$ rpki-client -vvf rpki.apnic.net/member_repository/A914E070/89C5597CBC1011EE8BEB137AC4F9AE02/3772F678BC1211EE8C54FD2EC4F9AE02.roa File: 3772F678BC1211EE8C54FD2EC4F9AE02.roa (raw, json) Hash identifier: BVkUXHmaunafReC96ZYpGOgVThUwi3Y9iPZ+tZjaqqs= Subject key identifier: 39:57:F7:9B:83:91:B1:30:F0:F5:69:34:8B:AD:E5:92:32:77:49:F4 Certificate issuer: /CN=A914E070/serialNumber=539BB76C8A4379A4DE399C052D38C1B453A66F1B Certificate serial: 0124 Authority key identifier: 53:9B:B7:6C:8A:43:79:A4:DE:39:9C:05:2D:38:C1:B4:53:A6:6F:1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U5u3bIpDeaTeOZwFLTjBtFOmbxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E070/89C5597CBC1011EE8BEB137AC4F9AE02/3772F678BC1211EE8C54FD2EC4F9AE02.roa Signing time: Thu 31 Jul 2025 05:41:32 +0000 ROA not before: Thu 31 Jul 2025 05:41:32 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 45960 IP address blocks: 45.121.36.0/22 maxlen: 22 103.61.124.0/22 maxlen: 22 203.56.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E070/89C5597CBC1011EE8BEB137AC4F9AE02/U5u3bIpDeaTeOZwFLTjBtFOmbxs.crl rsync://rpki.apnic.net/member_repository/A914E070/89C5597CBC1011EE8BEB137AC4F9AE02/U5u3bIpDeaTeOZwFLTjBtFOmbxs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U5u3bIpDeaTeOZwFLTjBtFOmbxs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:15:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 292 (0x124) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E070, serialNumber=539BB76C8A4379A4DE399C052D38C1B453A66F1B Validity Not Before: Jul 31 05:41:32 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=688b020b-0314 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:1e:2c:72:e0:55:eb:a1:6b:03:c7:b6:48:5b: dc:82:a9:0d:86:1e:b2:c4:cd:9b:a0:23:c5:0c:4f: 29:2b:d5:cd:c6:10:ba:8a:c5:c7:b7:89:87:d5:df: 68:95:88:06:53:b3:e2:e7:af:01:9c:9a:a0:6a:6a: 66:02:64:91:f0:a9:a8:68:9a:0b:52:f7:12:be:d8: 70:b9:d3:99:ac:97:03:57:4c:a8:98:05:4f:1b:48: 0b:aa:65:6d:4b:6d:1b:30:a9:69:20:68:0d:fc:27: e3:64:60:1c:2b:75:77:54:3b:3f:6e:5d:3c:39:be: 81:21:15:79:24:a7:b4:7e:5a:a4:bb:cf:2d:ea:1d: 5f:19:98:6c:1e:05:c3:b7:c5:c0:04:3b:d2:e8:26: aa:94:73:21:26:58:9e:28:50:d1:c4:00:6a:3f:07: df:92:5c:a5:d7:f4:cc:7f:e4:4b:eb:19:3c:d0:47: af:34:f4:75:92:6f:22:ba:9b:51:01:1a:06:03:47: 5e:49:7e:0b:92:cf:5c:7b:24:a5:ba:ce:0d:9c:e2: fb:31:d0:7d:9b:02:5f:c3:8d:81:72:82:84:a8:d3: c0:6a:e8:c7:e1:fc:b1:b0:2a:ca:2c:4b:10:14:dc: c7:29:db:ad:14:7f:0b:7c:33:c7:9a:2e:81:c3:87: d2:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:57:F7:9B:83:91:B1:30:F0:F5:69:34:8B:AD:E5:92:32:77:49:F4 X509v3 Authority Key Identifier: