$ rpki-client -vvf rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/0B72CFAC049211EBB8144531C4F9AE02.roa File: 0B72CFAC049211EBB8144531C4F9AE02.roa (raw, json) Hash identifier: 8qQ0fcDr/aGVnyD7P+G/6xo5kjUt3vBtdFXB7xYrVKk= Subject key identifier: 2F:27:8F:AD:C4:2C:30:3F:78:E3:D6:CE:CD:CB:05:DC:10:CF:75:9D Certificate issuer: /CN=A917A47E/serialNumber=02E97CAF6BB554871B7ABCE6E8D78320EB944691 Certificate serial: 2408 Authority key identifier: 02:E9:7C:AF:6B:B5:54:87:1B:7A:BC:E6:E8:D7:83:20:EB:94:46:91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aul8r2u1VIcberzm6NeDIOuURpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/0B72CFAC049211EBB8144531C4F9AE02.roa Signing time: Thu 31 Jul 2025 16:23:24 +0000 ROA not before: Thu 31 Jul 2025 16:23:24 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 133466 IP address blocks: 45.112.36.0/22 maxlen: 24 103.4.124.0/22 maxlen: 24 2401:d00::/32 maxlen: 32 2401:d00::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.crl rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aul8r2u1VIcberzm6NeDIOuURpE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9224 (0x2408) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A47E, serialNumber=02E97CAF6BB554871B7ABCE6E8D78320EB944691 Validity Not Before: Jul 31 16:23:24 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=688b987c-63d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f3:0b:b6:f6:1f:39:25:62:3c:13:83:3a:56: b2:1c:23:e0:15:b2:20:69:94:82:56:a4:78:2e:17: 40:4a:e2:97:d4:6d:cc:4e:9b:d4:e0:1a:b7:75:3c: 48:11:5f:c5:bc:37:52:01:fc:5c:1b:6e:0d:4a:12: 76:fe:80:b5:34:42:ad:49:9a:92:c4:0e:ca:59:ed: 3c:44:ab:5e:4e:85:82:3b:c1:49:5c:9d:68:16:12: de:c7:68:91:ab:e0:21:ce:17:05:ab:00:f5:fa:92: 53:c9:30:ff:75:77:75:fb:f7:6b:5c:7f:2e:fa:ea: f4:da:c7:46:db:c0:a7:3d:10:4a:b2:f2:36:15:cc: 60:89:27:0a:0c:57:e6:dc:55:ed:3c:ce:a7:fb:41: e2:66:b7:65:cb:4a:13:44:b0:94:57:b5:92:c7:c1: b0:b6:72:3d:6e:d3:1e:a1:8b:2c:93:cb:54:ad:b5: c2:ab:2f:6e:69:30:c5:e2:bb:b5:ed:85:0e:eb:4a: fb:02:dd:9f:7a:d9:e2:de:73:09:66:8a:b6:56:2b: 4c:39:b6:3a:85:78:bf:ab:68:85:c7:ec:a1:ab:46: d0:a4:7c:9d:13:ef:4b:e8:81:d1:39:f7:3b:9d:1d: 2c:cd:8c:ce:2c:a7:f6:6d:37:c9:e7:ed:93:f7:cd: d8:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:27:8F:AD:C4:2C:30:3F:78:E3:D6:CE:CD:CB:05:DC:10:CF:75:9D X509v3 Authority Key Identifier: keyid:02:E9:7C:AF:6B:B5:54:87:1B:7A:BC:E6:E8:D7:83:20:EB:94:46:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aul8r2u1VIcberzm6NeDIOuURpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/0B72CFAC049211EBB8144531C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.112.36.0/22 