$ rpki-client -vvf rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/853312D2C0DD11EFB5F0D24AC4F9AE02.roa File: 853312D2C0DD11EFB5F0D24AC4F9AE02.roa (raw, json) Hash identifier: 5GZjp3JUFOE7VzDsdPR/ZzHynySRVSJd2FZoFIwEpEU= Subject key identifier: 55:0B:68:27:AF:9E:2D:EF:CE:DD:95:81:BF:44:8B:69:DE:34:16:F6 Certificate issuer: /CN=A917C909/serialNumber=59F9D48DD916909783E31771D8AD7ECB30DC3BA2 Certificate serial: 7F Authority key identifier: 59:F9:D4:8D:D9:16:90:97:83:E3:17:71:D8:AD:7E:CB:30:DC:3B:A2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WfnUjdkWkJeD4xdx2K1-yzDcO6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/853312D2C0DD11EFB5F0D24AC4F9AE02.roa Signing time: Sat 09 Aug 2025 14:18:08 +0000 ROA not before: Sat 09 Aug 2025 14:18:08 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 133458 IP address blocks: 161.248.2.0/23 maxlen: 24 209.131.124.0/23 maxlen: 23 209.131.124.0/24 maxlen: 24 209.131.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.crl rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WfnUjdkWkJeD4xdx2K1-yzDcO6I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 127 (0x7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C909, serialNumber=59F9D48DD916909783E31771D8AD7ECB30DC3BA2 Validity Not Before: Aug 9 14:18:08 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=689758a0-f4f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:36:84:47:f0:6f:bd:6b:72:5d:ba:d6:b8:43: 21:f8:bb:ec:c4:8c:8b:d5:39:0c:01:f7:94:c0:3b: 76:b8:4a:60:8e:2f:a2:87:2f:8c:84:96:42:4d:11: b8:c1:2c:78:d9:97:b9:07:28:7c:65:8f:60:21:7a: d1:4f:72:dc:3e:3a:47:28:ff:fb:f7:9a:b8:2e:f4: 4d:98:c7:a1:3b:98:d4:94:95:f9:6f:7e:35:62:83: 9d:65:08:75:5e:73:41:f7:a2:3c:60:72:03:5e:f8: 1f:b8:6f:f3:32:d1:54:50:14:4e:bd:65:c3:39:15: d6:61:61:ce:c0:e0:50:cc:5c:40:b7:ea:0d:26:25: 64:96:ed:d0:1e:1d:ac:c1:1a:39:fa:a5:16:af:8d: e4:d0:4f:78:82:d7:1d:fb:45:9b:55:5e:6a:0a:bb: 0f:c1:8b:6e:78:98:9b:98:12:4c:b8:32:90:95:69: e0:cd:e5:3c:d2:4d:ae:a6:3f:08:4b:7f:e7:81:45: 84:dd:99:49:fe:2f:81:55:cc:76:81:8a:2d:c1:7f: bc:e3:0c:73:33:3d:ce:d0:f7:b6:aa:cc:2b:ee:42: e6:2f:6e:e8:de:93:94:a6:95:4d:a2:2d:c6:47:c7: 9f:cd:f0:e5:1a:b0:91:ab:13:91:b0:12:08:dc:f4: 5d:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:0B:68:27:AF:9E:2D:EF:CE:DD:95:81:BF:44:8B:69:DE:34:16:F6 X509v3 Authority Key Identifier: keyid:59:F9:D4:8D:D9:16:90:97:83:E3:17:71:D8:AD:7E:CB:30:DC:3B:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WfnUjdkWkJeD4xdx2K1-yzDcO6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/853312D2C0DD11EFB5F0D24AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 