$ rpki-client -vvf rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/D85FB84853BE11EF819E6347C4F9AE02.roa File: D85FB84853BE11EF819E6347C4F9AE02.roa (raw, json) Hash identifier: a88bdbcZV1jdTzb2F4syO3InnwblBpew5fiNIneHXUk= Subject key identifier: A5:41:2A:77:CB:79:54:93:3A:85:0E:6A:7C:36:D9:8B:6D:45:1A:71 Certificate issuer: /CN=A914781A/serialNumber=4D723955243AE88D552439AF8E4E0A09C8F6590D Certificate serial: 34BC Authority key identifier: 4D:72:39:55:24:3A:E8:8D:55:24:39:AF:8E:4E:0A:09:C8:F6:59:0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/D85FB84853BE11EF819E6347C4F9AE02.roa Signing time: Tue 04 Mar 2025 15:30:59 +0000 ROA not before: Tue 04 Mar 2025 15:30:59 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 24455 IP address blocks: 203.130.144.0/24 maxlen: 24 203.130.145.0/24 maxlen: 24 203.156.116.0/24 maxlen: 24 203.156.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13500 (0x34bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914781A, serialNumber=4D723955243AE88D552439AF8E4E0A09C8F6590D Validity Not Before: Mar 4 15:30:59 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67c71cb3-0c4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:38:5e:61:d1:87:7a:3f:99:16:ad:2d:11:22: ae:47:81:bf:07:27:f1:57:36:75:c9:6d:1c:54:29: ad:97:1f:bd:e2:c2:52:44:17:a2:7b:e9:08:27:e9: df:88:69:22:04:7c:88:77:14:28:8f:d6:c9:48:e1: 8f:c9:ad:b7:65:98:05:a4:44:1d:28:3a:4a:98:de: 7d:1f:c1:55:6e:98:89:59:d3:96:d3:6d:4a:87:4e: 54:83:05:27:10:5f:41:c2:28:ea:65:ed:bb:1d:2f: 19:cd:0f:8c:25:08:2b:d2:02:e0:10:cf:f9:b4:87: 50:78:9b:0e:a1:13:6f:c7:3d:cc:26:ad:e2:e9:95: 33:22:18:fa:dc:1b:09:32:6f:56:d4:fd:82:d0:59: 51:53:83:a2:62:65:8f:db:47:ea:bc:4c:3f:38:fa: c9:6a:7a:e0:57:26:d8:59:d4:fb:3b:70:4d:c6:e1: 14:f3:d5:09:ab:67:62:ff:e8:c5:ab:f9:b7:53:2a: 89:af:be:cd:fd:34:07:11:a4:41:57:90:ba:27:9f: 4c:5d:e5:5b:62:8c:c8:80:c8:37:b0:aa:c0:ac:29: f1:6c:b9:3a:d1:99:fb:45:62:e6:c2:a3:f8:6e:dd: 32:9a:63:54:a5:c6:f0:98:07:94:41:3c:11:c9:34: 89:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:41:2A:77:CB:79:54:93:3A:85:0E:6A:7C:36:D9:8B:6D:45:1A:71 X509v3 Authority Key Identifier: keyid:4D:72:39:55:24:3A:E8:8D:55:24:39:AF:8E:4E:0A:09:C8:F6:59:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/D85FB84853BE11EF819E6347C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.130.144.0/23 203.156.116.0/23 Signature Algorithm: sha256WithRSAEncryption c5:09:19:58:b9:0f:7f:62:1d:70:42:90:fc:03:5f:b7:64:b3: 