$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/2AFAC78029B311F0AF325E4AC4F9AE02.roa File: 2AFAC78029B311F0AF325E4AC4F9AE02.roa (raw, json) Hash identifier: nUUhIGZHO3RHOUl1TnIm6KeN8p6UUqQmkzO4UL1GmbU= Subject key identifier: B1:60:78:60:5D:BE:8E:52:2E:54:7F:00:62:38:A3:02:2B:D4:52:D6 Certificate issuer: /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206 Certificate serial: 3826 Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/2AFAC78029B311F0AF325E4AC4F9AE02.roa Signing time: Thu 15 May 2025 09:44:08 +0000 ROA not before: Thu 15 May 2025 09:44:08 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 149419 IP address blocks: 111.88.168.0/24 maxlen: 24 111.88.169.0/24 maxlen: 24 111.88.170.0/24 maxlen: 24 111.88.171.0/24 maxlen: 24 111.88.239.0/24 maxlen: 24 115.186.62.0/24 maxlen: 24 115.186.117.0/24 maxlen: 24 115.186.118.0/24 maxlen: 24 115.186.119.0/24 maxlen: 24 115.186.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 14:30:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14374 (0x3826) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206 Validity Not Before: May 15 09:44:08 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6825b768-59d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0a:fa:3f:49:46:d3:66:97:79:3a:81:06:32: 2a:c8:16:48:54:3d:ed:78:2d:ea:4d:b3:7e:b8:17: 17:6d:0a:6b:27:d6:29:34:21:5f:97:e9:6a:41:9a: 70:56:1c:86:ab:60:4e:50:d7:9b:ce:eb:48:5b:88: 92:b5:b8:fd:63:ad:2d:4f:99:f8:2a:7f:9d:54:4a: d9:16:9f:80:5f:b3:ca:02:16:f5:18:a4:91:f0:e9: 91:7c:55:66:fe:01:97:54:4f:31:99:4f:1c:c3:37: 2c:12:49:4e:dc:18:f4:1c:d5:c3:f2:85:03:ef:94: 49:9b:76:2a:ee:35:b0:04:c5:06:b7:63:1d:61:3f: f8:ae:37:06:86:f8:c8:c1:9e:7e:d6:63:14:11:00: 8d:76:7e:be:c1:ee:48:e9:68:cf:b8:d7:dc:d6:d7: ed:14:c0:60:2b:28:07:dc:c0:7f:3b:0e:90:43:32: 50:b9:f9:5f:35:00:a6:5d:1d:de:50:ef:9a:e1:b7: 09:3a:82:78:96:f9:07:cf:69:6f:98:24:24:13:73: 4d:9a:24:03:ee:7e:0b:d8:a1:d1:52:05:10:f7:31: 08:f7:61:12:93:b2:5b:6c:3c:34:93:c2:c4:7f:78: 57:ca:4a:20:5f:4b:f3:6a:ce:b6:86:35:d8:6f:22: 70:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:60:78:60:5D:BE:8E:52:2E:54:7F:00:62:38:A3:02:2B:D4:52:D6 X509v3 Authority Key Identifier: keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/2AFAC78029B311F0AF325E4AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 111.88.168.0/22 111.88.239.0/24 115.186.62.0/24 115.186.117.0-115.186.120.255 Signature Algorithm: sha256WithRSAEncryption 49:c9:23:b1:eb:e2:83:21:5c:3b:04:59:51:b9:a8:7e:fd:55: 