$ rpki-client -vvf rpki.apnic.net/member_repository/A9197277/43A7E894B56011EE911C5D4FC4F9AE02/2E31B8FCB57211EEBB68526DC4F9AE02.roa File: 2E31B8FCB57211EEBB68526DC4F9AE02.roa (raw, json) Hash identifier: ts4WGvWXbehIETpY/5rVi501BJx/RXMywvh969jSOgc= Subject key identifier: 0E:AE:CE:CC:93:87:DE:B5:56:E3:13:D6:09:81:74:C1:76:AF:A9:CB Certificate issuer: /CN=A9197277/serialNumber=D83B93E31E939937D8CB15FE39CA5E6E8FEAFA9B Certificate serial: 012B Authority key identifier: D8:3B:93:E3:1E:93:99:37:D8:CB:15:FE:39:CA:5E:6E:8F:EA:FA:9B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2DuT4x6TmTfYyxX-Ocpebo_q-ps.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197277/43A7E894B56011EE911C5D4FC4F9AE02/2E31B8FCB57211EEBB68526DC4F9AE02.roa Signing time: Fri 01 Aug 2025 06:12:59 +0000 ROA not before: Fri 01 Aug 2025 06:12:59 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 6461 IP address blocks: 64.124.188.0/23 maxlen: 23 216.200.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197277/43A7E894B56011EE911C5D4FC4F9AE02/2DuT4x6TmTfYyxX-Ocpebo_q-ps.crl rsync://rpki.apnic.net/member_repository/A9197277/43A7E894B56011EE911C5D4FC4F9AE02/2DuT4x6TmTfYyxX-Ocpebo_q-ps.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2DuT4x6TmTfYyxX-Ocpebo_q-ps.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 299 (0x12b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197277, serialNumber=D83B93E31E939937D8CB15FE39CA5E6E8FEAFA9B Validity Not Before: Aug 1 06:12:59 2025 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=688c5aeb-f381 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:5c:1c:13:19:de:e8:bd:11:e1:30:a8:29:fc: 30:9e:8f:29:18:99:13:f2:8a:4e:79:d1:63:6a:96: a7:28:1a:ea:1a:38:5d:4d:93:d2:b4:a5:c7:d0:f5: d8:20:04:33:6f:41:79:79:f6:3e:41:ea:35:3e:0f: ca:ff:00:e4:4b:07:b5:3f:64:99:b3:42:f4:58:12: 1c:63:7c:85:eb:d2:55:80:9c:c9:3b:20:55:a3:c2: fe:fe:db:c7:42:fd:57:e7:97:25:f6:72:29:d6:eb: fa:11:97:93:79:c7:cf:19:eb:1a:37:ae:14:36:e6: 23:98:fd:2a:fe:8f:ee:be:b0:36:b4:a2:36:19:ce: 5a:b0:b6:a0:2b:07:d5:c3:c2:2b:b4:f3:9b:82:7d: 15:16:d2:02:b4:f2:28:b1:cd:f9:54:7b:1b:a9:af: d5:74:b8:59:7d:6c:a3:0c:4a:91:98:88:81:b5:de: 5f:f2:e0:a9:f1:c8:02:e5:72:b0:41:37:22:47:2e: f2:f4:ef:ca:e1:40:c5:69:db:ad:2c:6f:b1:c7:db: c8:f4:5b:c9:46:2e:14:98:06:6c:57:e0:1b:f9:20: 29:16:59:da:3a:d0:50:17:e1:54:a9:86:8f:01:0a: 97:59:19:0b:f4:59:cc:28:c7:38:26:d2:18:cb:7b: 8e:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:AE:CE:CC:93:87:DE:B5:56:E3:13:D6:09:81:74:C1:76:AF:A9:CB X509v3 Authority Key Identifier: keyid:D8:3B:93:E3:1E:93:99:37:D8:CB:15:FE:39:CA:5E:6E:8F:EA:FA:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197277/43A7E894B56011EE911C5D4FC4F9AE02/2DuT4x6TmTfYyxX-Ocpebo_q-ps.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2DuT4x6TmTfYyxX-Ocpebo_q-ps.