$ rpki-client -vvf rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/B770D0C64F3611F0BB61297BC4F9AE02.roa File: B770D0C64F3611F0BB61297BC4F9AE02.roa (raw, json) Hash identifier: Q2vWAp5rNQfVlxNPgNCkSM+CSqEg1XjqZ2D0lXJ11KM= Subject key identifier: 7B:21:2D:51:6B:65:2D:71:46:A8:DE:2C:E9:22:7A:3E:5A:94:9D:04 Certificate issuer: /CN=A912FCD6/serialNumber=53BF0DD780DB038ECE14D40459BAB9C68F69853B Certificate serial: 225A Authority key identifier: 53:BF:0D:D7:80:DB:03:8E:CE:14:D4:04:59:BA:B9:C6:8F:69:85:3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/B770D0C64F3611F0BB61297BC4F9AE02.roa Signing time: Sun 22 Jun 2025 07:03:45 +0000 ROA not before: Sun 22 Jun 2025 07:03:45 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 9304 IP address blocks: 59.153.31.0/24 maxlen: 24 180.210.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.crl rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 15:59:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8794 (0x225a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FCD6, serialNumber=53BF0DD780DB038ECE14D40459BAB9C68F69853B Validity Not Before: Jun 22 07:03:45 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=6857aad1-1aec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:20:bb:59:c4:5c:9b:98:0e:8f:66:a3:0c:f9: 66:2e:04:9e:fe:ee:d4:c9:6a:09:9c:6b:52:a3:de: d7:f4:17:2c:4c:d1:7f:3b:13:cf:17:81:8f:56:5e: 0a:a9:36:97:51:57:ee:36:cc:50:7c:1e:b7:9e:9d: 15:a3:95:f3:2d:42:41:02:ef:05:b1:c4:61:c4:58: a5:46:57:a7:d6:94:c3:52:19:20:b8:37:02:84:13: b8:fd:0a:30:61:d7:20:ab:4b:af:64:94:1c:5a:eb: a9:b0:9d:3f:9a:be:a0:c5:7d:27:d2:b3:c9:97:0e: 6f:a2:b6:de:f2:95:fe:24:03:a9:8e:b4:ee:ce:73: 2b:a2:91:30:df:58:fd:1e:cf:c6:15:46:98:93:89: 25:fe:1a:ba:ba:4c:1f:0d:a3:68:bb:39:0f:87:c6: 90:7c:50:a8:48:16:3c:61:f4:2a:89:5a:2f:ff:10: b8:db:3c:60:c4:09:12:a4:ba:5b:cc:cc:e2:55:d4: 37:00:0a:92:bd:27:24:41:f2:d1:78:ec:9e:45:6d: 62:0c:bc:2a:86:ec:93:a6:94:b5:03:b5:94:41:c3: ac:17:76:48:e1:2f:6e:30:a0:e5:06:66:a4:75:76: d1:d1:b4:de:52:e3:a4:b3:dd:1e:2f:8b:7c:e2:e0: 98:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:21:2D:51:6B:65:2D:71:46:A8:DE:2C:E9:22:7A:3E:5A:94:9D:04 X509v3 Authority Key Identifier: keyid:53:BF:0D:D7:80:DB:03:8E:CE:14:D4:04:59:BA:B9:C6:8F:69:85:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/B770D0C64F3611F0BB61297BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 59.153.31.0/24 180.210.222.0/24 Signature Algorithm: sha256WithRSAEncryption 