$ rpki-client -vvf rpki.apnic.net/member_repository/A91E772F/1E77E732E2EB11EEAD6E9A0BC4F9AE02/82743A06E2EB11EEBAC73D0CC4F9AE02.roa File: 82743A06E2EB11EEBAC73D0CC4F9AE02.roa (raw, json) Hash identifier: DySwA8C4czN5vHz0fLCB/xltzHfCwXmq3TdjlNfOwqE= Subject key identifier: 17:AA:39:CA:EE:BF:A8:9C:ED:1C:C5:3F:75:21:08:2D:31:CD:18:4F Certificate issuer: /CN=A91E772F/serialNumber=1BF976EFEAB2312EA2DAC86B98A398CF0C5BD6F0 Certificate serial: D4 Authority key identifier: 1B:F9:76:EF:EA:B2:31:2E:A2:DA:C8:6B:98:A3:98:CF:0C:5B:D6:F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_l27-qyMS6i2shrmKOYzwxb1vA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E772F/1E77E732E2EB11EEAD6E9A0BC4F9AE02/82743A06E2EB11EEBAC73D0CC4F9AE02.roa Signing time: Thu 01 May 2025 04:41:43 +0000 ROA not before: Thu 01 May 2025 04:41:43 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 152646 IP address blocks: 202.50.154.0/24 maxlen: 24 202.50.155.0/24 maxlen: 24 2001:df3:8d40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E772F/1E77E732E2EB11EEAD6E9A0BC4F9AE02/G_l27-qyMS6i2shrmKOYzwxb1vA.crl rsync://rpki.apnic.net/member_repository/A91E772F/1E77E732E2EB11EEAD6E9A0BC4F9AE02/G_l27-qyMS6i2shrmKOYzwxb1vA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_l27-qyMS6i2shrmKOYzwxb1vA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 04:47:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 212 (0xd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E772F, serialNumber=1BF976EFEAB2312EA2DAC86B98A398CF0C5BD6F0 Validity Not Before: May 1 04:41:43 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6812fb87-8c3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:09:c8:18:8f:19:fe:2b:bf:a4:a6:dd:1e:ca: 35:c6:cc:28:70:99:e6:29:27:cb:a2:ce:64:5a:f1: 2f:92:12:be:ec:0b:44:66:d2:f1:a9:69:27:d5:71: f1:7e:db:1f:ea:94:75:15:52:9f:cd:f3:48:1d:b9: 32:0d:57:f4:90:f2:32:70:14:01:43:1e:e4:13:94: 54:04:cc:67:79:07:a7:35:28:12:51:ab:c9:95:05: b1:7e:60:0e:a3:a8:37:a1:1a:d3:01:99:5a:43:de: d6:f8:94:e6:b0:aa:49:f4:9c:ef:b0:70:1e:ab:58: 34:a1:13:58:25:87:b5:8a:33:45:52:9d:8f:df:41: a2:7d:57:e6:b3:76:69:cf:8d:c4:77:71:7e:31:9c: 54:28:d9:5c:85:44:6b:d8:20:bf:c0:3d:a7:eb:15: c9:41:1f:3d:43:7d:34:30:dc:71:02:ec:f2:27:d8: 14:19:21:01:81:90:9c:3b:c3:2a:05:98:ef:84:45: 8e:a2:c2:87:0a:5d:de:91:8b:01:de:12:ea:e0:b2: a9:a2:62:f2:7e:6e:76:fd:1b:bd:9d:d8:fd:2a:2e: 13:da:7a:2e:a3:7e:d1:0c:b6:ca:5a:52:2f:86:46: 82:e7:ff:3a:df:24:e4:c0:c7:ba:a8:0f:67:d2:0d: 3f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:AA:39:CA:EE:BF:A8:9C:ED:1C:C5:3F:75:21:08:2D:31:CD:18:4F X509v3 Authority Key Identifier: keyid:1B:F9:76:EF:EA:B2:31:2E:A2:DA:C8:6B:98:A3:98:CF:0C:5B:D6:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E772F/1E77E732E2EB11EEAD6E9A0BC4F9AE02/G_l27-qyMS6i2shrmKOYzwxb1vA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_l27-qyMS6i2shrmKOYzwxb1vA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E772F/1E77E732E2EB11EEAD6E9A0BC4F9AE02/82743A06E2EB11EEBAC73D0CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.50.154.0/23 IPv6: 2001:df3:8d40::/48 Signature Algorithm: sha256WithRSAEncryption 96:50:61:02:2d:24:13:f8:60:2e:24:4f:24:3d:fd:bf:2f:34: a4:c3:8d:0d:d5:91:c0:b6:5e:25:c8:f4:7a:9a:32:c3:58:7e: fe:ae:2a:36:21:75:51:7e:69:34:0b:c5:ee:85:a0:80:80:48: 04:34:dd:a8:96:97:d9:81:5f:f1:80:98:c8:33:d7:d5:4f:61: aa:21:7b:d9:28:1e:2f:90:98:1a:a2:ed:76:5c:df:cf:d9:7c: 38:e0:75:35:bc:6d:91:48:e6:f1:3e:a2:3f:f7:ad:e4:69:a7: 59:b0:73:4a:8b:59:23:33:4e:8b:60:7d:05:4a:d9:aa:f9:7f: 2e:6b:d8:63:c1:66:29:03:ad:12:a5:50:02:27:8b:e9:fe:19: 8c:3a:81:fb:45:ca:e8:36:d8:f6:c6:00:a7:a4:7d:ee:0e:71: a8:63:ba:6d:e9:30:61:a7:57:e7:55:a6:4d:b5:93:f4:04:b0: 54:77:ed:b4:c8:ac:52:f7:41:6a:91:98:d6:5e:6c:a0:b1:32: 12:c8:76:cc:d6:ca:79:85:08:7d:17:30:6b:3b:27:48:1b:fc: 3b:30:6c:e0:d1:be:e6:80:0d:a3:ab:c7:0b:56:6f:e7:bd:ea: f2:2c:a7:71:0b:e5:0c:8a:e4:47:5d:3a:39:68:24:00:6d:b5: 40:39:3f:d2 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICANQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc3MkYxMTAvBgNVBAUTKDFCRjk3NkVGRUFCMjMxMkVBMkRBQzg2Qjk4QTM5OENG MEM1QkQ2RjAwHhcNMjUwNTAxMDQ0MTQzWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODEyZmI4Ny04YzNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqAnIGI8Z/iu/pKbdHso1xswocJnmKSfLos5kWvEvkhK+7AtEZtLxqWkn1XHx ftsf6pR1FVKfzfNIHbkyDVf0kPIycBQBQx7kE5RUBMxneQenNSgSUavJlQWxfmAO o6g3oRrTAZlaQ97W+JTmsKpJ9JzvsHAeq1g0oRNYJYe1ijNFUp2P30GifVfms3Zp z43Ed3F+MZxUKNlchURr2CC/wD2n6xXJQR89Q300MNxxAuzyJ9gUGSEBgZCcO8Mq BZjvhEWOosKHCl3ekYsB3hLq4LKpomLyfm52/Ru9ndj9Ki4T2nouo37RDLbKWlIv hkaC5/863yTkwMe6qA9n0g0/jwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFBeqOcru v6ic7RzFP3UhCC0xzRhPMB8GA1UdIwQYMBaAFBv5du/qsjEuotrIa5ijmM8MW9bw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzcyRi8xRTc3RTczMkUy RUIxMUVFQUQ2RTlBMEJDNEY5QUUwMi9HX2wyNy1xeU1TNmkyc2hybUtPWXp3eGIx dkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dfbDI3LXF5TVM2aTJzaHJtS09Zend4YjF2QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTc3MkYvMUU3N0U3MzJFMkVCMTFFRUFENkU5QTBCQzRGOUFFMDIvODI3NDNBMDZF MkVCMTFFRUJBQzczRDBDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAHKMpowDwQCAAIwCQMHACABDfONQDANBgkqhkiG9w0BAQsF AAOCAQEAllBhAi0kE/hgLiRPJD39vy80pMONDdWRwLZeJcj0epoyw1h+/q4qNiF1 UX5pNAvF7oWggIBIBDTdqJaX2YFf8YCYyDPX1U9hqiF72SgeL5CYGqLtdlzfz9l8 OOB1NbxtkUjm8T6iP/et5GmnWbBzSotZIzNOi2B9BUrZqvl/LmvYY8FmKQOtEqVQ AieL6f4ZjDqB+0XK6DbY9sYAp6R97g5xqGO6bekwYadX51WmTbWT9ASwVHfttMis UvdBapGY1l5soLEyEsh2zNbKeYUIfRcwazsnSBv8OzBs4NG+5oANo6vHC1Zv573q 8iyncQvlDIrkR106OWgkAG21QDk/0g== -----END CERTIFICATE-----Generated at Thu Jun 5 18:34:10 2025 by rpki-client