$ rpki-client -vvf rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/B811CFA2BF7811EE80314533C4F9AE02.roa File: B811CFA2BF7811EE80314533C4F9AE02.roa (raw, json) Hash identifier: /j+vq5djnc7hZrEiUy4WmMk+wFiISuWLXCgiYcfhmKo= Subject key identifier: 34:97:6F:6B:8C:09:7C:D3:E9:27:6B:3B:8A:07:86:8A:F8:45:A1:59 Certificate issuer: /CN=A919EE77/serialNumber=B781A2E7D91EDCA8B030DE3EA89FA4FAF1791F21 Certificate serial: 07BA Authority key identifier: B7:81:A2:E7:D9:1E:DC:A8:B0:30:DE:3E:A8:9F:A4:FA:F1:79:1F:21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/B811CFA2BF7811EE80314533C4F9AE02.roa Signing time: Fri 04 Jul 2025 22:02:19 +0000 ROA not before: Fri 04 Jul 2025 22:02:19 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 132825 IP address blocks: 43.251.112.0/24 maxlen: 24 43.251.113.0/24 maxlen: 24 43.251.114.0/24 maxlen: 24 43.251.115.0/24 maxlen: 24 119.42.32.0/24 maxlen: 24 119.42.34.0/24 maxlen: 24 119.42.35.0/24 maxlen: 24 2001:df0:fbc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.crl rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 21:07:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1978 (0x7ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EE77, serialNumber=B781A2E7D91EDCA8B030DE3EA89FA4FAF1791F21 Validity Not Before: Jul 4 22:02:19 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=68684f6b-05a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:4e:65:39:51:ed:d9:7b:14:57:8c:00:9a:b1: 44:c8:c7:11:2e:e5:eb:30:1d:d4:d8:ed:19:e3:7d: 22:6c:ae:f9:14:34:58:f8:cc:70:08:0f:37:d1:09: 51:09:9f:f3:cb:fe:c3:13:e2:a4:d4:0b:1f:48:5b: 42:fb:19:fa:6a:58:01:85:a7:d4:ac:92:4a:94:9e: 0c:01:8a:20:37:47:34:58:a0:c9:42:b3:d8:6b:f7: 8d:78:88:e1:f5:37:3d:c0:c6:52:b0:8d:e2:8e:86: f7:30:c0:3c:ce:f7:2e:0d:b5:35:c9:f6:9f:69:bd: 9f:69:60:e9:04:a3:66:af:3d:6d:50:3c:65:12:ee: 2a:c8:71:66:75:d2:fa:2f:7e:9a:e0:34:a2:b6:ce: 29:4d:66:0c:1e:a9:9f:1f:46:ef:d6:6d:72:3a:29: 3e:9d:8d:60:f6:12:82:9b:c4:61:3b:ba:0f:73:e5: 85:2e:70:07:8b:d0:37:4d:4d:3e:2c:e8:4c:16:c2: b0:c0:a2:9e:e0:0a:32:8b:17:db:d6:63:9c:5d:19: f5:4b:c3:9a:24:d8:92:04:da:da:c4:24:53:1f:38: 7e:52:59:02:d1:fb:b8:04:9c:05:0d:22:d5:88:5e: 99:97:6c:79:b6:a8:cc:69:a7:5a:87:d8:a1:3b:be: 22:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:97:6F:6B:8C:09:7C:D3:E9:27:6B:3B:8A:07:86:8A:F8:45:A1:59 X509v3 Authority Key Identifier: keyid:B7:81:A2:E7:D9:1E:DC:A8:B0:30:DE:3E:A8:9F:A4:FA:F1:79:1F:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/B811CFA2BF7811EE80314533C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.251.112.0/22 119.42.32.0/24 119.42.34.0/23 IPv6: 