$ rpki-client -vvf rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/DEF977A6E53611EB81682769C4F9AE02.roa File: DEF977A6E53611EB81682769C4F9AE02.roa (raw, json) Hash identifier: SO0gHlbHvBD1Qdf3mOeX+9pYdaFRkZquUMH00OZSNZ4= Subject key identifier: 41:29:B5:81:82:27:E6:AA:D2:A3:A8:44:F2:C8:62:A6:30:D7:84:18 Certificate issuer: /CN=A916A983/serialNumber=71565F2D7B924CD72B455B68B667194010BB1A9F Certificate serial: 1341 Authority key identifier: 71:56:5F:2D:7B:92:4C:D7:2B:45:5B:68:B6:67:19:40:10:BB:1A:9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/DEF977A6E53611EB81682769C4F9AE02.roa Signing time: Wed 06 Aug 2025 17:26:34 +0000 ROA not before: Wed 06 Aug 2025 17:26:34 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 141886 IP address blocks: 203.12.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4929 (0x1341) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A983, serialNumber=71565F2D7B924CD72B455B68B667194010BB1A9F Validity Not Before: Aug 6 17:26:34 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=6893904a-f461 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:26:b2:bc:93:65:33:4f:44:f0:63:66:a0:14: b8:d5:21:7b:a7:bf:76:73:a3:83:19:ff:55:11:22: ed:d5:5d:93:a5:a0:0d:71:9e:e0:44:8e:fc:58:37: 14:7c:16:97:11:d5:52:0c:25:19:02:fa:fe:78:49: ef:63:fa:58:6f:9a:92:ad:ed:46:46:c5:e1:c2:f1: f9:16:cd:82:b0:3d:33:9b:8a:9a:e2:8b:dd:09:f8: 6d:cc:a7:19:0d:c1:a2:60:49:ed:09:25:8f:e6:58: 63:20:f5:f5:72:b6:e1:53:c7:0f:a8:74:7c:a8:8a: 62:0c:03:07:c6:80:ae:1e:a5:e9:1d:ae:54:0f:c6: f7:8b:00:53:1c:c3:5a:09:3f:4c:a9:41:a1:d5:23: 85:05:83:eb:47:ec:2a:a9:a1:f3:b9:16:43:60:ef: b5:09:97:2e:f1:94:90:8f:5c:9b:a4:3f:e1:dc:91: 18:05:c3:9a:86:29:89:31:23:0d:9d:17:0b:f8:5a: f2:a7:52:d5:06:57:1f:ae:f4:4d:35:3e:93:ba:92: 6d:ae:71:32:15:ea:64:8e:34:c4:6a:53:6e:c8:50: b2:3d:7f:29:eb:01:b3:44:cd:1e:24:93:41:08:85: 8f:5e:5e:63:4e:09:b2:14:a8:b5:0d:58:19:f6:9a: 21:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:29:B5:81:82:27:E6:AA:D2:A3:A8:44:F2:C8:62:A6:30:D7:84:18 X509v3 Authority Key Identifier: keyid:71:56:5F:2D:7B:92:4C:D7:2B:45:5B:68:B6:67:19:40:10:BB:1A:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/DEF977A6E53611EB81682769C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.12.42.