$ rpki-client -vvf rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/CD145D246E4E11EDBE02B065C4F9AE02.roa File: CD145D246E4E11EDBE02B065C4F9AE02.roa (raw, json) Hash identifier: HQ+n/zvxBXsyHktY7VZtlLogGsEgUPieMT07w6OWlaY= Subject key identifier: 6F:72:14:54:80:38:47:E9:A7:A4:C4:CE:62:31:6C:0C:15:F4:85:78 Certificate issuer: /CN=A9122219/serialNumber=D0D2F45A46D26766014B786019A09A8334873DAD Certificate serial: 0B4C Authority key identifier: D0:D2:F4:5A:46:D2:67:66:01:4B:78:60:19:A0:9A:83:34:87:3D:AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NL0WkbSZ2YBS3hgGaCagzSHPa0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/CD145D246E4E11EDBE02B065C4F9AE02.roa Signing time: Wed 16 Jul 2025 19:29:30 +0000 ROA not before: Wed 16 Jul 2025 19:29:30 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 38744 IP address blocks: 49.0.32.0/20 maxlen: 24 49.0.48.0/21 maxlen: 24 117.58.240.0/21 maxlen: 24 2404:b580::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.crl rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NL0WkbSZ2YBS3hgGaCagzSHPa0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 17 Aug 2025 19:08:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2892 (0xb4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122219, serialNumber=D0D2F45A46D26766014B786019A09A8334873DAD Validity Not Before: Jul 16 19:29:30 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=6877fd99-3284 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:4c:26:57:c7:00:53:df:bd:99:96:03:bd:f4: 81:63:eb:96:2d:22:82:2a:b7:58:55:f0:45:60:5c: cf:8d:d3:5d:12:fa:93:62:cd:a0:61:da:f8:1f:41: d3:0a:9b:6b:d2:cf:92:77:43:48:83:a4:a4:e9:18: 57:13:25:62:61:7f:43:c4:91:f3:4c:55:2a:8b:06: 3d:49:7c:5c:83:e4:d6:45:3c:da:b4:46:5e:32:1b: 7f:27:61:22:8a:42:68:9b:63:bd:cb:ff:2b:ca:e6: 78:79:45:b9:11:1e:27:f2:6d:ec:c8:b8:56:06:e3: 5b:d4:54:24:1d:65:66:a6:be:44:a4:2e:0a:1c:af: f6:4c:2a:ce:60:8e:db:74:21:c1:ab:10:bb:f4:9c: 8b:08:49:8b:90:8d:8c:1d:2a:16:92:eb:ba:a3:e6: 22:d8:5c:1c:49:51:af:05:41:2f:cb:fe:b8:62:f4: 1b:12:ae:47:ab:02:37:90:74:90:d7:7e:47:29:d3: 8f:02:63:ac:28:2d:94:c8:58:0d:80:db:e3:32:54: 6c:59:92:b6:14:fa:6e:19:d1:a5:96:92:5b:1c:22: e9:3e:52:1b:bd:fb:d7:f3:03:0a:c1:3a:20:4a:d9: 6b:cf:5d:c4:e5:03:08:9d:b0:c8:8c:ab:85:fb:af: df:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:72:14:54:80:38:47:E9:A7:A4:C4:CE:62:31:6C:0C:15:F4:85:78 X509v3 Authority Key Identifier: keyid:D0:D2:F4:5A:46:D2:67:66:01:4B:78:60:19:A0:9A:83:34:87:3D:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NL0WkbSZ2YBS3hgGaCagzSHPa0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/CD145D246E4E11EDBE02B065C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.0.32.0-49.0.55.255 