2001:df0:fbc0::/48 Signature Algorithm: sha256WithRSAEncryption aa:fd:d6:13:1d:f7:9a:82:37:a4:19:43:88:c7:27:b3:69:31: 9e:cb:e7:93:0c:d5:74:77:8b:90:ed:4d:45:f8:aa:8b:4e:cf: 26:50:f0:18:1a:7f:a8:43:a7:a5:df:57:33:50:1a:6b:ee:c5: 8f:c6:e9:7b:74:98:eb:a4:d8:09:73:30:c0:26:df:82:3c:86: a4:66:f4:51:1d:b3:80:e7:0d:04:32:76:3d:f9:af:37:b9:ae: ad:60:12:d0:fa:5c:42:3d:53:eb:00:f9:cf:76:aa:99:7b:d8: 8b:0c:78:6c:78:f5:64:31:10:34:d4:da:71:35:f2:6c:b6:ef: 14:cf:6e:84:a7:3c:f3:35:a1:0f:9c:8d:7f:14:b6:7a:7f:c0: 75:cd:86:3f:39:7b:d8:e9:c6:66:f6:85:e7:26:7a:1d:d4:02: d2:28:a2:a4:bd:f5:0b:49:20:c3:dc:46:75:f7:df:24:16:33: 25:b8:e0:b9:3b:13:8a:9f:d8:40:d6:f0:8d:4f:91:d9:9f:fe: f2:40:6a:3c:fc:0f:c6:97:f8:b4:e6:ab:d1:e3:ea:d5:91:80: a5:1f:da:c3:93:d4:71:62:9f:50:7d:92:60:0e:dc:14:d4:a8: 1a:85:d9:93:12:75:17:d3:00:10:0c:7b:06:5e:a2:db:6a:13: 5c:a6:fb:d0 -----BEGIN CERTIFICATE----- MIIFjjCCBHagAwIBAgICB7owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVFNzcxMTAvBgNVBAUTKEI3ODFBMkU3RDkxRURDQThCMDMwREUzRUE4OUZBNEZB RjE3OTFGMjEwHhcNMjUwNzA0MjIwMjE5WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODY4NGY2Yi0wNWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0k5lOVHt2XsUV4wAmrFEyMcRLuXrMB3U2O0Z430ibK75FDRY+MxwCA830QlR CZ/zy/7DE+Kk1AsfSFtC+xn6algBhafUrJJKlJ4MAYogN0c0WKDJQrPYa/eNeIjh 9Tc9wMZSsI3ijob3MMA8zvcuDbU1yfafab2faWDpBKNmrz1tUDxlEu4qyHFmddL6 L36a4DSits4pTWYMHqmfH0bv1m1yOik+nY1g9hKCm8RhO7oPc+WFLnAHi9A3TU0+ LOhMFsKwwKKe4Aoyixfb1mOcXRn1S8OaJNiSBNraxCRTHzh+UlkC0fu4BJwFDSLV iF6Zl2x5tqjMaadah9ihO74iJwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFDSXb2uM CXzT6SdrO4oHhor4RaFZMB8GA1UdIwQYMBaAFLeBoufZHtyosDDePqifpPrxeR8h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUU3Ny9EOUJFMDdCQTBD RUQxMUVCQTdGMTExNUJDNEY5QUUwMi90NEdpNTlrZTNLaXdNTjQtcUotay12RjVI eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Q0R2k1OWtlM0tpd01ONC1xSi1rLXZGNUh5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUVFNzcvRDlCRTA3QkEwQ0VEMTFFQkE3RjExMTVCQzRGOUFFMDIvQjgxMUNGQTJC Rjc4MTFFRTgwMzE0NTMzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPAYIKwYBBQUHAQcBAf8E LTArMBgEAgABMBIDBAIr+3ADBAB3KiADBAF3KiIwDwQCAAIwCQMHACABDfD7wDAN BgkqhkiG9w0BAQsFAAOCAQEAqv3WEx33moI3pBlDiMcns2kxnsvnkwzVdHeLkO1N Rfiqi07PJlDwGBp/qEOnpd9XM1Aaa+7Fj8bpe3SY66TYCXMwwCbfgjyGpGb0UR2z gOcNBDJ2PfmvN7murWAS0PpcQj1T6wD5z3aqmXvYiwx4bHj1ZDEQNNTacTXybLbv FM9uhKc88zWhD5yNfxS2en/Adc2GPzl72OnGZvaF5yZ6HdQC0iiipL31C0kgw9xG dfffJBYzJbjguTsTip/YQNbwjU+R2Z/+8kBqPPwPxpf4tOar0ePq1ZGApR/aw5PU cWKfUH2SYA7cFNSoGoXZkxJ1F9MAEAx7Bl6i22oTXKb70A== -----END CERTIFICATE-----Generated at Tue Nov 4 19:10:59 2025 by rpki-client