$ rpki-client -vvf rpki.apnic.net/member_repository/A915479A/24A48388E37911EFB4666B31C4F9AE02/8836D872E37B11EFB4D75458C4F9AE02.roa File: 8836D872E37B11EFB4D75458C4F9AE02.roa (raw, json) Hash identifier: SXO1+0APe7z5DY3Hw4Iwvndpe+8U4RSEIeHcUiLcev8= Subject key identifier: B2:78:68:00:F7:D2:20:5D:C7:21:2E:C8:9B:77:8B:A9:B4:94:53:F0 Certificate issuer: /CN=A915479A/serialNumber=0D2D6F3329C56BF6E8F941BDFDA7496DBE2530E5 Certificate serial: 02 Authority key identifier: 0D:2D:6F:33:29:C5:6B:F6:E8:F9:41:BD:FD:A7:49:6D:BE:25:30:E5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DS1vMynFa_bo-UG9_adJbb4lMOU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915479A/24A48388E37911EFB4666B31C4F9AE02/8836D872E37B11EFB4D75458C4F9AE02.roa Signing time: Wed 05 Feb 2025 04:41:58 +0000 ROA not before: Wed 05 Feb 2025 04:41:58 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 153571 IP address blocks: 161.248.248.0/23 maxlen: 23 161.248.248.0/24 maxlen: 24 161.248.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915479A/24A48388E37911EFB4666B31C4F9AE02/DS1vMynFa_bo-UG9_adJbb4lMOU.crl rsync://rpki.apnic.net/member_repository/A915479A/24A48388E37911EFB4666B31C4F9AE02/DS1vMynFa_bo-UG9_adJbb4lMOU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DS1vMynFa_bo-UG9_adJbb4lMOU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:44:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915479A, serialNumber=0D2D6F3329C56BF6E8F941BDFDA7496DBE2530E5 Validity Not Before: Feb 5 04:41:58 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67a2ec16-b757 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:48:fd:cc:1e:d5:aa:fb:70:d6:18:56:96:5f: 24:6a:f0:76:85:b7:4a:c4:2a:05:cf:da:74:c3:28: d7:e9:50:8b:43:5e:3d:3c:ae:5a:2d:42:7d:aa:34: e1:87:d5:45:27:df:08:54:de:c1:74:d4:d6:36:6b: 46:d4:e1:32:10:92:7e:2f:0a:1b:33:95:75:65:55: cd:35:27:37:3c:55:eb:78:ac:25:01:80:f2:c6:67: b5:74:c1:9e:3f:e2:2f:94:eb:3b:f2:3d:8d:04:09: 31:c3:0f:ae:92:91:93:d8:51:df:59:33:5a:96:f2: 77:fb:48:36:17:6e:01:77:00:f0:2e:36:6a:d2:77: 69:b5:43:9d:d2:83:c4:dd:f6:6b:7b:dd:26:94:2a: 67:89:58:49:8b:09:ef:50:ae:44:f5:d4:16:b8:59: 81:28:f4:16:10:a1:87:1f:fa:03:18:fa:a9:eb:35: ed:a5:f5:39:00:2f:b6:0a:c9:72:9e:8e:26:99:60: 0a:d7:f8:df:df:3e:f8:7c:28:28:48:b9:49:e2:f6: ae:78:30:58:4d:36:79:35:cc:12:70:e2:1a:a7:72: 14:ce:9f:fe:64:88:fe:00:cf:60:9b:f3:3b:1c:74: 55:2d:c3:0c:c0:e2:9b:fc:54:5d:dc:76:54:3f:ff: 90:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:78:68:00:F7:D2:20:5D:C7:21:2E:C8:9B:77:8B:A9:B4:94:53:F0 X509v3 Authority Key Identifier: