$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/EE88C2F6580711F09A56942DC4F9AE02.roa File: EE88C2F6580711F09A56942DC4F9AE02.roa (raw, json) Hash identifier: OKC561ca7ASLfOkgXrHgKbplp4PP/4v4yOXE3sio9JA= Subject key identifier: CB:B4:23:5A:D6:5F:72:91:DC:0E:73:FA:07:E9:A2:50:21:AD:8E:7E Certificate issuer: /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D Certificate serial: 04A5 Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/EE88C2F6580711F09A56942DC4F9AE02.roa Signing time: Thu 03 Jul 2025 12:19:14 +0000 ROA not before: Thu 03 Jul 2025 12:19:14 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 15830 IP address blocks: 203.32.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1189 (0x4a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FC75, serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D Validity Not Before: Jul 3 12:19:14 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=68667542-9e91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0b:7b:1b:e9:ac:fa:91:81:c3:45:dd:d3:b4: d3:65:81:06:c3:26:37:eb:55:c5:82:d3:9c:6b:ef: 4e:90:2c:e3:ed:e2:99:4f:b1:71:76:ec:c7:d4:97: 68:02:99:75:9b:2c:d6:8b:16:e8:b6:d9:90:9a:54: 57:93:30:5a:37:36:b8:6f:e5:d4:a6:a2:96:b1:d8: 69:c7:0b:fc:46:e4:f0:54:aa:0d:76:9a:6b:56:5c: dc:dd:da:40:7d:14:4b:41:2e:52:f9:8a:ff:bb:da: 68:44:9b:7f:50:f8:0a:1f:31:79:47:c4:85:72:ba: 7a:25:90:42:2f:75:fb:51:5b:5e:c8:81:bb:e8:9a: 06:fa:ba:6d:7d:5d:9f:44:9a:b5:79:bd:10:c6:90: dd:89:24:20:97:c2:7f:6d:3c:82:dc:6d:53:4e:05: 25:3f:23:2d:1a:af:f8:71:e0:7a:55:b2:ef:c5:50: 90:3a:23:04:c9:5f:95:77:31:2d:67:86:9a:ab:44: 97:f7:60:af:32:8b:5b:08:41:a5:03:00:cc:51:5d: c6:75:e0:cf:5c:87:12:d9:9a:b0:2d:62:aa:79:c9: 75:fd:e4:aa:58:1f:f6:9c:26:16:25:6d:5a:03:71: 04:fd:61:00:33:ae:c4:df:2b:df:01:54:6b:02:43: 0f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:B4:23:5A:D6:5F:72:91:DC:0E:73:FA:07:E9:A2:50:21:AD:8E:7E X509v3 Authority Key Identifier: keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/EE88C2F6580711F09A56942DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.32.41.0/24 Signature Algorithm: sha256WithRSAEncryption 48:cb:f4:18:92:dd:74:7c:0a:fa:b6:c3:4d:23:52:00:7b:d0: 0b:c8:6a:f5:91:31:33:12:e3:23:3c:39:db:b5:6e:a8:bc:ee: 7a:57:80:84:95:58:b1:21:d1:0c:6d:91:48:ec:e0:35:98:99: d0:b3:75:4f:a0:36:b5:ec:31:5c:ae:cf:01:98:ae:fc:bf:8a: b6:67:16:45:aa:e0:11:de:af:d6:78:14:bb:7f:37:41:f3:7f: a0:f6:b9:be:cf:d5:2c:6a:86:39:84:bb:60:83:6a:d5:e8:02: a8:1a:51:f6:cd:1d:eb:e1:3b:1c:f1:07:df:46:29:83:07:29: a5:d1:4f:68:b0:cc:18:0d:42:eb:6a:fd:36:a3:0c:32:74:59: f6:38:a7:a1:10:30:e6:6b:65:c2:8e:32:3b:19:32:52:e8:36: 2a:9a:94:66:0a:27:79:89:d3:e1:3e:aa:6f:70:b3:7c:80:79: f4:1d:fc:8e:41:3c:49:61:89:86:3b:71:6f:3e:93:b2:f9:88: df:ed:44:41:c4:23:df:ab:b2:ff:b5:a8:ea:73:28:ff:de:bc: e7:f3:b7:93:d4:49:9c:ba:fb:ec:7a:7a:c6:ee:63:ce:b6:ad: 2d:31:e6:2c:b4:1a:69:93:fd:02:ee:a7:fd:68:3a:4d:4e:d6: 9b:e0:15:11 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZDNzUxMTAvBgNVBAUTKDQ4MkU1QTZFMDg5NkEyNjZBOTFBNDA2NkMwNkY0QjRF RDk4NDY0OUQwHhcNMjUwNzAzMTIxOTE0WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODY2NzU0Mi05ZTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtgt7G+ms+pGBw0Xd07TTZYEGwyY361XFgtOca+9OkCzj7eKZT7FxduzH1Jdo Apl1myzWixbottmQmlRXkzBaNza4b+XUpqKWsdhpxwv8RuTwVKoNdpprVlzc3dpA fRRLQS5S+Yr/u9poRJt/UPgKHzF5R8SFcrp6JZBCL3X7UVteyIG76JoG+rptfV2f RJq1eb0QxpDdiSQgl8J/bTyC3G1TTgUlPyMtGq/4ceB6VbLvxVCQOiMEyV+VdzEt Z4aaq0SX92CvMotbCEGlAwDMUV3GdeDPXIcS2ZqwLWKqecl1/eSqWB/2nCYWJW1a A3EE/WEAM67E3yvfAVRrAkMPnQIDAQABo4IClTCCApEwHQYDVR0OBBYEFMu0I1rW X3KR3A5z+gfpolAhrY5+MB8GA1UdIwQYMBaAFEguWm4IlqJmqRpAZsBvS07ZhGSd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkM3NS8zQUE1REVFMERE NTgxMUVDODcwRkMyMERDNEY5QUUwMi9TQzVhYmdpV29tYXBHa0Jtd0c5TFR0bUVa SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NDNWFiZ2lXb21hcEdrQm13RzlMVHRtRVpKMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEZDNzUvM0FBNURFRTBERDU4MTFFQzg3MEZDMjBEQzRGOUFFMDIvRUU4OEMyRjY1 ODA3MTFGMDlBNTY5NDJEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADLICkwDQYJKoZIhvcNAQELBQADggEBAEjL9BiS3XR8Cvq2 w00jUgB70AvIavWRMTMS4yM8Odu1bqi87npXgISVWLEh0QxtkUjs4DWYmdCzdU+g NrXsMVyuzwGYrvy/irZnFkWq4BHer9Z4FLt/N0Hzf6D2ub7P1SxqhjmEu2CDatXo AqgaUfbNHevhOxzxB99GKYMHKaXRT2iwzBgNQutq/TajDDJ0WfY4p6EQMOZrZcKO MjsZMlLoNiqalGYKJ3mJ0+E+qm9ws3yAefQd/I5BPElhiYY7cW8+k7L5iN/tREHE I9+rsv+1qOpzKP/evOfzt5PUSZy6++x6esbuY862rS0x5iy0GmmT/QLup/1oOk1O 1pvgFRE= -----END CERTIFICATE-----Generated at Sun Jul 6 09:08:16 2025 by rpki-client