$ rpki-client -vvf rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/753F0A48CFB611EE83724A58C4F9AE02.roa File: 753F0A48CFB611EE83724A58C4F9AE02.roa (raw, json) Hash identifier: Y0zJtnbzpmd90X17sv9yMGgLuPfyz+VuYGcqduHEde8= Subject key identifier: E1:AA:D0:45:FC:26:8B:CB:B8:BC:2B:8B:F8:5B:1B:8A:FB:41:FD:A2 Certificate issuer: /CN=A9150F66/serialNumber=AA32562429F896C0A5CBDE564431480339BEBA97 Certificate serial: 1AA0 Authority key identifier: AA:32:56:24:29:F8:96:C0:A5:CB:DE:56:44:31:48:03:39:BE:BA:97 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjJWJCn4lsCly95WRDFIAzm-upc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/753F0A48CFB611EE83724A58C4F9AE02.roa Signing time: Sat 24 May 2025 15:43:37 +0000 ROA not before: Sat 24 May 2025 15:43:37 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 24440 IP address blocks: 72.255.0.0/18 maxlen: 24 139.135.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.crl rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjJWJCn4lsCly95WRDFIAzm-upc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:43:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6816 (0x1aa0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150F66, serialNumber=AA32562429F896C0A5CBDE564431480339BEBA97 Validity Not Before: May 24 15:43:37 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=6831e929-0db5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:86:12:b3:9d:85:78:75:9b:f2:c8:f5:50:75: 81:c1:cf:6c:f1:b6:ee:0b:f1:92:49:89:a2:1a:fc: 50:ca:af:47:f1:b9:9b:a3:f8:77:34:de:62:98:cc: 33:48:cd:2e:16:37:ad:af:8a:6a:e3:49:20:aa:f7: da:6b:ae:70:b6:49:b1:d0:09:6e:86:5f:1d:13:99: 3b:21:5e:28:75:59:d2:05:f0:fa:94:f6:c2:67:a7: c2:1f:32:9a:57:71:e5:ea:64:8a:7f:f5:4e:9d:89: 27:f5:d1:fe:2c:76:e5:1a:c2:fe:d3:9f:46:e8:f6: f4:15:19:2b:a3:26:eb:b3:62:f9:24:fb:3b:5b:73: 98:86:85:78:7f:35:1a:38:c0:67:8f:35:40:1c:ea: 40:3d:1a:bd:0e:5f:db:c3:87:39:13:7a:7a:52:a8: 6b:fc:70:cb:09:cc:1f:30:1b:14:48:a4:2d:4d:93: 03:85:71:f5:9c:f2:0a:ad:5d:be:66:5a:fd:b8:97: b1:10:f1:9e:06:e0:a3:44:54:f7:9d:d0:d9:af:40: f1:24:8a:5c:12:48:c4:0b:cb:18:51:be:72:df:ff: 2c:e8:02:ec:9e:28:e4:fb:ef:a7:8f:3e:c7:eb:e0: 2b:12:df:3d:86:6c:ce:18:40:01:58:d6:2c:a7:31: 37:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:AA:D0:45:FC:26:8B:CB:B8:BC:2B:8B:F8:5B:1B:8A:FB:41:FD:A2 X509v3 Authority Key Identifier: keyid:AA:32:56:24:29:F8:96:C0:A5:CB:DE:56:44:31:48:03:39:BE:BA:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjJWJCn4lsCly95WRDFIAzm-upc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/753F0A48CFB611EE83724A58C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 