$ rpki-client -vvf rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/DA8A3692A59411F0BF072D6DC4F9AE02.roa File: DA8A3692A59411F0BF072D6DC4F9AE02.roa (raw, json) Hash identifier: pbD3JP/HzqcUzvlBhqeP9HbWOKNkQzUxda+U++yeQSw= Subject key identifier: 65:C8:69:0A:1D:59:5A:27:12:D3:D3:60:10:0F:C8:3A:D3:8F:AB:3F Certificate issuer: /CN=A911D834/serialNumber=FDB2754D950630EB11DF84E2855CAAB7D1626F80 Certificate serial: 3529 Authority key identifier: FD:B2:75:4D:95:06:30:EB:11:DF:84:E2:85:5C:AA:B7:D1:62:6F:80 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_bJ1TZUGMOsR34TihVyqt9Fib4A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/DA8A3692A59411F0BF072D6DC4F9AE02.roa Signing time: Fri 10 Oct 2025 04:52:43 +0000 ROA not before: Fri 10 Oct 2025 04:52:43 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 23647 IP address blocks: 202.51.80.0/24 maxlen: 24 202.51.81.0/24 maxlen: 24 202.51.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.crl rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_bJ1TZUGMOsR34TihVyqt9Fib4A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 14:41:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13609 (0x3529) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D834, serialNumber=FDB2754D950630EB11DF84E2855CAAB7D1626F80 Validity Not Before: Oct 10 04:52:43 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68e8911a-c45b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:85:00:d7:d0:c0:19:aa:d6:38:98:9f:6d:53: e1:10:cf:0b:5f:61:0d:86:c1:e3:1e:40:24:bb:1b: 65:5a:ca:a5:26:78:2d:3d:13:3c:bf:9b:c3:01:be: 3b:15:8f:16:74:ab:e5:08:3d:61:90:44:33:00:7e: 10:e1:6d:c1:49:32:0c:11:47:08:5d:9c:f3:f4:00: 35:a4:24:03:3a:c3:50:a2:dc:bd:0f:e4:0c:41:90: 9b:37:17:b4:15:a6:1b:0a:7e:41:76:18:5d:7f:26: c7:a8:4e:49:0a:7e:c0:33:b3:7d:c4:ab:74:8f:ca: 0f:26:3f:45:6e:24:c6:9d:f1:0b:d7:63:48:ad:f0: 09:4f:a6:e4:c4:8f:b5:31:36:72:b0:98:b3:14:8f: 7c:69:f6:ad:88:e6:3d:c4:4f:5b:3c:a3:9f:e2:16: 46:9e:09:14:56:aa:cc:70:16:d7:4f:69:5f:97:68: 58:cd:80:ba:38:d4:b3:ba:f2:e0:1b:52:88:20:59: eb:9f:17:c7:10:fd:39:a8:de:5c:f4:65:54:13:da: 6a:63:62:dc:2f:60:b7:00:f2:4d:f3:b3:50:cb:58: 3c:35:fc:a3:a7:3d:2a:27:c6:cf:30:cf:53:05:fd: 6d:8a:a0:45:cc:7a:72:1e:b2:6c:7f:16:17:27:d1: df:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:C8:69:0A:1D:59:5A:27:12:D3:D3:60:10:0F:C8:3A:D3:8F:AB:3F X509v3 Authority Key Identifier: keyid:FD:B2:75:4D:95:06:30:EB:11:DF:84:E2:85:5C:AA:B7:D1:62:6F:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_bJ1TZUGMOsR34TihVyqt9Fib4A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/DA8A3692A59411F0BF072D6DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.51.80.0/23 