$ rpki-client -vvf rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/E9B9A0BE72C011F09E92A72CC4F9AE02.roa File: E9B9A0BE72C011F09E92A72CC4F9AE02.roa (raw, json) Hash identifier: brhrVYasbtkKB/logdhK7nfprZmJuQ7vbr91yFIr0oU= Subject key identifier: 32:73:08:1E:62:77:E3:38:6D:8F:59:CF:33:40:97:DD:59:93:5C:B4 Certificate issuer: /CN=A912FCD6/serialNumber=53BF0DD780DB038ECE14D40459BAB9C68F69853B Certificate serial: 229B Authority key identifier: 53:BF:0D:D7:80:DB:03:8E:CE:14:D4:04:59:BA:B9:C6:8F:69:85:3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/E9B9A0BE72C011F09E92A72CC4F9AE02.roa Signing time: Fri 22 Aug 2025 20:40:08 +0000 ROA not before: Fri 22 Aug 2025 20:40:08 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 59.153.29.0/24 maxlen: 24 59.153.30.0/24 maxlen: 24 59.153.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.crl rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:53:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8859 (0x229b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FCD6, serialNumber=53BF0DD780DB038ECE14D40459BAB9C68F69853B Validity Not Before: Aug 22 20:40:08 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=68a8d5a8-5e54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a8:14:df:3f:83:ff:0c:82:73:76:7b:0d:c3: 33:36:92:c3:5f:93:d5:ce:83:05:e5:24:e5:2e:a9: a2:6b:a0:b9:b1:31:5a:01:3e:ac:00:df:a0:63:e1: ff:b0:df:2f:9e:e3:8d:a7:47:57:96:8b:b3:f5:4d: d2:28:5f:4f:0b:9a:4e:05:c7:18:1e:1b:37:e8:91: dc:48:3b:3b:d7:3e:69:b5:fe:ec:f2:f9:ff:69:5b: 5c:aa:57:1e:e4:3a:eb:ee:5b:38:e6:89:00:86:2a: eb:24:e2:9e:36:71:31:8b:db:c3:dc:09:d4:2e:19: c4:4c:96:02:e2:8a:c7:f0:7c:14:35:3e:ab:c4:04: 91:9a:56:6a:20:f7:bf:97:81:ad:01:84:d8:bb:9c: c5:61:bb:e7:eb:be:90:04:eb:87:f3:3d:b3:1d:97: 45:cd:c0:c8:83:e2:c2:03:4c:51:57:17:50:e5:7b: fa:79:bd:62:cc:3c:29:f3:3c:c4:0c:8f:00:6b:73: 2d:e0:7a:fd:9d:6f:9c:ea:3f:08:de:22:d5:d0:00: b8:c8:98:e9:2d:fd:d7:20:e8:86:7c:3c:f2:9b:ca: 92:df:48:2d:21:1b:4d:a4:7f:b7:ea:4b:3a:d8:70: 84:47:fa:37:64:64:a8:04:69:71:59:00:15:bc:62: a9:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:73:08:1E:62:77:E3:38:6D:8F:59:CF:33:40:97:DD:59:93:5C:B4 X509v3 Authority Key Identifier: keyid:53:BF:0D:D7:80:DB:03:8E:CE:14:D4:04:59:BA:B9:C6:8F:69:85:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/E9B9A0BE72C011F09E92A72CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 59.153.29.0-59.153.31.255 Signature Algorithm: sha256WithRSAEncryption 