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197277/43A7E894B56011EE911C5D4FC4F9AE02/2E31B8FCB57211EEBB68526DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 64.124.188.0/23 216.200.188.0/22 Signature Algorithm: sha256WithRSAEncryption 76:11:8c:e1:84:a0:91:8b:9a:a7:5d:fe:04:bd:41:97:72:93: ee:19:5b:29:95:3a:3f:d0:e1:88:e9:bc:f4:fd:2d:2d:ba:f5: e8:00:a0:5c:c3:6b:f2:a4:53:6d:bf:6c:4c:56:6c:01:9c:37: 59:fb:d0:1c:f2:98:05:38:00:cd:f9:7f:9c:c0:46:85:18:03: b5:dc:ce:9b:a7:ed:a1:e6:80:a7:90:64:2e:75:1b:86:4a:4e: ed:17:35:7c:e2:ff:42:ca:fd:0f:59:ed:4d:e5:44:79:9f:58: 07:1d:6a:76:b2:fb:64:16:64:fc:c2:5b:85:42:e8:75:17:ba: a2:7b:9f:58:8d:79:e9:66:53:38:e5:cd:da:01:4a:98:8a:25: 53:c0:97:49:09:ad:1b:d5:be:3d:57:52:04:d1:80:85:ff:a6: a5:8c:d2:fb:b4:14:b8:1e:df:c0:26:4b:f2:4d:82:0f:f8:f2: e0:de:b7:aa:df:83:8e:ff:1d:c5:05:d8:33:34:60:2e:28:fc: 27:69:e6:16:d5:6a:0a:7d:61:ad:00:7c:30:5d:18:38:9c:61: 89:28:39:36:ce:ec:a1:6a:47:20:2d:a6:de:1a:a8:0b:d2:20: f1:60:30:e5:0e:41:38:76:ea:b1:e8:6f:de:b6:5b:96:ba:93: e1:e8:70:f9 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICASswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcyNzcxMTAvBgNVBAUTKEQ4M0I5M0UzMUU5Mzk5MzdEOENCMTVGRTM5Q0E1RTZF OEZFQUZBOUIwHhcNMjUwODAxMDYxMjU5WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODhjNWFlYi1mMzgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwVwcExne6L0R4TCoKfwwno8pGJkT8opOedFjapanKBrqGjhdTZPStKXH0PXY IAQzb0F5efY+Qeo1Pg/K/wDkSwe1P2SZs0L0WBIcY3yF69JVgJzJOyBVo8L+/tvH Qv1X55cl9nIp1uv6EZeTecfPGesaN64UNuYjmP0q/o/uvrA2tKI2Gc5asLagKwfV w8IrtPObgn0VFtICtPIosc35VHsbqa/VdLhZfWyjDEqRmIiBtd5f8uCp8cgC5XKw QTciRy7y9O/K4UDFadutLG+xx9vI9FvJRi4UmAZsV+Ab+SApFlnaOtBQF+FUqYaP AQqXWRkL9FnMKMc4JtIYy3uOjQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFA6uzsyT h961VuMT1gmBdMF2r6nLMB8GA1UdIwQYMBaAFNg7k+Mek5k32MsV/jnKXm6P6vqb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzI3Ny80M0E3RTg5NEI1 NjAxMUVFOTExQzVENEZDNEY5QUUwMi8yRHVUNHg2VG1UZll5eFgtT2NwZWJvX3Et cHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzJEdVQ0eDZUbVRmWXl4WC1PY3BlYm9fcS1wcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTcyNzcvNDNBN0U4OTRCNTYwMTFFRTkxMUM1RDRGQzRGOUFFMDIvMkUzMUI4RkNC NTcyMTFFRUJCNjg1MjZEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAFAfLwDBALYyLwwDQYJKoZIhvcNAQELBQADggEBAHYRjOGE oJGLmqdd/gS9QZdyk+4ZWymVOj/Q4YjpvPT9LS269egAoFzDa/KkU22/bExWbAGc N1n70BzymAU4AM35f5zARoUYA7Xczpun7aHmgKeQZC51G4ZKTu0XNXzi/0LK/Q9Z 7U3lRHmfWAcdanay+2QWZPzCW4VC6HUXuqJ7n1iNeelmUzjlzdoBSpiKJVPAl0kJ rRvVvj1XUgTRgIX/pqWM0vu0FLge38AmS/JNgg/48uDet6rfg47/HcUF2DM0YC4o /Cdp5hbVagp9Ya0AfDBdGDicYYkoOTbO7KFqRyAtpt4aqAvSIPFgMOUOQTh26rHo b962W5a6k+HocPk= -----END CERTIFICATE-----Generated at Sun Aug 10 21:13:20 2025 by rpki-client