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:b6:8f:83:a9:ca:b8:89:32:db:a4:21:e5:db:84:0e:dd:e8: df:92:f7:f7:ec:e0:48:51:37:75:30:ba:80:c7:7c:95:21:2c: 62:a6:5c:63:6a:38:e8:d8:5a:93:d8:cd:6f:d9:85:fb:ba:0b: 4c:d2:c7:63:8f:89:bb:bc:62:4a:69:8e:5e:5f:37:3a:77:e9: b8:12:99:46:b3:a2:24:b4:5c:fc:ea:98:a9:84:69:5e:70:76: dc:d1:50:85:a2:dc:f5:bf:97:40:f8:64:62:42:89:4b:34:16: b2:0b:87:fa:86:12:86:ad:74:76:bc:0b:b9:31:ee:3e:de:c4: e3:3a:ae:41:5d:53:95:4f:d1:6a:a5:fe:db:fe:fc:3e:df:de: 19:40:d4:a6:0a:30:36:71:e4:9a:90:17:bc:e0:ae:f2:ef:40: 0b:aa:f1:a4:6c:61:22:2d:58:9d:a0:77:11:07:b6:19:cc:d3: bb:34:ce:80:d5:18:60:8e:93:af:69:05:38:00:0d:5c:75:ff: 91:0b:f1:e1:d3:62:b4:f4:c8:17:a4:06:98:e7:c4:29:d8:be: 59:56:15:ca:d8:7a:9d:d0:e3:ac:2d:5d:c6:b1:f8:2d:09:dd: 60:ad:f8:bf:0b:f1:28:72:cd:ec:1f:8d:61:f2:d1:16:d4:8e: e5:95:a4:36 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICE0EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE5ODMxMTAvBgNVBAUTKDcxNTY1RjJEN0I5MjRDRDcyQjQ1NUI2OEI2NjcxOTQw MTBCQjFBOUYwHhcNMjUwODA2MTcyNjM0WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODkzOTA0YS1mNDYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmyayvJNlM09E8GNmoBS41SF7p792c6ODGf9VESLt1V2TpaANcZ7gRI78WDcU fBaXEdVSDCUZAvr+eEnvY/pYb5qSre1GRsXhwvH5Fs2CsD0zm4qa4ovdCfhtzKcZ DcGiYEntCSWP5lhjIPX1crbhU8cPqHR8qIpiDAMHxoCuHqXpHa5UD8b3iwBTHMNa CT9MqUGh1SOFBYPrR+wqqaHzuRZDYO+1CZcu8ZSQj1ybpD/h3JEYBcOahimJMSMN nRcL+Fryp1LVBlcfrvRNNT6TupJtrnEyFepkjjTEalNuyFCyPX8p6wGzRM0eJJNB CIWPXl5jTgmyFKi1DVgZ9poheQIDAQABo4IClTCCApEwHQYDVR0OBBYEFEEptYGC J+aq0qOoRPLIYqYw14QYMB8GA1UdIwQYMBaAFHFWXy17kkzXK0VbaLZnGUAQuxqf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTk4My8xNjczMEQyMENE MEYxMUU4OUQ5RkYxNjVDNEY5QUUwMi9jVlpmTFh1U1ROY3JSVnRvdG1jWlFCQzdH cDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NWWmZMWHVTVE5jclJWdG90bWNaUUJDN0dwOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkE5ODMvMTY3MzBEMjBDRDBGMTFFODlEOUZGMTY1QzRGOUFFMDIvREVGOTc3QTZF NTM2MTFFQjgxNjgyNzY5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADLDCowDQYJKoZIhvcNAQELBQADggEBAGq2j4OpyriJMtuk IeXbhA7d6N+S9/fs4EhRN3UwuoDHfJUhLGKmXGNqOOjYWpPYzW/Zhfu6C0zSx2OP ibu8Ykppjl5fNzp36bgSmUazoiS0XPzqmKmEaV5wdtzRUIWi3PW/l0D4ZGJCiUs0 FrILh/qGEoatdHa8C7kx7j7exOM6rkFdU5VP0Wql/tv+/D7f3hlA1KYKMDZx5JqQ F7zgrvLvQAuq8aRsYSItWJ2gdxEHthnM07s0zoDVGGCOk69pBTgADVx1/5EL8eHT YrT0yBekBpjnxCnYvllWFcrYep3Q46wtXcax+C0J3WCt+L8L8ShyzewfjWHy0RbU juWVpDY= -----END CERTIFICATE-----Generated at Mon Aug 11 08:53:48 2025 by rpki-client