$ rpki-client -vvf rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/4B3E4A0693DE11EE81D1045FC4F9AE02.roa File: 4B3E4A0693DE11EE81D1045FC4F9AE02.roa (raw, json) Hash identifier: KJ0WK2K4oHZZ0XrPq/Vfzr7zXyGgds8k3sXRub+VApA= Subject key identifier: C8:91:DB:54:7B:C7:6D:D3:DF:D4:DB:D3:15:65:11:36:1C:48:2B:25 Certificate issuer: /CN=A919B20D/serialNumber=E556DC86B94E91CF9B2E2944A85F71692DA094D2 Certificate serial: 0118 Authority key identifier: E5:56:DC:86:B9:4E:91:CF:9B:2E:29:44:A8:5F:71:69:2D:A0:94:D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VbchrlOkc-bLilEqF9xaS2glNI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/4B3E4A0693DE11EE81D1045FC4F9AE02.roa Signing time: Wed 21 May 2025 04:34:48 +0000 ROA not before: Wed 21 May 2025 04:34:48 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 55785 IP address blocks: 202.37.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.crl rsync://rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VbchrlOkc-bLilEqF9xaS2glNI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 04:33:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 280 (0x118) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B20D, serialNumber=E556DC86B94E91CF9B2E2944A85F71692DA094D2 Validity Not Before: May 21 04:34:48 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=682d57e7-a6f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7b:97:cf:8c:2a:3a:cd:16:71:4e:dd:58:af: 47:d0:71:7f:14:4e:da:f2:9b:b1:d3:a9:83:b5:46: a4:d9:0c:10:19:93:9f:8b:55:11:aa:65:bc:ad:e2: 11:5f:56:ee:1a:44:f4:cc:c2:56:9e:bd:24:83:74: 85:59:c6:0d:60:20:ee:c2:27:51:4a:db:83:50:d8: f2:af:b0:d4:94:62:3d:ef:ef:98:26:fd:42:1c:5a: 7c:4c:08:07:64:eb:9a:46:fc:67:bf:9f:e6:94:b5: 5f:87:3f:42:cf:63:6a:09:6c:e9:d7:2e:8d:c8:5f: 4d:a0:d0:b6:9b:92:ad:bd:33:48:a5:70:88:18:f5: 17:c3:bb:06:b5:40:59:b3:ab:00:57:31:45:de:a9: bb:03:ef:ab:88:d0:1a:0f:23:6c:ea:89:75:63:7f: f1:b9:31:d8:cf:7f:6d:2e:c5:8f:27:7b:e0:3b:63: a6:ed:1d:80:5c:26:7d:5c:79:ef:c5:7b:0d:a0:70: 94:7d:12:8e:c0:87:75:d9:96:f7:25:8a:82:02:c6: eb:88:53:e0:cb:58:28:77:45:d3:5f:32:9b:c5:92: 3d:1b:86:61:02:02:29:63:97:fa:d7:e5:c7:58:37: 63:e7:c7:da:11:61:dd:23:47:d9:46:dd:66:2c:5c: fd:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:91:DB:54:7B:C7:6D:D3:DF:D4:DB:D3:15:65:11:36:1C:48:2B:25 X509v3 Authority Key Identifier: keyid:E5:56:DC:86:B9:4E:91:CF:9B:2E:29:44:A8:5F:71:69:2D:A0:94:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VbchrlOkc-bLilEqF9xaS2glNI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/4B3E4A0693DE11EE81D1045FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.37.198.0/24 