$ rpki-client -vvf rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/D7B77EDA319411F08F477C2AC4F9AE02.roa File: D7B77EDA319411F08F477C2AC4F9AE02.roa (raw, json) Hash identifier: C5cqhk4TJTYY2C3i+V15FW2BpXNmnBODb2L/J1hOJq8= Subject key identifier: A5:AE:DE:7A:D0:A7:54:67:0A:31:12:30:9C:FD:40:6B:B4:51:36:33 Certificate issuer: /CN=A919A3F0/serialNumber=FE05EFB70125D520476F63BC609F554DC49AC59C Certificate serial: 015B Authority key identifier: FE:05:EF:B7:01:25:D5:20:47:6F:63:BC:60:9F:55:4D:C4:9A:C5:9C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/D7B77EDA319411F08F477C2AC4F9AE02.roa Signing time: Thu 15 May 2025 14:00:31 +0000 ROA not before: Thu 15 May 2025 14:00:31 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 0 IP address blocks: 114.142.136.0/21 maxlen: 24 124.197.56.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.crl rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 347 (0x15b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A3F0, serialNumber=FE05EFB70125D520476F63BC609F554DC49AC59C Validity Not Before: May 15 14:00:31 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=6825f37e-b7dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:2d:f6:7d:f7:02:85:f9:8d:9a:39:8b:3e:0b: cc:50:cb:a2:0d:6b:e0:70:85:34:1e:cf:de:01:6c: e6:50:4c:7e:69:58:9c:fe:cd:9a:0e:7d:89:b3:6f: 16:08:23:97:17:eb:40:fc:d3:b5:f2:1a:4a:a1:8e: 5c:89:2b:41:c2:8b:51:dd:8a:e5:88:76:27:fe:e5: a3:c7:fe:b2:28:e8:40:a9:df:ea:95:9d:83:dd:3a: 88:0a:a1:5a:71:c1:42:18:96:19:77:d3:e8:f3:75: d5:75:9c:32:7c:4a:7d:30:18:32:02:db:46:14:a9: e1:f9:3b:58:dd:2a:1a:dc:0c:9d:d9:7d:ee:f0:dd: b8:d9:99:4f:c5:32:22:6d:21:78:49:7d:8a:c1:8b: ed:b2:f7:71:67:b0:1c:8d:fe:f2:2a:1f:ca:a0:1f: 3b:68:25:22:b2:d2:73:ff:86:b2:95:96:54:fa:7d: 86:ee:27:ae:2d:35:af:3d:d3:55:1b:2a:24:c0:59: 49:82:3f:0d:e8:8b:12:c9:d6:1e:b9:c8:90:74:9b: 5a:31:47:c2:80:9d:7e:6a:4b:f7:e3:2f:48:62:5c: 7f:2b:d9:0a:ee:f2:43:8d:06:a5:5e:33:b4:74:1f: a3:83:4a:93:1c:a2:f1:76:69:52:78:89:18:e3:9c: d9:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:AE:DE:7A:D0:A7:54:67:0A:31:12:30:9C:FD:40:6B:B4:51:36:33 X509v3 Authority Key Identifier: keyid:FE:05:EF:B7:01:25:D5:20:47:6F:63:BC:60:9F:55:4D:C4:9A:C5:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/D7B77EDA319411F08F477C2AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 114.142.136.0/21 124.197.56.0/21 Signature Algorithm: sha256WithRSAEncryption 