$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/F64125BC6C7311F08E141A3DC4F9AE02.roa File: F64125BC6C7311F08E141A3DC4F9AE02.roa (raw, json) Hash identifier: aS4YPz3WEsgv739ghiy1zDWE/HCfEBrkvC9D615/bFw= Subject key identifier: 1E:CE:A1:25:58:1B:41:1E:64:4A:13:B0:14:91:48:13:62:83:D2:E9 Certificate issuer: /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206 Certificate serial: 3914 Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/F64125BC6C7311F08E141A3DC4F9AE02.roa Signing time: Tue 29 Jul 2025 12:02:56 +0000 ROA not before: Tue 29 Jul 2025 12:02:56 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 149419 IP address blocks: 111.88.168.0/24 maxlen: 24 111.88.169.0/24 maxlen: 24 111.88.170.0/24 maxlen: 24 111.88.171.0/24 maxlen: 24 111.88.239.0/24 maxlen: 24 115.186.117.0/24 maxlen: 24 115.186.118.0/24 maxlen: 24 115.186.119.0/24 maxlen: 24 115.186.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14612 (0x3914) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206 Validity Not Before: Jul 29 12:02:56 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6888b86f-7fab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c7:0f:9e:7e:a7:07:4f:14:8c:39:32:15:7b: 92:08:c2:8d:76:b6:30:d5:d9:ae:2e:71:58:c3:43: b8:d0:b7:4d:84:62:bb:11:7a:19:14:d9:04:86:50: b1:98:45:17:1c:28:f0:d0:19:fa:dc:62:75:39:54: c3:d0:50:9a:46:a1:2a:15:0e:b6:85:e0:5a:81:6f: 8c:4f:ba:aa:90:12:74:47:aa:7d:4f:66:a3:c9:70: 53:d1:e9:7f:92:88:d2:a1:3b:68:29:6b:ad:7f:fe: a3:19:65:34:05:d3:dd:6e:28:86:48:ec:22:6a:81: 2d:7e:24:e5:e6:26:2e:1c:65:a5:44:bb:ec:a1:51: 4f:39:4d:44:35:1a:53:30:bd:23:08:38:33:5a:2d: c1:f7:c0:06:b0:05:02:dd:ed:92:eb:a0:9e:e0:7a: e0:47:80:6f:57:c3:d1:b0:86:11:f0:07:34:ec:07: d5:b8:ac:0f:fa:bd:5f:c6:fc:6e:c7:0f:1a:a3:c5: 4f:22:95:25:2a:3f:38:d3:30:00:91:d5:eb:18:ea: 30:77:65:41:dd:00:01:86:26:4b:3c:52:86:83:40: b1:32:e8:2e:29:0e:2a:92:e1:68:f9:5d:19:e9:e5: 87:b0:16:6e:4d:d6:a2:80:de:53:86:ef:83:43:35: e2:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:CE:A1:25:58:1B:41:1E:64:4A:13:B0:14:91:48:13:62:83:D2:E9 X509v3 Authority Key Identifier: keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/F64125BC6C7311F08E141A3DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 111.88.168.0/22 111.88.239.0/24 115.186.117.0-115.186.120.255 Signature Algorithm: sha256WithRSAEncryption ce:c3:08:72:98:8f:11:9b:69:94:eb:3b:c2:70:dc:c1:6d:d4: 12:ae:b3:2f:13:d2:71:da:4b:a1:c3:ed:b3:de:2e:3b:ff:88: 