$ rpki-client -vvf rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/13321D24572211EA88CE445FC4F9AE02.roa File: 13321D24572211EA88CE445FC4F9AE02.roa (raw, json) Hash identifier: O5ljMaLXjT5F5QYrN31gp31zcfvR+zM4AIkQWAKZEY4= Subject key identifier: 37:DB:4D:3D:FC:AF:68:44:B1:73:B7:ED:0E:D2:F6:ED:43:E4:DA:0B Certificate issuer: /CN=A912986D/serialNumber=1717ACAC053F131E2261452736513E4E8F626CDB Certificate serial: 0AF0 Authority key identifier: 17:17:AC:AC:05:3F:13:1E:22:61:45:27:36:51:3E:4E:8F:62:6C:DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FxesrAU_Ex4iYUUnNlE-To9ibNs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/13321D24572211EA88CE445FC4F9AE02.roa Signing time: Fri 08 Aug 2025 20:00:01 +0000 ROA not before: Fri 08 Aug 2025 20:00:01 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 396982 IP address blocks: 43.229.32.0/22 maxlen: 22 43.229.32.0/23 maxlen: 23 43.229.34.0/23 maxlen: 23 103.9.96.0/22 maxlen: 22 117.120.16.0/21 maxlen: 21 223.29.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.crl rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FxesrAU_Ex4iYUUnNlE-To9ibNs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2800 (0xaf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912986D, serialNumber=1717ACAC053F131E2261452736513E4E8F626CDB Validity Not Before: Aug 8 20:00:01 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68965741-fd88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:82:60:a6:12:c9:e6:56:bc:15:6e:88:7f:1e: 2e:70:1a:63:84:89:cf:31:2a:a4:94:8e:84:bd:40: 01:8a:8e:a2:f2:93:7a:4b:69:a3:08:2b:6d:0a:1f: fe:1e:18:50:7a:e4:b9:cd:0d:db:11:a9:6d:67:94: a1:61:78:37:d8:e9:d0:8f:a1:9e:5e:b9:a9:60:46: 0a:25:63:42:42:8d:81:35:33:90:b4:b4:fb:b4:c4: 1e:43:35:ca:42:08:1c:d7:f3:e8:c9:50:6f:1c:3e: b4:7d:f3:bc:e8:0a:4b:4e:6e:e9:3c:b9:f9:4b:ff: a5:b2:7a:b3:f0:e9:c2:32:36:3f:aa:a4:70:27:78: 3f:a3:f4:28:a2:d9:90:e8:82:88:28:d4:8d:43:82: ef:d0:a6:f5:de:1c:ab:b5:15:04:31:a5:06:dc:aa: bb:00:b2:ce:18:60:9e:16:b1:52:db:43:09:70:5a: e0:5f:d2:b0:ea:b3:51:81:46:50:ca:13:2e:c6:25: 26:f6:cd:03:77:0f:6c:c3:e6:df:72:75:7b:d7:62: 5c:17:1a:a0:b5:46:87:3d:05:d7:fb:9f:62:74:32: 3d:ee:53:5d:6e:ec:05:e1:6d:b1:61:04:b4:31:d7: 7e:a0:48:71:a1:78:9d:e7:8c:28:a8:82:93:30:89: 58:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:DB:4D:3D:FC:AF:68:44:B1:73:B7:ED:0E:D2:F6:ED:43:E4:DA:0B X509v3 Authority Key Identifier: keyid:17:17:AC:AC:05:3F:13:1E:22:61:45:27:36:51:3E:4E:8F:62:6C:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FxesrAU_Ex4iYUUnNlE-To9ibNs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/13321D24572211EA88CE445FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.229.32.0/22 