$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/AAF07158AFEB11EEBCAD8169C4F9AE02.roa File: AAF07158AFEB11EEBCAD8169C4F9AE02.roa (raw, json) Hash identifier: YFq4tFQJezE/ALaFyMp+nnLfcNS/HtcXxXHVD43k3+0= Subject key identifier: 18:6E:80:9A:9F:02:C1:90:1B:13:97:B5:81:66:CA:61:C6:EC:50:2B Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93 Certificate serial: 2883 Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/AAF07158AFEB11EEBCAD8169C4F9AE02.roa Signing time: Sat 26 Jul 2025 15:54:02 +0000 ROA not before: Sat 26 Jul 2025 15:54:02 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 142594 IP address blocks: 45.249.88.0/24 maxlen: 24 45.249.89.0/24 maxlen: 24 103.217.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 15:46:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10371 (0x2883) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93 Validity Not Before: Jul 26 15:54:02 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=6884fa19-c54a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:15:57:1e:28:eb:a5:a8:d1:aa:ba:1a:60:3b: 0a:aa:28:a7:ac:cd:fd:0f:e2:c0:25:7c:90:a3:0b: 2e:45:64:e1:6e:5f:83:0d:6f:1c:c6:1b:02:a5:cd: 9f:13:ef:fb:1e:32:05:a4:6b:5b:4f:6a:a6:7f:91: 5d:80:dd:69:56:c2:ad:cd:c3:03:1e:8e:e1:98:33: 80:d9:8d:92:f8:70:08:8e:a8:14:fc:a4:c9:e0:d8: 9e:3e:13:ac:9b:86:4a:6f:e0:50:a3:6c:2d:58:5b: b8:ff:7a:ae:a1:e3:b4:06:a1:d2:59:fa:6a:66:38: 1b:85:80:cb:32:a3:e2:38:8f:eb:cb:44:ba:bf:1f: 9e:04:00:a2:0b:56:c4:19:69:5f:74:89:6e:3c:48: 40:1c:f9:34:09:54:22:86:04:9c:e6:a1:96:9e:1a: ac:56:ec:4d:f0:bb:8e:fb:fe:ec:46:2b:93:98:58: bf:97:98:06:18:c5:96:a3:be:b5:ba:fd:6e:4e:b6: 1a:cf:a8:1e:60:47:5c:8a:23:96:b3:08:de:96:b6: db:6f:2e:03:5a:be:ee:e7:0d:ef:e0:2f:da:28:98: 1c:bf:8a:b4:62:dc:52:73:8c:03:aa:91:6f:1a:1e: ad:88:c0:76:25:85:60:a8:37:8c:13:3c:7c:88:db: f9:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:6E:80:9A:9F:02:C1:90:1B:13:97:B5:81:66:CA:61:C6:EC:50:2B X509v3 Authority Key Identifier: keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/AAF07158AFEB11EEBCAD8169C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.249.88.0/23 103.217.254.0/24 Signature Algorithm: sha256WithRSAEncryption 59:6d:b6:59:2c:88:be:3b:b4:ab:46:6b:42:39:d8:83:04:4c: cf:0b:03:d0:b3:8b:da:a1:c6:32:af:d0:d5:68:89:b3:6e:b6: 4c:48:9b:24:eb:36:74:0e:48:34:ed:db:39:85:ce:39:d2:68: e9:0f:44:b8:ca:b8:d9:56:54:f8:09:e8:12:ae:86:19:9e:8a: ae:40:1e:9b:c7:1e:1c:23:dd:4a:74:39:0c:9f:ad:92:d7:38: d3:b0:9e:34:21:cf:4d:90:40:56:b2:ba:2d:89:41:4d:2c:1a: 7f:c6:ed:07:47:c6:ca:9d:ac:6d:87:08:6e:3f:1f:9f:a9:7a: 14:cf:27:50:0b:f3:e7:3e:1b:d4:ba:ca:6f:fc:b6:4b:cc:ec: ad:5b:f6:d1:02:de:8f:bd:f2:0b:e5:90:b4:2b:e0:2f:33:e9: 25:03:83:0c:26:e9:cc:a9:64:0c:74:9a:d7:16:6c:43:80:7d: ec:7f:a0:08:07:81:0b:5d:e2:0a:7a:a5:cb:86:32:d9:e4:a2: db:27:e8:39:c7:be:3a:98:dd:b1:eb:da:50:56:c2:ea:5c:c7: 8f:71:ee:c9:fd:cf:c0:00:75:15:ba:21:ff:ee:6d:ff:b9:9b: a3:0a:3e:2e:b8:8c:34:e7:cd:69:9b:0d:61:82:e0:78:ab:72: c4:75:87:3e -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICKIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMyOEQxMTAvBgNVBAUTKDk5REZCNkJGNzk1MEU2QjQwMTk1QTU5MDI0RjRCNzUw ODYzRDNEOTMwHhcNMjUwNzI2MTU1NDAyWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODg0ZmExOS1jNTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2RVXHijrpajRqroaYDsKqiinrM39D+LAJXyQowsuRWThbl+DDW8cxhsCpc2f E+/7HjIFpGtbT2qmf5FdgN1pVsKtzcMDHo7hmDOA2Y2S+HAIjqgU/KTJ4NiePhOs m4ZKb+BQo2wtWFu4/3quoeO0BqHSWfpqZjgbhYDLMqPiOI/ry0S6vx+eBACiC1bE GWlfdIluPEhAHPk0CVQihgSc5qGWnhqsVuxN8LuO+/7sRiuTmFi/l5gGGMWWo761 uv1uTrYaz6geYEdciiOWswjelrbbby4DWr7u5w3v4C/aKJgcv4q0YtxSc4wDqpFv Gh6tiMB2JYVgqDeMEzx8iNv5QwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFBhugJqf AsGQGxOXtYFmymHG7FArMB8GA1UdIwQYMBaAFJnftr95UOa0AZWlkCT0t1CGPT2T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzI4RC9CREFCNjdGNjNB ODAxMUU1QUUzOTAxNTVDNEY5QUUwMi9tZC0ydjNsUTVyUUJsYVdRSlBTM1VJWTlQ Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21kLTJ2M2xRNXJRQmxhV1FKUFMzVUlZOVBaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUMyOEQvQkRBQjY3RjYzQTgwMTFFNUFFMzkwMTU1QzRGOUFFMDIvQUFGMDcxNThB RkVCMTFFRUJDQUQ4MTY5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAEt+VgDBABn2f4wDQYJKoZIhvcNAQELBQADggEBAFlttlks iL47tKtGa0I52IMETM8LA9Czi9qhxjKv0NVoibNutkxImyTrNnQOSDTt2zmFzjnS aOkPRLjKuNlWVPgJ6BKuhhmeiq5AHpvHHhwj3Up0OQyfrZLXONOwnjQhz02QQFay ui2JQU0sGn/G7QdHxsqdrG2HCG4/H5+pehTPJ1AL8+c+G9S6ym/8tkvM7K1b9tEC 3o+98gvlkLQr4C8z6SUDgwwm6cypZAx0mtcWbEOAfex/oAgHgQtd4gp6pcuGMtnk otsn6DnHvjqY3bHr2lBWwupcx49x7sn9z8AAdRW6If/ubf+5m6MKPi64jDTnzWmb DWGC4HircsR1hz4= -----END CERTIFICATE-----Generated at Tue Nov 4 16:36:07 2025 by rpki-client