$ rpki-client -vvf rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/49ADA7183C6111F0BB3B1A85C4F9AE02.roa File: 49ADA7183C6111F0BB3B1A85C4F9AE02.roa (raw, json) Hash identifier: Xs7PI8yOiwfltHePVx4QJDu9U0Lph/VszEHjm+alpiE= Subject key identifier: 13:96:CA:93:F0:7E:0F:4B:A7:87:13:56:04:54:37:56:A5:40:32:F5 Certificate issuer: /CN=A919A998/serialNumber=5EA1A7B802E7E7EFC77CA1A38E52F72ACD463930 Certificate serial: 0CFB Authority key identifier: 5E:A1:A7:B8:02:E7:E7:EF:C7:7C:A1:A3:8E:52:F7:2A:CD:46:39:30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/49ADA7183C6111F0BB3B1A85C4F9AE02.roa Signing time: Thu 29 May 2025 07:48:19 +0000 ROA not before: Thu 29 May 2025 07:48:19 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 141209 IP address blocks: 59.152.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.crl rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 18:11:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3323 (0xcfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A998, serialNumber=5EA1A7B802E7E7EFC77CA1A38E52F72ACD463930 Validity Not Before: May 29 07:48:19 2025 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=68381143-08d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d2:b8:89:e3:4e:23:01:13:81:35:77:51:87: e9:bb:63:54:94:0b:67:29:ff:18:06:6c:0c:e7:33: fb:85:a8:93:e5:26:dc:2a:10:82:89:ed:2e:7a:b9: 9f:b9:d1:05:e2:79:ca:95:c2:f5:f1:ae:69:7d:0f: 8a:54:d9:6b:db:87:43:8c:00:13:1c:73:84:50:ec: ac:71:4f:92:ba:c0:42:3f:d1:9b:18:7c:6c:21:0a: 85:0b:d4:0b:bf:b3:b6:ef:32:bf:b3:6a:ce:f4:06: 00:03:10:15:fd:08:cb:6e:66:1f:26:24:2a:a7:c6: 0c:d6:5c:26:c7:84:7e:8b:b9:a7:c2:a5:b8:27:6d: 8e:e5:b6:ba:9a:87:60:81:cc:92:fa:f0:45:1a:e2: ff:d6:dd:cb:4c:4a:d2:83:6e:fa:16:5a:6a:7a:d6: 8d:63:56:68:8b:22:9e:9c:37:3f:4e:d4:21:92:42: 14:ce:1d:36:9a:12:73:34:6f:8b:8b:40:11:66:33: e4:18:25:5e:50:20:c6:a2:e9:0d:fb:39:16:d4:c9: dd:90:4e:24:56:cd:c9:1b:8d:e3:d6:02:5e:d5:6c: 8e:f6:9c:93:36:29:32:37:ab:dd:bb:63:52:34:c5: 51:bb:68:f8:06:43:40:51:fb:cf:ab:0d:df:2c:b7: b0:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:96:CA:93:F0:7E:0F:4B:A7:87:13:56:04:54:37:56:A5:40:32:F5 X509v3 Authority Key Identifier: keyid:5E:A1:A7:B8:02:E7:E7:EF:C7:7C:A1:A3:8E:52:F7:2A:CD:46:39:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/49ADA7183C6111F0BB3B1A85C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 59.152.106.0/24 Signature Algorithm: sha256WithRSAEncryption bf:98:87:8b:ec:6e:76:e3:a1:4f:3f:aa:13:e3:b5:da:b8:a2: 10:67:0c:f5:91:8b:a3:fb:03:39:9e:d3:77:b4:34:60:b4:49: c6:fa:86:ed:6f:97:b0:53:dd:40:b9:c9:89:ee:1c:cf:7a:f9: c6:50:f7:da:7f:e3:46:d3:dd:55:50:b3:e0:19:d3:be:4c:b1: 53:f7:4e:9d:53:70:2a:fc:6c:55:47:c9:30:4d:2c:7d:2f:95: fa:4d:1e:b5:2f:eb:29:6b:a9:30:c7:16:2b:2e:8f:bb:b3:5d: cf:78:2b:71:ed:ab:d3:91:20:d8:52:35:e2:b1:1d:98:29:af: f4:a2:96:54:f4:4a:70:d3:cc:7f:72:5d:99:f0:b0:b2:0f:3c: e8:f6:90:36:72:e7:93:73:ba:f8:88:f3:14:1c:d8:6e:90:39: d0:67:b5:9f:bc:42:eb:24:82:2b:7c:10:58:b0:ff:5e:01:88: a7:5d:8b:1b:04:2b:f1:f7:09:58:ab:9f:52:29:da:88:28:a9: 28:22:ed:f3:76:f6:b9:e6:73:14:c8:91:78:f2:e0:30:67:47: 2f:a7:71:93:8e:c8:c4:7a:1a:c2:d4:58:12:cd:af:25:94:47: 80:0a:df:86:24:01:fe:ed:89:96:23:76:38:b2:f9:ec:44:df: b2:09:1c:21 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE5OTgxMTAvBgNVBAUTKDVFQTFBN0I4MDJFN0U3RUZDNzdDQTFBMzhFNTJGNzJB Q0Q0NjM5MzAwHhcNMjUwNTI5MDc0ODE5WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODM4MTE0My0wOGQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvtK4ieNOIwETgTV3UYfpu2NUlAtnKf8YBmwM5zP7haiT5SbcKhCCie0uermf udEF4nnKlcL18a5pfQ+KVNlr24dDjAATHHOEUOyscU+SusBCP9GbGHxsIQqFC9QL v7O27zK/s2rO9AYAAxAV/QjLbmYfJiQqp8YM1lwmx4R+i7mnwqW4J22O5ba6modg gcyS+vBFGuL/1t3LTErSg276FlpqetaNY1ZoiyKenDc/TtQhkkIUzh02mhJzNG+L i0ARZjPkGCVeUCDGoukN+zkW1MndkE4kVs3JG43j1gJe1WyO9pyTNikyN6vdu2NS NMVRu2j4BkNAUfvPqw3fLLewwwIDAQABo4IClTCCApEwHQYDVR0OBBYEFBOWypPw fg9Lp4cTVgRUN1alQDL1MB8GA1UdIwQYMBaAFF6hp7gC5+fvx3yho45S9yrNRjkw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTk5OC9BQjM0RkJENEYy NTgxMUU5Qjc1RTNDNzBDNEY5QUUwMi9YcUdudUFMbjUtX0hmS0dqamxMM0tzMUdP VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hxR251QUxuNS1fSGZLR2pqbEwzS3MxR09UQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUE5OTgvQUIzNEZCRDRGMjU4MTFFOUI3NUUzQzcwQzRGOUFFMDIvNDlBREE3MTgz QzYxMTFGMEJCM0IxQTg1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAA7mGowDQYJKoZIhvcNAQELBQADggEBAL+Yh4vsbnbjoU8/ qhPjtdq4ohBnDPWRi6P7Azme03e0NGC0Scb6hu1vl7BT3UC5yYnuHM96+cZQ99p/ 40bT3VVQs+AZ075MsVP3Tp1TcCr8bFVHyTBNLH0vlfpNHrUv6ylrqTDHFisuj7uz Xc94K3Htq9ORINhSNeKxHZgpr/SillT0SnDTzH9yXZnwsLIPPOj2kDZy55NzuviI 8xQc2G6QOdBntZ+8Quskgit8EFiw/14BiKddixsEK/H3CVirn1Ip2ogoqSgi7fN2 9rnmcxTIkXjy4DBnRy+ncZOOyMR6GsLUWBLNryWUR4AK34YkAf7tiZYjdjiy+exE 37IJHCE= -----END CERTIFICATE-----Generated at Mon Jun 2 07:13:32 2025 by rpki-client