98:53:8c:43:9a:3d:78:6a:cf:f2:49:e9:ca:2c:96:cf:c2:f9: b2:20:1c:49:8c:2c:eb:5f:e7:83:bf:4f:32:1a:c7:18:a5:15: 3a:71:80:ca:23:af:0f:64:18:b3:bd:60:68:a8:d6:e5:f7:e1: e8:5b:9b:ba:b9:79:a9:7d:b3:ee:a8:19:48:f7:7f:c7:f6:56: af:4c:81:d6:20:d3:a6:93:ab:41:fc:cb:3f:38:00:c6:b7:f4: ec:7d:9f:8e:3e:64:1c:01:92:81:64:3e:8b:40:76:15:fb:5b: 1c:b2:12:cf:51:82:eb:c4:7d:4f:b8:07:9a:3e:48:fd:9f:ae: 60:ec:0b:03:0c:45:02:c2:c4:a0:05:d1:a1:57:60:8c:48:29: 4e:e1:91:3a:f2:bc:b0:12:88:1b:c7:d2:a3:ef:56:6e:f0:36: 9f:da:6a:88:79:f1:43:94:c2:15:23:c9:6d:c5:80:f8:5d:7a: f6:55:13:75:87:4a:12:5c:22:04:7c:d5:d0:8b:4e:48:b2:8f: 88:d4:ce:36:2f:6d:3d:a8:b8:bd:e1:d6:a0:65:15:a9:a5:a1: d9:91:9f:66:4e:b8:cb:80:94:3e:99:a5:88:97:7e:e3:d8:7a: 24:db:d3:db -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICNLwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc4MUExMTAvBgNVBAUTKDRENzIzOTU1MjQzQUU4OEQ1NTI0MzlBRjhFNEUwQTA5 QzhGNjU5MEQwHhcNMjUwMzA0MTUzMDU5WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2M3MWNiMy0wYzRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoDheYdGHej+ZFq0tESKuR4G/ByfxVzZ1yW0cVCmtlx+94sJSRBeie+kIJ+nf iGkiBHyIdxQoj9bJSOGPya23ZZgFpEQdKDpKmN59H8FVbpiJWdOW021Kh05UgwUn EF9BwijqZe27HS8ZzQ+MJQgr0gLgEM/5tIdQeJsOoRNvxz3MJq3i6ZUzIhj63BsJ Mm9W1P2C0FlRU4OiYmWP20fqvEw/OPrJanrgVybYWdT7O3BNxuEU89UJq2di/+jF q/m3UyqJr77N/TQHEaRBV5C6J59MXeVbYozIgMg3sKrArCnxbLk60Zn7RWLmwqP4 bt0ymmNUpcbwmAeUQTwRyTSJ2QIDAQABo4ICmzCCApcwHQYDVR0OBBYEFKVBKnfL eVSTOoUOanw22YttRRpxMB8GA1UdIwQYMBaAFE1yOVUkOuiNVSQ5r45OCgnI9lkN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzgxQS9ENTIxNDI3MDFE OUIxMUUyQjgyMUZEODkwOEIwMkNEMi9UWEk1VlNRNjZJMVZKRG12ams0S0NjajJX UTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RYSTVWU1E2NkkxVkpEbXZqazRLQ2NqMldRMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDc4MUEvRDUyMTQyNzAxRDlCMTFFMkI4MjFGRDg5MDhCMDJDRDIvRDg1RkI4NDg1 M0JFMTFFRjgxOUU2MzQ3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAHLgpADBAHLnHQwDQYJKoZIhvcNAQELBQADggEBAMUJGVi5 D39iHXBCkPwDX7dks5hTjEOaPXhqz/JJ6cosls/C+bIgHEmMLOtf54O/TzIaxxil FTpxgMojrw9kGLO9YGio1uX34ehbm7q5eal9s+6oGUj3f8f2Vq9MgdYg06aTq0H8 yz84AMa39Ox9n44+ZBwBkoFkPotAdhX7WxyyEs9RguvEfU+4B5o+SP2frmDsCwMM RQLCxKAF0aFXYIxIKU7hkTryvLASiBvH0qPvVm7wNp/aaoh58UOUwhUjyW3FgPhd evZVE3WHShJcIgR81dCLTkiyj4jUzjYvbT2ouL3h1qBlFamlodmRn2ZOuMuAlD6Z pYiXfuPYeiTb09s= -----END CERTIFICATE-----Generated at Wed Nov 5 02:18:17 2025 by rpki-client