$ rpki-client -vvf rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/D0279B7AD10A11ECA78C081CC4F9AE02.roa File: D0279B7AD10A11ECA78C081CC4F9AE02.roa (raw, json) Hash identifier: rpEeJfHec6qq3m3hz9oQ0Fj5z6c+WSBf/B8pGM1lwQw= Subject key identifier: EF:AC:2A:09:C5:1F:66:06:61:29:27:2E:E5:FA:0A:29:DF:98:72:A5 Certificate issuer: /CN=A911DA8C/serialNumber=8031886E7E609E4F4A346A45108110406875FEC8 Certificate serial: 0342 Authority key identifier: 80:31:88:6E:7E:60:9E:4F:4A:34:6A:45:10:81:10:40:68:75:FE:C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDGIbn5gnk9KNGpFEIEQQGh1_sg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/D0279B7AD10A11ECA78C081CC4F9AE02.roa Signing time: Thu 21 Aug 2025 01:38:01 +0000 ROA not before: Thu 21 Aug 2025 01:38:01 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 55769 IP address blocks: 45.250.236.0/22 maxlen: 24 103.242.56.0/22 maxlen: 24 144.48.136.0/22 maxlen: 24 144.48.228.0/22 maxlen: 24 157.119.96.0/22 maxlen: 24 202.53.144.0/22 maxlen: 24 2405:e280:2080::/48 maxlen: 48 2405:e280:2180::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.crl rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDGIbn5gnk9KNGpFEIEQQGh1_sg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:19:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 834 (0x342) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DA8C, serialNumber=8031886E7E609E4F4A346A45108110406875FEC8 Validity Not Before: Aug 21 01:38:01 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68a67879-4883 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:41:b0:4a:36:ee:e2:9d:88:1c:df:5e:a8:55: 40:b3:23:e9:9b:a4:1c:d5:a7:78:be:80:ee:05:8d: 39:56:02:29:d5:af:38:4f:d6:01:5b:b1:9a:b1:33: 0f:b5:f4:3a:f1:2f:05:35:8e:e0:20:74:ab:4d:0b: 2f:37:24:c4:b5:56:f7:11:b2:b4:83:1d:ea:17:e2: b3:90:07:6a:e7:b5:12:5c:7d:19:07:51:ac:0e:95: c1:9d:56:4f:94:a3:20:30:05:21:dd:b9:43:17:92: 57:3c:70:55:92:9b:4a:f6:39:f3:a8:68:64:f1:33: 3a:ed:d8:cb:89:8e:99:2a:0b:aa:6b:9e:e2:26:6a: e7:cb:f3:e4:72:70:cf:c4:2a:65:14:b0:dc:4b:41: cf:1a:88:c9:60:3a:76:0d:4d:21:12:1e:4d:74:cf: d4:6f:4a:f4:32:00:51:75:64:7a:e8:88:3d:6f:2a: 1c:06:e3:08:da:46:57:9d:42:05:59:27:38:1c:26: 65:e2:6e:fd:64:4c:0a:2a:3f:29:c3:e6:e5:dd:50: f2:31:d5:36:55:0d:b1:63:2d:be:82:ba:66:16:82: 6b:e2:3f:b6:5e:00:3b:f7:bf:50:f5:c5:50:e8:e3: 51:c4:b3:46:47:d4:59:b7:8f:c4:fb:d2:74:17:aa: e8:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:AC:2A:09:C5:1F:66:06:61:29:27:2E:E5:FA:0A:29:DF:98:72:A5 X509v3 Authority Key Identifier: keyid:80:31:88:6E:7E:60:9E:4F:4A:34:6A:45:10:81:10:40:68:75:FE:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDGIbn5gnk9KNGpFEIEQQGh1_sg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/D0279B7AD10A11ECA78C081CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.250.236.0/22 