$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/AF2CB5CE101E11ED9FA78415C4F9AE02.roa File: AF2CB5CE101E11ED9FA78415C4F9AE02.roa (raw, json) Hash identifier: VZ24W4uKwM60qRJ5vfKCX9lh+SGHmx0HfVlijTJVzIY= Subject key identifier: 6D:09:4C:32:AE:1C:02:87:5D:A7:08:8F:58:D1:6C:57:2D:B3:0E:5F Certificate issuer: /CN=A911AE8B/serialNumber=802C751FA984347DF9C93CEDB97ED951A9528286 Certificate serial: 0D22 Authority key identifier: 80:2C:75:1F:A9:84:34:7D:F9:C9:3C:ED:B9:7E:D9:51:A9:52:82:86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/AF2CB5CE101E11ED9FA78415C4F9AE02.roa Signing time: Mon 02 Jun 2025 18:21:04 +0000 ROA not before: Mon 02 Jun 2025 18:21:04 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 210504 IP address blocks: 144.48.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.crl rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:16:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3362 (0xd22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AE8B, serialNumber=802C751FA984347DF9C93CEDB97ED951A9528286 Validity Not Before: Jun 2 18:21:04 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=683deb90-1768 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:df:fa:9d:32:9d:f6:85:26:da:de:2a:1d:4d: ef:12:bc:6c:dc:11:73:6d:e9:31:de:97:4b:c8:d6: a3:83:ce:14:dc:4b:31:d5:95:6d:00:8b:57:60:96: d6:d2:a7:78:a5:f5:61:a0:aa:f6:ff:c4:2a:4e:d3: 6d:9a:75:df:a1:60:8f:93:bc:72:ea:81:d9:ce:7d: 8c:51:c1:da:98:d5:43:b6:1a:8a:23:ed:1b:85:48: 34:b9:36:0f:ba:b8:65:59:74:6b:e7:e6:44:a0:9e: 2b:2c:b7:ae:4c:ce:08:32:cf:c1:a7:2a:d9:b6:11: 90:f8:a7:5b:90:b9:d4:4f:76:63:74:ce:7d:1b:19: 7a:9a:55:7b:88:18:94:f1:96:8d:6e:64:07:d3:58: 1d:38:2f:80:9b:85:5c:32:b1:4f:2e:2d:48:28:8f: c6:c3:af:d2:02:e9:14:92:92:4f:ae:02:93:00:1a: 6e:fd:96:fc:8a:40:c9:a1:7d:1b:6d:12:f3:69:2a: 0b:14:c6:4d:72:64:fb:99:a0:02:ec:f4:1b:b4:f2: 99:be:5c:8b:a7:3d:e0:3e:68:f3:bd:83:c4:a2:5d: d1:f3:e5:ac:0d:de:8f:ff:67:28:9f:8a:9b:13:fd: 0f:cb:87:b7:fc:47:33:a1:f4:a1:d3:24:74:b8:22: 1e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:09:4C:32:AE:1C:02:87:5D:A7:08:8F:58:D1:6C:57:2D:B3:0E:5F X509v3 Authority Key Identifier: keyid:80:2C:75:1F:A9:84:34:7D:F9:C9:3C:ED:B9:7E:D9:51:A9:52:82:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/AF2CB5CE101E11ED9FA78415C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 144.48.35.