$ rpki-client -vvf rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/029E3ED44ADF11EEB17F2D4CC4F9AE02.roa File: 029E3ED44ADF11EEB17F2D4CC4F9AE02.roa (raw, json) Hash identifier: oryogDp90ntm5yVUpzztlYtF7rrid4whBN5vK7HfINE= Subject key identifier: 49:75:E9:A2:AF:87:3A:2F:BF:E5:3B:3B:21:D5:14:8D:71:A9:F0:B1 Certificate issuer: /CN=A9150CF2/serialNumber=B03E7BFB2B4BDAFA2EAA50AB7990F74FFCBCADD7 Certificate serial: 0CC1 Authority key identifier: B0:3E:7B:FB:2B:4B:DA:FA:2E:AA:50:AB:79:90:F7:4F:FC:BC:AD:D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sD57-ytL2vouqlCreZD3T_y8rdc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/029E3ED44ADF11EEB17F2D4CC4F9AE02.roa Signing time: Tue 20 May 2025 18:22:41 +0000 ROA not before: Tue 20 May 2025 18:22:41 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 133547 IP address blocks: 49.128.1.0/24 maxlen: 24 160.238.0.0/24 maxlen: 24 182.161.67.0/24 maxlen: 24 192.26.110.0/24 maxlen: 24 2400:e8c0::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.crl rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sD57-ytL2vouqlCreZD3T_y8rdc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 18:14:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3265 (0xcc1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150CF2, serialNumber=B03E7BFB2B4BDAFA2EAA50AB7990F74FFCBCADD7 Validity Not Before: May 20 18:22:41 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=682cc870-16cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:93:5d:74:ee:81:62:18:1b:e8:f5:ad:85:55: 6d:be:47:55:7a:d7:ac:c7:d8:73:09:b9:4e:6c:ed: 37:ce:0b:00:ca:7f:4e:ec:7a:87:66:f2:d7:f2:d5: 2d:f7:d6:12:05:c6:2a:97:89:19:43:99:64:74:67: 13:8a:67:be:49:9c:b6:d6:2f:f8:db:5b:8f:59:53: 41:86:4f:04:d7:48:88:d8:a0:56:07:70:e4:a5:3a: 8a:78:11:e6:76:5b:b2:f6:53:f5:81:c4:ac:b4:c5: c0:76:bf:96:1a:37:93:03:10:1a:93:f8:42:b4:e3: a4:c8:73:91:a1:83:68:df:78:89:ae:86:a3:3a:8f: 70:6f:ed:02:96:06:45:e8:0d:bd:06:4b:09:08:e3: 1b:7d:cf:0a:d3:4a:60:ad:d6:3d:cb:a0:74:73:24: 4a:d0:4d:b0:5b:ec:3b:94:ae:f8:a8:58:cd:ac:4f: 7c:35:ac:57:99:88:bb:48:5e:50:e5:38:f9:13:e5: 18:73:ba:a9:c0:2e:c1:53:4a:fb:5a:49:af:19:f7: 22:66:69:0a:85:0b:4b:5d:f4:30:f3:c4:c5:53:cb: fa:f3:73:c5:72:7c:2b:30:c5:31:4e:35:01:26:4f: cd:d6:7f:dc:54:fd:43:45:0c:a3:3d:6b:f1:2d:97: be:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:75:E9:A2:AF:87:3A:2F:BF:E5:3B:3B:21:D5:14:8D:71:A9:F0:B1 X509v3 Authority Key Identifier: keyid:B0:3E:7B:FB:2B:4B:DA:FA:2E:AA:50:AB:79:90:F7:4F:FC:BC:AD:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sD57-ytL2vouqlCreZD3T_y8rdc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/029E3ED44ADF11EEB17F2D4CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.128.1.0/24 