103.242.56.0/22 144.48.136.0/22 144.48.228.0/22 157.119.96.0/22 202.53.144.0/22 IPv6: 2405:e280:2080::/48 2405:e280:2180::/48 Signature Algorithm: sha256WithRSAEncryption 6b:65:8c:93:07:26:e0:b9:5c:91:c8:58:00:6c:6c:1b:9e:01: 86:ed:cb:a4:e1:cf:8e:96:3c:78:a0:a4:6b:eb:64:9d:70:c6: 17:09:2c:3c:ba:1b:6d:96:2b:af:08:82:bd:e3:84:f4:e6:0e: 10:54:da:eb:33:31:1e:33:e1:78:f4:0c:5c:58:0a:d3:b2:b3: 71:0b:82:2f:06:64:02:fe:bd:71:ce:77:d5:6e:30:ae:69:1b: 5d:c7:56:90:d6:4f:24:2f:92:5a:ef:72:43:c4:f3:5c:09:44: a4:85:1c:44:cb:96:ba:6c:03:26:10:fd:ab:47:f0:8e:a2:d0: 82:20:00:08:62:ed:85:6b:1f:cd:8b:8d:66:fa:fc:53:00:21: f1:7a:b5:ed:e0:4a:61:09:29:a2:aa:25:4a:65:10:e8:d0:30: 0c:67:fb:46:09:4e:49:8d:a5:c4:18:d9:6d:e2:80:97:10:db: fb:48:d3:37:96:bc:cc:89:26:f2:a8:f7:92:08:5c:ec:9f:2e: a0:44:be:91:71:0c:26:e2:a2:3b:ec:00:f1:86:bc:07:3e:0f: 6b:04:f6:68:d0:53:aa:88:f1:8e:69:00:58:18:85:21:f0:48: b9:22:6b:c0:0d:ee:a6:a8:45:d7:67:8d:1e:4d:55:e3:44:5d: cd:4d:f7:37 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgICA0IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURBOEMxMTAvBgNVBAUTKDgwMzE4ODZFN0U2MDlFNEY0QTM0NkE0NTEwODExMDQw Njg3NUZFQzgwHhcNMjUwODIxMDEzODAxWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGE2Nzg3OS00ODgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0EGwSjbu4p2IHN9eqFVAsyPpm6Qc1ad4voDuBY05VgIp1a84T9YBW7GasTMP tfQ68S8FNY7gIHSrTQsvNyTEtVb3EbK0gx3qF+KzkAdq57USXH0ZB1GsDpXBnVZP lKMgMAUh3blDF5JXPHBVkptK9jnzqGhk8TM67djLiY6ZKguqa57iJmrny/PkcnDP xCplFLDcS0HPGojJYDp2DU0hEh5NdM/Ub0r0MgBRdWR66Ig9byocBuMI2kZXnUIF WSc4HCZl4m79ZEwKKj8pw+bl3VDyMdU2VQ2xYy2+grpmFoJr4j+2XgA7979Q9cVQ 6ONRxLNGR9RZt4/E+9J0F6roTQIDAQABo4ICzTCCAskwHQYDVR0OBBYEFO+sKgnF H2YGYSknLuX6CinfmHKlMB8GA1UdIwQYMBaAFIAxiG5+YJ5PSjRqRRCBEEBodf7I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREE4Qy9GMzE2NEMyMEQx MDYxMUVDQjEyOEY0MTNDNEY5QUUwMi9nREdJYm41Z25rOUtOR3BGRUlFUVFHaDFf c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dER0libjVnbms5S05HcEZFSUVRUUdoMV9zZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MURBOEMvRjMxNjRDMjBEMTA2MTFFQ0IxMjhGNDEzQzRGOUFFMDIvRDAyNzlCN0FE MTBBMTFFQ0E3OEMwODFDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwVwYIKwYBBQUHAQcBAf8E SDBGMCoEAgABMCQDBAIt+uwDBAJn8jgDBAKQMIgDBAKQMOQDBAKdd2ADBALKNZAw GAQCAAIwEgMHACQF4oAggAMHACQF4oAhgDANBgkqhkiG9w0BAQsFAAOCAQEAa2WM kwcm4LlckchYAGxsG54Bhu3LpOHPjpY8eKCka+tknXDGFwksPLobbZYrrwiCveOE 9OYOEFTa6zMxHjPhePQMXFgK07KzcQuCLwZkAv69cc531W4wrmkbXcdWkNZPJC+S Wu9yQ8TzXAlEpIUcRMuWumwDJhD9q0fwjqLQgiAACGLthWsfzYuNZvr8UwAh8Xq1 7eBKYQkpoqolSmUQ6NAwDGf7RglOSY2lxBjZbeKAlxDb+0jTN5a8zIkm8qj3kghc 7J8uoES+kXEMJuKiO+wA8Ya8Bz4PawT2aNBTqojxjmkAWBiFIfBIuSJrwA3upqhF 12eNHk1V40RdzU33Nw== -----END CERTIFICATE-----Generated at Sat Aug 23 21:17:41 2025 by rpki-client