$ rpki-client -vvf rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/C591C650781311F080669C0EC4F9AE02.roa File: C591C650781311F080669C0EC4F9AE02.roa (raw, json) Hash identifier: WdqV1sxOirOUn9ZhlZhPe2M8qixZkx77pHk6AUB3MBw= Subject key identifier: 52:FD:45:9D:85:76:70:48:67:55:B7:E2:F6:00:57:D6:C3:D1:57:02 Certificate issuer: /CN=A911F5CA/serialNumber=B3D75AE1ECEEF6F92BD17D0C4B36518D5BE776F1 Certificate serial: FA Authority key identifier: B3:D7:5A:E1:EC:EE:F6:F9:2B:D1:7D:0C:4B:36:51:8D:5B:E7:76:F1 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/s9da4ezu9vkr0X0MSzZRjVvndvE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/C591C650781311F080669C0EC4F9AE02.roa Signing time: Wed 13 Aug 2025 07:04:36 +0000 ROA not before: Wed 13 Aug 2025 07:04:36 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 147023 IP address blocks: 78.138.14.0/24 maxlen: 24 78.138.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.crl rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/s9da4ezu9vkr0X0MSzZRjVvndvE.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 Aug 2025 07:43:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 250 (0xfa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F5CA, serialNumber=B3D75AE1ECEEF6F92BD17D0C4B36518D5BE776F1 Validity Not Before: Aug 13 07:04:36 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=689c3904-306c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:8b:30:3a:16:0d:0c:8f:28:2a:06:cc:29:e9: e3:59:17:7e:21:12:4f:89:21:ef:96:07:df:92:3b: f6:34:36:31:34:2b:75:be:be:40:1b:2a:e5:a0:c4: 67:3f:5f:42:31:47:ec:7b:8c:66:c0:d1:91:e2:fc: 93:9b:ae:f3:ad:14:f8:27:49:0d:f9:cb:c9:fa:d9: c9:81:9d:be:7a:64:46:73:45:e0:f0:7f:90:7c:c4: 47:c5:8a:d0:00:d4:4b:47:8b:c3:c8:d6:14:74:3c: 10:5e:d0:b6:d2:1f:fb:8d:d4:c7:94:90:9d:d6:29: 1f:0e:ae:d6:b6:ea:18:c5:ad:82:c0:0a:fd:dc:6a: 74:70:b9:e6:98:6e:34:2b:79:7d:c5:b6:b1:e8:de: e9:93:dd:43:62:1f:bc:5d:d4:72:64:d8:ba:58:ef: 98:66:0a:83:68:90:90:17:67:02:78:14:47:29:47: a6:da:5d:8b:f1:af:2e:3b:e0:d7:83:44:a6:27:8e: 15:e6:c4:8f:93:de:2b:d9:77:be:62:30:28:99:c1: 69:64:6e:3b:70:cf:6e:97:22:d7:c9:08:a0:9e:00: ca:d8:ad:8e:88:ad:c7:52:bf:63:b6:4e:cc:96:ce: 83:e8:43:0f:6a:98:5d:75:a1:92:ea:63:c3:da:3a: e9:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:FD:45:9D:85:76:70:48:67:55:B7:E2:F6:00:57:D6:C3:D1:57:02 X509v3 Authority Key Identifier: keyid:B3:D7:5A:E1:EC:EE:F6:F9:2B:D1:7D:0C:4B:36:51:8D:5B:E7:76:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/s9da4ezu9vkr0X0MSzZRjVvndvE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/C591C650781311F080669C0EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 