$ rpki-client -vvf rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/0C21BBAC373711F08FA9BD3DC4F9AE02.roa File: 0C21BBAC373711F08FA9BD3DC4F9AE02.roa (raw, json) Hash identifier: 8cIYacmt17oQhUg55NPG9jDcGp/KP0H3kvB7HR2dORY= Subject key identifier: 7A:C3:73:A4:EF:57:00:9C:77:E8:97:38:F2:1E:9E:2D:6E:10:D7:D4 Certificate issuer: /CN=A917748E/serialNumber=4B3B5A01A8952FB5642D2484B7F0205AE7DCC761 Certificate serial: 01F3 Authority key identifier: 4B:3B:5A:01:A8:95:2F:B5:64:2D:24:84:B7:F0:20:5A:E7:DC:C7:61 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/0C21BBAC373711F08FA9BD3DC4F9AE02.roa Signing time: Thu 22 May 2025 18:03:22 +0000 ROA not before: Thu 22 May 2025 18:03:21 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 31898 IP address blocks: 66.116.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.crl rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 02:22:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 499 (0x1f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917748E, serialNumber=4B3B5A01A8952FB5642D2484B7F0205AE7DCC761 Validity Not Before: May 22 18:03:21 2025 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=682f66e9-f2f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9a:64:29:6d:fa:c4:19:d1:81:df:6b:9c:15: 08:e0:16:53:1f:25:d7:59:e3:e9:f7:9b:f2:85:cc: b2:60:4c:81:d3:ec:fa:f8:b3:5c:d9:65:2c:e6:fd: 19:e6:af:11:51:83:0c:ae:c1:d2:19:dd:1b:23:0d: 1f:1d:9a:38:24:c6:13:8e:b2:a2:dd:70:e7:8a:a5: e8:04:25:43:87:4d:cf:17:1c:1d:78:05:b1:b8:2b: cd:38:35:50:fc:1f:27:bd:65:50:28:22:fd:b3:ff: b5:9e:c9:c4:8c:5b:b8:85:f9:72:7e:d3:91:b1:1a: 72:94:d5:3a:56:60:6b:09:29:99:5d:2c:29:93:30: 10:f2:ba:dd:28:43:1b:23:53:80:e8:e2:0f:da:6a: eb:37:6d:3e:2c:e7:56:d6:30:9b:4d:8b:30:78:ec: 56:91:06:55:d0:1f:0a:16:f6:0a:5d:43:f4:db:dc: 0e:2e:31:df:38:66:44:f1:21:bd:73:36:35:89:60: 73:bb:73:b0:ac:a3:e8:23:09:41:88:1b:fc:2a:45: b5:a7:43:74:11:a6:4b:c5:b5:e6:84:1d:71:2f:54: 28:99:dd:5f:a0:9a:c1:69:8f:7f:ce:a9:15:3e:b4: 87:35:ae:bc:b7:d4:c3:66:e4:41:d1:8e:3e:69:ca: 6d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:C3:73:A4:EF:57:00:9C:77:E8:97:38:F2:1E:9E:2D:6E:10:D7:D4 X509v3 Authority Key Identifier: keyid:4B:3B:5A:01:A8:95:2F:B5:64:2D:24:84:B7:F0:20:5A:E7:DC:C7:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/0C21BBAC373711F08FA9BD3DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 66.116.192.0/18 Signature Algorithm: sha256WithRSAEncryption