$ rpki-client -vvf rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/57CD7E047CA311F093F6472FC4F9AE02.roa File: 57CD7E047CA311F093F6472FC4F9AE02.roa (raw, json) Hash identifier: +GizQNJOUoft3UrNig3YMc6iST7wgCTGvemc3rzdIcA= Subject key identifier: 1C:9F:65:62:BA:38:7D:03:21:4B:93:9C:86:7C:03:E5:BA:53:F3:37 Certificate issuer: /CN=A9134172/serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7 Certificate serial: 0AFB Authority key identifier: F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/57CD7E047CA311F093F6472FC4F9AE02.roa Signing time: Tue 19 Aug 2025 02:28:27 +0000 ROA not before: Tue 19 Aug 2025 02:28:27 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 142115 IP address blocks: 61.10.68.0/23 maxlen: 24 222.167.64.0/19 maxlen: 24 222.167.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:17:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2811 (0xafb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134172, serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7 Validity Not Before: Aug 19 02:28:27 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=68a3e14b-be0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d6:6f:e0:69:1d:2c:54:e7:88:6e:b3:64:4a: 4e:8f:0f:07:ec:ed:8e:af:e6:46:26:4e:98:1a:b1: 47:5d:f9:ee:1e:44:27:99:76:e2:dd:8c:a1:c9:a6: 03:41:f3:19:ac:19:09:86:aa:c1:9f:fa:76:01:7a: e7:50:b4:f9:21:c3:d7:e5:15:c4:95:4a:28:d9:bc: 2d:60:9a:3f:2b:70:0b:fc:97:b6:b3:fc:e5:84:b5: e2:c2:d3:57:14:28:c0:a3:d3:40:97:a1:50:52:3f: 35:c3:3c:75:dd:a4:36:80:89:a6:56:4d:b1:98:41: 43:e2:47:20:a9:71:de:6d:35:39:f0:f5:85:1a:95: 4f:2f:dd:4a:38:45:a0:93:75:ed:7c:79:fa:4b:60: 44:a4:ee:87:24:89:4a:3c:5f:9d:69:96:34:c2:13: 97:8f:a4:3f:90:9a:80:a9:f7:21:48:b6:b8:cf:04: 06:59:d5:4e:6e:f9:7b:09:23:f2:0e:cb:85:3a:b2: 71:79:aa:30:58:9f:c7:9d:89:04:05:9e:b7:5b:3c: 53:4b:e2:bf:8a:f8:87:1b:bb:be:19:86:dc:42:10: 46:1a:bc:75:5f:3a:40:44:ee:1a:46:e9:64:cf:58: 01:42:9e:ba:33:05:42:0c:bc:6d:77:5a:74:d8:5d: bb:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:9F:65:62:BA:38:7D:03:21:4B:93:9C:86:7C:03:E5:BA:53:F3:37 X509v3 Authority Key Identifier: keyid:F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/57CD7E047CA311F093F6472FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.10.68.0/23 222.167.64.0/19 222.167.160.0/19 Signature Algorithm: sha256WithRSAEncryption 85:19:66:14:6f:75:84:4b:3f:37:39:da:93:64:15:8e:b9:fa: 16:f4:e0:f5:cd:58:45:72:09:60:ee:a5:84:ee:06:28:d7:aa: ad:be:bb:2a:7c:2f:36:6f:2d:1e:39:ff:ad:47:76:86:28:c5: c1:c7:f2:ff:4d:9a:7e:58:04:48:96:d7:46:af:26:cd:dc:0d: 9d:ae:dc:57:6c:a4:86:4c:95:b1:9e:d7:81:73:67:67:7a:4b: cb:e2:e1:b9:cf:ab:b6:da:bc:32:f4:a8:8b:dd:a7:a9:8b:bf: d2:f3:a7:40:55:bf:20:9b:c8:44:52:0e:6a:0a:59:2e:37:01: c0:bf:56:9a:5a:ae:b2:c8:ea:e8:4c:ce:47:81:9d:1c:06:f0: e2:8d:dc:6b:8c:50:4e:9d:d3:e2:0c:39:a1:f5:4c:66:b3:25: 67:8b:c0:9a:7e:cd:bf:66:8f:38:f9:0c:9d:bb:5d:c5:63:c0: fc:0a:49:53:bb:a5:97:7d:50:df:a7:b7:75:09:43:99:74:14: ae:b2:c1:59:dc:ee:62:3a:e6:89:d7:56:47:22:72:32:92:7c: b6:3e:c3:04:37:ff:ea:38:c8:cc:81:b6:d1:8f:dd:48:07:a3: 58:8a:b3:13:9d:17:5f:b0:85:dd:24:bb:04:05:4f:b3:82:a6: 31:71:2e:4e -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICCvswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQxNzIxMTAvBgNVBAUTKEY0NUMwRjRGNDY3Q0UxNTc2RTVFRTlFNDFFNTU3NkYw MzQ4QzQ2QTcwHhcNMjUwODE5MDIyODI3WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OGEzZTE0Yi1iZTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1dZv4GkdLFTniG6zZEpOjw8H7O2Or+ZGJk6YGrFHXfnuHkQnmXbi3YyhyaYD QfMZrBkJhqrBn/p2AXrnULT5IcPX5RXElUoo2bwtYJo/K3AL/Je2s/zlhLXiwtNX FCjAo9NAl6FQUj81wzx13aQ2gImmVk2xmEFD4kcgqXHebTU58PWFGpVPL91KOEWg k3XtfHn6S2BEpO6HJIlKPF+daZY0whOXj6Q/kJqAqfchSLa4zwQGWdVObvl7CSPy DsuFOrJxeaowWJ/HnYkEBZ63WzxTS+K/iviHG7u+GYbcQhBGGrx1XzpARO4aRulk z1gBQp66MwVCDLxtd1p02F27fQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFByfZWK6 OH0DIUuTnIZ8A+W6U/M3MB8GA1UdIwQYMBaAFPRcD09GfOFXbl7p5B5VdvA0jEan MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDE3Mi81OTc2MTI2NDlF NEQxMUVBOUMyM0FGMUZDNEY5QUUwMi85RndQVDBaODRWZHVYdW5rSGxWMjhEU01S cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlGd1BUMFo4NFZkdVh1bmtIbFYyOERTTVJxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzQxNzIvNTk3NjEyNjQ5RTREMTFFQTlDMjNBRjFGQzRGOUFFMDIvNTdDRDdFMDQ3 Q0EzMTFGMDkzRjY0NzJGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAE9CkQDBAXep0ADBAXep6AwDQYJKoZIhvcNAQELBQADggEB AIUZZhRvdYRLPzc52pNkFY65+hb04PXNWEVyCWDupYTuBijXqq2+uyp8LzZvLR45 /61HdoYoxcHH8v9Nmn5YBEiW10avJs3cDZ2u3FdspIZMlbGe14FzZ2d6S8vi4bnP q7bavDL0qIvdp6mLv9Lzp0BVvyCbyERSDmoKWS43AcC/VpparrLI6uhMzkeBnRwG 8OKN3GuMUE6d0+IMOaH1TGazJWeLwJp+zb9mjzj5DJ27XcVjwPwKSVO7pZd9UN+n t3UJQ5l0FK6ywVnc7mI65onXVkcicjKSfLY+wwQ3/+o4yMyBttGP3UgHo1iKsxOd F1+whd0kuwQFT7OCpjFxLk4= -----END CERTIFICATE-----Generated at Sun Aug 24 00:08:58 2025 by rpki-client