$ rpki-client -vvf rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/10CDE53E2C4111E98AA5057DC4F9AE02.roa File: 10CDE53E2C4111E98AA5057DC4F9AE02.roa (raw, json) Hash identifier: 5meBlAmMOmT720cyEIa4c/tv1J4emStSE4Ky/WBp3tQ= Subject key identifier: 4B:FF:39:28:D2:EE:E4:C8:11:C2:C0:3F:04:39:96:D3:53:B0:78:AD Certificate issuer: /CN=A913344F/serialNumber=4CB4C30B24AF8138895FA4E5D187297379060603 Certificate serial: 10D4 Authority key identifier: 4C:B4:C3:0B:24:AF:81:38:89:5F:A4:E5:D1:87:29:73:79:06:06:03 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/10CDE53E2C4111E98AA5057DC4F9AE02.roa Signing time: Mon 18 Aug 2025 17:56:52 +0000 ROA not before: Mon 18 Aug 2025 17:56:52 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 137989 IP address blocks: 87.247.160.0/21 maxlen: 22 87.247.160.0/24 maxlen: 24 87.247.161.0/24 maxlen: 24 87.247.162.0/24 maxlen: 24 87.247.163.0/24 maxlen: 24 87.247.164.0/24 maxlen: 24 87.247.165.0/24 maxlen: 24 87.247.166.0/24 maxlen: 24 87.247.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.crl rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:25:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4308 (0x10d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913344F, serialNumber=4CB4C30B24AF8138895FA4E5D187297379060603 Validity Not Before: Aug 18 17:56:52 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68a36964-f8bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:25:58:3d:09:a1:ef:d4:cd:71:30:d7:5a:08: c3:4b:f9:2e:1b:f0:75:62:9c:a7:0f:16:5b:e8:95: aa:10:47:64:f3:41:1e:e6:8c:d6:04:3d:4a:c8:4f: c0:04:69:b3:84:41:96:46:7d:f0:fc:14:1a:3f:cb: 56:2c:32:a6:8c:3b:be:b9:d8:a0:1e:a2:f7:bd:b8: d4:4f:ee:6f:e3:e1:08:05:1f:2c:d4:39:a1:3a:00: 71:20:b4:0d:fd:ef:72:83:f9:a0:7e:03:0b:75:3c: d6:6a:91:0c:70:00:f2:32:58:1e:9e:fc:c7:25:51: 76:0d:9a:40:12:5c:11:0c:02:00:04:90:11:be:d5: bc:79:52:29:e7:6e:52:b6:ff:9d:85:dd:a9:2b:d7: 9d:e3:5f:65:28:c5:26:59:bd:4d:fb:31:55:2b:30: 81:ae:d8:ec:44:a9:c9:76:6d:c2:b2:8f:85:97:23: de:39:8b:b3:fc:ab:cd:09:15:3a:19:19:56:0c:f5: da:52:63:c5:d3:8d:78:ea:01:1c:22:b7:7d:21:aa: f4:6a:d7:30:df:20:61:14:97:14:f4:25:af:1c:1d: ce:41:f5:f1:c2:83:8e:25:29:3b:4b:d8:d0:c8:f3: a9:f4:65:09:cf:5b:47:da:f9:7c:da:63:46:f9:bb: 35:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:FF:39:28:D2:EE:E4:C8:11:C2:C0:3F:04:39:96:D3:53:B0:78:AD X509v3 Authority Key Identifier: keyid:4C:B4:C3:0B:24:AF:81:38:89:5F:A4:E5:D1:87:29:73:79:06:06:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/10CDE53E2C4111E98AA5057DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 