$ rpki-client -vvf rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/37D5EC8CB68A11F09D04E950C4F9AE02.roa File: 37D5EC8CB68A11F09D04E950C4F9AE02.roa (raw, json) Hash identifier: z+J6k2WSDwVmDdFI9w7THPPX/Q7RFUW9LZQWuJzZEcw= Subject key identifier: 2C:C0:5A:70:FD:AC:9B:BE:54:E5:A7:2E:1F:90:4B:74:AD:C8:29:F8 Certificate issuer: /CN=A912FC73/serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC Certificate serial: 0502 Authority key identifier: CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/37D5EC8CB68A11F09D04E950C4F9AE02.roa Signing time: Mon 03 Nov 2025 00:44:56 +0000 ROA not before: Mon 03 Nov 2025 00:44:56 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 5065 IP address blocks: 223.29.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:44:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1282 (0x502) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FC73, serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC Validity Not Before: Nov 3 00:44:56 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=6907fb07-c89d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c3:c3:c2:f8:64:44:6a:d6:5c:7a:d6:0f:53: 11:ae:b9:19:7f:24:4a:68:84:37:08:b2:df:e3:91: bb:f9:56:12:75:34:5e:5d:7e:6b:c9:a5:41:1d:96: e7:07:b9:f4:fb:b9:83:e1:92:92:09:a0:69:38:54: 4c:92:fb:d1:57:1c:74:8a:97:14:41:d3:b6:a8:45: 4b:70:76:0c:ea:9d:2c:02:2d:ad:e2:bf:70:90:78: 4d:c4:fa:d7:61:49:64:4a:b8:d7:d8:e6:14:5d:c4: 6e:37:57:fd:da:8a:5e:a9:0c:f3:ce:4d:70:52:ed: 47:11:99:32:99:3e:ac:86:a0:ea:44:7a:7a:5c:8e: 9b:a6:41:d1:11:8b:45:3e:04:d2:0a:9b:fa:e5:44: 3a:42:e7:ee:11:24:4a:5d:11:b5:27:af:7e:c5:10: 21:64:08:13:81:f2:41:5a:fb:bb:86:ea:de:07:b2: 21:af:94:9c:60:9b:2c:21:30:ed:c4:4c:42:c7:3c: e2:96:18:a4:4c:d6:09:4b:bb:7e:f5:24:3a:3a:2e: 58:79:35:71:e8:11:35:3a:90:e5:f9:30:8d:e4:7d: 7c:d5:84:86:37:ac:ad:1b:74:88:c5:02:bf:e3:2a: f8:b6:01:4f:56:c5:96:16:df:c2:bb:49:d4:f1:76: 62:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:C0:5A:70:FD:AC:9B:BE:54:E5:A7:2E:1F:90:4B:74:AD:C8:29:F8 X509v3 Authority Key Identifier: keyid:CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/37D5EC8CB68A11F09D04E950C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 223.29.136.0/22 Signature Algorithm: sha256WithRSAEncryption 4f:9c:d9:a8:1c:d0:ac:55:d3:4a:fc:ee:4c:15:5c:1a:0d:2f: 97:04:8b:b3:b3:dd:87:b5:0b:ea:02:e9:f3:40:fc:cd:d4:25: 27:05:7e:0e:cd:05:ac:01:92:3a:78:a8:b4:66:b0:7f:49:4f: b4:74:19:6b:3d:a8:34:fd:f9:31:91:12:70:2c:26:03:ca:2f: 7c:0e:95:2a:9d:07:b6:20:25:40:7c:61:bc:6c:56:5f:70:ec: 17:6c:3b:0c:d9:16:47:43:b3:1f:1c:6d:1d:8a:ff:f2:53:c3: d6:a4:7d:52:c2:d6:58:20:40:1d:34:f4:37:3b:94:db:48:82: bc:6a:88:28:02:97:23:63:98:31:d5:fc:4d:61:55:d2:1a:e5: ce:0f:e2:61:75:2d:0e:cf:d6:9d:3f:4a:3e:39:03:51:80:fb: 6d:30:59:15:1f:ac:41:bb:ab:e3:ba:9b:df:97:69:8e:ba:0b: 4a:de:c1:8b:4f:48:2d:ae:64:f7:7b:e3:f2:89:ee:02:f3:72: 00:55:81:9f:30:53:a5:df:87:6d:bd:86:51:2c:ed:47:ad:ef: 82:d1:f7:6c:02:3e:d7:fb:2e:d0:4f:41:bd:fc:41:ac:da:fd: e0:f0:97:ed:12:45:d0:06:b4:41:ff:6b:8b:3a:04:e7:26:1c: 15:d4:0e:8e -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZDNzMxMTAvBgNVBAUTKENFRTQxNjAxRUVBOUY1MUIzNTI1REE1NURENEFDOTVD RUZBRjVBQkMwHhcNMjUxMTAzMDA0NDU2WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTA3ZmIwNy1jODlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv8PDwvhkRGrWXHrWD1MRrrkZfyRKaIQ3CLLf45G7+VYSdTReXX5ryaVBHZbn B7n0+7mD4ZKSCaBpOFRMkvvRVxx0ipcUQdO2qEVLcHYM6p0sAi2t4r9wkHhNxPrX YUlkSrjX2OYUXcRuN1f92opeqQzzzk1wUu1HEZkymT6shqDqRHp6XI6bpkHREYtF PgTSCpv65UQ6QufuESRKXRG1J69+xRAhZAgTgfJBWvu7hureB7Ihr5ScYJssITDt xExCxzzilhikTNYJS7t+9SQ6Oi5YeTVx6BE1OpDl+TCN5H181YSGN6ytG3SIxQK/ 4yr4tgFPVsWWFt/Cu0nU8XZiuQIDAQABo4IClTCCApEwHQYDVR0OBBYEFCzAWnD9 rJu+VOWnLh+QS3StyCn4MB8GA1UdIwQYMBaAFM7kFgHuqfUbNSXaVd1KyVzvr1q8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkM3My8wMTQ0Q0RGODlG MzQxMUVDOUNFQkM2NzBDNEY5QUUwMi96dVFXQWU2cDlSczFKZHBWM1VySlhPLXZX cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p1UVdBZTZwOVJzMUpkcFYzVXJKWE8tdldydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkZDNzMvMDE0NENERjg5RjM0MTFFQzlDRUJDNjcwQzRGOUFFMDIvMzdENUVDOENC NjhBMTFGMDlEMDRFOTUwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBALfHYgwDQYJKoZIhvcNAQELBQADggEBAE+c2agc0KxV00r8 7kwVXBoNL5cEi7Oz3Ye1C+oC6fNA/M3UJScFfg7NBawBkjp4qLRmsH9JT7R0GWs9 qDT9+TGREnAsJgPKL3wOlSqdB7YgJUB8YbxsVl9w7BdsOwzZFkdDsx8cbR2K//JT w9akfVLC1lggQB009Dc7lNtIgrxqiCgClyNjmDHV/E1hVdIa5c4P4mF1LQ7P1p0/ Sj45A1GA+20wWRUfrEG7q+O6m9+XaY66C0rewYtPSC2uZPd74/KJ7gLzcgBVgZ8w U6Xfh229hlEs7Uet74LR92wCPtf7LtBPQb38Qaza/eDwl+0SRdAGtEH/a4s6BOcm HBXUDo4= -----END CERTIFICATE-----Generated at Tue Nov 4 08:32:17 2025 by rpki-client