$ rpki-client -vvf rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/55A4C5C004AA11E8935B7021C4F9AE02.roa File: 55A4C5C004AA11E8935B7021C4F9AE02.roa (raw, json) Hash identifier: kZdCLZLr7MrW3XdEboMd7BRjcidMEtmhtIWvhKUYQqM= Subject key identifier: 54:DF:65:92:36:F2:0B:86:9D:74:D2:B8:D7:EF:E2:11:D6:AE:0C:67 Certificate issuer: /CN=A9112CEC/serialNumber=038CF2E28077DF2CADA45756FB5D99A6E240FD09 Certificate serial: 349C Authority key identifier: 03:8C:F2:E2:80:77:DF:2C:AD:A4:57:56:FB:5D:99:A6:E2:40:FD:09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4zy4oB33yytpFdW-12ZpuJA_Qk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/55A4C5C004AA11E8935B7021C4F9AE02.roa Signing time: Sat 14 Jun 2025 15:40:59 +0000 ROA not before: Sat 14 Jun 2025 15:40:59 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 55508 IP address blocks: 103.1.232.0/22 maxlen: 22 103.1.233.0/24 maxlen: 24 157.119.180.0/22 maxlen: 22 157.119.180.0/24 maxlen: 24 157.119.181.0/24 maxlen: 24 157.119.182.0/24 maxlen: 24 157.119.183.0/24 maxlen: 24 202.9.76.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.crl rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4zy4oB33yytpFdW-12ZpuJA_Qk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 15:14:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13468 (0x349c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112CEC, serialNumber=038CF2E28077DF2CADA45756FB5D99A6E240FD09 Validity Not Before: Jun 14 15:40:59 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=684d980b-c793 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:bf:9a:ac:90:68:f8:ce:5a:7c:1f:0e:56:cc: 26:44:c0:d7:50:b8:0d:7e:3f:19:bf:58:2e:14:f1: 26:bf:b9:c4:35:5e:cf:ff:dc:7c:93:c7:d7:2b:55: 49:ff:a5:ed:ba:6e:96:a9:94:bb:c4:70:79:a1:e4: 71:c2:d9:b6:04:99:5f:6a:3b:42:92:a1:48:3e:d4: ec:63:52:56:5a:f9:09:71:7b:88:b2:ed:0e:51:c7: f5:1f:8d:35:bf:37:97:a2:80:2c:e6:01:d0:67:6b: 43:1e:70:82:c2:de:21:ab:fc:9b:6f:3b:c9:33:a7: 75:c2:df:52:40:05:38:45:db:fa:d2:eb:4b:65:d1: 71:ea:4e:0f:e2:d3:1c:70:7a:74:f9:24:cd:5b:7e: c8:5e:89:7d:b7:01:14:96:3f:fb:c1:e5:d2:eb:67: 1e:03:f4:6f:6f:31:d5:8e:ac:0e:03:94:e2:73:66: 38:cd:9b:cb:64:d8:3d:f5:71:90:e8:65:13:cd:17: 41:9c:39:94:a9:09:b8:38:63:92:ac:6d:8d:02:7b: cd:f6:8e:a0:5e:0a:33:00:0d:59:6e:ce:7e:fc:2f: 82:48:45:dd:68:9d:c6:cb:42:d1:a6:20:f3:44:e4: 43:44:e4:1e:b1:56:ba:be:d6:74:19:f4:00:e5:93: 9b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:DF:65:92:36:F2:0B:86:9D:74:D2:B8:D7:EF:E2:11:D6:AE:0C:67 X509v3 Authority Key Identifier: keyid:03:8C:F2:E2:80:77:DF:2C:AD:A4:57:56:FB:5D:99:A6:E2:40:FD:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4zy4oB33yytpFdW-12ZpuJA_Qk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/55A4C5C004AA11E8935B7021C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.1.232.0/22 