keyid:53:9B:B7:6C:8A:43:79:A4:DE:39:9C:05:2D:38:C1:B4:53:A6:6F:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E070/89C5597CBC1011EE8BEB137AC4F9AE02/U5u3bIpDeaTeOZwFLTjBtFOmbxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U5u3bIpDeaTeOZwFLTjBtFOmbxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E070/89C5597CBC1011EE8BEB137AC4F9AE02/3772F678BC1211EE8C54FD2EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.121.36.0/22 103.61.124.0/22 203.56.25.0/24 Signature Algorithm: sha256WithRSAEncryption 38:2f:ec:eb:9c:c5:7b:53:6e:c3:6f:5b:f4:d1:c4:30:7f:c4: b2:47:fa:0b:a0:3d:3f:19:73:dd:98:91:80:86:85:33:8b:76: 60:92:a3:2a:ab:c4:c7:6a:11:5c:01:98:ea:40:80:61:ee:b6: 02:29:33:90:cb:89:50:c9:cc:b5:26:92:2f:d6:34:77:e9:79: 66:23:0a:16:da:24:fd:5c:bf:a8:75:4e:1f:97:0f:97:a1:7e: 18:01:f0:3a:fd:ae:29:63:27:8a:e8:bf:37:a8:ae:86:8b:ed: 40:c2:a5:45:f0:6c:bc:53:82:b2:9b:6b:46:87:5d:5a:35:6a: ac:6c:44:66:14:eb:24:56:df:c9:cf:b1:a8:03:35:3b:e2:38: 05:88:f7:be:63:27:81:82:8e:3e:1d:43:7f:d9:07:2b:43:31: 2a:0d:eb:7a:cc:88:6e:61:fa:f6:e8:e8:40:fb:b9:c9:53:e1: c5:9a:67:dd:c5:32:e4:e8:c4:ce:97:c4:c2:07:14:96:09:8b: 0e:49:b9:4b:62:df:4a:49:4f:ef:ac:fc:3c:b4:6d:3d:0a:61: da:0f:84:91:a3:5c:95:b8:19:e3:47:a9:43:09:ea:41:32:6d: 62:c3:ed:d2:1e:9e:66:b6:36:c3:00:81:e9:c0:e1:ff:d6:df: 29:37:05:7b -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICASQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUwNzAxMTAvBgNVBAUTKDUzOUJCNzZDOEE0Mzc5QTRERTM5OUMwNTJEMzhDMUI0 NTNBNjZGMUIwHhcNMjUwNzMxMDU0MTMyWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODhiMDIwYi0wMzE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoB4scuBV66FrA8e2SFvcgqkNhh6yxM2boCPFDE8pK9XNxhC6isXHt4mH1d9o lYgGU7Pi568BnJqgampmAmSR8KmoaJoLUvcSvthwudOZrJcDV0yomAVPG0gLqmVt S20bMKlpIGgN/CfjZGAcK3V3VDs/bl08Ob6BIRV5JKe0flqku88t6h1fGZhsHgXD t8XABDvS6CaqlHMhJlieKFDRxABqPwffklyl1/TMf+RL6xk80EevNPR1km8iuptR ARoGA0deSX4Lks9ceySlus4NnOL7MdB9mwJfw42BcoKEqNPAaujH4fyxsCrKLEsQ FNzHKdutFH8LfDPHmi6Bw4fSFQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFDlX95uD kbEw8PVpNIut5ZIyd0n0MB8GA1UdIwQYMBaAFFObt2yKQ3mk3jmcBS04wbRTpm8b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTA3MC84OUM1NTk3Q0JD MTAxMUVFOEJFQjEzN0FDNEY5QUUwMi9VNXUzYklwRGVhVGVPWndGTFRqQnRGT21i eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1U1dTNiSXBEZWFUZU9ad0ZMVGpCdEZPbWJ4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEUwNzAvODlDNTU5N0NCQzEwMTFFRThCRUIxMzdBQzRGOUFFMDIvMzc3MkY2NzhC QzEyMTFFRThDNTRGRDJFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAIteSQDBAJnPXwDBADLOBkwDQYJKoZIhvcNAQELBQADggEB ADgv7OucxXtTbsNvW/TRxDB/xLJH+gugPT8Zc92YkYCGhTOLdmCSoyqrxMdqEVwB mOpAgGHutgIpM5DLiVDJzLUmki/WNHfpeWYjChbaJP1cv6h1Th+XD5ehfhgB8Dr9 riljJ4rovzeoroaL7UDCpUXwbLxTgrKba0aHXVo1aqxsRGYU6yRW38nPsagDNTvi OAWI975jJ4GCjj4dQ3/ZBytDMSoN63rMiG5h+vbo6ED7uclT4cWaZ93FMuToxM6X xMIHFJYJiw5JuUti30pJT++s/Dy0bT0KYdoPhJGjXJW4GeNHqUMJ6kEybWLD7dIe nma2NsMAgenA4f/W3yk3BXs= -----END CERTIFICATE-----Generated at Fri Aug 8 20:46:49 2025 by rpki-client