$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/1D1E9F72A05011ED8B25FE52C4F9AE02.roa File: 1D1E9F72A05011ED8B25FE52C4F9AE02.roa (raw, json) Hash identifier: fJeAs+jc4Cz+wjQHUSJlI87gWPuYFVdj1ntyeKJz4CI= Subject key identifier: 38:93:DB:80:6E:5B:F3:0A:3E:5A:95:01:87:2E:89:70:50:89:8A:E6 Certificate issuer: /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C Certificate serial: 2A51 Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/1D1E9F72A05011ED8B25FE52C4F9AE02.roa Signing time: Thu 26 Jun 2025 06:30:20 +0000 ROA not before: Thu 26 Jun 2025 06:30:20 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 133848 IP address blocks: 49.0.124.0/24 maxlen: 24 49.231.72.0/21 maxlen: 23 49.231.73.0/24 maxlen: 24 49.231.75.0/24 maxlen: 24 49.231.76.0/22 maxlen: 24 49.231.128.0/22 maxlen: 24 49.231.132.0/22 maxlen: 24 58.137.39.0/24 maxlen: 24 110.49.2.0/24 maxlen: 24 110.49.99.0/24 maxlen: 24 110.49.112.0/23 maxlen: 24 210.1.35.0/24 maxlen: 24 2405:9800:d003::/48 maxlen: 48 2405:9800:d007::/48 maxlen: 48 2405:9800:d008::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 15:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10833 (0x2a51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BD54, serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C Validity Not Before: Jun 26 06:30:20 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=685ce8fc-56c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:94:92:85:bf:86:f7:47:71:9e:15:f6:ed:9e: 2d:44:1d:a5:e4:9e:ff:ab:c8:ec:dc:50:c9:47:5a: a1:2c:b9:8c:e6:4f:56:e7:e8:8d:32:98:0f:ac:11: f0:16:08:ab:08:4d:29:b7:65:95:b5:8b:48:78:6d: 61:ab:f9:b5:13:48:37:78:15:18:91:6d:cf:3b:3e: ba:3f:e1:b1:a9:34:ae:14:ef:4d:62:96:4d:89:f8: c0:bc:2a:9c:aa:d7:b9:dc:91:12:31:f9:61:7b:77: df:96:f6:d5:81:d0:2e:2f:c4:98:de:31:3f:c8:36: 99:fb:f8:16:3c:24:31:62:40:a4:f2:f3:b8:93:4a: 9e:47:f4:26:fa:67:1e:6f:ea:21:b2:6b:f1:6e:0a: 42:ec:93:e9:43:0a:29:a6:6f:19:f4:60:4d:50:40: bd:81:b7:f4:d6:27:7b:de:77:5f:85:f9:4a:40:08: 3e:05:2f:70:13:20:42:78:39:95:f8:84:fd:44:82: e3:3c:4c:36:86:a1:47:4e:3f:f0:92:95:8d:51:ed: 74:1b:aa:2c:45:61:33:ca:6e:bb:14:2e:3f:5b:a8: fe:bf:b8:aa:28:5b:90:ca:b9:c5:a4:b2:84:97:92: 70:44:10:eb:7b:00:82:7e:aa:5d:6e:2d:6f:63:f5: 3c:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:93:DB:80:6E:5B:F3:0A:3E:5A:95:01:87:2E:89:70:50:89:8A:E6 X509v3 Authority Key Identifier: keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/1D1E9F72A05011ED8B25FE52C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.0.124.0/24 49.231.72.0/21 49.231.128.0/21 58.137.39.0/24 110.49.2.0/24 110.49.99.0/24 110.49.112.0/23 210.1.35.0/24 IPv6: 2405:9800:d003::/48 