b0lTMHJzSkFOVjJOeTB6LUVh U2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lQSlRHbnVvSVMwcnNKQU5WMk55MHotRWFTZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NERDNUQvMzlFNzE0NkMyQTMzMTFFQjkyOURDMDdDQzRGOUFFMDIvNjgyMTI1NjAy QTQzMTFFQkJENjlCRTQ2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADLl58wDQYJKoZIhvcNAQELBQADggEBAAtdKrSWgO2yz2Mv Gl2VAz0zl2PjldBEMvtILrZ0NfTk+ATD5k/yrauRzD+6spYYQckUp9ijC5Azpzfe encyja7DVQJw0UDrC07aU5zXkfe+raqZypctL/tG1j4aWYZQDA5hEZgfMKKLfOGo 195EPhoDpTQBl2guK9gZxqi+t7/ACVIeDwevlbi/JjhOIpW0FVyPz8mBS0UwR7mQ 30AaOXD2EaAmBfnyBKRoEX3lIk/kOKvEPk/zK/gqPgHb7pUIS47pxf/2DqizZs1W VmcfDWDvPN5s/WpoCrK8AsA5PzuHtM2Wk8cZOxX4sXpkp6O8VBvp4U/FDloLMbLm 3S7hlE8= -----END CERTIFICATE-----Generated at Wed Jun 4 00:05:43 2025 by rpki-client