$ rpki-client -vvf rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/4BA5EC4293D911EE86212B1DC4F9AE02.roa File: 4BA5EC4293D911EE86212B1DC4F9AE02.roa (raw, json) Hash identifier: ntAPfFwqMwW/14nODr1Kka3t3flJTGPxOyia+rG6hsc= Subject key identifier: 13:76:37:88:00:72:A0:1B:54:A3:72:BE:57:EA:45:F9:5D:8F:96:89 Certificate issuer: /CN=A918F88D/serialNumber=DB1CB84854069E43CA1B725D42EA6BA9B539815B Certificate serial: 0CB0 Authority key identifier: DB:1C:B8:48:54:06:9E:43:CA:1B:72:5D:42:EA:6B:A9:B5:39:81:5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xy4SFQGnkPKG3JdQuprqbU5gVs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/4BA5EC4293D911EE86212B1DC4F9AE02.roa Signing time: Wed 30 Jul 2025 08:29:49 +0000 ROA not before: Wed 30 Jul 2025 08:29:49 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 38556 IP address blocks: 116.212.184.0/23 maxlen: 23 116.212.184.0/24 maxlen: 24 116.212.186.0/24 maxlen: 24 116.212.187.0/24 maxlen: 24 2401:e6a0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.crl rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xy4SFQGnkPKG3JdQuprqbU5gVs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3248 (0xcb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F88D, serialNumber=DB1CB84854069E43CA1B725D42EA6BA9B539815B Validity Not Before: Jul 30 08:29:49 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=6889d7fc-411b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4c:29:52:35:9d:6e:b1:2f:7f:b0:a4:70:11: c2:48:65:d9:d6:64:b6:dd:f8:71:98:9d:f3:a1:06: 2a:82:b3:48:45:c0:31:b9:dd:0c:2e:53:30:41:49: e3:7b:aa:a6:d0:c6:71:0e:9b:53:9a:20:f6:a9:fb: 44:f3:fc:83:1b:90:a2:21:f4:ff:72:1e:b1:4e:a8: f5:69:08:47:2b:7b:39:35:62:89:39:36:e0:5d:68: 18:13:54:6b:6d:03:8a:cf:78:83:1f:57:04:3d:15: 9e:54:96:ee:92:fa:e2:13:99:35:d1:20:28:5c:6c: 69:fb:25:55:ec:cf:fc:44:a2:5e:9c:e7:a0:cb:9e: f7:f6:1f:23:f0:bc:aa:a1:12:37:81:e2:32:58:5b: 7d:cc:f1:0b:8b:69:cb:c5:e1:58:6f:4d:8b:4f:51: 53:e0:16:13:e8:3a:d6:71:6f:29:90:d4:6a:f2:d0: b9:75:02:0e:b2:87:8a:ee:61:0c:6e:6e:d8:fb:28: ff:e4:5c:38:dc:92:59:84:a9:dd:62:f1:c5:43:24: 04:12:3f:7f:f4:bb:f2:8f:9d:8e:d7:de:2f:ea:b0: 31:95:30:5f:ab:f2:c8:a1:8b:bb:01:a5:26:1c:c4: 57:6c:5c:1b:1c:5b:dd:94:05:42:cc:f4:53:5c:ac: ae:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:76:37:88:00:72:A0:1B:54:A3:72:BE:57:EA:45:F9:5D:8F:96:89 X509v3 Authority Key Identifier: keyid:DB:1C:B8:48:54:06:9E:43:CA:1B:72:5D:42:EA:6B:A9:B5:39:81:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xy4SFQGnkPKG3JdQuprqbU5gVs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/4BA5EC4293D911EE86212B1DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 