6f:82:2f:26:5b:9d:36:b0:db:ec:12:85:fc:74:42:9b:dd:6c: ca:0c:5d:d6:ee:2a:cc:c1:1f:2a:a5:55:22:55:b9:aa:cc:25: 8d:c1:21:88:7b:08:68:8b:28:b1:81:8d:1c:23:a1:33:f3:6d: a3:af:05:c1:9c:7c:21:50:76:3f:43:1c:e8:69:4c:0c:47:1a: d7:22:64:1d:b4:16:c9:83:5c:6e:85:30:34:15:b8:98:cc:79: b4:28:d9:12:14:f8:f0:d9:58:f2:8c:19:a2:75:a7:08:3b:78: 1a:c0:84:3d:8f:c7:de:04:68:16:ce:6b:83:7e:20:c2:90:4b: 63:a3:f1:73:f8:9e:5b:8f:37:65:ac:39:47:b2:cc:02:ff:33: 72:46:c5:40:ce:47:e3:cb:34:de:33:5c:b0:a9:cc:f6:19:c0: 11:1a:9c:80:3a:31:cf:db:c1:23:02:a4:a8:49:eb:e0:b2:0b: 13:d1:1f:08:b1:b8:ed:37:08:04:11:af:da:c2:22:b5:8c:7e: 69:77:81:f9:8e:26:0a:4e:2c:82:a2:b3:5d:15:b2:78:b4:28: ab:35:73:11:54:7d:c6:63:bc:08:4e:08:dd:27:c4:a8:ae:06: 4c:f4:fe:c8:b0:b7:12:9a:10:1d:fa:2f:e1:c9:c3:5c:75:d4: 5e:8f:92:3c -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUEzRjAxMTAvBgNVBAUTKEZFMDVFRkI3MDEyNUQ1MjA0NzZGNjNCQzYwOUY1NTRE QzQ5QUM1OUMwHhcNMjUwNTE1MTQwMDMxWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02ODI1ZjM3ZS1iN2RjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5i32ffcChfmNmjmLPgvMUMuiDWvgcIU0Hs/eAWzmUEx+aVic/s2aDn2Js28W CCOXF+tA/NO18hpKoY5ciStBwotR3YrliHYn/uWjx/6yKOhAqd/qlZ2D3TqICqFa ccFCGJYZd9Po83XVdZwyfEp9MBgyAttGFKnh+TtY3Soa3Ayd2X3u8N242ZlPxTIi bSF4SX2KwYvtsvdxZ7Acjf7yKh/KoB87aCUistJz/4aylZZU+n2G7ieuLTWvPdNV GyokwFlJgj8N6IsSydYeuciQdJtaMUfCgJ1+akv34y9IYlx/K9kK7vJDjQalXjO0 dB+jg0qTHKLxdmlSeIkY45zZtwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFKWu3nrQ p1RnCjESMJz9QGu0UTYzMB8GA1UdIwQYMBaAFP4F77cBJdUgR29jvGCfVU3EmsWc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTNGMC9GM0MyQTkyMjJC OEExMUVFQUREMjIxMENDNEY5QUUwMi9fZ1h2dHdFbDFTQkhiMk84WUo5VlRjU2F4 WncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19nWHZ0d0VsMVNCSGIyTzhZSjlWVGNTYXhady5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUEzRjAvRjNDMkE5MjIyQjhBMTFFRUFERDIyMTBDQzRGOUFFMDIvRDdCNzdFREEz MTk0MTFGMDhGNDc3QzJBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBANyjogDBAN8xTgwDQYJKoZIhvcNAQELBQADggEBAG+CLyZb nTaw2+wShfx0QpvdbMoMXdbuKszBHyqlVSJVuarMJY3BIYh7CGiLKLGBjRwjoTPz baOvBcGcfCFQdj9DHOhpTAxHGtciZB20FsmDXG6FMDQVuJjMebQo2RIU+PDZWPKM GaJ1pwg7eBrAhD2Px94EaBbOa4N+IMKQS2Oj8XP4nluPN2WsOUeyzAL/M3JGxUDO R+PLNN4zXLCpzPYZwBEanIA6Mc/bwSMCpKhJ6+CyCxPRHwixuO03CAQRr9rCIrWM fml3gfmOJgpOLIKis10Vsni0KKs1cxFUfcZjvAhOCN0nxKiuBkz0/siwtxKaEB36 L+HJw1x11F6Pkjw= -----END CERTIFICATE-----Generated at Sun Jun 1 04:09:04 2025 by rpki-client