$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/2944DC90B57E11EFB31B630FC4F9AE02.roa File: 2944DC90B57E11EFB31B630FC4F9AE02.roa (raw, json) Hash identifier: hMlK5beSnbzjTvo8LjY0imDaQxKAnq81eWaRAt3rAlA= Subject key identifier: AC:18:21:C0:53:D3:A6:D3:9C:CE:6E:CE:35:19:01:B3:15:4C:8C:02 Certificate issuer: /CN=A91C0BDE/serialNumber=A4B50BECD8BBA285587128D5919283DBE1690918 Certificate serial: 0912 Authority key identifier: A4:B5:0B:EC:D8:BB:A2:85:58:71:28:D5:91:92:83:DB:E1:69:09:18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/2944DC90B57E11EFB31B630FC4F9AE02.roa Signing time: Fri 30 May 2025 20:57:08 +0000 ROA not before: Fri 30 May 2025 20:57:08 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 133866 IP address blocks: 114.129.10.0/24 maxlen: 24 114.129.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.crl rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 20:13:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2322 (0x912) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0BDE, serialNumber=A4B50BECD8BBA285587128D5919283DBE1690918 Validity Not Before: May 30 20:57:08 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=683a1ba4-06f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:eb:05:a5:04:dc:c7:ee:c1:3d:75:66:4c:6f: 21:44:15:b8:87:10:5d:40:d1:28:40:88:83:13:cb: 09:1c:f5:da:ca:c0:a0:71:7c:93:26:33:6f:d0:a0: 92:f3:93:51:6a:ab:24:24:65:2c:16:c5:34:10:9e: f8:f1:e6:47:ee:3d:22:9e:2f:8f:2f:de:40:88:2b: 11:a4:b4:f0:c6:c0:c1:1b:d7:70:f7:fa:6f:c4:f2: d7:e6:42:b3:cc:62:7e:bd:b5:b4:06:ee:7b:27:57: 1a:54:15:99:75:69:dd:25:c8:90:76:7f:03:3f:8c: a0:f5:4a:b3:bd:e7:1e:81:bf:db:51:29:66:32:c2: 52:53:85:25:94:b2:56:e0:8a:e3:76:6f:1c:42:bc: fd:64:53:fa:a7:a5:ce:53:39:3b:31:d1:c5:a2:c8: 78:9b:78:52:87:e0:d9:12:63:05:7f:74:9a:1a:7f: 7a:9a:92:31:0e:3e:cf:a7:07:46:0c:66:8e:b0:49: f7:91:70:c7:e9:49:5d:c8:37:09:56:9d:b7:ce:ec: c5:32:90:ee:b0:2d:1c:c5:5c:0a:52:a3:b4:1c:83: 9c:0f:1c:dc:1b:76:8a:82:f8:fc:d3:37:57:32:eb: 37:47:cb:b7:01:55:86:bd:ea:4f:13:07:34:d3:84: 65:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:18:21:C0:53:D3:A6:D3:9C:CE:6E:CE:35:19:01:B3:15:4C:8C:02 X509v3 Authority Key Identifier: keyid:A4:B5:0B:EC:D8:BB:A2:85:58:71:28:D5:91:92:83:DB:E1:69:09:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/2944DC90B57E11EFB31B630FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 114.129.10.0/23 Signature Algorithm: sha256WithRSAEncryption