$ rpki-client -vvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/D716391C53CC11F0BC106B7CC4F9AE02.roa File: D716391C53CC11F0BC106B7CC4F9AE02.roa (raw, json) Hash identifier: fGp7+a2cTDt6iU6qZETG9kBHo7VWr/Fa0iXNgDbBMJw= Subject key identifier: 66:70:B5:23:03:78:12:29:37:6A:23:A1:2F:8C:5A:0C:CC:E8:75:4A Certificate issuer: /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Certificate serial: 080C Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/D716391C53CC11F0BC106B7CC4F9AE02.roa Signing time: Fri 25 Jul 2025 04:41:22 +0000 ROA not before: Fri 25 Jul 2025 04:41:22 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 21859 IP address blocks: 36.255.193.0/24 maxlen: 24 36.255.194.0/24 maxlen: 24 43.229.152.0/24 maxlen: 24 150.107.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2060 (0x80c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B412, serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Validity Not Before: Jul 25 04:41:22 2025 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=68830af2-1629 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:9c:02:4e:19:89:8d:b5:4a:38:bf:90:c8:be: a8:1b:e7:86:a5:aa:c6:0a:82:b7:26:db:6b:b5:8d: 3f:b0:08:db:e3:82:a2:32:3b:09:40:b9:2f:ab:b6: 75:d8:f8:10:61:eb:73:44:71:32:1c:39:7b:ce:66: 2d:1c:fa:00:fc:12:8b:ff:36:f5:58:9a:27:50:e0: 37:13:c1:64:37:b7:78:be:79:50:22:e8:f2:3d:ba: a1:79:5d:60:2a:a1:97:19:e0:e7:d1:3a:59:11:45: 61:59:4f:51:db:07:c8:b4:2a:08:30:0f:a2:cd:38: 2c:a3:f1:50:62:0b:71:9c:8c:da:01:4b:3e:92:48: f3:56:bb:f5:69:a9:b6:5a:c4:5a:96:c8:93:f7:b0: 8d:bc:bd:c5:bc:54:29:bc:27:49:c9:f4:83:0b:c3: c2:7f:0b:21:31:e3:dc:99:cb:06:35:c9:d1:a7:40: 0b:54:85:a0:2b:04:6f:17:52:e8:7a:bd:6f:67:4b: e8:1f:63:73:90:e9:e2:52:88:e5:52:db:b8:04:d7: c2:89:75:80:22:eb:25:0e:05:87:9c:c7:f1:66:5b: 32:72:3a:5e:ff:3c:f6:c8:b8:fe:50:96:00:6e:58: 4c:c9:6f:b4:65:69:74:c3:20:1e:95:62:30:64:b9: 25:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:70:B5:23:03:78:12:29:37:6A:23:A1:2F:8C:5A:0C:CC:E8:75:4A X509v3 Authority Key Identifier: keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/D716391C53CC11F0BC106B7CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 36.255.193.0-36.255.194.255 43.229.152.0/24 150.107.0.0/24 Signature Algorithm: sha256WithRSAEncryption 56:0d:70:6b:ce:bf:fe:57:3d:cf:11:8a:4d:51:2d:f9:80:5c: bb:6d:51:5e:a5:8d:b2:11:99:1b:e2:3f:1f:4b:a8:61:f9:37: