$ rpki-client -vvf rpki.apnic.net/member_repository/A915CC16/24D39D62F08011EAB5BB1037C4F9AE02/909B1B4AF08211EA87323C3AC4F9AE02.roa File: 909B1B4AF08211EA87323C3AC4F9AE02.roa (raw, json) Hash identifier: KCn0djJXYdQUHwydVX2hN8hhnhUzjMff5yn3AXVixe0= Subject key identifier: E6:28:7D:AF:A8:7C:AC:C7:B7:87:15:EF:43:73:E8:32:98:7F:D9:96 Certificate issuer: /CN=A915CC16/serialNumber=587E7896025003ACD0C29B7F3F29A0708F6B286A Certificate serial: 080C Authority key identifier: 58:7E:78:96:02:50:03:AC:D0:C2:9B:7F:3F:29:A0:70:8F:6B:28:6A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WH54lgJQA6zQwpt_PymgcI9rKGo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915CC16/24D39D62F08011EAB5BB1037C4F9AE02/909B1B4AF08211EA87323C3AC4F9AE02.roa Signing time: Mon 28 Jul 2025 21:31:46 +0000 ROA not before: Mon 28 Jul 2025 21:31:46 +0000 ROA not after: Fri 28 Nov 2025 00:00:00 +0000 asID: 135092 IP address blocks: 36.255.52.0/22 maxlen: 24 103.209.20.0/22 maxlen: 24 2400:bce0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915CC16/24D39D62F08011EAB5BB1037C4F9AE02/WH54lgJQA6zQwpt_PymgcI9rKGo.crl rsync://rpki.apnic.net/member_repository/A915CC16/24D39D62F08011EAB5BB1037C4F9AE02/WH54lgJQA6zQwpt_PymgcI9rKGo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WH54lgJQA6zQwpt_PymgcI9rKGo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 21:13:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2060 (0x80c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915CC16, serialNumber=587E7896025003ACD0C29B7F3F29A0708F6B286A Validity Not Before: Jul 28 21:31:46 2025 GMT Not After : Nov 28 00:00:00 2025 GMT Subject: CN=6887ec42-2f8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:14:0e:b6:d2:07:33:9a:06:76:de:3d:2d:f6: e1:3a:1d:76:6f:78:86:a6:d4:90:02:fe:d0:65:00: c6:77:62:09:3e:c4:fa:e5:2f:98:8e:80:bd:b9:16: 79:f6:a0:9c:31:f3:7f:ff:53:23:60:78:06:44:7f: 4b:7f:ef:98:0a:be:d8:49:29:c9:b2:2e:4f:7d:2c: 8b:cf:b1:5a:e8:24:08:a5:2c:c7:cc:a4:7b:02:ce: 73:a3:14:92:4e:ce:c9:c0:81:46:60:b6:8a:4d:01: 99:77:c1:a6:7e:30:a0:7a:8b:84:3c:ac:00:3a:5f: 0f:f6:6d:3b:72:f0:af:f5:f3:10:6a:4f:b3:24:02: ee:f4:57:10:7a:41:50:b3:f7:2a:22:96:0e:be:33: 8d:a7:ad:35:00:6c:79:6c:82:b6:c1:4e:c1:d8:bc: 48:cf:b3:8f:24:b5:2a:e1:dd:68:a6:86:71:74:dc: 4b:5c:dd:ee:be:46:17:a3:8e:24:b5:0f:ee:95:28: 35:01:9d:32:eb:e7:b9:44:fb:8c:c7:fc:da:02:72: 5e:b7:de:de:cc:05:67:b6:85:a6:fb:40:78:89:e6: 53:ca:03:16:35:ad:f0:32:96:e6:2c:18:61:a2:df: c1:8e:d7:59:8d:5a:98:79:9f:c2:ec:f6:1e:9d:83: 9f:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:28:7D:AF:A8:7C:AC:C7:B7:87:15:EF:43:73:E8:32:98:7F:D9:96 X509v3 Authority Key Identifier: keyid:58:7E:78:96:02:50:03:AC:D0:C2:9B:7F:3F:29:A0:70:8F:6B:28:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915CC16/24D39D62F08011EAB5BB1037C4F9AE02/WH54lgJQA6zQwpt_PymgcI9rKGo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WH54lgJQA6zQwpt_PymgcI9rKGo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CC16/24D39D62F08011EAB5BB1037C4F9AE02/909B1B4AF08211EA87323C3AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 36.255.52.0/22 103.209.20.0/22 IPv6: 2400:bce0::/32 Signature Algorithm: sha256WithRSAEncryption 37:76:7b:77:4b:de:2e:2d:70:88:21:05:10:f8:5c:18:90:33: 91:c4:f4:0b:b0:83:fb:6f:c6:eb:7b:9b:1c:f1:a7:1b:bd:a5: 7c:a6:36:bf:a1:e4:a3:a7:5d:28:a7:67:33:30:e0:96:d4:ff: 09:40:de:e0:a3:29:f1:03:d0:96:07:03:ec:5f:72:4f:3e:5f: f7:7a:7e:1b:26:d6:79:76:c4:62:29:bb:b1:64:8e:bc:bf:e1: fe:8a:83:c7:e3:51:b4:e0:69:87:f7:81:97:d6:35:57:fc:55: 11:97:79:5b:34:76:4b:ee:5f:6e:9e:70:2f:e0:d6:08:94:8c: 55:69:e2:cd:8f:78:4f:9b:55:01:01:fd:06:53:5e:22:1e:21: e6:a4:b0:4e:f6:47:40:17:3a:15:3d:6c:b0:e9:80:ab:b0:cc: 62:b8:c7:19:f0:e9:7f:0d:5e:51:4a:b3:c8:e9:c0:d8:f3:6b: 03:2e:79:f0:e8:f6:2c:bd:91:11:53:f2:b7:cb:2d:c3:b8:ae: 10:04:85:d4:a5:5f:1d:18:83:c6:e4:e2:8b:c7:b9:fb:9f:f4: 97:6d:8c:1e:3a:f6:82:dd:24:df:f7:11:e4:01:87:9c:a2:0d: a7:7c:31:c0:88:0e:c8:59:99:e9:7a:ec:67:05:3a:b0:47:d9: ec:50:d8:fb -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICCAwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUNDMTYxMTAvBgNVBAUTKDU4N0U3ODk2MDI1MDAzQUNEMEMyOUI3RjNGMjlBMDcw OEY2QjI4NkEwHhcNMjUwNzI4MjEzMTQ2WhcNMjUxMTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02ODg3ZWM0Mi0yZjhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoxQOttIHM5oGdt49LfbhOh12b3iGptSQAv7QZQDGd2IJPsT65S+YjoC9uRZ5 9qCcMfN//1MjYHgGRH9Lf++YCr7YSSnJsi5PfSyLz7Fa6CQIpSzHzKR7As5zoxSS Ts7JwIFGYLaKTQGZd8GmfjCgeouEPKwAOl8P9m07cvCv9fMQak+zJALu9FcQekFQ s/cqIpYOvjONp601AGx5bIK2wU7B2LxIz7OPJLUq4d1opoZxdNxLXN3uvkYXo44k tQ/ulSg1AZ0y6+e5RPuMx/zaAnJet97ezAVntoWm+0B4ieZTygMWNa3wMpbmLBhh ot/BjtdZjVqYeZ/C7PYenYOfpQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFOYofa+o fKzHt4cV70Nz6DKYf9mWMB8GA1UdIwQYMBaAFFh+eJYCUAOs0MKbfz8poHCPayhq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Q0MxNi8yNEQzOUQ2MkYw ODAxMUVBQjVCQjEwMzdDNEY5QUUwMi9XSDU0bGdKUUE2elF3cHRfUHltZ2NJOXJL R28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dINTRsZ0pRQTZ6UXdwdF9QeW1nY0k5cktHby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUNDMTYvMjREMzlENjJGMDgwMTFFQUI1QkIxMDM3QzRGOUFFMDIvOTA5QjFCNEFG MDgyMTFFQTg3MzIzQzNBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAIk/zQDBAJn0RQwDQQCAAIwBwMFACQAvOAwDQYJKoZIhvcN AQELBQADggEBADd2e3dL3i4tcIghBRD4XBiQM5HE9Auwg/tvxut7mxzxpxu9pXym Nr+h5KOnXSinZzMw4JbU/wlA3uCjKfED0JYHA+xfck8+X/d6fhsm1nl2xGIpu7Fk jry/4f6Kg8fjUbTgaYf3gZfWNVf8VRGXeVs0dkvuX26ecC/g1giUjFVp4s2PeE+b VQEB/QZTXiIeIeaksE72R0AXOhU9bLDpgKuwzGK4xxnw6X8NXlFKs8jpwNjzawMu efDo9iy9kRFT8rfLLcO4rhAEhdSlXx0Yg8bk4ovHufuf9JdtjB469oLdJN/3EeQB h5yiDad8McCIDshZmel67GcFOrBH2exQ2Ps= -----END CERTIFICATE-----Generated at Wed Aug 13 13:28:00 2025 by rpki-client