87.247.160.0/21 Signature Algorithm: sha256WithRSAEncryption 37:a1:8a:ac:3b:c3:90:c4:17:a1:2c:fe:b4:0a:a4:8e:45:0e: 72:da:2c:52:87:3d:db:54:39:2f:ab:bc:f8:87:f1:2a:50:43: 5e:54:cf:a2:97:8a:48:ce:28:07:0a:c2:24:82:5c:9c:04:d9: a1:2f:14:f4:73:2d:55:e0:c9:f5:85:90:8e:9f:1a:c4:3f:93: 59:35:4e:4f:27:47:36:95:95:6a:b5:cd:e8:81:b3:4d:2f:9c: fb:fd:10:6b:50:c2:33:9f:3a:14:2b:be:4c:78:99:cc:08:ab: ce:aa:d3:0b:af:a1:14:2a:0e:a0:62:ba:14:bb:3e:f4:a7:1d: 77:62:1f:0a:78:e9:0b:a0:a4:aa:55:70:13:f3:12:69:58:96: 35:b7:af:13:91:5e:9b:97:ec:53:76:90:9f:f8:fc:49:07:4e: e3:66:03:7a:a0:6a:67:6a:88:9a:87:dd:8c:2c:d4:f1:22:3f: 80:28:4e:70:93:f5:0a:5e:bb:23:cc:2a:d2:ac:06:63:34:17: 85:b2:b5:27:98:2b:55:44:7b:d3:2a:fd:5d:1a:19:9c:30:66: 37:4b:51:5a:85:be:b1:32:e3:33:8c:7a:7d:d5:ba:8d:86:3e: 07:35:79:46:63:2f:d0:27:bf:71:16:26:4f:1b:ff:82:13:c8: 72:52:82:b8 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICENQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzM0NEYxMTAvBgNVBAUTKDRDQjRDMzBCMjRBRjgxMzg4OTVGQTRFNUQxODcyOTcz NzkwNjA2MDMwHhcNMjUwODE4MTc1NjUyWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGEzNjk2NC1mOGJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAniVYPQmh79TNcTDXWgjDS/kuG/B1YpynDxZb6JWqEEdk80Ee5ozWBD1KyE/A BGmzhEGWRn3w/BQaP8tWLDKmjDu+udigHqL3vbjUT+5v4+EIBR8s1DmhOgBxILQN /e9yg/mgfgMLdTzWapEMcADyMlgenvzHJVF2DZpAElwRDAIABJARvtW8eVIp525S tv+dhd2pK9ed419lKMUmWb1N+zFVKzCBrtjsRKnJdm3Cso+FlyPeOYuz/KvNCRU6 GRlWDPXaUmPF04146gEcIrd9Iar0atcw3yBhFJcU9CWvHB3OQfXxwoOOJSk7S9jQ yPOp9GUJz1tH2vl82mNG+bs1TQIDAQABo4IClTCCApEwHQYDVR0OBBYEFEv/OSjS 7uTIEcLAPwQ5ltNTsHitMB8GA1UdIwQYMBaAFEy0wwskr4E4iV+k5dGHKXN5BgYD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzQ0Ri8wMDAzNzVBNDI5 MEIxMUU5OTlDNUVCMTRDNEY5QUUwMi9UTFREQ3lTdmdUaUpYNlRsMFljcGMza0dC Z00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1RMVERDeVN2Z1RpSlg2VGwwWWNwYzNrR0JnTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzM0NEYvMDAwMzc1QTQyOTBCMTFFOTk5QzVFQjE0QzRGOUFFMDIvMTBDREU1M0Uy QzQxMTFFOThBQTUwNTdEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBANX96AwDQYJKoZIhvcNAQELBQADggEBADehiqw7w5DEF6Es /rQKpI5FDnLaLFKHPdtUOS+rvPiH8SpQQ15Uz6KXikjOKAcKwiSCXJwE2aEvFPRz LVXgyfWFkI6fGsQ/k1k1Tk8nRzaVlWq1zeiBs00vnPv9EGtQwjOfOhQrvkx4mcwI q86q0wuvoRQqDqBiuhS7PvSnHXdiHwp46QugpKpVcBPzEmlYljW3rxORXpuX7FN2 kJ/4/EkHTuNmA3qgamdqiJqH3Yws1PEiP4AoTnCT9QpeuyPMKtKsBmM0F4WytSeY K1VEe9Mq/V0aGZwwZjdLUVqFvrEy4zOMen3Vuo2GPgc1eUZjL9Anv3EWJk8b/4IT yHJSgrg= -----END CERTIFICATE-----Generated at Sun Aug 24 01:28:04 2025 by rpki-client