117.58.240.0/21 IPv6: 2404:b580::/32 Signature Algorithm: sha256WithRSAEncryption 70:e5:23:6e:b6:76:dd:fd:c1:0d:b7:d9:cb:c2:a0:51:1b:73: e5:a0:09:2e:2a:67:b4:d4:1a:4c:3d:44:76:98:46:55:0d:d8: 8f:b8:c6:0d:b2:c1:39:b8:17:a9:4e:a0:bc:20:49:5c:8f:4f: df:0b:e7:6b:34:7b:e6:0b:7e:fc:23:14:78:e8:40:01:c0:fc: 2a:dc:41:36:65:3c:c0:70:aa:ef:13:29:99:60:ac:4e:3b:9b: 96:59:af:93:90:84:57:ff:c6:ae:44:30:1d:29:44:cc:52:49: af:9d:62:e0:80:17:5b:d6:73:58:f8:8b:5b:17:1b:13:ec:57: 4f:c0:56:16:e1:d1:19:48:8b:b7:68:c1:8e:d2:6c:8d:04:6b: e4:18:01:42:7f:c0:e1:1f:ad:40:e8:45:86:12:9c:79:cd:88: 8d:d8:52:96:fe:dd:98:22:e3:43:5c:83:38:08:9c:b5:ce:96: 2d:c3:3e:dc:13:7d:b3:2d:41:f9:f2:7a:f4:7e:02:5e:20:20: 43:f0:a3:6f:a0:19:af:39:7e:16:cc:63:91:52:59:6a:5e:38: 57:0e:31:38:3a:29:53:7b:0b:5f:7a:5f:9d:f0:5d:31:48:79: 43:94:31:62:22:a1:95:2a:ae:fc:bd:8a:82:80:ed:27:c2:0a: 47:2f:50:02 -----BEGIN CERTIFICATE----- MIIFjjCCBHagAwIBAgICC0wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjIyMTkxMTAvBgNVBAUTKEQwRDJGNDVBNDZEMjY3NjYwMTRCNzg2MDE5QTA5QTgz MzQ4NzNEQUQwHhcNMjUwNzE2MTkyOTMwWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODc3ZmQ5OS0zMjg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAokwmV8cAU9+9mZYDvfSBY+uWLSKCKrdYVfBFYFzPjdNdEvqTYs2gYdr4H0HT Cptr0s+Sd0NIg6Sk6RhXEyViYX9DxJHzTFUqiwY9SXxcg+TWRTzatEZeMht/J2Ei ikJom2O9y/8ryuZ4eUW5ER4n8m3syLhWBuNb1FQkHWVmpr5EpC4KHK/2TCrOYI7b dCHBqxC79JyLCEmLkI2MHSoWkuu6o+Yi2FwcSVGvBUEvy/64YvQbEq5HqwI3kHSQ 135HKdOPAmOsKC2UyFgNgNvjMlRsWZK2FPpuGdGllpJbHCLpPlIbvfvX8wMKwTog Stlrz13E5QMInbDIjKuF+6/fTwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFG9yFFSA OEfpp6TEzmIxbAwV9IV4MB8GA1UdIwQYMBaAFNDS9FpG0mdmAUt4YBmgmoM0hz2t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjIxOS84MkZFODlDQzND MzcxMUVBODczRTE0NjBDNEY5QUUwMi8wTkwwV2tiU1oyWUJTM2hnR2FDYWd6U0hQ YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBOTDBXa2JTWjJZQlMzaGdHYUNhZ3pTSFBhMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjIyMTkvODJGRTg5Q0MzQzM3MTFFQTg3M0UxNDYwQzRGOUFFMDIvQ0QxNDVEMjQ2 RTRFMTFFREJFMDJCMDY1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPAYIKwYBBQUHAQcBAf8E LTArMBoEAgABMBQwDAMEBTEAIAMEAzEAMAMEA3U68DANBAIAAjAHAwUAJAS1gDAN BgkqhkiG9w0BAQsFAAOCAQEAcOUjbrZ23f3BDbfZy8KgURtz5aAJLipntNQaTD1E dphGVQ3Yj7jGDbLBObgXqU6gvCBJXI9P3wvnazR75gt+/CMUeOhAAcD8KtxBNmU8 wHCq7xMpmWCsTjubllmvk5CEV//GrkQwHSlEzFJJr51i4IAXW9ZzWPiLWxcbE+xX T8BWFuHRGUiLt2jBjtJsjQRr5BgBQn/A4R+tQOhFhhKcec2IjdhSlv7dmCLjQ1yD OAictc6WLcM+3BN9sy1B+fJ69H4CXiAgQ/Cjb6AZrzl+FsxjkVJZal44Vw4xODop U3sLX3pfnfBdMUh5Q5QxYiKhlSqu/L2KgoDtJ8IKRy9QAg== -----END CERTIFICATE-----Generated at Tue Aug 12 19:11:11 2025 by rpki-client