$ rpki-client -vvf rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/311C494286CC11F09348D16BC4F9AE02.roa File: 311C494286CC11F09348D16BC4F9AE02.roa (raw, json) Hash identifier: +BsmD54GLCQa0LnHgyrHw492ycZW9i6yM0KqljFRK2Y= Subject key identifier: 44:4A:1A:64:A2:87:BE:6C:AE:B8:F7:FB:E4:19:DC:04:A1:2F:BB:8A Certificate issuer: /CN=A913D1EA/serialNumber=E692C5B60B3EF1C2044439FC390AD56DC3CBCD63 Certificate serial: 08EA Authority key identifier: E6:92:C5:B6:0B:3E:F1:C2:04:44:39:FC:39:0A:D5:6D:C3:CB:CD:63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/311C494286CC11F09348D16BC4F9AE02.roa Signing time: Tue 04 Nov 2025 21:40:32 +0000 ROA not before: Tue 04 Nov 2025 21:40:32 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 152584 IP address blocks: 126.209.15.0/24 maxlen: 24 126.209.33.0/24 maxlen: 24 126.209.37.0/24 maxlen: 24 126.209.51.0/24 maxlen: 24 126.209.63.0/24 maxlen: 24 126.209.80.0/24 maxlen: 24 126.209.81.0/24 maxlen: 24 126.209.85.0/24 maxlen: 24 126.209.86.0/24 maxlen: 24 126.209.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.crl rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:40:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2282 (0x8ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D1EA, serialNumber=E692C5B60B3EF1C2044439FC390AD56DC3CBCD63 Validity Not Before: Nov 4 21:40:32 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=690a72d0-4bd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:88:a9:e7:37:8d:61:d3:f7:35:3e:a0:38:75: 4f:18:7b:b9:15:b4:89:28:b1:da:92:a8:19:ce:0b: eb:84:81:76:d2:12:8b:56:e2:a9:e6:da:06:93:a5: 43:e4:d6:49:84:a1:b6:27:8a:50:26:f9:f4:d2:96: 30:c0:06:3c:2c:65:27:46:6a:1a:89:03:af:d8:d4: 05:6f:94:18:82:65:8f:fa:05:bb:51:80:50:1b:96: 13:56:aa:7e:dc:95:41:ec:3f:f8:e1:ef:42:dc:cc: 94:18:93:ef:93:b3:72:04:4f:91:bc:f7:5d:c4:4f: 8d:78:d2:64:75:37:7e:01:50:67:68:00:4a:4a:3c: f6:50:50:54:da:49:1d:79:35:94:1a:bf:b7:53:f8: 9c:30:df:20:7e:b9:b1:ef:29:f6:f4:d1:e6:87:1d: c1:e1:49:6c:e5:53:92:02:27:f0:ec:a3:b9:f5:bb: 2c:e4:e4:b4:3c:93:64:c1:b1:b6:6d:d8:d0:68:0b: 23:99:b5:c4:e2:1b:e4:7b:23:81:b7:36:c3:eb:fe: 4f:11:54:ba:9b:8a:03:8d:2a:c6:ff:11:1b:a1:10: 5f:6e:1f:f4:90:dc:19:c7:9c:16:8f:f6:27:22:1f: 57:04:79:c5:8d:d3:07:81:30:24:fb:44:48:ca:c7: 77:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:4A:1A:64:A2:87:BE:6C:AE:B8:F7:FB:E4:19:DC:04:A1:2F:BB:8A X509v3 Authority Key Identifier: keyid:E6:92:C5:B6:0B:3E:F1:C2:04:44:39:FC:39:0A:D5:6D:C3:CB:CD:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/311C494286CC11F09348D16BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 126.209.15.0/24 126.209.33.0/24 126.209.37.0/24 126.209.51.0/24 126.209.63.0/24 