$ rpki-client -vvf rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/8FEA9564C2AE11EB94777A0CC4F9AE02.roa File: 8FEA9564C2AE11EB94777A0CC4F9AE02.roa (raw, json) Hash identifier: faGNUns0UIB/6rsiDFhIe2V0V3MDd2DqirXM6CF0Z8Q= Subject key identifier: E6:34:D2:01:3F:F1:AF:9D:E3:FA:30:45:8C:4C:03:2C:53:22:CA:9C Certificate issuer: /CN=A917BB59/serialNumber=22892E3D8C449F5A9AC64CFCB634B59F6C53136B Certificate serial: 079E Authority key identifier: 22:89:2E:3D:8C:44:9F:5A:9A:C6:4C:FC:B6:34:B5:9F:6C:53:13:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IokuPYxEn1qaxkz8tjS1n2xTE2s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/8FEA9564C2AE11EB94777A0CC4F9AE02.roa Signing time: Thu 12 Jun 2025 21:38:58 +0000 ROA not before: Thu 12 Jun 2025 21:38:58 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 134202 IP address blocks: 45.117.228.0/22 maxlen: 22 45.117.228.0/24 maxlen: 24 45.117.229.0/24 maxlen: 24 45.117.231.0/24 maxlen: 24 103.58.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.crl rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IokuPYxEn1qaxkz8tjS1n2xTE2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 21:09:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1950 (0x79e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BB59, serialNumber=22892E3D8C449F5A9AC64CFCB634B59F6C53136B Validity Not Before: Jun 12 21:38:58 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=684b48f2-de2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c3:fb:7a:34:db:01:eb:4f:b8:f1:0d:0d:dd: 6a:cb:55:0f:81:8e:d5:6e:85:9f:28:29:73:7e:22: 29:50:b6:af:22:8b:c0:14:4e:b3:d0:53:d5:5a:8f: 6c:a5:96:03:01:4f:f9:6a:f1:ea:8c:86:85:c8:5b: f5:8a:1a:63:37:3d:82:f8:cc:c2:c8:7a:3a:11:62: b8:1a:15:9f:4a:72:09:f0:0a:99:85:68:f4:1b:b7: c4:e6:e5:cc:78:03:63:95:98:6d:fc:fe:16:3d:fd: e9:c1:1f:17:81:dd:11:43:df:72:01:5d:d7:31:8d: e7:b7:3e:27:03:36:49:24:94:3f:79:b2:9e:be:07: 6f:36:1f:15:90:9d:7e:63:fc:77:02:6f:63:ad:ca: 77:2a:e9:8f:a1:13:53:3f:b3:eb:98:2b:fc:aa:fc: 7e:0c:17:7d:87:cd:7f:3f:3d:f9:d5:eb:2c:70:2f: 32:7c:33:90:42:8e:0f:4f:c0:1a:b4:2d:ea:d1:d0: ce:3a:a4:7f:7f:67:d4:b9:26:19:9b:00:a3:58:60: e3:07:2f:09:73:0c:96:35:d6:a9:7f:dd:25:b0:6b: 2d:a6:0e:9e:15:c9:a2:af:01:ef:91:34:ca:3b:18: 20:84:97:32:df:72:1f:98:1e:84:83:98:c3:ee:29: ab:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:34:D2:01:3F:F1:AF:9D:E3:FA:30:45:8C:4C:03:2C:53:22:CA:9C X509v3 Authority Key Identifier: keyid:22:89:2E:3D:8C:44:9F:5A:9A:C6:4C:FC:B6:34:B5:9F:6C:53:13:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IokuPYxEn1qaxkz8tjS1n2xTE2s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/8FEA9564C2AE11EB94777A0CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.117.228.0/22 