$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/DF423C0071ED11F090895014C4F9AE02.roa File: DF423C0071ED11F090895014C4F9AE02.roa (raw, json) Hash identifier: dMZzuTkHFltG/dVIRN/FxGvcF5ptH85D1e8y4cQdkaI= Subject key identifier: 6B:DD:09:93:9D:BF:B5:14:09:79:4B:69:A2:E5:A2:2F:50:E5:0B:3D Certificate issuer: /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206 Certificate serial: 392D Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/DF423C0071ED11F090895014C4F9AE02.roa Signing time: Tue 05 Aug 2025 11:19:55 +0000 ROA not before: Tue 05 Aug 2025 11:19:55 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 111.88.96.0/19 maxlen: 24 111.88.128.0/21 maxlen: 24 111.88.160.0/21 maxlen: 24 111.88.172.0/22 maxlen: 24 111.88.176.0/21 maxlen: 24 111.88.192.0/19 maxlen: 24 111.88.224.0/21 maxlen: 24 115.186.44.0/23 maxlen: 23 115.186.46.0/24 maxlen: 24 115.186.62.0/24 maxlen: 24 115.186.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14637 (0x392d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206 Validity Not Before: Aug 5 11:19:55 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6891e8db-18ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ed:47:d3:3a:e1:3c:28:86:e1:5d:10:5d:a3: 47:e4:38:a1:64:3b:d1:9c:dd:eb:4e:ec:f2:84:7a: 0a:b3:20:39:b5:54:15:09:a7:3c:c8:15:17:16:e4: 51:0f:df:c3:af:08:71:64:e1:39:d0:c6:f2:5f:d1: 86:67:dd:7c:7c:25:88:a8:9d:cd:12:68:30:6a:69: 8d:e8:7c:9d:90:37:83:8d:6f:ff:66:db:fe:cc:7d: 47:1a:b6:8e:49:39:64:13:ef:17:89:8b:90:d7:3c: a3:70:3c:f5:78:1e:09:e3:de:2f:2c:bd:dc:cc:78: 66:32:97:58:3d:82:f8:dd:1d:b8:79:c4:b5:a4:e1: 98:62:58:66:e1:28:ae:e2:80:72:1a:02:0c:35:15: 60:13:0e:f1:72:93:ef:b2:c1:3a:dc:43:93:61:41: ba:14:29:c4:04:d5:e2:c3:7a:f5:01:98:a2:94:5e: ac:e8:63:f0:f0:81:11:a9:34:c2:d1:00:06:59:b9: 9a:d7:71:52:5d:7d:e2:d8:3c:26:42:bd:72:48:9a: d0:c7:d9:a4:bb:31:c8:31:a8:da:5b:0d:74:8c:98: 08:f1:80:c7:40:65:ae:90:99:15:9c:84:d9:0d:78: 64:02:db:66:11:89:cd:09:dd:51:a4:99:0c:5e:4e: 02:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:DD:09:93:9D:BF:B5:14:09:79:4B:69:A2:E5:A2:2F:50:E5:0B:3D X509v3 Authority Key Identifier: keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/DF423C0071ED11F090895014C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 111.88.96.0-111.88.135.255 111.88.160.0/21 111.88.172.0-111.88.183.255 111.88.192.0-111.88.231.255 115.186.44.0-115.186.46.255 115.186.62.0/24 115.186.104.0/24 Signature Algorithm: sha256WithRSAEncryption a4:c9:a4:58:f4:c2:5c:bc:56:a2:45:16:90:b3:d2:17:82:01: e2:23:7a:1c:79:6c:13:58:c1:ad:09:c9:6e:79:6c:e1:08:36: ad:bc:1a:0a:3f:eb:11:7a:77:ee:b7:fe:68:ce:8d:cd:3c:9e: 6f:71:4a:db:c1:18:72:10:60:22:a1:ea:a6:39:e9:6c:7c:45: 30:1c:aa:b0:83:8c:40:f2:eb:13:1f:73:d8:6f:83:a7:b9:87: c4:0e:87:52:15:ce:5c:e8:c9:ad:61:2d:7f:ff:db:1b:e6:23: 0d:c1:38:43:ed:ab:2e:50:67:85:2d:8c:9e:60:77:dc:31:81: 69:13:54:14:9e:7b:db:b0:68:d2:9d:a9:46:41:24:4b:e9:39: 91:6d:6d:38:2d:97:53:35:0d:37:81:97:71:98:0d:51:c7:41: e9:d3:0b:6c:00:c3:88:fe:2f:62:06:e2:25:e4:e0:64:a3:16: f1:6b:72:e0:60:c9:74:4a:da:ea:aa:2a:7b:b3:bf:c7:a1:be: d4:ba:50:0e:8d:ab:6d:88:6e:7a:f3:63:b0:92:8c:4d:85:e4: a8:8a:65:6e:ae:29:1a:d9:17:1d:89:bc:29:23:ad:fb:a4:04: 17:5b:55:6c:48:7d:fc:72:6f:bd:13:ef:65:70:ec:b6:c7:f0: de:2b:a8:a1 -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgICOS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM4M0IxMTAvBgNVBAUTKEU3NkVCMjU2QzBGQ0IwN0UyOTA3OTc4MzQzRTlBRDlE RDIxRkUyMDYwHhcNMjUwODA1MTExOTU1WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODkxZThkYi0xOGNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyu1H0zrhPCiG4V0QXaNH5DihZDvRnN3rTuzyhHoKsyA5tVQVCac8yBUXFuRR D9/DrwhxZOE50MbyX9GGZ918fCWIqJ3NEmgwammN6HydkDeDjW//Ztv+zH1HGraO STlkE+8XiYuQ1zyjcDz1eB4J494vLL3czHhmMpdYPYL43R24ecS1pOGYYlhm4Siu 4oByGgIMNRVgEw7xcpPvssE63EOTYUG6FCnEBNXiw3r1AZiilF6s6GPw8IERqTTC 0QAGWbma13FSXX3i2DwmQr1ySJrQx9mkuzHIMajaWw10jJgI8YDHQGWukJkVnITZ DXhkAttmEYnNCd1RpJkMXk4CuwIDAQABo4IC2TCCAtUwHQYDVR0OBBYEFGvdCZOd v7UUCXlLaaLloi9Q5Qs9MB8GA1UdIwQYMBaAFOduslbA/LB+KQeXg0PprZ3SH+IG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzgzQi9FNEUxMEI0QTFE ODgxMUUyQTAxMkNCRTEwOEIwMkNEMi81MjZ5VnNEOHNINHBCNWVEUS1tdG5kSWY0 Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzUyNnlWc0Q4c0g0cEI1ZURRLW10bmRJZjRnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkM4M0IvRTRFMTBCNEExRDg4MTFFMkEwMTJDQkUxMDhCMDJDRDIvREY0MjNDMDA3 MUVEMTFGMDkwODk1MDE0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwYwYIKwYBBQUHAQcBAf8E VDBSMFAEAgABMEowDAMEBW9YYAMEA29YgAMEA29YoDAMAwQCb1isAwQDb1iwMAwD BAZvWMADBANvWOAwDAMEAnO6LAMEAHO6LgMEAHO6PgMEAHO6aDANBgkqhkiG9w0B AQsFAAOCAQEApMmkWPTCXLxWokUWkLPSF4IB4iN6HHlsE1jBrQnJbnls4Qg2rbwa Cj/rEXp37rf+aM6NzTyeb3FK28EYchBgIqHqpjnpbHxFMByqsIOMQPLrEx9z2G+D p7mHxA6HUhXOXOjJrWEtf//bG+YjDcE4Q+2rLlBnhS2MnmB33DGBaRNUFJ5727Bo 0p2pRkEkS+k5kW1tOC2XUzUNN4GXcZgNUcdB6dMLbADDiP4vYgbiJeTgZKMW8Wty 4GDJdEra6qoqe7O/x6G+1LpQDo2rbYhuevNjsJKMTYXkqIplbq4pGtkXHYm8KSOt +6QEF1tVbEh9/HJvvRPvZXDstsfw3iuooQ== -----END CERTIFICATE-----Generated at Sat Aug 9 22:48:03 2025 by rpki-client