f0:f9:8e:1b:c4:8a:09:a5:70:a0:df:35:79:71:da:42:13:99: f5:d5:44:34:e8:db:84:f8:60:91:1a:25:79:bc:28:a3:04:5f: 77:95:0e:0f:ae:cc:b1:9e:0e:58:88:84:b5:13:7a:12:6a:ac: 3b:b8:26:4b:1d:25:3e:46:d0:f0:7e:12:6f:92:2a:f1:6a:77: 3f:32:d3:43:56:95:79:08:09:99:b3:60:71:e4:6f:a0:df:ba: 81:ac:86:7a:03:05:fd:9c:a4:96:14:7c:d4:91:79:26:2e:99: 85:54:af:f2:69:5e:de:49:96:15:b9:46:56:6c:da:8d:29:bf: 52:dc:c0:06:3c:a7:33:ba:78:29:8d:14:99:f1:4b:8a:18:48: 56:a8:87:d9:b9:0e:85:d9:56:b8:34:c0:d8:ae:60:1d:c4:bc: 61:d5:07:5e:e6:00:38:9f:47:e6:75:b9:8d:70:85:8a:9c:8b: 06:ef:ff:ea:5a:93:ae:3f:ad:04:86:57:10:8c:9f:e6:04:eb: d7:61:9a:82:a0:fa:04:54:6d:39:2e:a4:7d:65:be:1b:bd:df: 9a:5d:bb:8e -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgICCAwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI0MTIxMTAvBgNVBAUTKDg3M0Q1OTVBRjU1NjlDMjAyMzlGNTNERDgwRUIxMTc3 RDgwQjA5MzQwHhcNMjUwNzI1MDQ0MTIyWhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODgzMGFmMi0xNjI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA35wCThmJjbVKOL+QyL6oG+eGparGCoK3JttrtY0/sAjb44KiMjsJQLkvq7Z1 2PgQYetzRHEyHDl7zmYtHPoA/BKL/zb1WJonUOA3E8FkN7d4vnlQIujyPbqheV1g KqGXGeDn0TpZEUVhWU9R2wfItCoIMA+izTgso/FQYgtxnIzaAUs+kkjzVrv1aam2 WsRalsiT97CNvL3FvFQpvCdJyfSDC8PCfwshMePcmcsGNcnRp0ALVIWgKwRvF1Lo er1vZ0voH2NzkOniUojlUtu4BNfCiXWAIuslDgWHnMfxZlsycjpe/zz2yLj+UJYA blhMyW+0ZWl0wyAelWIwZLklRwIDAQABo4ICqTCCAqUwHQYDVR0OBBYEFGZwtSMD eBIpN2ojoS+MWgzM6HVKMB8GA1UdIwQYMBaAFIc9WVr1VpwgI59T3YDrEXfYCwk0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjQxMi9DMUVBMDMzQ0Qy RUExMUVCQTIwNkIxNzhDNEY5QUUwMi9oejFaV3ZWV25DQWpuMVBkZ09zUmQ5Z0xD VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h6MVpXdlZXbkNBam4xUGRnT3NSZDlnTENUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUI0MTIvQzFFQTAzM0NEMkVBMTFFQkEyMDZCMTc4QzRGOUFFMDIvRDcxNjM5MUM1 M0NDMTFGMEJDMTA2QjdDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMwYIKwYBBQUHAQcBAf8E JDAiMCAEAgABMBowDAMEACT/wQMEACT/wgMEACvlmAMEAJZrADANBgkqhkiG9w0B AQsFAAOCAQEAVg1wa86//lc9zxGKTVEt+YBcu21RXqWNshGZG+I/H0uoYfk38PmO G8SKCaVwoN81eXHaQhOZ9dVENOjbhPhgkRolebwoowRfd5UOD67MsZ4OWIiEtRN6 EmqsO7gmSx0lPkbQ8H4Sb5Iq8Wp3PzLTQ1aVeQgJmbNgceRvoN+6gayGegMF/Zyk lhR81JF5Ji6ZhVSv8mle3kmWFblGVmzajSm/UtzABjynM7p4KY0UmfFLihhIVqiH 2bkOhdlWuDTA2K5gHcS8YdUHXuYAOJ9H5nW5jXCFipyLBu//6lqTrj+tBIZXEIyf 5gTr12GagqD6BFRtOS6kfWW+G73fml27jg== -----END CERTIFICATE-----Generated at Sun Aug 10 05:43:38 2025 by rpki-client