$ rpki-client -vvf rpki.apnic.net/member_repository/A912876D/57A2EAFA70E511F0A9380A2CC4F9AE02/B30F869670E511F08CE5B42CC4F9AE02.roa File: B30F869670E511F08CE5B42CC4F9AE02.roa (raw, json) Hash identifier: erO5HGBwapQrQxqX0w/vK8XPII0Rjyl1v5zKuwttKDQ= Subject key identifier: 83:CE:18:19:6D:BA:E4:78:12:2C:50:4D:C9:9F:38:49:32:F2:37:67 Certificate issuer: /CN=A912876D/serialNumber=6FA104BE665E523CB657C9BF8C308F023EA9C0DA Certificate serial: 08 Authority key identifier: 6F:A1:04:BE:66:5E:52:3C:B6:57:C9:BF:8C:30:8F:02:3E:A9:C0:DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b6EEvmZeUjy2V8m_jDCPAj6pwNo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912876D/57A2EAFA70E511F0A9380A2CC4F9AE02/B30F869670E511F08CE5B42CC4F9AE02.roa Signing time: Mon 04 Aug 2025 03:50:01 +0000 ROA not before: Mon 04 Aug 2025 03:50:01 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 154109 IP address blocks: 203.18.158.0/23 maxlen: 23 203.18.158.0/24 maxlen: 24 203.18.159.0/24 maxlen: 24 2402:1f60::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912876D/57A2EAFA70E511F0A9380A2CC4F9AE02/b6EEvmZeUjy2V8m_jDCPAj6pwNo.crl rsync://rpki.apnic.net/member_repository/A912876D/57A2EAFA70E511F0A9380A2CC4F9AE02/b6EEvmZeUjy2V8m_jDCPAj6pwNo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b6EEvmZeUjy2V8m_jDCPAj6pwNo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:20:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912876D, serialNumber=6FA104BE665E523CB657C9BF8C308F023EA9C0DA Validity Not Before: Aug 4 03:50:01 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68902de9-50b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:34:97:b6:f7:01:34:e6:2e:27:d0:a2:bd:09: 29:df:13:05:14:62:b4:c3:f9:81:41:63:f3:27:e6: 2e:4d:39:50:49:68:38:28:e1:65:58:c5:3f:f6:a1: 55:23:a5:77:47:7e:0c:d8:d0:99:98:ae:9d:3d:c4: 86:12:b7:98:03:dc:c4:67:03:be:e9:14:76:e4:8f: e1:78:10:0c:50:bf:c4:40:44:54:96:dd:4f:5d:fb: f5:8a:74:9d:15:c5:0c:a6:29:3d:1b:29:69:26:eb: ce:e6:44:a0:ef:7b:af:c7:bc:80:b0:dd:f7:d5:f9: 8b:17:b5:7f:e9:f4:bb:eb:93:8c:9c:97:d8:fc:a6: ab:0a:de:70:a4:4a:0f:ba:59:3f:8a:83:68:09:4a: ce:a5:30:96:ab:3e:4e:52:9f:59:7c:37:22:32:8d: d4:66:35:28:f2:e9:b9:89:1b:ae:34:08:c0:8f:f0: 9e:e4:ff:21:50:fb:8f:c0:77:d1:f9:df:8e:25:c6: 39:60:cd:b6:8e:c6:6d:0e:b9:d4:9d:75:90:d2:97: c9:53:36:e2:c3:3e:9f:42:b9:59:e9:c6:4a:c2:ce: d0:63:89:28:22:ce:39:be:6f:c4:ee:b5:53:31:d5: 07:2d:9b:5f:27:ba:ff:f4:ad:4f:08:87:1a:12:51: d6:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:CE:18:19:6D:BA:E4:78:12:2C:50:4D:C9:9F:38:49:32:F2:37:67 X509v3 Authority Key Identifier: keyid:6F:A1:04:BE:66:5E:52:3C:B6:57:C9:BF:8C:30:8F:02:3E:A9:C0:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912876D/57A2EAFA70E511F0A9380A2CC4F9AE02/b6EEvmZeUjy2V8m_jDCPAj6pwNo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b6EEvmZeUjy2V8m_jDCPAj6pwNo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912876D/57A2EAFA70E511F0A9380A2CC4F9AE02/B30F869670E511F08CE5B42CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.18.158.0/23 IPv6: 2402:1f60::/32 Signature Algorithm: sha256WithRSAEncryption 1c:ec:c1:fd:0c:56:73:4e:02:19:95:52:96:46:a2:07:bf:a9: 2a:b6:28:c9:71:ef:60:5c:b9:f3:04:c0:94:23:c7:59:de:b8: 42:be:a4:fe:9d:d3:7f:a9:c1:06:46:90:e2:35:5f:35:44:6c: f3:c7:30:b7:28:94:c9:f0:14:13:a8:e8:c3:fb:9c:20:73:20: 05:78:25:34:bf:c0:dc:0d:e9:46:4b:e8:2d:c0:26:0c:63:1d: 49:41:5f:35:a9:23:2a:34:2c:d7:3f:ab:d4:e3:1c:34:3f:25: de:21:8d:4e:9e:e2:27:f9:9b:f4:9e:b0:e4:ca:94:45:0f:0a: d3:67:5d:35:f1:ae:2a:38:0f:bc:3f:17:96:44:33:a0:a9:5b: 14:f0:82:62:16:ad:f6:9c:5b:25:cd:1c:07:bb:85:e9:0a:b6: b2:ee:64:d1:0a:6b:91:50:16:2b:4e:e4:09:0c:58:ea:92:e7: 23:c2:e7:8d:1a:f7:8e:20:bd:49:cb:ba:20:3a:33:2e:d3:ce: 7c:bd:fe:67:8a:cd:95:fd:43:c5:a6:d8:0c:7d:85:e5:97:b7: ea:eb:e6:2e:33:53:aa:5b:6f:a5:1f:f7:80:d3:82:d5:43:b4: a1:57:46:27:c3:22:4f:f0:b1:7e:44:92:61:07:bb:a2:5f:6d: 77:1d:7f:5c -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy ODc2RDExMC8GA1UEBRMoNkZBMTA0QkU2NjVFNTIzQ0I2NTdDOUJGOEMzMDhGMDIz RUE5QzBEQTAeFw0yNTA4MDQwMzUwMDFaFw0yNjEwMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4OTAyZGU5LTUwYjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQClNJe29wE05i4n0KK9CSnfEwUUYrTD+YFBY/Mn5i5NOVBJaDgo4WVYxT/2oVUj pXdHfgzY0JmYrp09xIYSt5gD3MRnA77pFHbkj+F4EAxQv8RARFSW3U9d+/WKdJ0V xQymKT0bKWkm687mRKDve6/HvICw3ffV+YsXtX/p9Lvrk4ycl9j8pqsK3nCkSg+6 WT+Kg2gJSs6lMJarPk5Sn1l8NyIyjdRmNSjy6bmJG640CMCP8J7k/yFQ+4/Ad9H5 344lxjlgzbaOxm0OudSddZDSl8lTNuLDPp9CuVnpxkrCztBjiSgizjm+b8TutVMx 1Qctm18nuv/0rU8IhxoSUdZnAgMBAAGjggKkMIICoDAdBgNVHQ4EFgQUg84YGW26 5HgSLFBNyZ84STLyN2cwHwYDVR0jBBgwFoAUb6EEvmZeUjy2V8m/jDCPAj6pwNow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI4NzZELzU3QTJFQUZBNzBF NTExRjBBOTM4MEEyQ0M0RjlBRTAyL2I2RUV2bVplVWp5MlY4bV9qRENQQWo2cHdO by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYjZFRXZtWmVVankyVjhtX2pEQ1BBajZwd05vLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODc2RC81N0EyRUFGQTcwRTUxMUYwQTkzODBBMkNDNEY5QUUwMi9CMzBGODY5Njcw RTUxMUYwOENFNUI0MkNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAuBggrBgEFBQcBBwEB/wQf MB0wDAQCAAEwBgMEAcsSnjANBAIAAjAHAwUAJAIfYDANBgkqhkiG9w0BAQsFAAOC AQEAHOzB/QxWc04CGZVSlkaiB7+pKrYoyXHvYFy58wTAlCPHWd64Qr6k/p3Tf6nB BkaQ4jVfNURs88cwtyiUyfAUE6jow/ucIHMgBXglNL/A3A3pRkvoLcAmDGMdSUFf NakjKjQs1z+r1OMcND8l3iGNTp7iJ/mb9J6w5MqURQ8K02ddNfGuKjgPvD8XlkQz oKlbFPCCYhat9pxbJc0cB7uF6Qq2su5k0QprkVAWK07kCQxY6pLnI8LnjRr3jiC9 Scu6IDozLtPOfL3+Z4rNlf1DxabYDH2F5Ze36uvmLjNTqltvpR/3gNOC1UO0oVdG J8MiT/CxfkSSYQe7ol9tdx1/XA== -----END CERTIFICATE-----Generated at Sat Aug 23 21:34:29 2025 by rpki-client