$ rpki-client -vvf rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/EB3C8154EC3911EE98E62214C4F9AE02.roa File: EB3C8154EC3911EE98E62214C4F9AE02.roa (raw, json) Hash identifier: QWiwvzdCs9QlEtO4vjDbxuVVXBGO2+18x2vf8VSunOs= Subject key identifier: CE:4F:1F:11:11:5A:3C:1C:63:82:4B:18:EF:C1:35:2F:E0:0E:EC:95 Certificate issuer: /CN=A912F535/serialNumber=D48CED18F68CA226983F9F999A140636275B6A55 Certificate serial: 0126 Authority key identifier: D4:8C:ED:18:F6:8C:A2:26:98:3F:9F:99:9A:14:06:36:27:5B:6A:55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/EB3C8154EC3911EE98E62214C4F9AE02.roa Signing time: Sat 21 Jun 2025 04:33:27 +0000 ROA not before: Sat 21 Jun 2025 04:33:27 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 139659 IP address blocks: 43.224.224.0/22 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.crl rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 05:27:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 294 (0x126) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F535, serialNumber=D48CED18F68CA226983F9F999A140636275B6A55 Validity Not Before: Jun 21 04:33:27 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=68563617-2039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d0:c3:3c:94:b3:6a:b6:0f:d0:66:7d:26:cf: 51:cb:8b:85:48:a9:91:d8:5e:10:41:1f:68:68:2e: 09:07:ae:12:57:e5:60:74:7a:4b:cf:36:f7:df:1e: 5c:5f:b8:1f:23:a5:51:0a:10:87:05:b0:cd:91:67: 2e:df:46:e7:80:95:9a:5d:5a:bb:00:6b:8c:64:f5: 1f:f3:d4:7d:c9:11:ad:c5:2c:77:0e:4f:2e:18:fa: 73:f4:1a:87:c6:3f:e1:3e:43:b9:80:cd:ac:35:a3: a6:99:c0:46:f2:8b:99:a0:4f:7b:44:2d:41:4e:ae: 74:8d:e9:52:64:d0:13:5e:23:9a:98:3c:67:a2:1c: b9:5b:61:53:dd:dd:3e:d4:9b:a4:38:e0:cc:59:ca: a9:79:86:0c:97:00:ae:42:26:5c:29:ed:99:f5:31: 5b:08:71:ef:35:85:b5:16:22:35:67:3b:69:a8:64: 66:b0:c6:8e:2d:3f:3f:0f:9f:38:16:58:20:2e:08: 8b:41:e1:f6:12:0b:88:be:f0:e6:59:ae:a0:73:5b: 97:2e:6c:0b:a3:65:f7:1e:e9:83:55:45:9a:fc:8c: a8:01:33:14:04:69:b6:e5:74:e7:ed:2f:5f:81:c4: fa:96:0e:6e:31:db:c2:05:0f:0f:27:42:f6:4f:d3: 9d:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:4F:1F:11:11:5A:3C:1C:63:82:4B:18:EF:C1:35:2F:E0:0E:EC:95 X509v3 Authority Key Identifier: keyid:D4:8C:ED:18:F6:8C:A2:26:98:3F:9F:99:9A:14:06:36:27:5B:6A:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/EB3C8154EC3911EE98E62214C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.224.224.0/22 Signature Algorithm: sha256WithRSAEncryption