$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/379554D48E1211EFA0811E85C4F9AE02.roa File: 379554D48E1211EFA0811E85C4F9AE02.roa (raw, json) Hash identifier: ubntMGEtsmJDayuN/fPiGesqsNLnJAjuBP/Ai5jrH54= Subject key identifier: C9:53:D4:E1:E8:70:24:15:84:EC:1B:21:E5:71:AA:8C:BD:91:CF:F4 Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93 Certificate serial: 286E Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/379554D48E1211EFA0811E85C4F9AE02.roa Signing time: Sat 26 Jul 2025 15:53:42 +0000 ROA not before: Sat 26 Jul 2025 15:53:42 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 137552 IP address blocks: 45.249.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10350 (0x286e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93 Validity Not Before: Jul 26 15:53:42 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=6884fa05-0dbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:31:c1:7b:0e:ec:cd:fe:cb:29:10:e8:68:95: 6a:a2:f5:9b:94:5b:f2:83:02:83:05:57:fa:f1:23: e9:64:03:b9:ce:60:72:f3:78:ce:bc:db:a7:31:83: da:24:91:c0:28:58:76:7a:da:5c:81:e0:1b:6d:c6: 21:e9:c2:25:4b:e0:a0:01:62:37:50:f2:c6:e5:6e: 58:c9:a0:4c:24:35:95:59:19:43:ed:60:6c:d9:c2: 60:c4:61:2a:80:28:ca:ee:20:e7:e7:08:ff:2b:5f: f3:38:a1:1a:3d:c2:82:ad:c7:68:b3:f0:63:02:c8: a8:dc:a6:f9:72:b0:8d:c3:1d:9b:5e:dd:ac:fc:fc: 86:fc:56:f0:c6:b9:ce:9e:d0:37:74:d4:05:1f:43: 30:95:b8:91:47:22:5b:33:17:60:7f:11:63:5c:0b: cb:33:c1:09:b6:ac:97:c4:08:57:3b:2e:6a:e1:06: 8a:a3:65:1f:38:c2:75:9f:60:0a:84:1a:de:c3:17: 0b:0f:c8:ce:cc:6b:aa:35:57:ef:e5:2f:75:68:32: 3e:a7:bc:c3:5d:4d:bc:7b:0f:ee:f8:ed:3f:07:06: c0:a7:33:ea:44:11:14:3b:9c:72:f4:6d:83:c0:ee: 5e:87:32:0b:83:d6:91:7c:df:fd:1b:99:87:27:4f: b4:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:53:D4:E1:E8:70:24:15:84:EC:1B:21:E5:71:AA:8C:BD:91:CF:F4 X509v3 Authority Key Identifier: keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/379554D48E1211EFA0811E85C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.249.91.0/24 Signature Algorithm: sha256WithRSAEncryption 46:04:7d:ff:47:a4:28:5c:9c:28:42:d3:cf:3f:d2:93:aa:d3: f9:cf:76:5a:37:0e:2f:18:29:4f:e9:41:5a:73:80:09:6f:f2: 84:df:6a:24:f6:20:11:7f:58:ec:2c:68:e7:a7:9c:e6:f9:00: 88:ca:22:63:c0:3d:db:21:4c:d5:fa:4f:b6:79:b8:8e:34:0d: 2b:df:d9:44:fc:d1:1c:d5:fc:ae:3f:46:b5:62:38:52:ca:5d: dc:a7:56:ba:f6:d1:8d:a4:68:3e:33:8d:86:47:a7:a0:9f:12: 80:f7:ab:1a:ff:8f:bb:cf:19:57:19:31:2d:65:67:11:f6:29: e7:71:54:dc:5b:e9:ec:90:9f:d5:d5:e8:a1:11:b4:56:bf:b3: 39:13:9f:b3:7f:5f:64:88:e7:11:8e:88:f0:c2:b4:e8:4a:25: b3:b8:50:74:7e:72:b2:31:3d:6a:38:48:c9:da:19:c9:40:14: 68:6f:e8:8b:3e:9b:54:0d:44:db:02:d6:91:a5:10:f1:ff:42: c3:d9:ba:e3:6c:25:8d:39:3f:43:66:53:c1:cc:41:e6:bd:e0: cb:37:3d:fe:51:8d:f6:7e:91:7a:9a:a7:6f:ce:a0:22:c5:73: a4:51:8f:b2:73:d0:9c:1b:ea:dd:83:97:ef:ed:53:ac:34:7d: 9f:9b:1e:d1 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICKG4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMyOEQxMTAvBgNVBAUTKDk5REZCNkJGNzk1MEU2QjQwMTk1QTU5MDI0RjRCNzUw ODYzRDNEOTMwHhcNMjUwNzI2MTU1MzQyWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODg0ZmEwNS0wZGJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvzHBew7szf7LKRDoaJVqovWblFvygwKDBVf68SPpZAO5zmBy83jOvNunMYPa JJHAKFh2etpcgeAbbcYh6cIlS+CgAWI3UPLG5W5YyaBMJDWVWRlD7WBs2cJgxGEq gCjK7iDn5wj/K1/zOKEaPcKCrcdos/BjAsio3Kb5crCNwx2bXt2s/PyG/FbwxrnO ntA3dNQFH0MwlbiRRyJbMxdgfxFjXAvLM8EJtqyXxAhXOy5q4QaKo2UfOMJ1n2AK hBrewxcLD8jOzGuqNVfv5S91aDI+p7zDXU28ew/u+O0/BwbApzPqRBEUO5xy9G2D wO5ehzILg9aRfN/9G5mHJ0+0AwIDAQABo4IClTCCApEwHQYDVR0OBBYEFMlT1OHo cCQVhOwbIeVxqoy9kc/0MB8GA1UdIwQYMBaAFJnftr95UOa0AZWlkCT0t1CGPT2T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzI4RC9CREFCNjdGNjNB ODAxMUU1QUUzOTAxNTVDNEY5QUUwMi9tZC0ydjNsUTVyUUJsYVdRSlBTM1VJWTlQ Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21kLTJ2M2xRNXJRQmxhV1FKUFMzVUlZOVBaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUMyOEQvQkRBQjY3RjYzQTgwMTFFNUFFMzkwMTU1QzRGOUFFMDIvMzc5NTU0RDQ4 RTEyMTFFRkEwODExRTg1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAt+VswDQYJKoZIhvcNAQELBQADggEBAEYEff9HpChcnChC 088/0pOq0/nPdlo3Di8YKU/pQVpzgAlv8oTfaiT2IBF/WOwsaOennOb5AIjKImPA PdshTNX6T7Z5uI40DSvf2UT80RzV/K4/RrViOFLKXdynVrr20Y2kaD4zjYZHp6Cf EoD3qxr/j7vPGVcZMS1lZxH2KedxVNxb6eyQn9XV6KERtFa/szkTn7N/X2SI5xGO iPDCtOhKJbO4UHR+crIxPWo4SMnaGclAFGhv6Is+m1QNRNsC1pGlEPH/QsPZuuNs JY05P0NmU8HMQea94Ms3Pf5RjfZ+kXqap2/OoCLFc6RRj7Jz0Jwb6t2Dl+/tU6w0 fZ+bHtE= -----END CERTIFICATE-----Generated at Sun Aug 10 04:46:11 2025 by rpki-client