157.119.180.0/22 202.9.76.0/23 Signature Algorithm: sha256WithRSAEncryption 30:71:15:7e:24:2b:96:df:10:43:e2:f5:f1:59:62:60:44:42: ca:05:9d:40:fe:7e:8c:1e:00:be:07:21:0f:b1:c6:79:f5:72: 5d:78:e6:4f:6b:51:0e:a9:2a:fa:45:aa:81:27:c7:04:9a:a4: 81:2f:53:cf:3c:ce:81:36:94:41:59:c5:62:d2:21:ac:94:9b: cc:54:b8:85:ae:51:0f:e0:3b:01:d3:36:49:0f:84:95:d0:1b: 77:39:48:57:ed:b8:1b:df:b7:92:e0:88:02:9a:cc:d9:a6:89: e4:4b:e0:58:43:0b:d2:b4:ae:e9:8e:4b:30:82:d8:c9:10:27: 44:1a:98:22:d2:8a:82:51:1d:b0:6a:d9:6a:28:56:42:10:0c: cf:27:04:51:3e:05:78:57:71:e4:ea:a1:f1:af:05:0e:03:05: 1b:56:83:05:fa:d5:c2:c0:ed:63:e8:7a:17:1c:78:c0:0c:dc: f5:36:d7:c2:ca:1d:d8:b1:91:36:7d:26:51:b7:86:c0:90:12: 2e:31:c1:53:46:04:9b:ed:d3:f4:de:80:43:aa:9e:55:1d:17: 20:26:39:f4:5c:45:1c:b1:d9:88:95:d5:43:28:a8:93:29:40: 71:8f:62:2e:33:a5:86:86:94:3a:9d:96:ae:b8:f3:52:64:25: ef:9c:91:99 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICNJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTJDRUMxMTAvBgNVBAUTKDAzOENGMkUyODA3N0RGMkNBREE0NTc1NkZCNUQ5OUE2 RTI0MEZEMDkwHhcNMjUwNjE0MTU0MDU5WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODRkOTgwYi1jNzkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0r+arJBo+M5afB8OVswmRMDXULgNfj8Zv1guFPEmv7nENV7P/9x8k8fXK1VJ /6Xtum6WqZS7xHB5oeRxwtm2BJlfajtCkqFIPtTsY1JWWvkJcXuIsu0OUcf1H401 vzeXooAs5gHQZ2tDHnCCwt4hq/ybbzvJM6d1wt9SQAU4Rdv60utLZdFx6k4P4tMc cHp0+STNW37IXol9twEUlj/7weXS62ceA/RvbzHVjqwOA5Tic2Y4zZvLZNg99XGQ 6GUTzRdBnDmUqQm4OGOSrG2NAnvN9o6gXgozAA1Zbs5+/C+CSEXdaJ3Gy0LRpiDz RORDROQesVa6vtZ0GfQA5ZObFwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFFTfZZI2 8guGnXTSuNfv4hHWrgxnMB8GA1UdIwQYMBaAFAOM8uKAd98sraRXVvtdmabiQP0J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkNFQy9COEIwQzc4ODFE QTQxMUUyOEM5M0U3OUEwOEIwMkNEMi9BNHp5NG9CMzN5eXRwRmRXLTEyWnB1SkFf UWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E0enk0b0IzM3l5dHBGZFctMTJacHVKQV9Ray5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTJDRUMvQjhCMEM3ODgxREE0MTFFMjhDOTNFNzlBMDhCMDJDRDIvNTVBNEM1QzAw NEFBMTFFODkzNUI3MDIxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAJnAegDBAKdd7QDBAHKCUwwDQYJKoZIhvcNAQELBQADggEB ADBxFX4kK5bfEEPi9fFZYmBEQsoFnUD+foweAL4HIQ+xxnn1cl145k9rUQ6pKvpF qoEnxwSapIEvU888zoE2lEFZxWLSIayUm8xUuIWuUQ/gOwHTNkkPhJXQG3c5SFft uBvft5LgiAKazNmmieRL4FhDC9K0rumOSzCC2MkQJ0QamCLSioJRHbBq2WooVkIQ DM8nBFE+BXhXceTqofGvBQ4DBRtWgwX61cLA7WPoehcceMAM3PU218LKHdixkTZ9 JlG3hsCQEi4xwVNGBJvt0/TegEOqnlUdFyAmOfRcRRyx2YiV1UMoqJMpQHGPYi4z pYaGlDqdlq6481JkJe+ckZk= -----END CERTIFICATE-----Generated at Thu Jul 3 23:26:59 2025 by rpki-client