$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/B1A34CDCD53A11EDB199211BC4F9AE02.roa File: B1A34CDCD53A11EDB199211BC4F9AE02.roa (raw, json) Hash identifier: dLiidGD52YhEOtrfUqtoyoifYgO6MY+DC3Q5pFAWJhA= Subject key identifier: 0D:EC:47:B0:3E:DC:93:F1:69:6A:31:16:2D:6B:CD:60:F6:C8:A9:83 Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93 Certificate serial: 2885 Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/B1A34CDCD53A11EDB199211BC4F9AE02.roa Signing time: Sat 26 Jul 2025 15:54:05 +0000 ROA not before: Sat 26 Jul 2025 15:54:05 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 149440 IP address blocks: 45.249.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10373 (0x2885) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93 Validity Not Before: Jul 26 15:54:05 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=6884fa1d-4399 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6d:59:0f:80:28:27:f9:76:26:9b:dd:6d:d0: 92:ab:85:f4:fe:9d:c0:28:99:b2:50:15:4b:fe:9f: ad:21:0f:78:c0:8c:64:b7:57:7c:02:50:b5:56:f3: d2:e4:72:cf:11:19:ea:21:2e:68:9a:a4:69:d6:b6: 7b:5e:cd:9a:3c:87:7c:8a:75:51:09:92:2a:22:d7: 66:84:11:a9:1d:d4:fd:55:f9:bd:65:27:00:ba:87: 69:e7:10:7d:4c:57:45:93:2c:b2:70:ad:c4:43:88: ab:02:ce:5a:87:c9:36:28:c4:97:e0:cf:ca:9a:04: 02:b8:01:05:20:2c:b1:a8:a7:4d:04:af:e7:7a:f9: 0d:c5:2c:fa:13:23:33:2a:55:f2:b5:10:b3:28:74: ed:7a:8b:2a:61:f6:8f:c1:05:2f:d5:fd:f4:46:cb: cf:cc:38:d7:07:6d:52:20:71:cb:bb:82:ef:ac:18: 8e:9d:75:85:59:9a:44:39:d0:79:20:9d:ba:f5:98: 52:7a:7a:b2:be:6c:6d:1d:a7:58:a5:bd:9a:f0:23: 0f:ab:1f:b7:c8:88:7f:3b:a5:1e:f6:9b:51:2b:c5: 4c:e6:0c:e0:13:d8:5c:6e:4f:11:69:95:23:d4:6a: 19:a9:eb:66:8b:4c:4d:59:a1:bf:33:0c:4b:cd:9e: ec:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:EC:47:B0:3E:DC:93:F1:69:6A:31:16:2D:6B:CD:60:F6:C8:A9:83 X509v3 Authority Key Identifier: keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/B1A34CDCD53A11EDB199211BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.249.90.0/24 Signature Algorithm: sha256WithRSAEncryption 70:65:7b:2f:84:47:2c:3d:6c:dc:44:2d:7c:80:dc:87:e6:d0: 59:7a:1e:67:76:22:d6:8f:c0:90:cd:8c:43:bc:57:10:0f:8e: 96:57:ba:7c:b5:42:be:65:1b:5e:4d:a6:39:b9:89:d5:6b:31: d0:a1:9b:32:38:63:ed:51:9e:80:33:54:a0:84:17:11:f9:8d: a6:b4:6a:ff:55:ce:dc:12:e1:2a:bb:05:e3:21:2e:b0:50:8e: 77:2f:f9:f0:12:b5:60:17:0a:a4:1d:72:c4:56:ef:f3:1e:0e: 91:68:70:2d:b0:b9:a8:5c:a6:31:2e:09:89:26:2d:e8:9d:31: 90:ba:db:9a:9e:05:32:a9:21:a4:69:51:aa:ce:57:09:e3:cd: 05:99:41:1e:93:f6:73:ac:c2:8e:c5:ed:6d:be:31:50:30:ca: 81:7a:1b:bf:d1:52:fa:84:1f:69:15:a3:9f:3f:84:fe:8c:30: 5a:63:0f:f8:f0:34:d8:6a:7f:04:46:98:9d:ed:45:e0:35:05: 44:05:04:bd:fb:15:89:d9:6e:2f:7e:96:b4:c9:99:9e:83:9f: f8:5f:5c:0b:a3:eb:c4:9d:f1:c1:4d:fc:9a:de:75:6d:77:a7: 56:ca:20:38:9e:25:52:ce:ef:5c:1b:54:f3:13:1c:9e:92:b2: dc:27:c2:a0 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICKIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMyOEQxMTAvBgNVBAUTKDk5REZCNkJGNzk1MEU2QjQwMTk1QTU5MDI0RjRCNzUw ODYzRDNEOTMwHhcNMjUwNzI2MTU1NDA1WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODg0ZmExZC00Mzk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAum1ZD4AoJ/l2JpvdbdCSq4X0/p3AKJmyUBVL/p+tIQ94wIxkt1d8AlC1VvPS 5HLPERnqIS5omqRp1rZ7Xs2aPId8inVRCZIqItdmhBGpHdT9Vfm9ZScAuodp5xB9 TFdFkyyycK3EQ4irAs5ah8k2KMSX4M/KmgQCuAEFICyxqKdNBK/nevkNxSz6EyMz KlXytRCzKHTteosqYfaPwQUv1f30RsvPzDjXB21SIHHLu4LvrBiOnXWFWZpEOdB5 IJ269ZhSenqyvmxtHadYpb2a8CMPqx+3yIh/O6Ue9ptRK8VM5gzgE9hcbk8RaZUj 1GoZqetmi0xNWaG/MwxLzZ7sDQIDAQABo4IClTCCApEwHQYDVR0OBBYEFA3sR7A+ 3JPxaWoxFi1rzWD2yKmDMB8GA1UdIwQYMBaAFJnftr95UOa0AZWlkCT0t1CGPT2T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzI4RC9CREFCNjdGNjNB ODAxMUU1QUUzOTAxNTVDNEY5QUUwMi9tZC0ydjNsUTVyUUJsYVdRSlBTM1VJWTlQ Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21kLTJ2M2xRNXJRQmxhV1FKUFMzVUlZOVBaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUMyOEQvQkRBQjY3RjYzQTgwMTFFNUFFMzkwMTU1QzRGOUFFMDIvQjFBMzRDRENE NTNBMTFFREIxOTkyMTFCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAt+VowDQYJKoZIhvcNAQELBQADggEBAHBley+ERyw9bNxE LXyA3Ifm0Fl6Hmd2ItaPwJDNjEO8VxAPjpZXuny1Qr5lG15Npjm5idVrMdChmzI4 Y+1RnoAzVKCEFxH5jaa0av9VztwS4Sq7BeMhLrBQjncv+fAStWAXCqQdcsRW7/Me DpFocC2wuahcpjEuCYkmLeidMZC625qeBTKpIaRpUarOVwnjzQWZQR6T9nOswo7F 7W2+MVAwyoF6G7/RUvqEH2kVo58/hP6MMFpjD/jwNNhqfwRGmJ3tReA1BUQFBL37 FYnZbi9+lrTJmZ6Dn/hfXAuj68Sd8cFN/JredW13p1bKIDieJVLO71wbVPMTHJ6S stwnwqA= -----END CERTIFICATE-----Generated at Sat Aug 9 05:38:28 2025 by rpki-client