$ rpki-client -vvf rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/CC9ED4E2015411EF83144341C4F9AE02.roa File: CC9ED4E2015411EF83144341C4F9AE02.roa (raw, json) Hash identifier: Osq8N7LGubtgKdKl5sdZkfb4P1d2cMS4bJ6mYPyXEPw= Subject key identifier: EE:46:75:14:6C:D6:11:19:BE:13:19:CD:C0:A5:BC:45:BD:8C:52:C3 Certificate issuer: /CN=A91A54FE/serialNumber=6FC70906FBA6F4539452091932C45FFA4D8572B8 Certificate serial: DE Authority key identifier: 6F:C7:09:06:FB:A6:F4:53:94:52:09:19:32:C4:5F:FA:4D:85:72:B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8cJBvum9FOUUgkZMsRf-k2Fcrg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/CC9ED4E2015411EF83144341C4F9AE02.roa Signing time: Tue 03 Jun 2025 05:25:29 +0000 ROA not before: Tue 03 Jun 2025 05:25:29 +0000 ROA not after: Wed 01 Oct 2025 00:00:00 +0000 asID: 2764 IP address blocks: 203.20.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.crl rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8cJBvum9FOUUgkZMsRf-k2Fcrg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 05:25:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 222 (0xde) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A54FE, serialNumber=6FC70906FBA6F4539452091932C45FFA4D8572B8 Validity Not Before: Jun 3 05:25:29 2025 GMT Not After : Oct 1 00:00:00 2025 GMT Subject: CN=683e8749-7e58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:e7:1a:a2:5a:0b:77:e8:91:7c:86:ea:6a:35: 81:79:a8:60:b5:30:64:5e:07:5d:3b:44:d0:1c:af: 31:41:dd:96:76:2b:8e:67:ec:c9:b5:9a:0f:8d:c0: b4:bf:31:c3:5f:b1:ce:b8:55:a9:4a:e8:57:0f:9f: a8:83:75:6c:dd:60:2b:2c:c3:f7:9d:f0:ad:12:4f: 8a:ea:a4:f7:fb:78:2c:ea:2f:52:c7:be:45:cb:83: e4:e6:35:39:f0:0b:f2:7f:2f:3a:2a:7b:1e:ff:56: 21:e0:12:0d:55:78:81:e4:a6:82:0d:3b:ab:98:10: 73:fa:4f:87:50:86:14:54:9b:ac:08:53:df:83:d1: 6c:32:86:90:83:f5:86:13:ed:41:30:5a:fc:f4:18: 19:57:68:f7:60:f9:23:c3:46:3f:69:3e:fe:5a:f5: 1b:59:65:63:74:7c:19:40:13:fa:a3:30:00:2b:41: 81:41:a7:d2:f3:b0:ee:2c:07:ee:ef:ed:e0:a6:d4: ba:eb:c3:42:57:d2:1e:ae:6e:77:25:7b:be:91:de: f9:1e:14:ba:0a:79:26:09:0a:b2:ab:17:32:fa:01: 6c:53:99:c0:31:90:e6:35:b7:f6:49:e4:b1:6e:b1: d3:31:79:39:e3:1e:93:8c:a8:ef:3a:51:07:e4:3b: 36:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:46:75:14:6C:D6:11:19:BE:13:19:CD:C0:A5:BC:45:BD:8C:52:C3 X509v3 Authority Key Identifier: keyid:6F:C7:09:06:FB:A6:F4:53:94:52:09:19:32:C4:5F:FA:4D:85:72:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8cJBvum9FOUUgkZMsRf-k2Fcrg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/CC9ED4E2015411EF83144341C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.20.114.0/24 