72.255.0.0/18 139.135.32.0/19 Signature Algorithm: sha256WithRSAEncryption b5:0a:83:50:6c:79:42:d6:84:d4:ff:d0:c9:7f:40:bb:33:3a: 12:4f:d6:2e:09:1a:7d:79:d7:7a:94:e8:ce:20:38:db:d9:3f: f8:34:9b:dc:6e:2e:09:f1:32:27:2f:5c:cc:a0:3a:b1:41:9a: ab:42:7d:d9:bc:00:33:ed:0f:18:3b:46:1a:29:fc:3d:0b:74: c1:8a:d0:3a:8f:58:1a:ca:a2:6b:47:ff:83:b5:36:f1:b2:9c: d1:94:0f:d0:25:93:a5:26:9f:a4:22:7d:9b:8b:9a:05:56:fd: b8:d6:36:3c:8b:4e:9a:41:7f:fa:89:84:ff:86:90:cb:a7:51: 00:8e:bc:9e:dd:33:2f:3a:dc:0f:ef:45:3f:46:58:9d:ce:9c: be:5a:8b:97:da:3a:33:6e:7c:aa:1c:74:37:83:c6:a7:a1:47: 78:8e:4c:6f:2d:b1:c0:9e:b5:01:bd:84:56:bb:28:52:99:cd: de:a0:68:1d:19:99:cc:43:a4:f9:5e:19:6b:66:2f:ee:79:fc: 13:87:c3:b4:65:b6:c3:58:7c:92:75:fd:74:bd:92:95:2f:10: 7e:d1:aa:b3:46:19:93:1d:ad:2e:5d:23:29:55:b8:87:20:d8: b9:08:6a:73:50:b6:73:59:48:e3:56:96:ac:ac:8a:4a:59:cd: 78:0a:cc:18 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICGqAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBGNjYxMTAvBgNVBAUTKEFBMzI1NjI0MjlGODk2QzBBNUNCREU1NjQ0MzE0ODAz MzlCRUJBOTcwHhcNMjUwNTI0MTU0MzM3WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODMxZTkyOS0wZGI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr4YSs52FeHWb8sj1UHWBwc9s8bbuC/GSSYmiGvxQyq9H8bmbo/h3NN5imMwz SM0uFjetr4pq40kgqvfaa65wtkmx0Aluhl8dE5k7IV4odVnSBfD6lPbCZ6fCHzKa V3Hl6mSKf/VOnYkn9dH+LHblGsL+059G6Pb0FRkroybrs2L5JPs7W3OYhoV4fzUa OMBnjzVAHOpAPRq9Dl/bw4c5E3p6Uqhr/HDLCcwfMBsUSKQtTZMDhXH1nPIKrV2+ Zlr9uJexEPGeBuCjRFT3ndDZr0DxJIpcEkjEC8sYUb5y3/8s6ALsnijk+++njz7H 6+ArEt89hmzOGEABWNYspzE3zQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFOGq0EX8 JovLuLwri/hbG4r7Qf2iMB8GA1UdIwQYMBaAFKoyViQp+JbApcveVkQxSAM5vrqX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEY2Ni8zRDk4MUNDQzNB MUUxMUU3OUFBMEQ1MUNDNEY5QUUwMi9xakpXSkNuNGxzQ2x5OTVXUkRGSUF6bS11 cGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3FqSldKQ240bHNDbHk5NVdSREZJQXptLXVwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTBGNjYvM0Q5ODFDQ0MzQTFFMTFFNzlBQTBENTFDQzRGOUFFMDIvNzUzRjBBNDhD RkI2MTFFRTgzNzI0QTU4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAZI/wADBAWLhyAwDQYJKoZIhvcNAQELBQADggEBALUKg1Bs eULWhNT/0Ml/QLszOhJP1i4JGn1513qU6M4gONvZP/g0m9xuLgnxMicvXMygOrFB mqtCfdm8ADPtDxg7Rhop/D0LdMGK0DqPWBrKomtH/4O1NvGynNGUD9Alk6Umn6Qi fZuLmgVW/bjWNjyLTppBf/qJhP+GkMunUQCOvJ7dMy863A/vRT9GWJ3OnL5ai5fa OjNufKocdDeDxqehR3iOTG8tscCetQG9hFa7KFKZzd6gaB0ZmcxDpPleGWtmL+55 /BOHw7RltsNYfJJ1/XS9kpUvEH7RqrNGGZMdrS5dIylVuIcg2LkIanNQtnNZSONW lqysikpZzXgKzBg= -----END CERTIFICATE-----Generated at Wed Nov 5 19:48:15 2025 by rpki-client