keyid:0D:2D:6F:33:29:C5:6B:F6:E8:F9:41:BD:FD:A7:49:6D:BE:25:30:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915479A/24A48388E37911EFB4666B31C4F9AE02/DS1vMynFa_bo-UG9_adJbb4lMOU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DS1vMynFa_bo-UG9_adJbb4lMOU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915479A/24A48388E37911EFB4666B31C4F9AE02/8836D872E37B11EFB4D75458C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 161.248.248.0/23 Signature Algorithm: sha256WithRSAEncryption 32:92:86:48:6d:cb:c0:c3:e7:c7:bb:47:4d:a6:4f:28:43:72: 07:1f:8f:27:97:37:fe:c1:a4:79:5c:4a:92:e5:ad:2b:c4:f7: 58:71:0e:4c:3b:a8:32:5e:aa:7d:b9:e3:61:e1:d6:7d:83:a7: 1b:72:5b:e8:fa:97:c9:22:7b:e0:f1:70:13:d6:40:8f:3a:63: c3:ba:a8:46:23:d9:c8:f3:5c:68:6b:15:74:57:35:a3:37:38: 69:43:c7:e3:69:02:b8:df:a6:47:fc:ef:b3:af:c8:7d:7b:b9: 1a:bc:f8:f4:0e:ef:59:2e:d6:5b:6e:50:95:a7:02:fe:c5:f2: c8:17:eb:f3:54:63:50:b0:bb:de:b8:0d:59:c3:61:a3:83:1e: 62:f5:f5:11:7b:e8:5d:30:97:6b:78:9b:a4:11:53:5b:65:80: 0b:aa:4e:b6:ee:f1:64:5e:50:53:52:cc:34:7e:60:ee:b1:06: ee:7d:f2:5e:70:16:b3:85:8d:bb:b2:67:13:33:b5:40:13:9f: e5:50:63:7e:c6:22:cd:13:8a:9e:c2:56:1b:a6:6e:a7:fa:03: 38:e8:55:20:b9:f4:31:cb:c3:f1:3c:10:62:6a:20:4c:86:57: 17:8d:23:61:42:7b:30:73:fb:b6:1a:d6:f7:b4:29:9b:45:a3: a0:fb:36:96 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NDc5QTExMC8GA1UEBRMoMEQyRDZGMzMyOUM1NkJGNkU4Rjk0MUJERkRBNzQ5NkRC RTI1MzBFNTAeFw0yNTAyMDUwNDQxNThaFw0yNjA1MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3YTJlYzE2LWI3NTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKSP3MHtWq+3DWGFaWXyRq8HaFt0rEKgXP2nTDKNfpUItDXj08rlotQn2qNOGH 1UUn3whU3sF01NY2a0bU4TIQkn4vChszlXVlVc01Jzc8Vet4rCUBgPLGZ7V0wZ4/ 4i+U6zvyPY0ECTHDD66SkZPYUd9ZM1qW8nf7SDYXbgF3APAuNmrSd2m1Q53Sg8Td 9mt73SaUKmeJWEmLCe9QrkT11Ba4WYEo9BYQoYcf+gMY+qnrNe2l9TkAL7YKyXKe jiaZYArX+N/fPvh8KChIuUni9q54MFhNNnk1zBJw4hqnchTOn/5kiP4Az2Cb8zsc dFUtwwzA4pv8VF3cdlQ//5B7AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUsnhoAPfS IF3HIS7Im3eLqbSUU/AwHwYDVR0jBBgwFoAUDS1vMynFa/bo+UG9/adJbb4lMOUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0NzlBLzI0QTQ4Mzg4RTM3 OTExRUZCNDY2NkIzMUM0RjlBRTAyL0RTMXZNeW5GYV9iby1VRzlfYWRKYmI0bE1P VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRFMxdk15bkZhX2JvLVVHOV9hZEpiYjRsTU9VLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDc5QS8yNEE0ODM4OEUzNzkxMUVGQjQ2NjZCMzFDNEY5QUUwMi84ODM2RDg3MkUz N0IxMUVGQjRENzU0NThDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaH4+DANBgkqhkiG9w0BAQsFAAOCAQEAMpKGSG3LwMPnx7tH TaZPKENyBx+PJ5c3/sGkeVxKkuWtK8T3WHEOTDuoMl6qfbnjYeHWfYOnG3Jb6PqX ySJ74PFwE9ZAjzpjw7qoRiPZyPNcaGsVdFc1ozc4aUPH42kCuN+mR/zvs6/IfXu5 Grz49A7vWS7WW25QlacC/sXyyBfr81RjULC73rgNWcNho4MeYvX1EXvoXTCXa3ib pBFTW2WAC6pOtu7xZF5QU1LMNH5g7rEG7n3yXnAWs4WNu7JnEzO1QBOf5VBjfsYi zROKnsJWG6Zup/oDOOhVILn0McvD8TwQYmogTIZXF40jYUJ7MHP7thrW97Qpm0Wj oPs2lg== -----END CERTIFICATE-----Generated at Wed Nov 5 17:08:56 2025 by rpki-client