Signature Algorithm: sha256WithRSAEncryption 25:86:f6:b5:4e:c6:4f:4d:d4:5e:30:85:29:06:00:fb:d4:c6: df:3b:2b:d8:a6:43:31:80:74:d2:c0:19:dd:40:20:65:46:b8: 50:71:e2:10:1f:65:cd:a9:a1:14:37:ed:2e:6f:6c:0c:f6:02: e9:8d:65:a5:f4:de:bf:76:c6:d3:15:00:f9:9a:12:dd:81:2b: a0:9a:0b:69:db:7b:ca:fa:fd:4e:c8:dc:08:cb:04:61:c6:21: 3d:d6:e0:48:82:e5:82:c1:d6:5c:49:6f:f5:cd:76:7a:2d:65: 7c:52:62:a0:34:75:d0:d7:91:f0:8a:91:84:8f:0b:a3:06:43: 54:33:29:50:f0:64:93:4d:c7:50:e6:2c:ae:18:cd:94:88:0d: 05:7a:18:93:e4:83:cd:aa:9c:67:59:38:4a:8e:93:29:ea:f7: cc:76:12:b8:36:8a:fa:b9:96:3b:ff:95:7c:3a:e0:c3:8e:fc: 13:fa:8f:0b:85:37:39:84:7e:05:0a:49:e7:56:ef:65:e1:0a: ed:49:0b:34:f4:0b:50:2b:7d:c1:8a:8a:da:51:55:b6:a4:54: 3c:07:fb:f1:8a:f3:d3:94:30:bf:b6:d6:d9:e8:c8:f3:f2:ba: cc:c6:ad:d4:3d:68:78:6e:10:9b:71:05:37:a8:b8:bf:46:92: c1:a7:13:52 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICARgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUIyMEQxMTAvBgNVBAUTKEU1NTZEQzg2Qjk0RTkxQ0Y5QjJFMjk0NEE4NUY3MTY5 MkRBMDk0RDIwHhcNMjUwNTIxMDQzNDQ4WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODJkNTdlNy1hNmY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxnuXz4wqOs0WcU7dWK9H0HF/FE7a8pux06mDtUak2QwQGZOfi1URqmW8reIR X1buGkT0zMJWnr0kg3SFWcYNYCDuwidRStuDUNjyr7DUlGI97++YJv1CHFp8TAgH ZOuaRvxnv5/mlLVfhz9Cz2NqCWzp1y6NyF9NoNC2m5KtvTNIpXCIGPUXw7sGtUBZ s6sAVzFF3qm7A++riNAaDyNs6ol1Y3/xuTHYz39tLsWPJ3vgO2Om7R2AXCZ9XHnv xXsNoHCUfRKOwId12Zb3JYqCAsbriFPgy1god0XTXzKbxZI9G4ZhAgIpY5f61+XH WDdj58faEWHdI0fZRt1mLFz9gQIDAQABo4IClTCCApEwHQYDVR0OBBYEFMiR21R7 x23T39Tb0xVlETYcSCslMB8GA1UdIwQYMBaAFOVW3Ia5TpHPmy4pRKhfcWktoJTS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjIwRC82MUFDQkY0Njkz QTkxMUVFOTE0OUUzNTRDNEY5QUUwMi81VmJjaHJsT2tjLWJMaWxFcUY5eGFTMmds TkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVWYmNocmxPa2MtYkxpbEVxRjl4YVMyZ2xOSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUIyMEQvNjFBQ0JGNDY5M0E5MTFFRTkxNDlFMzU0QzRGOUFFMDIvNEIzRTRBMDY5 M0RFMTFFRTgxRDEwNDVGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADKJcYwDQYJKoZIhvcNAQELBQADggEBACWG9rVOxk9N1F4w hSkGAPvUxt87K9imQzGAdNLAGd1AIGVGuFBx4hAfZc2poRQ37S5vbAz2AumNZaX0 3r92xtMVAPmaEt2BK6CaC2nbe8r6/U7I3AjLBGHGIT3W4EiC5YLB1lxJb/XNdnot ZXxSYqA0ddDXkfCKkYSPC6MGQ1QzKVDwZJNNx1DmLK4YzZSIDQV6GJPkg82qnGdZ OEqOkynq98x2Erg2ivq5ljv/lXw64MOO/BP6jwuFNzmEfgUKSedW72XhCu1JCzT0 C1ArfcGKitpRVbakVDwH+/GK89OUML+21tnoyPPyuszGrdQ9aHhuEJtxBTeouL9G ksGnE1I= -----END CERTIFICATE-----Generated at Mon Jun 2 07:09:32 2025 by rpki-client