94:a6:57:55:26:c5:d9:1a:83:bd:3f:91:95:6a:6f:a8:20:43: b9:e9:c9:27:98:f7:d5:dd:f0:c3:03:42:2d:90:61:f7:65:80: bc:70:55:e6:2e:2f:52:24:b3:4d:a6:4f:00:5d:91:1e:aa:81: b7:87:b3:c9:55:46:a2:27:d4:95:c7:bb:c0:38:32:6f:74:2c: 4a:f3:f0:d4:61:45:2b:8d:fe:01:20:f4:12:79:4e:ea:2e:4a: 95:22:9c:83:9e:1a:59:b0:fe:67:c2:98:b6:fa:01:a5:f1:5e: 39:e1:49:8b:55:45:55:b1:b2:a1:bc:f2:72:da:83:ce:24:d6: 9d:36:03:fd:2e:ef:e6:9c:40:2f:7c:cc:4e:5c:63:64:d7:72: 25:5c:27:0d:e0:56:22:0f:fa:9d:46:87:62:80:7c:bf:e7:15: 8d:68:a5:7e:2f:cd:24:74:79:70:79:72:b6:16:0d:48:3a:4b: c4:be:8d:76:b5:ba:0e:24:02:e3:4a:34:98:8d:ce:23:6c:b1: ea:1e:f0:ac:ea:5b:0d:44:c3:c8:85:e4:e2:3d:11:78:56:17: 70:5b:1c:8b:ad:d2:0b:9a:52:ab:de:9d:cb:68:f0:0f:fd:45: 1b:fa:77:d7 -----BEGIN CERTIFICATE----- MIIFizCCBHOgAwIBAgICOCYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM4M0IxMTAvBgNVBAUTKEU3NkVCMjU2QzBGQ0IwN0UyOTA3OTc4MzQzRTlBRDlE RDIxRkUyMDYwHhcNMjUwNTE1MDk0NDA4WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODI1Yjc2OC01OWQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsAr6P0lG02aXeTqBBjIqyBZIVD3teC3qTbN+uBcXbQprJ9YpNCFfl+lqQZpw VhyGq2BOUNebzutIW4iStbj9Y60tT5n4Kn+dVErZFp+AX7PKAhb1GKSR8OmRfFVm /gGXVE8xmU8cwzcsEklO3Bj0HNXD8oUD75RJm3Yq7jWwBMUGt2MdYT/4rjcGhvjI wZ5+1mMUEQCNdn6+we5I6WjPuNfc1tftFMBgKygH3MB/Ow6QQzJQuflfNQCmXR3e UO+a4bcJOoJ4lvkHz2lvmCQkE3NNmiQD7n4L2KHRUgUQ9zEI92ESk7JbbDw0k8LE f3hXykogX0vzas62hjXYbyJwCwIDAQABo4ICrzCCAqswHQYDVR0OBBYEFLFgeGBd vo5SLlR/AGI4owIr1FLWMB8GA1UdIwQYMBaAFOduslbA/LB+KQeXg0PprZ3SH+IG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzgzQi9FNEUxMEI0QTFE ODgxMUUyQTAxMkNCRTEwOEIwMkNEMi81MjZ5VnNEOHNINHBCNWVEUS1tdG5kSWY0 Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzUyNnlWc0Q4c0g0cEI1ZURRLW10bmRJZjRnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkM4M0IvRTRFMTBCNEExRDg4MTFFMkEwMTJDQkUxMDhCMDJDRDIvMkFGQUM3ODAy OUIzMTFGMEFGMzI1RTRBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOQYIKwYBBQUHAQcBAf8E KjAoMCYEAgABMCADBAJvWKgDBABvWO8DBABzuj4wDAMEAHO6dQMEAHO6eDANBgkq hkiG9w0BAQsFAAOCAQEASckjsevigyFcOwRZUbmofv1VlKZXVSbF2RqDvT+RlWpv qCBDuenJJ5j31d3wwwNCLZBh92WAvHBV5i4vUiSzTaZPAF2RHqqBt4ezyVVGoifU lce7wDgyb3QsSvPw1GFFK43+ASD0EnlO6i5KlSKcg54aWbD+Z8KYtvoBpfFeOeFJ i1VFVbGyobzyctqDziTWnTYD/S7v5pxAL3zMTlxjZNdyJVwnDeBWIg/6nUaHYoB8 v+cVjWilfi/NJHR5cHlythYNSDpLxL6NdrW6DiQC40o0mI3OI2yx6h7wrOpbDUTD yIXk4j0ReFYXcFsci63SC5pSq96dy2jwD/1FG/p31w== -----END CERTIFICATE-----Generated at Mon Jun 2 06:34:02 2025 by rpki-client