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:51:ac:eb:c3:77:1f:df:9b:f8:5c:8e:0d:2d:69:17:46:ca: 3c:b5:85:fe:44:6a:9a:ff:66:3f:5e:c0:8c:ee:d4:4f:60:77: e2:de:aa:c9:73:fb:d5:52:9d:29:92:0b:be:1d:9c:33:d9:f1: 1c:3b:58:34:46:9c:2e:3c:06:89:f2:07:74:a5:65:05:99:03: 28:7b:9d:e3:d5:4a:18:53:88:7f:3e:fb:9f:27:c3:05:6b:b6: d1:e4:15:0a:39:9b:88:b2:86:d7:a4:9a:c2:3d:81:3e:04:c9: 2f:27:45:84:d3:7b:da:4b:e1:4e:c4:98:dc:d8:49:aa:5d:20: 57:65:9f:ac:61:8f:c8:72:46:ae:98:45:32:aa:ea:b5:b5:9a: 63:c6:c7:f0:14:d2:a0:de:18:02:a8:b9:a6:97:c8:11:60:e0: f4:8a:fa:99:dc:a7:d4:be:41:19:82:b4:b2:67:0b:a3:06:5e: ee:f3:d7:10:e2:ce:59:d4:e4:d7:6d:4c:df:3c:d8:da:6f:0b: 29:50:a7:8a:a9:3a:bb:7a:1b:13:ae:af:6a:66:1e:fb:b3:f4: 04:4e:37:d8:58:11:b7:76:e9:23:ea:0b:40:5c:c5:a9:1c:06: 18:69:15:04:83:a2:0b:3a:d0:e3:5b:73:11:10:5d:c9:5f:e8: e7:7b:f1:f7 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDSIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFFOEIxMTAvBgNVBAUTKDgwMkM3NTFGQTk4NDM0N0RGOUM5M0NFREI5N0VEOTUx QTk1MjgyODYwHhcNMjUwNjAyMTgyMTA0WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODNkZWI5MC0xNzY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu9/6nTKd9oUm2t4qHU3vErxs3BFzbekx3pdLyNajg84U3Esx1ZVtAItXYJbW 0qd4pfVhoKr2/8QqTtNtmnXfoWCPk7xy6oHZzn2MUcHamNVDthqKI+0bhUg0uTYP urhlWXRr5+ZEoJ4rLLeuTM4IMs/BpyrZthGQ+KdbkLnUT3ZjdM59Gxl6mlV7iBiU 8ZaNbmQH01gdOC+Am4VcMrFPLi1IKI/Gw6/SAukUkpJPrgKTABpu/Zb8ikDJoX0b bRLzaSoLFMZNcmT7maAC7PQbtPKZvlyLpz3gPmjzvYPEol3R8+WsDd6P/2con4qb E/0Py4e3/EczofSh0yR0uCIeNwIDAQABo4IClTCCApEwHQYDVR0OBBYEFG0JTDKu HAKHXacIj1jRbFctsw5fMB8GA1UdIwQYMBaAFIAsdR+phDR9+ck87bl+2VGpUoKG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUU4Qi9FQzI1N0NDNkUw MjUxMUU5OTFBOTc3NERDNEY5QUUwMi9nQ3gxSDZtRU5IMzV5VHp0dVg3WlVhbFNn b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dDeDFINm1FTkgzNXlUenR1WDdaVWFsU2dvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUFFOEIvRUMyNTdDQzZFMDI1MTFFOTkxQTk3NzREQzRGOUFFMDIvQUYyQ0I1Q0Ux MDFFMTFFRDlGQTc4NDE1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBACQMCMwDQYJKoZIhvcNAQELBQADggEBAB1RrOvDdx/fm/hc jg0taRdGyjy1hf5Eapr/Zj9ewIzu1E9gd+Leqslz+9VSnSmSC74dnDPZ8Rw7WDRG nC48BonyB3SlZQWZAyh7nePVShhTiH8++58nwwVrttHkFQo5m4iyhtekmsI9gT4E yS8nRYTTe9pL4U7EmNzYSapdIFdln6xhj8hyRq6YRTKq6rW1mmPGx/AU0qDeGAKo uaaXyBFg4PSK+pncp9S+QRmCtLJnC6MGXu7z1xDizlnU5NdtTN882NpvCylQp4qp Ort6GxOur2pmHvuz9ARON9hYEbd26SPqC0BcxakcBhhpFQSDogs60ONbcxEQXclf 6Od78fc= -----END CERTIFICATE-----Generated at Fri Jul 4 10:49:23 2025 by rpki-client