103.4.124.0/22 IPv6: 2401:d00::/32 Signature Algorithm: sha256WithRSAEncryption 46:39:25:b8:ec:da:d9:71:4f:2a:c9:01:dc:16:34:cb:d5:a4: 99:11:39:78:1d:c5:f8:bc:d3:9d:20:22:c2:71:01:73:ba:c3: ab:f6:cb:c6:d3:e2:36:2a:9e:4a:97:de:fb:de:9d:75:42:57: e3:53:c2:27:54:ff:0f:85:cd:f7:ca:65:08:40:88:47:18:59: a4:1d:35:a9:5d:4f:d2:5e:f3:4e:0e:c8:83:f2:87:2b:cd:15: a5:9b:ee:4e:57:62:02:60:be:13:10:b6:87:a6:21:06:d2:09: 88:7d:5a:93:4a:a1:05:90:fb:6d:34:e1:ab:40:3d:c7:d7:bc: 40:52:12:e1:a6:29:dc:b0:34:56:93:3d:7d:54:32:bf:b3:ff: 95:8d:d0:aa:37:7a:a2:1a:17:5d:64:7e:41:83:0a:0b:44:95: c3:19:d0:6e:4a:ac:7b:7a:fe:00:db:fa:f5:48:0e:20:b7:65: a5:fa:e5:51:87:ae:da:21:ef:68:52:e2:4b:32:68:30:3d:01: a0:d9:43:fb:c0:fa:51:96:e9:b2:43:d1:f6:56:68:a4:64:b4: e0:55:02:c8:7d:6c:7f:bf:1b:c9:d3:a9:36:36:cb:c4:f6:c1: cf:fa:2f:91:ae:e2:6d:a0:99:02:a8:95:6c:01:a0:03:55:59: b2:a8:58:9d -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICJAgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E0N0UxMTAvBgNVBAUTKDAyRTk3Q0FGNkJCNTU0ODcxQjdBQkNFNkU4RDc4MzIw RUI5NDQ2OTEwHhcNMjUwNzMxMTYyMzI0WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODhiOTg3Yy02M2Q5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApvMLtvYfOSViPBODOlayHCPgFbIgaZSCVqR4LhdASuKX1G3MTpvU4Bq3dTxI EV/FvDdSAfxcG24NShJ2/oC1NEKtSZqSxA7KWe08RKteToWCO8FJXJ1oFhLex2iR q+AhzhcFqwD1+pJTyTD/dXd1+/drXH8u+ur02sdG28CnPRBKsvI2FcxgiScKDFfm 3FXtPM6n+0HiZrdly0oTRLCUV7WSx8GwtnI9btMeoYssk8tUrbXCqy9uaTDF4ru1 7YUO60r7At2fetni3nMJZoq2VitMObY6hXi/q2iFx+yhq0bQpHydE+9L6IHROfc7 nR0szYzOLKf2bTfJ5+2T983YlQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFC8nj63E LDA/eOPWzs3LBdwQz3WdMB8GA1UdIwQYMBaAFALpfK9rtVSHG3q85ujXgyDrlEaR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTQ3RS8zRTZCRUM1NjY5 MDkxMUU1ODA0RjAwNzJDNEY5QUUwMi9BdWw4cjJ1MVZJY2JlcnptNk5lRElPdVVS cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0F1bDhyMnUxVkljYmVyem02TmVESU91VVJwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0E0N0UvM0U2QkVDNTY2OTA5MTFFNTgwNEYwMDcyQzRGOUFFMDIvMEI3MkNGQUMw NDkyMTFFQkI4MTQ0NTMxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAItcCQDBAJnBHwwDQQCAAIwBwMFACQBDQAwDQYJKoZIhvcN AQELBQADggEBAEY5Jbjs2tlxTyrJAdwWNMvVpJkROXgdxfi8050gIsJxAXO6w6v2 y8bT4jYqnkqX3vvenXVCV+NTwidU/w+FzffKZQhAiEcYWaQdNaldT9Je804OyIPy hyvNFaWb7k5XYgJgvhMQtoemIQbSCYh9WpNKoQWQ+2004atAPcfXvEBSEuGmKdyw NFaTPX1UMr+z/5WN0Ko3eqIaF11kfkGDCgtElcMZ0G5KrHt6/gDb+vVIDiC3ZaX6 5VGHrtoh72hS4ksyaDA9AaDZQ/vA+lGW6bJD0fZWaKRktOBVAsh9bH+/G8nTqTY2 y8T2wc/6L5Gu4m2gmQKolWwBoANVWbKoWJ0= -----END CERTIFICATE-----Generated at Sun Aug 10 04:59:32 2025 by rpki-client