$ rpki-client -vvf rpki.apnic.net/member_repository/A911CE77/EE510C1A01DD11EBA57DF855C4F9AE02/0136F4540FE611EC8DD2020EC4F9AE02.roa File: 0136F4540FE611EC8DD2020EC4F9AE02.roa (raw, json) Hash identifier: WC8AuK7TYs+z/0Hyjv01a9ewoUfIDmxVNMRICwUqD7c= Subject key identifier: EF:32:BC:C4:51:64:FD:57:8C:83:F7:18:C8:36:10:BD:D4:79:C2:BA Certificate issuer: /CN=A911CE77/serialNumber=58B6AE85C6E10730CF7567D722A346C49B522AA9 Certificate serial: 07C5 Authority key identifier: 58:B6:AE:85:C6:E1:07:30:CF:75:67:D7:22:A3:46:C4:9B:52:2A:A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WLauhcbhBzDPdWfXIqNGxJtSKqk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CE77/EE510C1A01DD11EBA57DF855C4F9AE02/0136F4540FE611EC8DD2020EC4F9AE02.roa Signing time: Sat 28 Jun 2025 21:18:05 +0000 ROA not before: Sat 28 Jun 2025 21:18:05 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 38298 IP address blocks: 202.144.176.0/21 maxlen: 21 202.144.176.0/24 maxlen: 24 202.144.177.0/24 maxlen: 24 202.144.178.0/24 maxlen: 24 202.144.179.0/24 maxlen: 24 202.144.180.0/24 maxlen: 24 202.144.181.0/24 maxlen: 24 202.144.182.0/24 maxlen: 24 202.144.183.0/24 maxlen: 24 2407:6c80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CE77/EE510C1A01DD11EBA57DF855C4F9AE02/WLauhcbhBzDPdWfXIqNGxJtSKqk.crl rsync://rpki.apnic.net/member_repository/A911CE77/EE510C1A01DD11EBA57DF855C4F9AE02/WLauhcbhBzDPdWfXIqNGxJtSKqk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WLauhcbhBzDPdWfXIqNGxJtSKqk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:04:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1989 (0x7c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CE77, serialNumber=58B6AE85C6E10730CF7567D722A346C49B522AA9 Validity Not Before: Jun 28 21:18:05 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=68605c0d-162e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:63:f2:f5:1a:23:64:0e:2f:fe:f4:b4:5e:5c: 6d:b0:97:cd:2c:6e:01:82:c0:9e:c8:48:c8:ec:99: fe:ec:ff:a1:37:aa:c9:c5:0f:b7:3b:be:d2:44:af: 3d:3e:52:9e:7a:6f:79:49:ad:88:f2:7b:7b:78:3f: c4:5d:ff:21:b6:ec:fb:b2:91:35:8c:02:a2:15:f4: 91:66:4e:f9:bc:20:5f:36:90:71:f2:a2:ad:72:18: fa:58:2d:9c:3e:81:24:25:79:74:f3:33:1d:88:23: bd:a5:14:0e:d1:6a:51:6b:88:39:a5:f5:b3:24:ac: 58:20:f5:8d:f8:c2:a9:28:33:76:71:f4:82:2b:15: f1:b8:0e:54:b5:5f:af:15:c8:c3:5f:26:d8:42:e6: 49:1d:a6:a9:67:6a:9b:41:a6:d8:a1:bc:8e:6d:a2: a0:b0:3a:fe:a7:f2:b9:9c:76:72:4e:67:b2:01:53: eb:cb:2c:3d:ab:73:75:32:25:4a:01:83:9e:2f:44: b9:02:4f:a8:f1:6b:67:06:bb:fc:3e:e0:a4:dc:2e: 1a:cf:e7:63:86:9b:f9:47:73:07:eb:b2:06:73:85: d0:69:d0:90:dc:30:3f:7a:40:36:3f:7f:11:b9:8d: 6e:8b:4e:77:f9:b3:4c:77:f7:83:8c:ae:b2:f4:96: 8f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:32:BC:C4:51:64:FD:57:8C:83:F7:18:C8:36:10:BD:D4:79:C2:BA X509v3 Authority Key Identifier: keyid:58:B6:AE:85:C6:E1:07:30:CF:75:67:D7:22:A3:46:C4:9B:52:2A:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CE77/EE510C1A01DD11EBA57DF855C4F9AE02/WLauhcbhBzDPdWfXIqNGxJtSKqk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WLauhcbhBzDPdWfXIqNGxJtSKqk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CE77/EE510C1A01DD11EBA57DF855C4F9AE02/0136F4540FE611EC8DD2020EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.144.176.0/21 IPv6: 2407:6c80::/32 Signature Algorithm: sha256WithRSAEncryption 73:a4:43:21:9d:87:ee:ff:1d:74:0d:fd:8c:88:b5:27:d7:0f: 0d:fa:53:01:f6:ad:db:d5:e6:13:a7:d0:f5:84:9f:57:32:4c: c9:b5:2f:8f:d8:b2:99:a9:bd:12:e0:b6:c3:27:ef:03:af:ee: da:bb:fb:a0:79:65:f1:b7:b7:23:43:7c:08:e3:74:7b:68:7c: c9:8c:d6:d4:85:a5:72:81:0a:2c:fc:9b:b3:57:b4:17:dd:de: 52:09:a6:5d:fa:76:a9:c9:1e:6e:9a:aa:b5:b9:9f:c7:50:a6: df:f7:2e:d2:56:62:b3:1f:39:38:94:f3:9d:cf:a3:92:f5:c9: f6:73:a8:9f:67:2d:12:02:6a:92:05:99:25:e5:e5:a5:1b:de: 85:e6:9c:05:3f:e7:57:9c:c5:cc:14:1b:2b:c8:57:ec:cb:5f: 48:b9:98:de:71:86:5b:6f:a5:43:bc:17:bd:3e:ea:31:16:00: f1:52:df:eb:4d:7b:76:38:d0:95:6d:29:ad:15:4e:fe:8a:46: 73:70:a0:e5:33:81:1d:e7:1a:1a:94:dd:d2:de:bb:9c:2d:ec: e0:28:7b:ea:e9:71:48:bd:5e:d6:96:62:c0:e4:48:5e:29:85: 72:fa:1a:1e:ba:d5:3e:aa:b7:be:dc:bc:fc:da:53:bb:ec:21: d1:0a:74:87 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICB8UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUNFNzcxMTAvBgNVBAUTKDU4QjZBRTg1QzZFMTA3MzBDRjc1NjdENzIyQTM0NkM0 OUI1MjJBQTkwHhcNMjUwNjI4MjExODA1WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODYwNWMwZC0xNjJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtGPy9RojZA4v/vS0XlxtsJfNLG4BgsCeyEjI7Jn+7P+hN6rJxQ+3O77SRK89 PlKeem95Sa2I8nt7eD/EXf8htuz7spE1jAKiFfSRZk75vCBfNpBx8qKtchj6WC2c PoEkJXl08zMdiCO9pRQO0WpRa4g5pfWzJKxYIPWN+MKpKDN2cfSCKxXxuA5UtV+v FcjDXybYQuZJHaapZ2qbQabYobyObaKgsDr+p/K5nHZyTmeyAVPryyw9q3N1MiVK AYOeL0S5Ak+o8WtnBrv8PuCk3C4az+djhpv5R3MH67IGc4XQadCQ3DA/ekA2P38R uY1ui053+bNMd/eDjK6y9JaPbQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFO8yvMRR ZP1XjIP3GMg2EL3UecK6MB8GA1UdIwQYMBaAFFi2roXG4Qcwz3Vn1yKjRsSbUiqp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0U3Ny9FRTUxMEMxQTAx REQxMUVCQTU3REY4NTVDNEY5QUUwMi9XTGF1aGNiaEJ6RFBkV2ZYSXFOR3hKdFNL cWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dMYXVoY2JoQnpEUGRXZlhJcU5HeEp0U0txay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUNFNzcvRUU1MTBDMUEwMUREMTFFQkE1N0RGODU1QzRGOUFFMDIvMDEzNkY0NTQw RkU2MTFFQzhERDIwMjBFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAPKkLAwDQQCAAIwBwMFACQHbIAwDQYJKoZIhvcNAQELBQAD ggEBAHOkQyGdh+7/HXQN/YyItSfXDw36UwH2rdvV5hOn0PWEn1cyTMm1L4/Yspmp vRLgtsMn7wOv7tq7+6B5ZfG3tyNDfAjjdHtofMmM1tSFpXKBCiz8m7NXtBfd3lIJ pl36dqnJHm6aqrW5n8dQpt/3LtJWYrMfOTiU853Po5L1yfZzqJ9nLRICapIFmSXl 5aUb3oXmnAU/51ecxcwUGyvIV+zLX0i5mN5xhltvpUO8F70+6jEWAPFS3+tNe3Y4 0JVtKa0VTv6KRnNwoOUzgR3nGhqU3dLeu5wt7OAoe+rpcUi9XtaWYsDkSF4phXL6 Gh661T6qt77cvPzaU7vsIdEKdIc= -----END CERTIFICATE-----Generated at Wed Nov 5 23:25:52 2025 by rpki-client