13:3d:96:d6:2e:e4:fa:08:7a:b9:80:19:5a:44:4d:4a:53:02: e8:b1:f1:cb:b8:c8:c2:77:a3:a9:ea:bd:04:d0:79:2f:9e:6a: ad:92:d6:11:25:de:4c:d8:b8:6f:ac:c7:86:82:df:c1:c4:e6: de:3d:f4:b5:24:9c:09:dd:e7:0a:c9:bb:7e:75:00:3e:79:89: f8:63:b4:4f:7e:76:26:8e:d5:ff:3f:37:62:ad:c4:94:b6:f0: 4a:06:f4:d9:e2:00:c2:2c:11:bf:ff:36:70:17:4c:c5:e7:34: f2:c3:5b:83:60:60:c5:ab:54:8b:f4:d0:31:2a:ed:d3:15:5f: 49:bb:6c:e5:38:d1:8b:4e:89:42:40:bc:bb:aa:5f:20:0b:95: 09:56:44:64:90:f6:e4:ad:85:61:7e:1c:92:3f:54:c1:89:64: 1e:d7:6e:c5:9c:e8:d1:d6:7b:3c:02:84:01:8e:e2:ac:8a:7e: 1b:82:a0:fa:b4:70:0b:ac:90:40:88:2d:75:d5:4e:b2:4b:40: 11:b6:0f:e9:c6:2b:9f:7a:2e:09:3e:ef:0a:61:16:91:b4:04: b1:21:7f:5a -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgICORQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM4M0IxMTAvBgNVBAUTKEU3NkVCMjU2QzBGQ0IwN0UyOTA3OTc4MzQzRTlBRDlE RDIxRkUyMDYwHhcNMjUwNzI5MTIwMjU2WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODg4Yjg2Zi03ZmFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArccPnn6nB08UjDkyFXuSCMKNdrYw1dmuLnFYw0O40LdNhGK7EXoZFNkEhlCx mEUXHCjw0Bn63GJ1OVTD0FCaRqEqFQ62heBagW+MT7qqkBJ0R6p9T2ajyXBT0el/ kojSoTtoKWutf/6jGWU0BdPdbiiGSOwiaoEtfiTl5iYuHGWlRLvsoVFPOU1ENRpT ML0jCDgzWi3B98AGsAUC3e2S66Ce4HrgR4BvV8PRsIYR8Ac07AfVuKwP+r1fxvxu xw8ao8VPIpUlKj840zAAkdXrGOowd2VB3QABhiZLPFKGg0CxMuguKQ4qkuFo+V0Z 6eWHsBZuTdaigN5Thu+DQzXikQIDAQABo4ICqTCCAqUwHQYDVR0OBBYEFB7OoSVY G0EeZEoTsBSRSBNig9LpMB8GA1UdIwQYMBaAFOduslbA/LB+KQeXg0PprZ3SH+IG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzgzQi9FNEUxMEI0QTFE ODgxMUUyQTAxMkNCRTEwOEIwMkNEMi81MjZ5VnNEOHNINHBCNWVEUS1tdG5kSWY0 Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzUyNnlWc0Q4c0g0cEI1ZURRLW10bmRJZjRnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkM4M0IvRTRFMTBCNEExRDg4MTFFMkEwMTJDQkUxMDhCMDJDRDIvRjY0MTI1QkM2 QzczMTFGMDhFMTQxQTNEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMwYIKwYBBQUHAQcBAf8E JDAiMCAEAgABMBoDBAJvWKgDBABvWO8wDAMEAHO6dQMEAHO6eDANBgkqhkiG9w0B AQsFAAOCAQEAzsMIcpiPEZtplOs7wnDcwW3UEq6zLxPScdpLocPts94uO/+IEz2W 1i7k+gh6uYAZWkRNSlMC6LHxy7jIwnejqeq9BNB5L55qrZLWESXeTNi4b6zHhoLf wcTm3j30tSScCd3nCsm7fnUAPnmJ+GO0T352Jo7V/z83Yq3ElLbwSgb02eIAwiwR v/82cBdMxec08sNbg2BgxatUi/TQMSrt0xVfSbts5TjRi06JQkC8u6pfIAuVCVZE ZJD25K2FYX4ckj9UwYlkHtduxZzo0dZ7PAKEAY7irIp+G4Kg+rRwC6yQQIgtddVO sktAEbYP6cYrn3ouCT7vCmEWkbQEsSF/Wg== -----END CERTIFICATE-----Generated at Sun Aug 10 04:14:43 2025 by rpki-client