Signature Algorithm: sha256WithRSAEncryption 63:28:4a:88:07:6a:0f:b6:0e:bf:b8:69:24:fb:79:cb:5f:a9: e9:d7:92:ee:b9:21:42:a9:e8:18:75:79:70:93:6a:c8:d6:e7: a0:94:82:12:63:07:a0:3e:5a:4f:59:a8:a7:06:e0:d2:a4:e1: 55:67:93:ed:b6:f3:e2:f8:0f:26:5c:7a:c5:6d:2c:6f:c8:90: 18:03:3f:8d:f7:03:d4:e8:48:6e:db:68:fb:20:46:a2:82:16: 04:e4:44:6e:5e:e9:03:f6:57:50:04:e8:cb:cd:33:d0:b5:c1: b4:37:9b:9a:c9:76:e8:59:28:b5:b7:84:83:37:3a:e1:3b:fe: 14:eb:c7:65:33:56:7d:2b:56:af:f1:47:ba:48:55:fc:f4:7f: b8:12:49:b9:5c:5f:0e:f8:cf:bd:9f:30:60:7f:45:53:06:8c: 52:88:df:90:8c:b1:86:51:07:d0:b2:eb:c7:72:df:c5:94:ac: 0b:0f:92:5f:2b:d9:c1:0d:a8:32:d0:0d:af:d3:40:c7:32:3d: 18:eb:2b:aa:80:fa:40:3b:e2:9b:cc:a7:e5:0c:89:95:50:8c: e7:91:c9:4b:4f:37:39:04:b1:2d:ce:ec:cb:d9:2c:ab:45:7c: 6d:12:f9:98:ac:33:c1:37:0d:97:26:8f:cb:8e:8a:86:01:5e: 5e:f2:47:0f -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU0RkUxMTAvBgNVBAUTKDZGQzcwOTA2RkJBNkY0NTM5NDUyMDkxOTMyQzQ1RkZB NEQ4NTcyQjgwHhcNMjUwNjAzMDUyNTI5WhcNMjUxMDAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODNlODc0OS03ZTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+OcaoloLd+iRfIbqajWBeahgtTBkXgddO0TQHK8xQd2WdiuOZ+zJtZoPjcC0 vzHDX7HOuFWpSuhXD5+og3Vs3WArLMP3nfCtEk+K6qT3+3gs6i9Sx75Fy4Pk5jU5 8Avyfy86Knse/1Yh4BINVXiB5KaCDTurmBBz+k+HUIYUVJusCFPfg9FsMoaQg/WG E+1BMFr89BgZV2j3YPkjw0Y/aT7+WvUbWWVjdHwZQBP6ozAAK0GBQafS87DuLAfu 7+3gptS668NCV9Ierm53JXu+kd75HhS6CnkmCQqyqxcy+gFsU5nAMZDmNbf2SeSx brHTMXk54x6TjKjvOlEH5Ds2bQIDAQABo4IClTCCApEwHQYDVR0OBBYEFO5GdRRs 1hEZvhMZzcClvEW9jFLDMB8GA1UdIwQYMBaAFG/HCQb7pvRTlFIJGTLEX/pNhXK4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTRGRS9ENjExN0RGNkY2 RTkxMUVFQURCRkZCNTJDNEY5QUUwMi9iOGNKQnZ1bTlGT1VVZ2taTXNSZi1rMkZj cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I4Y0pCdnVtOUZPVVVna1pNc1JmLWsyRmNyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU0RkUvRDYxMTdERjZGNkU5MTFFRUFEQkZGQjUyQzRGOUFFMDIvQ0M5RUQ0RTIw MTU0MTFFRjgzMTQ0MzQxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADLFHIwDQYJKoZIhvcNAQELBQADggEBAGMoSogHag+2Dr+4 aST7ectfqenXku65IUKp6Bh1eXCTasjW56CUghJjB6A+Wk9ZqKcG4NKk4VVnk+22 8+L4DyZcesVtLG/IkBgDP433A9ToSG7baPsgRqKCFgTkRG5e6QP2V1AE6MvNM9C1 wbQ3m5rJduhZKLW3hIM3OuE7/hTrx2UzVn0rVq/xR7pIVfz0f7gSSblcXw74z72f MGB/RVMGjFKI35CMsYZRB9Cy68dy38WUrAsPkl8r2cENqDLQDa/TQMcyPRjrK6qA +kA74pvMp+UMiZVQjOeRyUtPNzkEsS3O7MvZLKtFfG0S+ZisM8E3DZcmj8uOioYB Xl7yRw8= -----END CERTIFICATE-----Generated at Wed Jun 4 00:01:47 2025 by rpki-client