103.58.16.0/22 Signature Algorithm: sha256WithRSAEncryption 50:1a:ba:48:1a:88:ad:38:27:b7:0c:b8:14:79:64:7c:64:15: ce:bd:ff:83:b1:38:ae:b3:8a:3a:47:46:fa:c3:fd:18:6d:27: 57:89:cd:73:66:d5:c2:25:32:3f:77:4b:26:53:f6:59:43:21: f9:ea:ca:fb:9f:86:95:7c:96:a1:0e:e5:8e:ed:eb:fe:e5:a1: 9e:b9:b9:8d:08:18:39:1d:39:92:9d:ab:ef:2c:28:5c:58:1f: 22:48:70:27:de:46:d5:7e:2d:0b:96:71:46:3c:99:5b:97:94: b3:26:0c:1f:0e:77:46:fd:95:df:54:f9:c5:15:d5:46:69:e8: 3c:6f:a2:6d:13:1d:97:39:e2:fc:2a:87:4d:78:5c:b4:f1:27: 9b:3e:90:02:0d:1b:b8:55:47:3f:12:b5:74:ab:d7:c7:05:19: 66:e8:60:6d:0d:56:ad:eb:37:46:a1:d0:9c:30:a2:d0:4d:24: f7:0e:85:5f:47:de:c8:12:b0:3c:ca:0b:5f:ca:ac:bd:49:75: 04:0c:a2:b1:d3:a1:88:95:d1:5c:6e:27:e9:fc:69:75:68:ea: f7:9f:9d:9f:0b:49:cb:f4:e7:ce:3c:78:ec:93:63:18:0d:01: 98:e8:73:97:d8:dd:fe:f7:99:d3:2d:dc:15:bc:04:6f:3f:f0: 31:62:9a:16 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICB54wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JCNTkxMTAvBgNVBAUTKDIyODkyRTNEOEM0NDlGNUE5QUM2NENGQ0I2MzRCNTlG NkM1MzEzNkIwHhcNMjUwNjEyMjEzODU4WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODRiNDhmMi1kZTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx8P7ejTbAetPuPENDd1qy1UPgY7VboWfKClzfiIpULavIovAFE6z0FPVWo9s pZYDAU/5avHqjIaFyFv1ihpjNz2C+MzCyHo6EWK4GhWfSnIJ8AqZhWj0G7fE5uXM eANjlZht/P4WPf3pwR8Xgd0RQ99yAV3XMY3ntz4nAzZJJJQ/ebKevgdvNh8VkJ1+ Y/x3Am9jrcp3KumPoRNTP7PrmCv8qvx+DBd9h81/Pz351esscC8yfDOQQo4PT8Aa tC3q0dDOOqR/f2fUuSYZmwCjWGDjBy8JcwyWNdapf90lsGstpg6eFcmirwHvkTTK OxgghJcy33IfmB6Eg5jD7imrbQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFOY00gE/ 8a+d4/owRYxMAyxTIsqcMB8GA1UdIwQYMBaAFCKJLj2MRJ9amsZM/LY0tZ9sUxNr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkI1OS9CNjhCOTBENjBE Q0ExMUVCQTdDMkUyMkRDNEY5QUUwMi9Jb2t1UFl4RW4xcWF4a3o4dGpTMW4yeFRF MnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lva3VQWXhFbjFxYXhrejh0alMxbjJ4VEUycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0JCNTkvQjY4QjkwRDYwRENBMTFFQkE3QzJFMjJEQzRGOUFFMDIvOEZFQTk1NjRD MkFFMTFFQjk0Nzc3QTBDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAItdeQDBAJnOhAwDQYJKoZIhvcNAQELBQADggEBAFAaukga iK04J7cMuBR5ZHxkFc69/4OxOK6zijpHRvrD/RhtJ1eJzXNm1cIlMj93SyZT9llD IfnqyvufhpV8lqEO5Y7t6/7loZ65uY0IGDkdOZKdq+8sKFxYHyJIcCfeRtV+LQuW cUY8mVuXlLMmDB8Od0b9ld9U+cUV1UZp6Dxvom0THZc54vwqh014XLTxJ5s+kAIN G7hVRz8StXSr18cFGWboYG0NVq3rN0ah0JwwotBNJPcOhV9H3sgSsDzKC1/KrL1J dQQMorHToYiV0VxuJ+n8aXVo6vefnZ8LScv05848eOyTYxgNAZjoc5fY3f73mdMt 3BW8BG8/8DFimhY= -----END CERTIFICATE-----Generated at Tue Nov 4 17:18:16 2025 by rpki-client