116.212.184.0/22 IPv6: 2401:e6a0::/32 Signature Algorithm: sha256WithRSAEncryption 24:01:70:24:5d:90:6a:24:0a:e8:ce:e5:f3:b1:66:e3:a4:b9: 17:7d:49:a7:16:3c:08:68:3d:cb:ba:e1:08:7d:c4:7c:a9:d9: 40:c0:7b:e7:35:0f:23:c9:f9:32:9c:8f:92:a9:35:d7:a6:89: a9:a1:33:89:88:e9:ed:fc:ef:70:57:60:a8:ad:81:b8:41:e2: b8:23:4b:71:ed:e2:6d:6d:e8:85:4e:22:fc:59:9e:be:ca:27: 74:c8:0a:28:86:bb:3f:d1:9d:3f:71:2c:77:91:a4:84:97:df: b3:0d:e2:a2:f3:93:a4:70:bc:75:1e:88:b3:63:c4:52:e1:33: c3:f9:e4:3e:f5:70:cc:33:8f:1a:f9:f7:82:25:c9:ce:93:0b: d9:2b:2d:83:bc:95:04:19:7f:96:55:8c:69:f8:ab:a4:7c:88: 5c:62:b1:27:c5:9c:20:8d:74:5d:cb:30:62:1d:40:78:cb:52: 88:7b:e6:a1:2a:47:9f:22:3e:18:92:5b:de:ab:68:db:0f:98: f9:ce:26:76:d7:c1:09:e4:e8:14:ff:bc:c8:83:ee:57:b8:7a: cb:7c:83:a4:0e:86:be:e9:b6:a4:d8:c9:0e:ff:79:c8:d7:8e: 53:01:3f:e6:22:b6:e0:0a:0e:2f:65:8b:52:9c:24:ec:6b:ae: 05:2e:bb:5f -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICDLAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY4OEQxMTAvBgNVBAUTKERCMUNCODQ4NTQwNjlFNDNDQTFCNzI1RDQyRUE2QkE5 QjUzOTgxNUIwHhcNMjUwNzMwMDgyOTQ5WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02ODg5ZDdmYy00MTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAskwpUjWdbrEvf7CkcBHCSGXZ1mS23fhxmJ3zoQYqgrNIRcAxud0MLlMwQUnj e6qm0MZxDptTmiD2qftE8/yDG5CiIfT/ch6xTqj1aQhHK3s5NWKJOTbgXWgYE1Rr bQOKz3iDH1cEPRWeVJbukvriE5k10SAoXGxp+yVV7M/8RKJenOegy5739h8j8Lyq oRI3geIyWFt9zPELi2nLxeFYb02LT1FT4BYT6DrWcW8pkNRq8tC5dQIOsoeK7mEM bm7Y+yj/5Fw43JJZhKndYvHFQyQEEj9/9Lvyj52O194v6rAxlTBfq/LIoYu7AaUm HMRXbFwbHFvdlAVCzPRTXKyuRwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFBN2N4gA cqAbVKNyvlfqRfldj5aJMB8GA1UdIwQYMBaAFNscuEhUBp5DyhtyXULqa6m1OYFb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Rjg4RC8yQTE0QkUwODAw NUExMUVBOEZEQ0ExMzBDNEY5QUUwMi8yeHk0U0ZRR25rUEtHM0pkUXVwcnFiVTVn VnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ4eTRTRlFHbmtQS0czSmRRdXBycWJVNWdWcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEY4OEQvMkExNEJFMDgwMDVBMTFFQThGRENBMTMwQzRGOUFFMDIvNEJBNUVDNDI5 M0Q5MTFFRTg2MjEyQjFEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJ01LgwDQQCAAIwBwMFACQB5qAwDQYJKoZIhvcNAQELBQAD ggEBACQBcCRdkGokCujO5fOxZuOkuRd9SacWPAhoPcu64Qh9xHyp2UDAe+c1DyPJ +TKcj5KpNdemiamhM4mI6e3873BXYKitgbhB4rgjS3Ht4m1t6IVOIvxZnr7KJ3TI CiiGuz/RnT9xLHeRpISX37MN4qLzk6RwvHUeiLNjxFLhM8P55D71cMwzjxr594Il yc6TC9krLYO8lQQZf5ZVjGn4q6R8iFxisSfFnCCNdF3LMGIdQHjLUoh75qEqR58i PhiSW96raNsPmPnOJnbXwQnk6BT/vMiD7le4est8g6QOhr7ptqTYyQ7/ecjXjlMB P+YituAKDi9li1KcJOxrrgUuu18= -----END CERTIFICATE-----Generated at Mon Aug 11 04:28:01 2025 by rpki-client