d1:f1:c8:ae:78:ff:d3:1f:0c:1d:98:74:5f:3f:a2:ac:78:b4: 00:88:7e:97:dc:40:0a:e2:56:74:b0:d7:86:8d:d3:c3:59:2f: b9:65:e8:f3:b4:b2:37:3a:08:a5:6a:56:cd:1d:44:05:64:71: e3:6e:60:01:60:3f:b3:45:7e:f5:6c:5f:a3:36:31:c7:e7:07: d4:72:f2:1b:88:b3:4d:d6:05:2e:f3:19:57:ce:ae:52:fd:5a: 12:bc:a3:2a:3c:cd:12:4e:21:44:33:7b:e4:86:9a:28:8f:bc: 80:32:b0:b9:ac:4f:db:36:67:a6:05:3e:df:d9:b1:72:23:27: d8:1f:0a:23:97:06:2d:b0:05:6f:a1:c1:85:95:c1:83:c3:5b: 7b:f9:44:27:c5:c0:d2:3d:9c:18:77:1f:d0:a0:76:df:03:06: 7c:da:7e:57:84:95:31:7f:cb:2e:02:02:cc:9a:a0:84:e3:7a: e8:8b:cc:25:e4:ff:91:58:66:bf:f3:62:1e:63:f1:95:40:8e: 82:70:bf:7c:3e:9e:44:01:8a:77:af:32:c5:05:f7:e0:94:92: 32:9b:7f:4f:f2:a0:b0:16:6c:41:34:5f:d6:b4:18:ae:62:29: a1:48:47:ea:7e:4e:d1:5f:d4:cd:a1:46:3e:f1:ec:8c:94:8d: a2:41:82:29 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCRIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBCREUxMTAvBgNVBAUTKEE0QjUwQkVDRDhCQkEyODU1ODcxMjhENTkxOTI4M0RC RTE2OTA5MTgwHhcNMjUwNTMwMjA1NzA4WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODNhMWJhNC0wNmY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwusFpQTcx+7BPXVmTG8hRBW4hxBdQNEoQIiDE8sJHPXaysCgcXyTJjNv0KCS 85NRaqskJGUsFsU0EJ748eZH7j0ini+PL95AiCsRpLTwxsDBG9dw9/pvxPLX5kKz zGJ+vbW0Bu57J1caVBWZdWndJciQdn8DP4yg9Uqzvecegb/bUSlmMsJSU4UllLJW 4Irjdm8cQrz9ZFP6p6XOUzk7MdHFosh4m3hSh+DZEmMFf3SaGn96mpIxDj7PpwdG DGaOsEn3kXDH6UldyDcJVp23zuzFMpDusC0cxVwKUqO0HIOcDxzcG3aKgvj80zdX Mus3R8u3AVWGvepPEwc004RlvwIDAQABo4IClTCCApEwHQYDVR0OBBYEFKwYIcBT 06bTnM5uzjUZAbMVTIwCMB8GA1UdIwQYMBaAFKS1C+zYu6KFWHEo1ZGSg9vhaQkY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEJERS83RTVBQzNFMDg5 NzExMUVBOTI0MDJBMEFDNEY5QUUwMi9wTFVMN05pN29vVlljU2pWa1pLRDItRnBD UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BMVUw3Tmk3b29WWWNTalZrWktEMi1GcENSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzBCREUvN0U1QUMzRTA4OTcxMTFFQTkyNDAyQTBBQzRGOUFFMDIvMjk0NERDOTBC NTdFMTFFRkIzMUI2MzBGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFygQowDQYJKoZIhvcNAQELBQADggEBANHxyK54/9MfDB2Y dF8/oqx4tACIfpfcQAriVnSw14aN08NZL7ll6PO0sjc6CKVqVs0dRAVkceNuYAFg P7NFfvVsX6M2McfnB9Ry8huIs03WBS7zGVfOrlL9WhK8oyo8zRJOIUQze+SGmiiP vIAysLmsT9s2Z6YFPt/ZsXIjJ9gfCiOXBi2wBW+hwYWVwYPDW3v5RCfFwNI9nBh3 H9Cgdt8DBnzafleElTF/yy4CAsyaoITjeuiLzCXk/5FYZr/zYh5j8ZVAjoJwv3w+ nkQBinevMsUF9+CUkjKbf0/yoLAWbEE0X9a0GK5iKaFIR+p+TtFf1M2hRj7x7IyU jaJBgik= -----END CERTIFICATE-----Generated at Wed Jun 4 00:02:25 2025 by rpki-client