$ rpki-client -vvf rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/337C9CE4314C11F0845D2C39C4F9AE02.roa File: 337C9CE4314C11F0845D2C39C4F9AE02.roa (raw, json) Hash identifier: vrIMWDHbnqPNLJF4jHYmyNS+GSDUa49JaV3JBKcCD+w= Subject key identifier: 7F:EC:C3:69:1D:A6:DA:46:EA:D2:4F:3E:1F:87:01:97:76:6C:DB:C2 Certificate issuer: /CN=A911FAC3/serialNumber=7762AA8277020D0BB5C75997DE5F7D8A5142DF14 Certificate serial: 13B1 Authority key identifier: 77:62:AA:82:77:02:0D:0B:B5:C7:59:97:DE:5F:7D:8A:51:42:DF:14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d2KqgncCDQu1x1mX3l99ilFC3xQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/337C9CE4314C11F0845D2C39C4F9AE02.roa Signing time: Sun 22 Jun 2025 08:20:51 +0000 ROA not before: Sun 22 Jun 2025 08:20:51 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 63932 IP address blocks: 43.229.12.0/22 maxlen: 22 43.229.12.0/24 maxlen: 24 43.229.13.0/24 maxlen: 24 43.229.14.0/24 maxlen: 24 43.229.15.0/24 maxlen: 24 103.48.16.0/22 maxlen: 22 103.48.16.0/24 maxlen: 24 103.48.17.0/24 maxlen: 24 103.48.18.0/24 maxlen: 24 103.48.19.0/24 maxlen: 24 114.130.240.0/21 maxlen: 21 114.130.240.0/23 maxlen: 23 114.130.252.0/22 maxlen: 22 2401:ed80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.crl rsync://rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d2KqgncCDQu1x1mX3l99ilFC3xQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 17:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5041 (0x13b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FAC3, serialNumber=7762AA8277020D0BB5C75997DE5F7D8A5142DF14 Validity Not Before: Jun 22 08:20:51 2025 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=6857bce3-4e03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f6:8b:73:9f:fd:1c:65:46:5c:df:2e:00:af: da:d3:06:7a:05:5c:70:01:7a:96:c1:91:76:c6:7d: 09:38:fc:a2:35:06:1f:6f:65:d1:5d:f0:71:2c:c4: d9:02:18:79:47:23:d5:83:3b:6e:7a:3c:4d:a9:86: 3b:0e:cc:ee:cc:e2:1c:12:a3:63:96:27:fc:b5:a4: b2:7c:2e:84:c1:95:76:ef:bf:41:7d:04:3f:08:e0: f7:21:9b:42:9c:de:8f:75:58:72:6e:be:74:e8:4c: 21:ab:88:1a:2a:5f:ef:64:42:8e:3e:0d:e4:11:f9: b8:30:2a:e2:48:c6:ed:c5:df:71:be:1e:fd:b2:09: fc:aa:5f:1c:3b:20:e5:5b:8f:3f:f5:a7:d4:1a:27: 37:08:e8:bb:49:71:ca:29:5a:51:ae:84:2d:e4:f5: fa:ed:af:39:d3:4d:35:0f:81:93:49:30:a3:10:91: e1:4d:80:23:3f:53:3f:8c:82:c5:e5:60:c9:2c:3f: 89:59:f2:21:4d:79:f5:81:33:82:70:aa:ba:b1:5c: 02:31:a2:b5:0c:95:75:b1:22:71:68:de:ed:92:b9: 4c:2a:36:f4:c7:a3:c7:6e:aa:c3:78:92:32:89:39: 99:6e:f4:4f:54:bf:c6:95:d3:78:bb:1c:b3:99:75: cd:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:EC:C3:69:1D:A6:DA:46:EA:D2:4F:3E:1F:87:01:97:76:6C:DB:C2 X509v3 Authority Key Identifier: keyid:77:62:AA:82:77:02:0D:0B:B5:C7:59:97:DE:5F:7D:8A:51:42:DF:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d2KqgncCDQu1x1mX3l99ilFC3xQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/337C9CE4314C11F0845D2C39C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.229.12.0/22 103.48.16.0/22 114.130.240.0/21 114.130.252.0/22 IPv6: 2401:ed80::/32 Signature Algorithm: sha256WithRSAEncryption a3:b4:27:9f:bf:c2:f4:61:24:b6:7b:88:6a:0b:3b:16:1d:e5: 09:e2:e4:32:39:fc:d6:ea:9d:cc:19:fb:03:bc:5a:39:6c:ce: 56:0b:08:90:02:76:c3:f2:7f:d7:74:cd:0d:12:7c:83:22:6c: c9:98:1f:62:fe:22:a9:d7:40:01:5c:ca:c7:54:2d:69:b2:87: 5b:bf:08:47:f8:15:fe:42:c0:7b:36:46:c3:c1:ee:74:22:e5: 22:77:66:54:d0:c1:0e:0e:c6:e2:77:70:2d:c7:a1:3a:63:a0: 3d:1b:0b:af:02:33:e1:2e:07:07:95:08:6d:9b:3b:cc:fe:6f: 59:59:34:08:55:d1:fc:cd:b1:57:5e:ae:b1:a4:26:15:67:d4: 08:d1:98:f2:5b:a0:a4:47:41:73:f4:00:25:21:b4:56:7e:79: a6:4a:f9:66:cf:9d:6c:f9:46:29:95:3f:69:17:e0:d6:73:4e: 30:a5:89:49:3b:f8:9b:b6:7a:03:0b:ca:e2:1c:1e:7c:b9:46: 51:3b:57:7f:78:bc:88:9d:77:3c:0c:0b:93:0f:14:2d:64:e8: 58:ac:26:c8:47:bc:b8:65:bc:33:4a:14:93:17:9b:e5:df:76: c7:45:5a:1e:eb:37:94:c9:f2:62:4b:40:83:3c:20:32:2f:11: 30:0c:06:5c -----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgICE7EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZBQzMxMTAvBgNVBAUTKDc3NjJBQTgyNzcwMjBEMEJCNUM3NTk5N0RFNUY3RDhB NTE0MkRGMTQwHhcNMjUwNjIyMDgyMDUxWhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODU3YmNlMy00ZTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyPaLc5/9HGVGXN8uAK/a0wZ6BVxwAXqWwZF2xn0JOPyiNQYfb2XRXfBxLMTZ Ahh5RyPVgztuejxNqYY7DszuzOIcEqNjlif8taSyfC6EwZV2779BfQQ/COD3IZtC nN6PdVhybr506Ewhq4gaKl/vZEKOPg3kEfm4MCriSMbtxd9xvh79sgn8ql8cOyDl W48/9afUGic3COi7SXHKKVpRroQt5PX67a850001D4GTSTCjEJHhTYAjP1M/jILF 5WDJLD+JWfIhTXn1gTOCcKq6sVwCMaK1DJV1sSJxaN7tkrlMKjb0x6PHbqrDeJIy iTmZbvRPVL/GldN4uxyzmXXNfQIDAQABo4ICtjCCArIwHQYDVR0OBBYEFH/sw2kd ptpG6tJPPh+HAZd2bNvCMB8GA1UdIwQYMBaAFHdiqoJ3Ag0LtcdZl95ffYpRQt8U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkFDMy83Qjg2OEMwODlE RjUxMUU4OTU3QUI0MTZDNEY5QUUwMi9kMktxZ25jQ0RRdTF4MW1YM2w5OWlsRkMz eFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2QyS3FnbmNDRFF1MXgxbVgzbDk5aWxGQzN4US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUZBQzMvN0I4NjhDMDg5REY1MTFFODk1N0FCNDE2QzRGOUFFMDIvMzM3QzlDRTQz MTRDMTFGMDg0NUQyQzM5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQAYIKwYBBQUHAQcBAf8E MTAvMB4EAgABMBgDBAIr5QwDBAJnMBADBANygvADBAJygvwwDQQCAAIwBwMFACQB 7YAwDQYJKoZIhvcNAQELBQADggEBAKO0J5+/wvRhJLZ7iGoLOxYd5Qni5DI5/Nbq ncwZ+wO8WjlszlYLCJACdsPyf9d0zQ0SfIMibMmYH2L+IqnXQAFcysdULWmyh1u/ CEf4Ff5CwHs2RsPB7nQi5SJ3ZlTQwQ4OxuJ3cC3HoTpjoD0bC68CM+EuBweVCG2b O8z+b1lZNAhV0fzNsVderrGkJhVn1AjRmPJboKRHQXP0ACUhtFZ+eaZK+WbPnWz5 RimVP2kX4NZzTjCliUk7+Ju2egMLyuIcHny5RlE7V394vIiddzwMC5MPFC1k6Fis JshHvLhlvDNKFJMXm+XfdsdFWh7rN5TJ8mJLQIM8IDIvETAMBlw= -----END CERTIFICATE-----Generated at Thu Jul 3 13:34:17 2025 by rpki-client