02:1f:bc:73:54:65:ac:81:8e:8e:0e:6e:86:4a:76:c0:e9:2c: f9:e1:68:b6:88:9d:b9:c1:a2:db:59:14:ba:c6:62:23:4a:c8: d1:b7:ee:81:6a:33:dc:9f:28:72:5e:5d:09:32:34:c1:0a:d8: a8:a9:03:8a:02:7b:cb:06:f6:cc:c0:23:f1:ac:00:07:bf:78: 85:b0:b8:26:49:67:04:3a:9f:4d:ba:68:b6:df:65:46:fe:92: 4f:25:54:14:00:be:cb:aa:0c:c6:46:33:67:29:55:97:5c:a0: 05:2e:24:41:71:66:07:69:d1:a4:c0:f8:87:85:4f:6d:81:a8: c3:7d:38:25:6b:cf:f1:25:7a:17:4e:78:d9:00:de:b6:99:3e: 82:e8:6e:0a:70:c0:19:a6:f3:5c:89:f9:67:db:7f:3b:f4:9e: 66:c7:21:1b:02:50:5e:15:bf:8d:a3:58:8d:3a:1e:00:3a:cd: e8:c0:1d:62:4e:bf:b9:03:56:ca:3f:be:f0:9f:f7:16:bd:9a: 9e:16:0c:81:af:82:c0:04:b3:c2:ea:1c:4a:d9:20:86:8e:67: 68:cd:4d:2e:04:a3:bf:07:53:fa:22:f6:25:fa:31:3d:2b:aa: 6f:d9:1b:3b:2a:8d:06:86:1b:af:33:ec:52:59:db:a7:09:fd: 03:e8:d3:f2 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgICIpswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZDRDYxMTAvBgNVBAUTKDUzQkYwREQ3ODBEQjAzOEVDRTE0RDQwNDU5QkFCOUM2 OEY2OTg1M0IwHhcNMjUwODIyMjA0MDA4WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGE4ZDVhOC01ZTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1agU3z+D/wyCc3Z7DcMzNpLDX5PVzoMF5STlLqmia6C5sTFaAT6sAN+gY+H/ sN8vnuONp0dXlouz9U3SKF9PC5pOBccYHhs36JHcSDs71z5ptf7s8vn/aVtcqlce 5Drr7ls45okAhirrJOKeNnExi9vD3AnULhnETJYC4orH8HwUNT6rxASRmlZqIPe/ l4GtAYTYu5zFYbvn676QBOuH8z2zHZdFzcDIg+LCA0xRVxdQ5Xv6eb1izDwp8zzE DI8Aa3Mt4Hr9nW+c6j8I3iLV0AC4yJjpLf3XIOiGfDzym8qS30gtIRtNpH+36ks6 2HCER/o3ZGSoBGlxWQAVvGKpkwIDAQABo4ICnTCCApkwHQYDVR0OBBYEFDJzCB5i d+M4bY9ZzzNAl91Zk1y0MB8GA1UdIwQYMBaAFFO/DdeA2wOOzhTUBFm6ucaPaYU7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkNENi8xRTlFMUFBQ0Qy RUExMUU1QUZCMUUyNENDNEY5QUUwMi9VNzhOMTREYkE0N09GTlFFV2JxNXhvOXBo VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1U3OE4xNERiQTQ3T0ZOUUVXYnE1eG85cGhUcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkZDRDYvMUU5RTFBQUNEMkVBMTFFNUFGQjFFMjRDQzRGOUFFMDIvRTlCOUEwQkU3 MkMwMTFGMDlFOTJBNzJDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E GDAWMBQEAgABMA4wDAMEADuZHQMEBTuZADANBgkqhkiG9w0BAQsFAAOCAQEAAh+8 c1RlrIGOjg5uhkp2wOks+eFotoiducGi21kUusZiI0rI0bfugWoz3J8ocl5dCTI0 wQrYqKkDigJ7ywb2zMAj8awAB794hbC4JklnBDqfTbpott9lRv6STyVUFAC+y6oM xkYzZylVl1ygBS4kQXFmB2nRpMD4h4VPbYGow304JWvP8SV6F0542QDetpk+guhu CnDAGabzXIn5Z9t/O/SeZschGwJQXhW/jaNYjToeADrN6MAdYk6/uQNWyj++8J/3 Fr2anhYMga+CwASzwuocStkgho5naM1NLgSjvwdT+iL2JfoxPSuqb9kbOyqNBoYb rzPsUlnbpwn9A+jT8g== -----END CERTIFICATE-----Generated at Sat Aug 23 09:16:25 2025 by rpki-client