$ rpki-client -vvf rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/F539311C7DA011F08A71610EC4F9AE02.roa File: F539311C7DA011F08A71610EC4F9AE02.roa (raw, json) Hash identifier: cAHWY0a4oqGoGnq4kCXjp1gN+1Hmp31WC1aZV75YsEg= Subject key identifier: DC:34:49:A0:C5:5A:1A:F8:41:8F:95:6A:A4:CD:77:7B:52:93:C6:20 Certificate issuer: /CN=A912176D/serialNumber=96F42E19F69D596A0318921590A17DD53233E595 Certificate serial: 082D Authority key identifier: 96:F4:2E:19:F6:9D:59:6A:03:18:92:15:90:A1:7D:D5:32:33:E5:95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/F539311C7DA011F08A71610EC4F9AE02.roa Signing time: Wed 20 Aug 2025 08:37:51 +0000 ROA not before: Wed 20 Aug 2025 08:37:51 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 134202 IP address blocks: 61.4.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.crl rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:18:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2093 (0x82d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912176D, serialNumber=96F42E19F69D596A0318921590A17DD53233E595 Validity Not Before: Aug 20 08:37:51 2025 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=68a5895f-dfd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:06:78:11:b6:7f:37:d2:64:8c:f2:f6:3e:09: aa:c2:5c:2d:34:f9:1c:7c:ea:15:1a:59:eb:7a:c0: b9:da:ab:00:c0:cd:e5:65:26:04:89:76:12:e8:81: 53:84:33:65:c9:ec:da:e6:64:09:0d:b3:44:1a:14: 75:d1:da:92:2c:06:26:c3:8f:a1:83:da:fd:ed:83: 06:73:c9:b0:9c:e7:11:e8:dd:dc:26:43:85:8c:00: 41:2a:86:b1:cc:42:48:89:5d:85:4c:c1:52:60:e7: 4c:38:68:0d:0a:b8:7f:02:d8:b1:e3:55:b3:f1:ae: 99:74:c0:e6:b0:ab:31:05:4e:93:f7:06:2e:19:98: bb:e9:d7:a2:13:dc:1b:c9:21:bb:fb:e9:ab:68:62: 55:0f:5e:c1:24:91:59:cc:23:f7:65:d9:da:ed:90: 4d:d6:85:0e:ff:ae:f0:b1:10:f5:34:31:7f:78:d1: 66:80:7e:b7:bb:9d:80:e3:8e:4f:99:39:b0:b5:af: 4a:35:e9:25:e4:49:05:f3:07:53:19:39:57:2b:8b: 25:ce:86:24:59:c4:52:32:bb:d0:57:10:58:1e:de: 8f:60:1e:7e:7e:64:94:27:ac:54:0b:13:b1:00:06: f7:a0:88:a2:bf:e3:a6:55:68:cf:d0:c6:f1:8e:17: c0:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:34:49:A0:C5:5A:1A:F8:41:8F:95:6A:A4:CD:77:7B:52:93:C6:20 X509v3 Authority Key Identifier: keyid:96:F4:2E:19:F6:9D:59:6A:03:18:92:15:90:A1:7D:D5:32:33:E5:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/F539311C7DA011F08A71610EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.4.96.0/24 Signature Algorithm: sha256WithRSAEncryption 