56:57:0b:2b:b0:b5:89:0a:83:cb:47:d3:9a:14:37:a8:f4:00: 06:37:03:59:30:ea:6a:88:9e:f4:76:a9:3a:0a:cd:02:c3:bb: d8:2b:26:be:55:4f:ba:96:89:28:26:4f:1f:a6:80:3a:f9:ed: 8d:51:01:71:cb:23:89:68:fa:56:8f:c3:bf:ce:95:f9:3d:d6: 0b:b9:10:1b:47:85:a1:ea:93:01:2d:af:25:d9:8f:6d:31:5d: e1:fa:bb:28:90:55:a6:f4:78:58:7b:d5:34:5e:8b:08:ef:fb: 88:f0:32:38:ea:13:16:70:18:a2:4a:54:0e:a0:7d:93:23:6f: c8:4e:5e:6f:b7:d4:b1:ce:67:10:e2:ef:4a:03:51:48:25:91: 70:21:32:f9:00:a1:e3:b3:b8:e0:c7:04:96:cb:ee:de:b4:e3: 9c:bf:5c:46:40:45:9a:f7:53:d7:6b:ae:58:a2:86:a5:5a:78: 6c:d6:be:53:b0:f5:fe:e1:84:65:2f:d6:5f:59:40:46:60:9c: a1:79:da:dc:90:37:3c:c9:86:43:18:0c:e2:c1:39:f3:e4:47: 4e:5e:0d:cb:46:59:8f:55:00:ef:bd:23:c2:54:90:aa:c9:c1: ee:44:42:81:7b:43:85:6d:56:c7:96:93:1d:9e:82:88:2f:19: f5:8b:9a:5c -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICIlowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZDRDYxMTAvBgNVBAUTKDUzQkYwREQ3ODBEQjAzOEVDRTE0RDQwNDU5QkFCOUM2 OEY2OTg1M0IwHhcNMjUwNjIyMDcwMzQ1WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODU3YWFkMS0xYWVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwyC7WcRcm5gOj2ajDPlmLgSe/u7UyWoJnGtSo97X9BcsTNF/OxPPF4GPVl4K qTaXUVfuNsxQfB63np0Vo5XzLUJBAu8FscRhxFilRlen1pTDUhkguDcChBO4/Qow Ydcgq0uvZJQcWuupsJ0/mr6gxX0n0rPJlw5vorbe8pX+JAOpjrTuznMropEw31j9 Hs/GFUaYk4kl/hq6ukwfDaNouzkPh8aQfFCoSBY8YfQqiVov/xC42zxgxAkSpLpb zMziVdQ3AAqSvSckQfLReOyeRW1iDLwqhuyTppS1A7WUQcOsF3ZI4S9uMKDlBmak dXbR0bTeUuOks90eL4t84uCYUQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFHshLVFr ZS1xRqjeLOkiej5alJ0EMB8GA1UdIwQYMBaAFFO/DdeA2wOOzhTUBFm6ucaPaYU7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkNENi8xRTlFMUFBQ0Qy RUExMUU1QUZCMUUyNENDNEY5QUUwMi9VNzhOMTREYkE0N09GTlFFV2JxNXhvOXBo VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1U3OE4xNERiQTQ3T0ZOUUVXYnE1eG85cGhUcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkZDRDYvMUU5RTFBQUNEMkVBMTFFNUFGQjFFMjRDQzRGOUFFMDIvQjc3MEQwQzY0 RjM2MTFGMEJCNjEyOTdCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAA7mR8DBAC00t4wDQYJKoZIhvcNAQELBQADggEBAFZXCyuw tYkKg8tH05oUN6j0AAY3A1kw6mqInvR2qToKzQLDu9grJr5VT7qWiSgmTx+mgDr5 7Y1RAXHLI4lo+laPw7/Olfk91gu5EBtHhaHqkwEtryXZj20xXeH6uyiQVab0eFh7 1TReiwjv+4jwMjjqExZwGKJKVA6gfZMjb8hOXm+31LHOZxDi70oDUUglkXAhMvkA oeOzuODHBJbL7t6045y/XEZARZr3U9drrliihqVaeGzWvlOw9f7hhGUv1l9ZQEZg nKF52tyQNzzJhkMYDOLBOfPkR05eDctGWY9VAO+9I8JUkKrJwe5EQoF7Q4VtVseW kx2egogvGfWLmlw= -----END CERTIFICATE-----Generated at Thu Jul 3 09:28:38 2025 by rpki-client