126.209.80.0/23 126.209.85.0-126.209.86.255 126.209.96.0/21 Signature Algorithm: sha256WithRSAEncryption 07:91:a2:42:34:2b:80:2e:05:90:3d:c9:0a:c5:5d:e2:8d:90: 24:ee:4c:c8:fe:0e:af:f7:55:7a:66:e3:59:f6:be:c2:86:58: ec:2b:72:ba:ae:3b:f6:26:b4:99:36:85:79:0d:95:24:5d:bf: 71:37:58:c8:e7:80:18:74:57:b5:14:1d:99:a8:c6:1f:d2:9b: 4c:58:8c:ac:1b:f2:3a:5a:bd:bb:45:6a:8a:89:8b:8b:2a:f8: ac:29:61:a2:17:02:9d:6e:e0:bb:aa:0a:fd:ae:61:08:fb:ea: 59:60:55:2e:db:34:c3:ad:98:89:47:13:22:47:66:bd:a8:b0: 97:0e:25:df:41:c0:83:1e:18:57:18:85:83:95:b1:56:25:51: 4b:04:bb:f4:97:fe:b0:d8:93:b1:8b:51:36:37:65:9e:fd:f2: 01:4d:b2:23:16:52:ea:ca:c0:33:8e:ce:85:ed:46:cc:d6:e9: a5:06:0c:ed:f0:0b:7c:26:86:9d:a1:f3:13:34:12:19:dd:5d: 8d:c1:5f:2b:6c:b4:82:c4:b2:79:b0:bd:ca:79:57:47:54:9e: fd:b9:2a:52:7e:4a:65:0b:94:8c:97:07:c3:52:08:69:db:a2: 2d:70:9c:d4:27:52:c1:33:a4:65:50:39:b9:f2:1e:ae:cc:f0: 1b:3c:0c:d9 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgICCOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0QxRUExMTAvBgNVBAUTKEU2OTJDNUI2MEIzRUYxQzIwNDQ0MzlGQzM5MEFENTZE QzNDQkNENjMwHhcNMjUxMTA0MjE0MDMyWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTBhNzJkMC00YmQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq4ip5zeNYdP3NT6gOHVPGHu5FbSJKLHakqgZzgvrhIF20hKLVuKp5toGk6VD 5NZJhKG2J4pQJvn00pYwwAY8LGUnRmoaiQOv2NQFb5QYgmWP+gW7UYBQG5YTVqp+ 3JVB7D/44e9C3MyUGJPvk7NyBE+RvPddxE+NeNJkdTd+AVBnaABKSjz2UFBU2kkd eTWUGr+3U/icMN8gfrmx7yn29NHmhx3B4Uls5VOSAifw7KO59bss5OS0PJNkwbG2 bdjQaAsjmbXE4hvkeyOBtzbD6/5PEVS6m4oDjSrG/xEboRBfbh/0kNwZx5wWj/Yn Ih9XBHnFjdMHgTAk+0RIysd3iQIDAQABo4ICxzCCAsMwHQYDVR0OBBYEFERKGmSi h75srrj3++QZ3AShL7uKMB8GA1UdIwQYMBaAFOaSxbYLPvHCBEQ5/DkK1W3Dy81j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDFFQS85QzkzMkI0ODE3 M0ExMUVCQTNCOTdFN0ZDNEY5QUUwMi81cExGdGdzLThjSUVSRG44T1FyVmJjUEx6 V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVwTEZ0Z3MtOGNJRVJEbjhPUXJWYmNQTHpXTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0QxRUEvOUM5MzJCNDgxNzNBMTFFQkEzQjk3RTdGQzRGOUFFMDIvMzExQzQ5NDI4 NkNDMTFGMDkzNDhEMTZCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwUQYIKwYBBQUHAQcBAf8E QjBAMD4EAgABMDgDBAB+0Q8DBAB+0SEDBAB+0SUDBAB+0TMDBAB+0T8DBAF+0VAw DAMEAH7RVQMEAH7RVgMEA37RYDANBgkqhkiG9w0BAQsFAAOCAQEAB5GiQjQrgC4F kD3JCsVd4o2QJO5MyP4Or/dVembjWfa+woZY7Ctyuq479ia0mTaFeQ2VJF2/cTdY yOeAGHRXtRQdmajGH9KbTFiMrBvyOlq9u0VqiomLiyr4rClhohcCnW7gu6oK/a5h CPvqWWBVLts0w62YiUcTIkdmvaiwlw4l30HAgx4YVxiFg5WxViVRSwS79Jf+sNiT sYtRNjdlnv3yAU2yIxZS6srAM47Ohe1GzNbppQYM7fALfCaGnaHzEzQSGd1djcFf K2y0gsSyebC9ynlXR1Se/bkqUn5KZQuUjJcHw1IIaduiLXCc1CdSwTOkZVA5ufIe rszwGzwM2Q== -----END CERTIFICATE-----Generated at Wed Nov 5 04:07:20 2025 by rpki-client