b5:ae:30:61:60:06:e6:ab:e6:1a:c8:13:c8:2e:9e:57:16:c0: b8:fc:55:39:c7:6d:ed:47:ce:98:2e:ef:cc:77:13:63:12:03: 54:ca:49:6b:a0:f0:44:70:a2:95:78:ca:41:55:9c:64:47:0c: 57:c1:53:b9:43:fc:59:95:da:71:2e:49:21:54:c8:72:db:c7: 2f:6d:bd:3b:af:e0:b6:a9:cc:43:bd:47:7e:c2:4f:32:01:6b: 0c:f5:05:81:7a:73:21:c3:38:0d:1b:ca:a3:7d:62:32:4d:8b: 0f:bd:46:69:71:0b:51:fa:6a:6c:af:5a:84:3c:00:a2:e3:e3: 64:38:98:5b:bc:9a:f6:dd:9f:90:d4:06:f8:21:5b:ac:85:96: a5:eb:62:18:a2:6a:37:08:9f:2f:dc:32:dc:d6:bf:62:71:e0: fe:75:47:f4:e2:90:2c:c7:14:7c:11:47:f4:82:81:93:6f:cc: 9f:9c:ab:94:c7:c8:ea:96:dd:c1:67:ea:89:3a:7b:a9:70:5c: 5b:26:9a:90:63:99:ad:54:47:45:ed:23:e0:52:64:1d:5a:1f: 16:39:9e:0f:36:e4:bf:5c:5a:22:5d:f3:d1:d4:4c:5a:bb:6f: bf:34:c3:2e:4c:09:ec:5d:89:79:3d:81:7b:26:c8:8d:02:47: b2:59:49:66 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAfMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc0OEUxMTAvBgNVBAUTKDRCM0I1QTAxQTg5NTJGQjU2NDJEMjQ4NEI3RjAyMDVB RTdEQ0M3NjEwHhcNMjUwNTIyMTgwMzIxWhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODJmNjZlOS1mMmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvJpkKW36xBnRgd9rnBUI4BZTHyXXWePp95vyhcyyYEyB0+z6+LNc2WUs5v0Z 5q8RUYMMrsHSGd0bIw0fHZo4JMYTjrKi3XDniqXoBCVDh03PFxwdeAWxuCvNODVQ /B8nvWVQKCL9s/+1nsnEjFu4hflyftORsRpylNU6VmBrCSmZXSwpkzAQ8rrdKEMb I1OA6OIP2mrrN20+LOdW1jCbTYsweOxWkQZV0B8KFvYKXUP029wOLjHfOGZE8SG9 czY1iWBzu3OwrKPoIwlBiBv8KkW1p0N0EaZLxbXmhB1xL1Qomd1foJrBaY9/zqkV PrSHNa68t9TDZuRB0Y4+acpt/wIDAQABo4IClTCCApEwHQYDVR0OBBYEFHrDc6Tv VwCcd+iXOPIeni1uENfUMB8GA1UdIwQYMBaAFEs7WgGolS+1ZC0khLfwIFrn3Mdh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzQ4RS80RDc4OTI2QTRG QTkxMUVEQURFNTE1N0NDNEY5QUUwMi9TenRhQWFpVkw3VmtMU1NFdF9BZ1d1ZmN4 MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1N6dGFBYWlWTDdWa0xTU0V0X0FnV3VmY3gyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Nzc0OEUvNEQ3ODkyNkE0RkE5MTFFREFERTUxNTdDQzRGOUFFMDIvMEMyMUJCQUMz NzM3MTFGMDhGQTlCRDNEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAZCdMAwDQYJKoZIhvcNAQELBQADggEBALWuMGFgBuar5hrI E8gunlcWwLj8VTnHbe1Hzpgu78x3E2MSA1TKSWug8ERwopV4ykFVnGRHDFfBU7lD /FmV2nEuSSFUyHLbxy9tvTuv4LapzEO9R37CTzIBawz1BYF6cyHDOA0byqN9YjJN iw+9RmlxC1H6amyvWoQ8AKLj42Q4mFu8mvbdn5DUBvghW6yFlqXrYhiiajcIny/c MtzWv2Jx4P51R/TikCzHFHwRR/SCgZNvzJ+cq5THyOqW3cFn6ok6e6lwXFsmmpBj ma1UR0XtI+BSZB1aHxY5ng825L9cWiJd89HUTFq7b780wy5MCexdiXk9gXsmyI0C R7JZSWY= -----END CERTIFICATE-----Generated at Mon Jun 2 18:56:23 2025 by rpki-client