2405:9800:d007::-2405:9800:d008:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption a7:1b:e8:da:46:51:d3:f0:c1:be:0c:b5:60:75:ac:7e:31:7c: 05:7f:31:0f:38:1d:86:02:48:94:0c:0d:a1:d1:2b:ba:9d:31: a7:e9:ac:65:72:be:7a:0c:a0:64:4e:8b:c2:3a:fc:31:c9:2c: a2:6c:53:e1:da:0c:ee:36:42:b3:60:5b:85:b1:13:49:f1:9f: c7:61:a3:8e:e7:65:28:36:8f:f5:dc:be:93:44:4d:25:8c:2d: f0:60:e5:23:2b:ad:1e:c3:eb:e3:f4:fb:bb:22:24:31:4d:d0: 25:a2:2b:f6:a9:2c:1e:71:c2:0e:11:70:00:96:8d:2d:5f:0c: 79:35:bc:d6:94:94:d2:7c:ed:d2:de:ee:81:ed:c3:12:5f:11: 4d:b6:73:03:4f:74:0a:1d:15:61:86:2f:76:76:1b:39:78:6e: 2d:33:22:20:39:62:7e:f4:32:7b:a8:57:92:06:80:5a:bb:3d: 6b:f6:1c:df:31:b9:b0:a2:18:3f:b9:3c:8c:c4:1a:6d:8c:24: 2a:b2:56:49:b2:af:10:30:a5:4a:82:62:06:08:e3:9d:e5:23: c2:80:85:a8:c3:72:af:fe:0b:b9:a2:e0:f7:d5:b0:b5:1a:98: ae:d2:9f:80:87:a2:cc:2b:87:3e:05:91:ea:90:28:1f:ea:4b: 03:6b:9d:3b -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgICKlEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJENTQxMTAvBgNVBAUTKEJDRkFGOEQzM0YxOEE4RDM2MDIwMjlFQkNFREUxRTM2 QUYyMDcxNUMwHhcNMjUwNjI2MDYzMDIwWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02ODVjZThmYy01NmM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3pSShb+G90dxnhX27Z4tRB2l5J7/q8js3FDJR1qhLLmM5k9W5+iNMpgPrBHw FgirCE0pt2WVtYtIeG1hq/m1E0g3eBUYkW3POz66P+GxqTSuFO9NYpZNifjAvCqc qte53JESMflhe3fflvbVgdAuL8SY3jE/yDaZ+/gWPCQxYkCk8vO4k0qeR/Qm+mce b+ohsmvxbgpC7JPpQwoppm8Z9GBNUEC9gbf01id73ndfhflKQAg+BS9wEyBCeDmV +IT9RILjPEw2hqFHTj/wkpWNUe10G6osRWEzym67FC4/W6j+v7iqKFuQyrnFpLKE l5JwRBDrewCCfqpdbi1vY/U8fwIDAQABo4IC5DCCAuAwHQYDVR0OBBYEFDiT24Bu W/MKPlqVAYcuiXBQiYrmMB8GA1UdIwQYMBaAFLz6+NM/GKjTYCAp687eHjavIHFc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkQ1NC8zRTI4MUM5ODAw NDkxMUU1QjRCNjRGNjNDNEY5QUUwMi92UHI0MHo4WXFOTmdJQ25yenQ0ZU5xOGdj VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZQcjQwejhZcU5OZ0lDbnJ6dDRlTnE4Z2NWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUJENTQvM0UyODFDOTgwMDQ5MTFFNUI0QjY0RjYzQzRGOUFFMDIvMUQxRTlGNzJB MDUwMTFFRDhCMjVGRTUyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwbgYIKwYBBQUHAQcBAf8E XzBdMDYEAgABMDADBAAxAHwDBAMx50gDBAMx54ADBAA6iScDBABuMQIDBABuMWMD BAFuMXADBADSASMwIwQCAAIwHQMHACQFmADQAzASAwcAJAWYANAHAwcAJAWYANAI MA0GCSqGSIb3DQEBCwUAA4IBAQCnG+jaRlHT8MG+DLVgdax+MXwFfzEPOB2GAkiU DA2h0Su6nTGn6axlcr56DKBkTovCOvwxySyibFPh2gzuNkKzYFuFsRNJ8Z/HYaOO 52UoNo/13L6TRE0ljC3wYOUjK60ew+vj9Pu7IiQxTdAloiv2qSweccIOEXAAlo0t Xwx5NbzWlJTSfO3S3u6B7cMSXxFNtnMDT3QKHRVhhi92dhs5eG4tMyIgOWJ+9DJ7 qFeSBoBauz1r9hzfMbmwohg/uTyMxBptjCQqslZJsq8QMKVKgmIGCOOd5SPCgIWo w3Kv/gu5ouD31bC1Gpiu0p+Ah6LMK4c+BZHqkCgf6ksDa507 -----END CERTIFICATE-----Generated at Thu Jul 3 23:27:00 2025 by rpki-client