$ rpki-client -vvf rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/D0B369AA3BB711F0AB536B50C4F9AE02.roa File: D0B369AA3BB711F0AB536B50C4F9AE02.roa (raw, json) Hash identifier: ko9kwUqvpO3LdoILgB7gaqi0qIlTE0/qOSinSP/yUYY= Subject key identifier: 39:5A:FE:80:CA:D7:89:EA:58:37:0C:41:C7:15:70:80:13:44:C0:50 Certificate issuer: /CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA Certificate serial: 1EEC Authority key identifier: AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/D0B369AA3BB711F0AB536B50C4F9AE02.roa Signing time: Wed 28 May 2025 11:35:12 +0000 ROA not before: Wed 28 May 2025 11:35:12 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 0 IP address blocks: 120.88.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 16:16:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7916 (0x1eec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE4, serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA Validity Not Before: May 28 11:35:12 2025 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=6836f4ef-a1af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:5a:9f:c3:b4:5e:75:22:b5:f1:bd:ca:33:9b: 21:62:b9:31:1f:3e:bd:a4:a3:54:22:ce:d7:4e:28: 20:44:c5:03:f9:a0:3f:a2:94:4a:3b:b6:7a:d7:ab: a8:6c:14:e2:bd:6d:c8:de:3f:c1:e5:84:b5:8c:29: 72:f5:a3:ff:19:8a:41:53:a7:c4:c1:d0:f5:47:8b: 89:c5:c0:05:65:f7:ee:a0:7f:d3:e2:01:01:0d:fa: c7:d8:2b:32:39:35:d5:be:ec:7b:98:2c:24:2d:5c: 01:f7:bd:73:8f:79:18:a3:1b:66:bc:87:57:09:63: 25:0f:3c:ee:84:3d:26:08:a9:ed:02:46:23:14:87: ab:bf:cd:6f:86:5f:82:ed:8c:1a:18:e9:5d:b1:bb: 40:91:5b:47:0a:f6:b4:9f:78:71:84:cc:e0:8a:ca: 8c:16:b3:43:b6:71:3f:c4:33:c9:23:8b:78:55:8a: b0:76:24:46:36:e6:6a:99:13:10:f6:90:cd:d2:09: fd:01:99:26:05:07:b4:ac:24:30:ad:73:4a:d1:c1: eb:42:01:04:62:af:83:44:69:42:7f:22:b5:e8:f9: 55:42:ed:f2:d5:23:60:da:cc:c4:40:05:22:b9:ae: 1d:35:cb:93:d6:89:25:a8:8c:4d:b9:da:33:48:40: f1:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:5A:FE:80:CA:D7:89:EA:58:37:0C:41:C7:15:70:80:13:44:C0:50 X509v3 Authority Key Identifier: keyid:AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/D0B369AA3BB711F0AB536B50C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 120.88.8.0/21 Signature Algorithm: sha256WithRSAEncryption 3d:48:06:13:ec:76:d0:b2:d3:76:17:89:2c:67:0b:70:12:0b: 23:c1:7d:a2:95:a2:0c:33:44:a9:90:e9:a0:a3:b7:81:36:95: 01:54:aa:cf:68:a2:8e:ad:7e:32:3b:36:50:e4:eb:ae:82:c9: 3e:ef:61:68:c2:1e:ca:b9:0c:81:e2:7b:33:a6:31:1d:20:78: fa:32:95:cc:86:92:81:f0:e9:3e:53:e0:2d:9a:ef:8a:f7:7f: eb:fb:6e:ae:3a:d1:ed:ed:35:96:28:7e:71:6f:66:2b:06:ee: aa:26:a0:87:8e:d5:f7:37:18:f8:b3:35:15:d4:61:1e:02:e3: 4b:6d:2a:30:26:18:56:8f:f4:99:a2:49:78:b1:f3:0c:f9:0a: 45:8a:82:fa:48:5b:96:23:19:45:4a:0f:9e:87:76:d8:0f:4e: 36:c5:0c:93:86:87:53:63:20:fe:5f:86:07:bb:5b:4a:15:2f: 23:b4:10:78:9b:24:0d:cf:ce:72:00:95:ac:29:11:0b:17:b9: 0d:cf:98:ec:98:71:99:67:e1:2c:90:5b:d9:b9:39:92:61:f7: 7c:20:ad:9a:19:71:20:ae:09:9c:a3:3f:06:44:93:11:4f:16: ec:ce:b1:c1:b9:89:cd:4c:92:10:d0:49:96:bc:26:64:c6:b3: f5:fc:d9:3f -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICHuwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVBRTQxMTAvBgNVBAUTKEFENTZCNjcxODdBOThCQTMxNDA4NDQwNTc5N0JEOTY1 NkU4QUM4QkEwHhcNMjUwNTI4MTEzNTEyWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODM2ZjRlZi1hMWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA31qfw7RedSK18b3KM5shYrkxHz69pKNUIs7XTiggRMUD+aA/opRKO7Z616uo bBTivW3I3j/B5YS1jCly9aP/GYpBU6fEwdD1R4uJxcAFZffuoH/T4gEBDfrH2Csy OTXVvux7mCwkLVwB971zj3kYoxtmvIdXCWMlDzzuhD0mCKntAkYjFIerv81vhl+C 7YwaGOldsbtAkVtHCva0n3hxhMzgisqMFrNDtnE/xDPJI4t4VYqwdiRGNuZqmRMQ 9pDN0gn9AZkmBQe0rCQwrXNK0cHrQgEEYq+DRGlCfyK16PlVQu3y1SNg2szEQAUi ua4dNcuT1oklqIxNudozSEDx0wIDAQABo4IClTCCApEwHQYDVR0OBBYEFDla/oDK 14nqWDcMQccVcIATRMBQMB8GA1UdIwQYMBaAFK1WtnGHqYujFAhEBXl72WVuisi6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUFFNC82NzUzQjhBRTI1 NzUxMUU3QUMwRDE3MkFDNEY5QUUwMi9yVmEyY1llcGk2TVVDRVFGZVh2WlpXNkt5 TG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JWYTJjWWVwaTZNVUNFUUZlWHZaWlc2S3lMby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEVBRTQvNjc1M0I4QUUyNTc1MTFFN0FDMEQxNzJBQzRGOUFFMDIvRDBCMzY5QUEz QkI3MTFGMEFCNTM2QjUwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAN4WAgwDQYJKoZIhvcNAQELBQADggEBAD1IBhPsdtCy03YX iSxnC3ASCyPBfaKVogwzRKmQ6aCjt4E2lQFUqs9ooo6tfjI7NlDk666CyT7vYWjC Hsq5DIHiezOmMR0gePoylcyGkoHw6T5T4C2a74r3f+v7bq460e3tNZYofnFvZisG 7qomoIeO1fc3GPizNRXUYR4C40ttKjAmGFaP9JmiSXix8wz5CkWKgvpIW5YjGUVK D56HdtgPTjbFDJOGh1NjIP5fhge7W0oVLyO0EHibJA3PznIAlawpEQsXuQ3PmOyY cZln4SyQW9m5OZJh93wgrZoZcSCuCZyjPwZEkxFPFuzOscG5ic1MkhDQSZa8JmTG s/X82T8= -----END CERTIFICATE-----Generated at Mon Jun 2 07:11:40 2025 by rpki-client