bd:97:5a:d3:54:f4:87:7c:93:04:93:7b:b3:2c:96:0c:7c:19: 78:8e:6c:d7:2c:b0:d1:21:ec:ca:6d:11:96:a2:ac:b4:41:86: c0:94:14:ca:68:cb:60:a3:05:5e:dc:9e:be:27:d2:1d:5b:8c: 49:69:7e:bc:9c:2f:40:fa:72:3f:bc:1c:05:27:65:cf:e4:69: 11:31:72:d8:b3:b5:b9:a8:da:f2:06:d6:e5:9f:7e:64:a3:9e: 8a:a7:9c:8c:cf:ae:c6:14:f1:60:ef:73:45:99:0c:44:7b:53: a7:9f:88:bb:89:b3:8c:39:a9:13:7f:bd:52:10:d4:bc:27:68: 51:a5:f5:ce:4b:ef:6d:04:06:4f:a7:81:53:7b:29:74:77:4e: 8e:b3:d6:0f:d0:28:b7:09:62:2a:5c:7d:80:d7:fe:0d:12:52: ec:8d:16:71:c1:fe:c9:3e:53:fe:41:34:10:67:c9:f0:04:80: d6:13:a6:de:cc:c3:ff:33:66:12:a2:1f:f5:ec:94:00:81:66: f6:bd:f7:66:24:93:38:1b:b9:98:e8:b0:02:18:a0:f2:91:9c: 5d:64:a8:6c:a6:0b:5c:b2:2d:71:6c:7f:a0:46:23:dd:8b:f9: 04:8d:db:16:0a:2a:1e:d0:c6:88:0b:8c:e7:2b:47:af:ef:66: ec:44:fe:35 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICASYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkY1MzUxMTAvBgNVBAUTKEQ0OENFRDE4RjY4Q0EyMjY5ODNGOUY5OTlBMTQwNjM2 Mjc1QjZBNTUwHhcNMjUwNjIxMDQzMzI3WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODU2MzYxNy0yMDM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAytDDPJSzarYP0GZ9Js9Ry4uFSKmR2F4QQR9oaC4JB64SV+VgdHpLzzb33x5c X7gfI6VRChCHBbDNkWcu30bngJWaXVq7AGuMZPUf89R9yRGtxSx3Dk8uGPpz9BqH xj/hPkO5gM2sNaOmmcBG8ouZoE97RC1BTq50jelSZNATXiOamDxnohy5W2FT3d0+ 1JukOODMWcqpeYYMlwCuQiZcKe2Z9TFbCHHvNYW1FiI1ZztpqGRmsMaOLT8/D584 FlggLgiLQeH2EguIvvDmWa6gc1uXLmwLo2X3HumDVUWa/IyoATMUBGm25XTn7S9f gcT6lg5uMdvCBQ8PJ0L2T9Od0QIDAQABo4IClTCCApEwHQYDVR0OBBYEFM5PHxER WjwcY4JLGO/BNS/gDuyVMB8GA1UdIwQYMBaAFNSM7Rj2jKImmD+fmZoUBjYnW2pV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjUzNS82OUE1ODA3OEJB NjYxMUVFQkMzOTYyNkVDNEY5QUUwMi8xSXp0R1BhTW9pYVlQNS1abWhRR05pZGJh bFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFJenRHUGFNb2lhWVA1LVptaFFHTmlkYmFsVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkY1MzUvNjlBNTgwNzhCQTY2MTFFRUJDMzk2MjZFQzRGOUFFMDIvRUIzQzgxNTRF QzM5MTFFRTk4RTYyMjE0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAIr4OAwDQYJKoZIhvcNAQELBQADggEBAL2XWtNU9Id8kwST e7Mslgx8GXiObNcssNEh7MptEZairLRBhsCUFMpoy2CjBV7cnr4n0h1bjElpfryc L0D6cj+8HAUnZc/kaRExctiztbmo2vIG1uWffmSjnoqnnIzPrsYU8WDvc0WZDER7 U6efiLuJs4w5qRN/vVIQ1LwnaFGl9c5L720EBk+ngVN7KXR3To6z1g/QKLcJYipc fYDX/g0SUuyNFnHB/sk+U/5BNBBnyfAEgNYTpt7Mw/8zZhKiH/XslACBZva992Yk kzgbuZjosAIYoPKRnF1kqGymC1yyLXFsf6BGI92L+QSN2xYKKh7QxogLjOcrR6/v ZuxE/jU= -----END CERTIFICATE-----Generated at Tue Jul 1 15:35:11 2025 by rpki-client