$ rpki-client -vvf rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/711F090E8AB411EA89D83541C4F9AE02.roa File: 711F090E8AB411EA89D83541C4F9AE02.roa (raw, json) Hash identifier: r78eeJS+BDDH2r+y+TjbT7lul0niVaJmaG9EPRTVLEA= Subject key identifier: FB:67:0C:D6:6C:BA:09:94:8B:BE:60:A2:66:4C:9E:CF:83:09:2E:FC Certificate issuer: /CN=A9165568/serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8 Certificate serial: 1D34 Authority key identifier: 67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/711F090E8AB411EA89D83541C4F9AE02.roa Signing time: Tue 04 Nov 2025 15:00:30 +0000 ROA not before: Tue 04 Nov 2025 15:00:30 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 17557 IP address blocks: 202.61.59.0/24 maxlen: 24 202.61.60.0/24 maxlen: 24 202.61.61.0/24 maxlen: 24 202.61.62.0/24 maxlen: 24 202.61.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7476 (0x1d34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165568, serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8 Validity Not Before: Nov 4 15:00:30 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=690a150d-cb9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e2:02:fa:57:0c:6a:82:a6:f8:81:70:33:f5: 19:14:eb:8f:72:28:8c:d3:a5:c0:d4:08:f5:89:4e: 34:4a:87:a2:a0:a6:68:bb:21:65:02:39:9b:41:42: b0:ee:bb:ff:b1:7b:6c:1a:04:ac:2d:a4:a1:f1:3c: 51:e3:89:ad:ea:ce:35:da:5f:3e:54:54:bf:f2:84: f1:28:19:3d:d7:12:b5:71:c6:08:cf:de:e9:5f:c6: ca:fe:76:5b:c0:8c:f4:77:5f:18:3d:ce:8a:3a:b0: 17:b9:ab:90:a2:71:10:fa:78:48:c1:d6:99:71:5e: 24:5b:93:68:d8:16:6d:44:ee:c7:ee:48:a8:44:ce: e0:66:67:12:24:85:d4:09:f5:d6:ed:5f:08:c9:c2: ae:7a:72:77:47:66:9b:40:d2:4f:cd:66:bb:a4:e0: 9a:dc:5d:b3:82:8a:2f:30:d2:72:fd:8e:c0:97:5f: b8:76:ba:26:8b:0f:88:9e:e8:1a:56:5d:fe:29:16: bd:63:a1:33:8b:48:79:ff:79:bc:61:fe:77:a0:b1: 32:31:a7:05:06:97:ad:41:7a:bb:e6:d1:b8:e6:bd: 3d:08:6c:4d:3f:36:2d:ae:e5:d1:c1:b9:b7:a2:b4: c1:01:17:b9:02:43:50:00:a3:d7:01:68:b9:2e:99: 77:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:67:0C:D6:6C:BA:09:94:8B:BE:60:A2:66:4C:9E:CF:83:09:2E:FC X509v3 Authority Key Identifier: keyid:67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/711F090E8AB411EA89D83541C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.61.59.0-202.61.63.255 Signature Algorithm: sha256WithRSAEncryption 04:48:77:c6:12:71:b0:74:06:2f:11:76:a1:30:8b:32:9a:fb: a9:b4:19:ff:80:74:4d:91:46:d2:20:36:2d:6f:e9:99:a2:fb: aa:f1:fc:e2:b6:b6:45:71:79:52:aa:4f:ee:bf:8e:91:f4:ec: d9:c8:45:7c:45:2e:30:6e:8e:e0:8e:3c:7d:c2:22:a7:a9:68: 90:46:d4:8c:ee:de:80:45:62:67:15:8d:e1:4f:17:7c:64:d2: 30:c6:b9:d9:bf:85:06:e2:dd:d8:63:7e:5e:5b:a0:4c:72:93: 8d:2c:32:29:11:bd:14:a2:7f:ed:ff:81:ca:c9:c3:54:40:8c: 0e:5f:5a:e0:47:39:bd:78:0f:89:3b:39:92:b1:71:9f:e3:45: 58:e4:4f:62:18:55:23:cd:1e:af:0f:b6:86:62:dc:6b:fe:e3: 16:09:eb:86:ec:9a:a8:64:cc:4b:0c:2a:da:f8:e5:5d:b5:2b: 99:e9:2c:98:8f:f8:40:00:96:11:19:4b:94:55:80:12:70:8a: 10:63:a5:91:85:3e:f4:3c:7f:bc:51:c4:dc:40:a2:b1:57:7c: 03:73:08:c4:33:9a:ce:01:2a:f3:64:db:de:e3:6a:54:ec:9c: 01:8a:e8:e4:09:31:e0:66:47:1f:0f:22:d1:88:61:34:50:2f: 39:2d:02:4a -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgICHTQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU1NjgxMTAvBgNVBAUTKDY3MDk3RTQ5MkY3M0Q2REJEMzFGQTAxNkEyRDVCNUI4 NkE5QjNGRDgwHhcNMjUxMTA0MTUwMDMwWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTBhMTUwZC1jYjlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvuIC+lcMaoKm+IFwM/UZFOuPciiM06XA1Aj1iU40SoeioKZouyFlAjmbQUKw 7rv/sXtsGgSsLaSh8TxR44mt6s412l8+VFS/8oTxKBk91xK1ccYIz97pX8bK/nZb wIz0d18YPc6KOrAXuauQonEQ+nhIwdaZcV4kW5No2BZtRO7H7kioRM7gZmcSJIXU CfXW7V8IycKuenJ3R2abQNJPzWa7pOCa3F2zgoovMNJy/Y7Al1+4dromiw+Inuga Vl3+KRa9Y6Ezi0h5/3m8Yf53oLEyMacFBpetQXq75tG45r09CGxNPzYtruXRwbm3 orTBARe5AkNQAKPXAWi5Lpl30QIDAQABo4ICnTCCApkwHQYDVR0OBBYEFPtnDNZs ugmUi75gomZMns+DCS78MB8GA1UdIwQYMBaAFGcJfkkvc9bb0x+gFqLVtbhqmz/Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTU2OC9CRDFBOTVEMjFE ODcxMUUyOUJFM0U2REYwOEIwMkNEMi9ad2wtU1M5ejF0dlRINkFXb3RXMXVHcWJQ OWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p3bC1TUzl6MXR2VEg2QVdvdFcxdUdxYlA5Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjU1NjgvQkQxQTk1RDIxRDg3MTFFMjlCRTNFNkRGMDhCMDJDRDIvNzExRjA5MEU4 QUI0MTFFQTg5RDgzNTQxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E GDAWMBQEAgABMA4wDAMEAMo9OwMEBso9ADANBgkqhkiG9w0BAQsFAAOCAQEABEh3 xhJxsHQGLxF2oTCLMpr7qbQZ/4B0TZFG0iA2LW/pmaL7qvH84ra2RXF5UqpP7r+O kfTs2chFfEUuMG6O4I48fcIip6lokEbUjO7egEViZxWN4U8XfGTSMMa52b+FBuLd 2GN+XlugTHKTjSwyKRG9FKJ/7f+BysnDVECMDl9a4Ec5vXgPiTs5krFxn+NFWORP YhhVI80erw+2hmLca/7jFgnrhuyaqGTMSwwq2vjlXbUrmeksmI/4QACWERlLlFWA EnCKEGOlkYU+9Dx/vFHE3ECisVd8A3MIxDOazgEq82Tb3uNqVOycAYro5Akx4GZH Hw8i0YhhNFAvOS0CSg== -----END CERTIFICATE-----Generated at Wed Nov 5 13:07:02 2025 by rpki-client