202.51.92.0/24 Signature Algorithm: sha256WithRSAEncryption 34:c0:de:3c:32:f7:8f:04:73:d5:15:5b:89:8f:a5:4c:aa:fb: 47:65:67:0a:1c:31:92:cd:a8:b3:9b:78:8e:0e:43:2b:d5:7f: bb:23:ac:82:00:7e:e5:ac:7b:67:13:50:c0:7b:7c:06:67:05: a4:09:79:66:e5:34:63:fd:64:40:45:46:3c:59:5c:18:2c:62: 8d:44:5c:29:bc:cd:e6:ac:96:50:3d:ba:bd:46:b6:6d:f5:78: 4e:83:83:d0:33:ea:e8:78:30:8a:2b:f4:38:6e:a4:b9:f5:61: fa:e8:aa:14:5c:a6:62:27:9d:0a:90:94:74:6a:c5:25:2c:76: a8:ed:b7:2b:7a:04:42:6a:13:76:5a:ba:37:96:78:85:81:cb: 30:ef:52:c7:68:cf:eb:e1:45:6d:a0:19:aa:3a:80:4b:40:cc: b7:bd:f6:80:6b:33:ec:46:1e:0d:95:c0:2e:4e:14:5a:ec:97: 1f:b6:aa:51:3f:f4:0a:eb:b1:44:e3:89:2f:bc:92:29:54:ba: 85:4e:a6:d7:b1:7c:d5:ec:0b:79:f0:dc:a1:c4:da:04:b2:b7: 15:ce:56:32:49:0d:5b:6f:17:a0:ea:2f:db:9c:95:96:53:ba: 6e:3c:d1:a1:3c:92:11:fb:3b:fa:6a:ef:eb:7d:4b:30:ab:6f: eb:04:bf:2b -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICNSkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ4MzQxMTAvBgNVBAUTKEZEQjI3NTREOTUwNjMwRUIxMURGODRFMjg1NUNBQUI3 RDE2MjZGODAwHhcNMjUxMDEwMDQ1MjQzWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGU4OTExYS1jNDViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzIUA19DAGarWOJifbVPhEM8LX2ENhsHjHkAkuxtlWsqlJngtPRM8v5vDAb47 FY8WdKvlCD1hkEQzAH4Q4W3BSTIMEUcIXZzz9AA1pCQDOsNQoty9D+QMQZCbNxe0 FaYbCn5BdhhdfybHqE5JCn7AM7N9xKt0j8oPJj9FbiTGnfEL12NIrfAJT6bkxI+1 MTZysJizFI98afatiOY9xE9bPKOf4hZGngkUVqrMcBbXT2lfl2hYzYC6ONSzuvLg G1KIIFnrnxfHEP05qN5c9GVUE9pqY2LcL2C3APJN87NQy1g8Nfyjpz0qJ8bPMM9T Bf1tiqBFzHpyHrJsfxYXJ9Hf0wIDAQABo4ICmzCCApcwHQYDVR0OBBYEFGXIaQod WVonEtPTYBAPyDrTj6s/MB8GA1UdIwQYMBaAFP2ydU2VBjDrEd+E4oVcqrfRYm+A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDgzNC9ERkJBNTBCODFE OEQxMUUyODI0REVERUIwOEIwMkNEMi9fYkoxVFpVR01Pc1IzNFRpaFZ5cXQ5Rmli NEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19iSjFUWlVHTU9zUjM0VGloVnlxdDlGaWI0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUQ4MzQvREZCQTUwQjgxRDhEMTFFMjgyNERFREVCMDhCMDJDRDIvREE4QTM2OTJB NTk0MTFGMEJGMDcyRDZEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAHKM1ADBADKM1wwDQYJKoZIhvcNAQELBQADggEBADTA3jwy 948Ec9UVW4mPpUyq+0dlZwocMZLNqLObeI4OQyvVf7sjrIIAfuWse2cTUMB7fAZn BaQJeWblNGP9ZEBFRjxZXBgsYo1EXCm8zeasllA9ur1Gtm31eE6Dg9Az6uh4MIor 9DhupLn1YfroqhRcpmInnQqQlHRqxSUsdqjttyt6BEJqE3ZaujeWeIWByzDvUsdo z+vhRW2gGao6gEtAzLe99oBrM+xGHg2VwC5OFFrslx+2qlE/9ArrsUTjiS+8kilU uoVOptexfNXsC3nw3KHE2gSytxXOVjJJDVtvF6DqL9uclZZTum480aE8khH7O/pq 7+t9SzCrb+sEvys= -----END CERTIFICATE-----Generated at Mon Oct 20 09:48:44 2025 by rpki-client