59:b2:51:61:30:3d:63:52:7e:24:3f:64:59:2b:c1:45:dd:45: 8f:69:bb:f2:5a:4d:d8:60:b2:59:d3:aa:da:72:6c:b0:ec:5c: f6:14:24:ec:db:dd:d8:9b:28:e9:fb:3b:0e:dc:9a:c4:87:df: 8b:84:7b:07:e9:01:41:32:fd:64:f5:85:34:16:92:42:91:e5: a1:4f:cc:cc:c2:fd:30:15:1b:f3:d5:3d:4c:74:55:d7:30:01: b1:66:89:e8:7d:a9:84:6c:36:f2:d9:7e:5a:20:e0:99:21:0c: aa:15:95:3f:38:4a:84:30:e2:30:77:28:14:fc:ba:c7:84:24: bd:e7:40:b7:6c:ec:8d:d0:0e:2f:c1:19:4c:7d:68:b1:31:ee: 6e:dc:0d:70:73:c0:ea:c7:ad:e0:c7:bc:76:14:b9:e5:3e:6a: 92:e5:40:98:98:5c:2f:9f:0e:84:00:66:eb:a5:9b:31:d5:9d: b8:07:9f:0a:31:f5:6f:c6:63:cd:09:4b:84:63:c5:cb:e9:4e: d3:0f:e3:f9:39:79:c6:15:3b:37:47:7d:1f:da:f2:03:3e:1e: 67:86:cc:56:75:0d:c9:7c:f9:91:ae:7e:ee:c9:26:63:54:c8: d3:37:e7:c5:d7:4f:87:f5:92:a8:75:c6:16:b3:3f:e4:09:0c: ec:bf:7f:cb -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCC0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE3NkQxMTAvBgNVBAUTKDk2RjQyRTE5RjY5RDU5NkEwMzE4OTIxNTkwQTE3REQ1 MzIzM0U1OTUwHhcNMjUwODIwMDgzNzUxWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGE1ODk1Zi1kZmQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzAZ4EbZ/N9JkjPL2PgmqwlwtNPkcfOoVGlnresC52qsAwM3lZSYEiXYS6IFT hDNlyeza5mQJDbNEGhR10dqSLAYmw4+hg9r97YMGc8mwnOcR6N3cJkOFjABBKoax zEJIiV2FTMFSYOdMOGgNCrh/Atix41Wz8a6ZdMDmsKsxBU6T9wYuGZi76deiE9wb ySG7++mraGJVD17BJJFZzCP3Zdna7ZBN1oUO/67wsRD1NDF/eNFmgH63u52A445P mTmwta9KNekl5EkF8wdTGTlXK4slzoYkWcRSMrvQVxBYHt6PYB5+fmSUJ6xUCxOx AAb3oIiiv+OmVWjP0MbxjhfAvwIDAQABo4IClTCCApEwHQYDVR0OBBYEFNw0SaDF Whr4QY+VaqTNd3tSk8YgMB8GA1UdIwQYMBaAFJb0Lhn2nVlqAxiSFZChfdUyM+WV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTc2RC85M0QxN0NEMDA2 QTAxMUVCQjQwOTA4NTlDNEY5QUUwMi9sdlF1R2ZhZFdXb0RHSklWa0tGOTFUSXo1 WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x2UXVHZmFkV1dvREdKSVZrS0Y5MVRJejVaVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjE3NkQvOTNEMTdDRDAwNkEwMTFFQkI0MDkwODU5QzRGOUFFMDIvRjUzOTMxMUM3 REEwMTFGMDhBNzE2MTBFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAA9BGAwDQYJKoZIhvcNAQELBQADggEBAFmyUWEwPWNSfiQ/ ZFkrwUXdRY9pu/JaTdhgslnTqtpybLDsXPYUJOzb3dibKOn7Ow7cmsSH34uEewfp AUEy/WT1hTQWkkKR5aFPzMzC/TAVG/PVPUx0VdcwAbFmieh9qYRsNvLZflog4Jkh DKoVlT84SoQw4jB3KBT8useEJL3nQLds7I3QDi/BGUx9aLEx7m7cDXBzwOrHreDH vHYUueU+apLlQJiYXC+fDoQAZuulmzHVnbgHnwox9W/GY80JS4RjxcvpTtMP4/k5 ecYVOzdHfR/a8gM+HmeGzFZ1Dcl8+ZGufu7JJmNUyNM358XXT4f1kqh1xhazP+QJ DOy/f8s= -----END CERTIFICATE-----Generated at Sun Aug 24 09:04:45 2025 by rpki-client