161.248.2.0/23 209.131.124.0/23 Signature Algorithm: sha256WithRSAEncryption 61:58:5a:8b:98:73:1e:6e:ec:7b:d3:db:ec:5b:36:7a:86:6c: 6b:75:92:42:b1:d4:82:60:8c:9f:e4:a8:0f:63:83:b6:1c:aa: 57:53:5f:33:a6:54:c2:74:b9:4c:19:f7:30:59:49:41:8b:6d: 28:59:91:e4:69:52:4f:3a:b6:5e:d8:8c:62:df:31:09:17:5d: b6:73:04:74:49:b7:1c:41:c1:24:a1:8e:25:4d:f6:5d:3d:36: d7:25:26:34:a2:55:65:69:28:0b:ff:35:65:40:18:dd:b6:2b: 14:07:2e:14:01:1b:9d:28:be:bf:6b:11:8b:df:30:16:70:f4: 48:31:de:d6:da:60:d1:16:0b:c5:f2:0e:e8:5b:af:e3:32:90: 3d:b1:f2:a6:49:06:c1:dc:ce:41:dd:88:3d:56:68:b0:c4:18: dc:01:8d:90:6b:c5:d0:cd:87:3a:7e:61:62:f0:51:c5:ed:7f: 0c:33:06:b3:44:f9:81:52:86:e3:01:87:d1:65:dd:56:4a:d0: b4:36:ee:f9:cd:ff:b0:cb:de:3c:37:80:9b:9a:9e:12:0c:9c: cd:74:e6:8f:13:fd:94:71:01:76:d3:31:32:dc:9d:76:af:75: 6e:1f:1a:7c:ac:ae:a7:a9:74:ce:20:a4:1f:3f:76:51:02:38: d4:7c:b9:ae -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgIBfzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QzkwOTExMC8GA1UEBRMoNTlGOUQ0OEREOTE2OTA5NzgzRTMxNzcxRDhBRDdFQ0Iz MERDM0JBMjAeFw0yNTA4MDkxNDE4MDhaFw0yNjAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4OTc1OGEwLWY0ZjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCjNoRH8G+9a3Jduta4QyH4u+zEjIvVOQwB95TAO3a4SmCOL6KHL4yElkJNEbjB LHjZl7kHKHxlj2AhetFPctw+Okco//v3mrgu9E2Yx6E7mNSUlflvfjVig51lCHVe c0H3ojxgcgNe+B+4b/My0VRQFE69ZcM5FdZhYc7A4FDMXEC36g0mJWSW7dAeHazB Gjn6pRavjeTQT3iC1x37RZtVXmoKuw/Bi254mJuYEky4MpCVaeDN5TzSTa6mPwhL f+eBRYTdmUn+L4FVzHaBii3Bf7zjDHMzPc7Q97aqzCvuQuYvbujek5SmlU2iLcZH x5/N8OUasJGrE5GwEgjc9F3XAgMBAAGjggKbMIIClzAdBgNVHQ4EFgQUVQtoJ6+e Le/O3ZWBv0SLad40FvYwHwYDVR0jBBgwFoAUWfnUjdkWkJeD4xdx2K1+yzDcO6Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdDOTA5L0ZGN0M1RkRDQzBE QjExRUY5RTg3MTg0NEM0RjlBRTAyL1dmblVqZGtXa0plRDR4ZHgySzEteXpEY082 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvV2ZuVWpka1drSmVENHhkeDJLMS15ekRjTzZJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzkwOS9GRjdDNUZEQ0MwREIxMUVGOUU4NzE4NDRDNEY5QUUwMi84NTMzMTJEMkMw REQxMUVGQjVGMEQyNEFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQW MBQwEgQCAAEwDAMEAaH4AgMEAdGDfDANBgkqhkiG9w0BAQsFAAOCAQEAYVhai5hz Hm7se9Pb7Fs2eoZsa3WSQrHUgmCMn+SoD2ODthyqV1NfM6ZUwnS5TBn3MFlJQYtt KFmR5GlSTzq2XtiMYt8xCRddtnMEdEm3HEHBJKGOJU32XT021yUmNKJVZWkoC/81 ZUAY3bYrFAcuFAEbnSi+v2sRi98wFnD0SDHe1tpg0RYLxfIO6Fuv4zKQPbHypkkG wdzOQd2IPVZosMQY3AGNkGvF0M2HOn5hYvBRxe1/DDMGs0T5gVKG4wGH0WXdVkrQ tDbu+c3/sMvePDeAm5qeEgyczXTmjxP9lHEBdtMxMtyddq91bh8afKyup6l0ziCk Hz92UQI41Hy5rg== -----END CERTIFICATE-----Generated at Sun Aug 10 13:48:22 2025 by rpki-client