78.138.14.0/23 Signature Algorithm: sha256WithRSAEncryption 3f:6d:75:b1:74:ca:a4:cb:62:37:97:c9:54:69:0b:90:5b:ec: 03:a6:82:7c:7b:5a:6b:e2:19:89:8a:7a:37:72:b9:23:8d:44: d6:7f:57:d9:26:e6:62:e5:b8:41:27:1d:14:93:9b:0c:e2:10: d1:a7:3a:7c:dc:85:01:2f:df:cb:ee:3a:cc:51:14:21:62:67: a4:44:3b:be:9e:56:b3:9a:63:1e:7c:e1:91:19:43:68:19:6e: 42:ed:e1:c9:66:00:f8:65:7e:a6:2a:b0:e0:6d:bf:e5:8a:99: 0b:63:bc:d9:92:01:10:ba:ae:61:d0:8a:90:52:b6:3f:65:42: de:01:fa:9e:72:42:65:c6:f7:f2:41:d5:a1:14:85:ee:7a:79: a9:0f:03:f9:d7:2c:d3:9d:6a:92:81:66:49:00:6d:0b:0f:39: db:e0:b4:57:94:14:36:61:da:d9:0a:7a:af:87:f9:d1:92:0c: 37:13:49:14:de:40:09:e2:1f:4d:76:18:79:53:63:d5:7d:a1: 4b:c2:6f:40:60:47:42:f5:8f:70:22:38:fd:40:50:8d:cd:d7: 16:b6:d6:47:eb:7c:6d:42:78:8e:b7:53:2c:f8:50:ac:0c:79: ff:64:f3:b5:cf:58:41:c8:63:cb:4c:96:73:ad:27:4c:83:8b: 28:03:b7:72 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY1Q0ExMTAvBgNVBAUTKEIzRDc1QUUxRUNFRUY2RjkyQkQxN0QwQzRCMzY1MThE NUJFNzc2RjEwHhcNMjUwODEzMDcwNDM2WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODljMzkwNC0zMDZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyoswOhYNDI8oKgbMKenjWRd+IRJPiSHvlgffkjv2NDYxNCt1vr5AGyrloMRn P19CMUfse4xmwNGR4vyTm67zrRT4J0kN+cvJ+tnJgZ2+emRGc0Xg8H+QfMRHxYrQ ANRLR4vDyNYUdDwQXtC20h/7jdTHlJCd1ikfDq7WtuoYxa2CwAr93Gp0cLnmmG40 K3l9xbax6N7pk91DYh+8XdRyZNi6WO+YZgqDaJCQF2cCeBRHKUem2l2L8a8uO+DX g0SmJ44V5sSPk94r2Xe+YjAomcFpZG47cM9ulyLXyQigngDK2K2OiK3HUr9jtk7M ls6D6EMPaphddaGS6mPD2jrpFQIDAQABo4IClTCCApEwHQYDVR0OBBYEFFL9RZ2F dnBIZ1W34vYAV9bD0VcCMB8GA1UdIwQYMBaAFLPXWuHs7vb5K9F9DEs2UY1b53bx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjVDQS85RTdDMkNFRTAy NEYxMUVGQUM2NUY1NzdDNEY5QUUwMi9zOWRhNGV6dTl2a3IwWDBNU3paUmpWdm5k dkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3M5ZGE0ZXp1OXZrcjBYME1TelpSalZ2bmR2RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUY1Q0EvOUU3QzJDRUUwMjRGMTFFRkFDNjVGNTc3QzRGOUFFMDIvQzU5MUM2NTA3 ODEzMTFGMDgwNjY5QzBFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFOig4wDQYJKoZIhvcNAQELBQADggEBAD9tdbF0yqTLYjeX yVRpC5Bb7AOmgnx7WmviGYmKejdyuSONRNZ/V9km5mLluEEnHRSTmwziENGnOnzc hQEv38vuOsxRFCFiZ6REO76eVrOaYx584ZEZQ2gZbkLt4clmAPhlfqYqsOBtv+WK mQtjvNmSARC6rmHQipBStj9lQt4B+p5yQmXG9/JB1aEUhe56eakPA/nXLNOdapKB ZkkAbQsPOdvgtFeUFDZh2tkKeq+H+dGSDDcTSRTeQAniH012GHlTY9V9oUvCb0Bg R0L1j3AiOP1AUI3N1xa21kfrfG1CeI63Uyz4UKwMef9k87XPWEHIY8tMlnOtJ0yD iygDt3I= -----END CERTIFICATE-----Generated at Fri Aug 15 00:18:59 2025 by rpki-client