160.238.0.0/24 182.161.67.0/24 192.26.110.0/24 IPv6: 2400:e8c0::/32 Signature Algorithm: sha256WithRSAEncryption ae:46:bd:12:10:26:9f:63:a2:48:91:c6:a7:90:2f:67:c0:04: 7d:05:d9:45:74:aa:7b:51:e3:f0:06:7c:82:c1:9a:cf:5a:a8: 30:56:b1:a2:a1:be:13:74:ed:93:2d:bb:06:82:20:e3:ad:3d: b3:37:b4:7f:31:d7:d5:a6:8b:0f:ce:3f:cd:ef:55:83:be:fe: 0f:13:e3:1c:9f:47:31:ea:1b:cc:99:fb:43:53:51:0d:d2:93: 9c:fb:29:8b:13:e2:02:86:53:16:48:c7:0d:47:d1:e7:f3:7f: d0:23:39:22:d2:46:d8:ed:9b:03:7e:13:a2:5d:72:76:f8:09: 25:d5:14:d6:a9:92:c6:74:cb:21:3a:dc:3c:f5:58:cf:b3:72: 6e:9b:e0:e1:c4:29:80:41:7a:bd:e9:e3:af:e3:f5:6b:70:60: 5c:12:c1:10:2d:4d:97:95:72:4c:23:61:36:2f:9b:29:a1:17: c8:28:78:0c:49:e2:14:60:8d:dd:a3:c0:aa:1c:50:59:4e:8e: 27:21:a6:0d:20:4f:5c:d4:9f:fd:dc:09:f9:cf:c3:9c:08:2c: f8:98:86:7f:20:ce:58:12:7e:f7:e4:42:bc:9e:50:bf:7c:12: 2f:4f:a7:a1:7b:ed:ef:59:99:0c:99:d9:f7:ea:39:1c:19:44: 64:f2:e4:bb -----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgICDMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBDRjIxMTAvBgNVBAUTKEIwM0U3QkZCMkI0QkRBRkEyRUFBNTBBQjc5OTBGNzRG RkNCQ0FERDcwHhcNMjUwNTIwMTgyMjQxWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODJjYzg3MC0xNmNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtpNddO6BYhgb6PWthVVtvkdVetesx9hzCblObO03zgsAyn9O7HqHZvLX8tUt 99YSBcYql4kZQ5lkdGcTime+SZy21i/421uPWVNBhk8E10iI2KBWB3DkpTqKeBHm dluy9lP1gcSstMXAdr+WGjeTAxAak/hCtOOkyHORoYNo33iJroajOo9wb+0ClgZF 6A29BksJCOMbfc8K00pgrdY9y6B0cyRK0E2wW+w7lK74qFjNrE98NaxXmYi7SF5Q 5Tj5E+UYc7qpwC7BU0r7WkmvGfciZmkKhQtLXfQw88TFU8v683PFcnwrMMUxTjUB Jk/N1n/cVP1DRQyjPWvxLZe+8wIDAQABo4ICtjCCArIwHQYDVR0OBBYEFEl16aKv hzovv+U7OyHVFI1xqfCxMB8GA1UdIwQYMBaAFLA+e/srS9r6LqpQq3mQ90/8vK3X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MENGMi9EMDBEQjc2RUY0 RUUxMUU5QUVGRUE4MTlDNEY5QUUwMi9zRDU3LXl0TDJ2b3VxbENyZVpEM1RfeThy ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NENTcteXRMMnZvdXFsQ3JlWkQzVF95OHJkYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTBDRjIvRDAwREI3NkVGNEVFMTFFOUFFRkVBODE5QzRGOUFFMDIvMDI5RTNFRDQ0 QURGMTFFRUIxN0YyRDRDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQAYIKwYBBQUHAQcBAf8E MTAvMB4EAgABMBgDBAAxgAEDBACg7gADBAC2oUMDBADAGm4wDQQCAAIwBwMFACQA 6MAwDQYJKoZIhvcNAQELBQADggEBAK5GvRIQJp9jokiRxqeQL2fABH0F2UV0qntR 4/AGfILBms9aqDBWsaKhvhN07ZMtuwaCIOOtPbM3tH8x19Wmiw/OP83vVYO+/g8T 4xyfRzHqG8yZ+0NTUQ3Sk5z7KYsT4gKGUxZIxw1H0efzf9AjOSLSRtjtmwN+E6Jd cnb4CSXVFNapksZ0yyE63Dz1WM+zcm6b4OHEKYBBer3p46/j9WtwYFwSwRAtTZeV ckwjYTYvmymhF8goeAxJ4hRgjd2jwKocUFlOjichpg0gT1zUn/3cCfnPw5wILPiY hn8gzlgSfvfkQryeUL98Ei9Pp6F77e9ZmQyZ2ffqORwZRGTy5Ls= -----END CERTIFICATE-----Generated at Mon Jun 2 06:31:31 2025 by rpki-client