103.9.96.0/22 117.120.16.0/21 223.29.216.0/22 Signature Algorithm: sha256WithRSAEncryption 45:8a:67:b8:56:10:32:22:74:34:66:8d:af:a3:4c:97:a0:fd: f2:7a:43:d4:0a:b9:90:89:f1:fe:73:6a:43:a6:d5:18:fa:4d: 10:d9:57:f5:6b:b9:fd:20:e2:c3:41:85:e3:9c:e3:12:98:f8: 14:b1:aa:19:b2:7e:b4:7a:bf:32:8f:b1:69:af:cd:f5:4c:56: d1:48:59:d6:e0:a5:b0:ee:5d:76:44:1c:0f:82:aa:5e:59:ac: 35:d8:78:12:1d:e1:da:21:1a:d5:79:37:53:59:5c:12:db:bf: 79:92:8e:d9:9f:1a:c1:b5:97:72:1a:08:ca:89:a3:f1:48:de: 6f:12:65:5f:90:9e:c6:26:b1:32:cd:9d:84:9c:45:09:b6:86: 70:ff:53:70:1f:37:51:6d:57:df:3f:41:61:b4:7c:e3:cf:82: e3:38:1b:8f:11:f2:1a:8e:72:6d:dc:8f:27:b8:15:e1:e8:80: 74:8e:24:cd:a4:b5:60:39:40:81:05:38:53:11:66:fc:39:63: 36:5f:a9:1a:5f:88:61:55:fe:27:78:b3:68:c2:44:86:e5:3b: 23:9f:93:59:0b:d2:d1:dc:c9:b7:26:02:a1:85:a9:93:7e:5c: 13:7d:47:21:10:67:cf:70:1a:25:5a:03:a6:e0:a6:e6:20:8d: 2b:9d:3b:69 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICCvAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk4NkQxMTAvBgNVBAUTKDE3MTdBQ0FDMDUzRjEzMUUyMjYxNDUyNzM2NTEzRTRF OEY2MjZDREIwHhcNMjUwODA4MjAwMDAxWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODk2NTc0MS1mZDg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+IJgphLJ5la8FW6Ifx4ucBpjhInPMSqklI6EvUABio6i8pN6S2mjCCttCh/+ HhhQeuS5zQ3bEaltZ5ShYXg32OnQj6GeXrmpYEYKJWNCQo2BNTOQtLT7tMQeQzXK Qggc1/PoyVBvHD60ffO86ApLTm7pPLn5S/+lsnqz8OnCMjY/qqRwJ3g/o/QootmQ 6IKIKNSNQ4Lv0Kb13hyrtRUEMaUG3Kq7ALLOGGCeFrFS20MJcFrgX9Kw6rNRgUZQ yhMuxiUm9s0Ddw9sw+bfcnV712JcFxqgtUaHPQXX+59idDI97lNdbuwF4W2xYQS0 Mdd+oEhxoXid54woqIKTMIlYUwIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFDfbTT38 r2hEsXO37Q7S9u1D5NoLMB8GA1UdIwQYMBaAFBcXrKwFPxMeImFFJzZRPk6PYmzb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTg2RC9BMDA3NEQxODUz M0IxMUVBQkFBNzVCM0FDNEY5QUUwMi9GeGVzckFVX0V4NGlZVVVuTmxFLVRvOWli TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Z4ZXNyQVVfRXg0aVlVVW5ObEUtVG85aWJOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Mjk4NkQvQTAwNzREMTg1MzNCMTFFQUJBQTc1QjNBQzRGOUFFMDIvMTMzMjFEMjQ1 NzIyMTFFQTg4Q0U0NDVGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBAIr5SADBAJnCWADBAN1eBADBALfHdgwDQYJKoZIhvcNAQEL BQADggEBAEWKZ7hWEDIidDRmja+jTJeg/fJ6Q9QKuZCJ8f5zakOm1Rj6TRDZV/Vr uf0g4sNBheOc4xKY+BSxqhmyfrR6vzKPsWmvzfVMVtFIWdbgpbDuXXZEHA+Cql5Z rDXYeBId4dohGtV5N1NZXBLbv3mSjtmfGsG1l3IaCMqJo/FI3m8SZV+QnsYmsTLN nYScRQm2hnD/U3AfN1FtV98/QWG0fOPPguM4G48R8hqOcm3cjye4FeHogHSOJM2k tWA5QIEFOFMRZvw5YzZfqRpfiGFV/id4s2jCRIblOyOfk1kL0tHcybcmAqGFqZN+ XBN9RyEQZ89wGiVaA6bgpuYgjSudO2k= -----END CERTIFICATE-----Generated at Sun Aug 10 05:44:55 2025 by rpki-client