$ rpki-client -vvf rpki.apnic.net/member_repository/A911C812/B25EF990E91611EAA705D84FC4F9AE02/477192ACF3FA11EAB9D11D26C4F9AE02.roa File: 477192ACF3FA11EAB9D11D26C4F9AE02.roa (raw, json) Hash identifier: fA68vPB23i/OAo2Tlmrq8T3cX2gqQgOTyj+Ul9pJg/w= Subject key identifier: 91:F5:D8:10:A4:67:CB:13:E0:53:56:4B:21:E1:C7:F5:8C:8D:24:C0 Certificate issuer: /CN=A911C812/serialNumber=6A32BD13DFCD77EF1B5C052BE36ED89AD21270DB Certificate serial: 07FD Authority key identifier: 6A:32:BD:13:DF:CD:77:EF:1B:5C:05:2B:E3:6E:D8:9A:D2:12:70:DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ajK9E9_Nd-8bXAUr427YmtIScNs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C812/B25EF990E91611EAA705D84FC4F9AE02/477192ACF3FA11EAB9D11D26C4F9AE02.roa Signing time: Thu 12 Jun 2025 20:58:24 +0000 ROA not before: Thu 12 Jun 2025 20:58:24 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 9534 IP address blocks: 43.240.20.0/22 maxlen: 22 43.240.20.0/24 maxlen: 24 43.240.21.0/24 maxlen: 24 43.240.22.0/24 maxlen: 24 43.240.23.0/24 maxlen: 24 103.239.248.0/22 maxlen: 22 202.75.128.0/19 maxlen: 19 202.75.160.0/19 maxlen: 19 202.151.192.0/18 maxlen: 19 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C812/B25EF990E91611EAA705D84FC4F9AE02/ajK9E9_Nd-8bXAUr427YmtIScNs.crl rsync://rpki.apnic.net/member_repository/A911C812/B25EF990E91611EAA705D84FC4F9AE02/ajK9E9_Nd-8bXAUr427YmtIScNs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ajK9E9_Nd-8bXAUr427YmtIScNs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:58:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2045 (0x7fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C812, serialNumber=6A32BD13DFCD77EF1B5C052BE36ED89AD21270DB Validity Not Before: Jun 12 20:58:24 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=684b3f70-2080 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d3:8d:fc:82:1e:60:9f:e8:b4:10:52:a5:ff: 1d:a6:2a:ea:e5:53:1d:95:00:97:f7:25:5c:f5:0c: be:6b:9c:ed:0c:d4:f2:5a:95:b8:5a:5b:68:6f:ae: 6f:88:a0:d5:8b:ec:44:4b:0b:f8:8c:f7:ee:4e:1e: 0f:0a:3d:0c:bd:e1:35:eb:8d:a8:2a:42:bf:0d:b2: bf:a8:ed:a1:6a:df:62:2d:7a:b7:93:c0:58:b2:31: 11:b8:70:67:2e:fd:63:6d:16:3a:bb:be:4b:ff:95: 94:a2:d0:fc:2a:28:59:31:33:06:64:d0:cb:d6:62: fa:1f:b3:33:af:a2:8f:cd:85:c0:5e:da:bf:94:e9: 7c:2f:e2:dd:fb:c6:b0:64:83:69:a3:69:7c:fd:01: 1b:08:16:1f:6a:19:f2:76:38:ab:cf:a5:9a:66:e5: 9e:de:2f:c2:cb:63:76:d2:29:d0:60:20:57:63:1c: c7:24:fb:66:d6:9b:35:77:23:e1:0d:12:41:51:ca: 80:cf:8a:cc:f5:22:fd:60:38:1c:85:db:f1:50:b3: 27:28:08:a2:92:34:76:35:31:8b:1e:5a:87:6c:5c: d2:c3:c4:e4:bb:e6:5b:94:30:f7:60:df:58:3f:ab: 6a:5d:3f:47:4d:82:19:9a:88:5e:52:2e:db:f3:97: a7:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:F5:D8:10:A4:67:CB:13:E0:53:56:4B:21:E1:C7:F5:8C:8D:24:C0 X509v3 Authority Key Identifier: keyid:6A:32:BD:13:DF:CD:77:EF:1B:5C:05:2B:E3:6E:D8:9A:D2:12:70:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C812/B25EF990E91611EAA705D84FC4F9AE02/ajK9E9_Nd-8bXAUr427YmtIScNs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ajK9E9_Nd-8bXAUr427YmtIScNs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C812/B25EF990E91611EAA705D84FC4F9AE02/477192ACF3FA11EAB9D11D26C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.240.20.0/22 103.239.248.0/22 202.75.128.0/18 202.151.192.0/18 Signature Algorithm: sha256WithRSAEncryption 3b:ad:72:2c:19:fe:b3:df:11:67:be:ea:0f:64:73:47:79:b3: d9:36:2d:2d:f1:ab:84:d6:35:8b:57:24:1b:08:f1:bf:6b:41: eb:93:13:dc:20:db:19:65:6f:f1:df:ba:d4:5f:e3:6b:d9:2f: d7:d0:d0:7e:9d:c0:12:d7:7a:34:de:6c:7e:13:d0:5e:5c:37: b2:d3:49:3f:6a:af:31:52:fd:b6:34:31:3b:c9:13:6f:2d:2d: bd:19:4f:94:ee:4f:49:f7:f4:cf:a5:19:22:d1:87:7e:40:4e: 40:82:69:48:5f:af:74:b2:db:b8:ba:c9:22:3d:c2:7e:64:20: 5e:d5:35:48:d1:70:fb:a0:fd:b1:91:43:79:65:f4:ed:3e:e7: a9:96:4b:bb:3e:ea:4a:fd:cf:78:7f:b3:34:27:bb:7c:7a:0e: 57:f8:fd:a2:ab:23:a6:0f:f9:0c:0f:45:d8:ab:fb:14:a6:cc: 6c:8c:0d:bc:01:27:79:58:10:3c:df:56:cb:e2:5b:7a:0d:86: fe:8e:1b:b1:b6:5d:05:34:da:a2:10:af:a8:3f:c2:c1:d3:ca: 6c:35:d0:3c:e5:2a:df:48:10:43:c4:ef:78:7d:e1:aa:19:28: 1c:19:17:20:21:65:07:c2:5c:f4:3b:84:8a:39:c9:bd:c6:bf: f8:01:04:63 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICB/0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM4MTIxMTAvBgNVBAUTKDZBMzJCRDEzREZDRDc3RUYxQjVDMDUyQkUzNkVEODlB RDIxMjcwREIwHhcNMjUwNjEyMjA1ODI0WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODRiM2Y3MC0yMDgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvtON/IIeYJ/otBBSpf8dpirq5VMdlQCX9yVc9Qy+a5ztDNTyWpW4Wltob65v iKDVi+xESwv4jPfuTh4PCj0MveE1642oKkK/DbK/qO2hat9iLXq3k8BYsjERuHBn Lv1jbRY6u75L/5WUotD8KihZMTMGZNDL1mL6H7Mzr6KPzYXAXtq/lOl8L+Ld+8aw ZINpo2l8/QEbCBYfahnydjirz6WaZuWe3i/Cy2N20inQYCBXYxzHJPtm1ps1dyPh DRJBUcqAz4rM9SL9YDgchdvxULMnKAiikjR2NTGLHlqHbFzSw8Tku+ZblDD3YN9Y P6tqXT9HTYIZmoheUi7b85enmwIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFJH12BCk Z8sT4FNWSyHhx/WMjSTAMB8GA1UdIwQYMBaAFGoyvRPfzXfvG1wFK+Nu2JrSEnDb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzgxMi9CMjVFRjk5MEU5 MTYxMUVBQTcwNUQ4NEZDNEY5QUUwMi9haks5RTlfTmQtOGJYQVVyNDI3WW10SVNj TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FqSzlFOV9OZC04YlhBVXI0MjdZbXRJU2NOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUM4MTIvQjI1RUY5OTBFOTE2MTFFQUE3MDVEODRGQzRGOUFFMDIvNDc3MTkyQUNG M0ZBMTFFQUI5RDExRDI2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBAIr8BQDBAJn7/gDBAbKS4ADBAbKl8AwDQYJKoZIhvcNAQEL BQADggEBADutciwZ/rPfEWe+6g9kc0d5s9k2LS3xq4TWNYtXJBsI8b9rQeuTE9wg 2xllb/HfutRf42vZL9fQ0H6dwBLXejTebH4T0F5cN7LTST9qrzFS/bY0MTvJE28t Lb0ZT5TuT0n39M+lGSLRh35ATkCCaUhfr3Sy27i6ySI9wn5kIF7VNUjRcPug/bGR Q3ll9O0+56mWS7s+6kr9z3h/szQnu3x6Dlf4/aKrI6YP+QwPRdir+xSmzGyMDbwB J3lYEDzfVsviW3oNhv6OG7G2XQU02qIQr6g/wsHTymw10DzlKt9IEEPE73h94aoZ KBwZFyAhZQfCXPQ7hIo5yb3Gv/gBBGM= -----END CERTIFICATE-----Generated at Mon Oct 20 19:27:00 2025 by rpki-client