$ rpki-client -vvf rpki.apnic.net/member_repository/A9134FAF/8248E914449711F0A9757362C4F9AE02/4CB714B644AA11F0B7FB6E72C4F9AE02.roa File: 4CB714B644AA11F0B7FB6E72C4F9AE02.roa (raw, json) Hash identifier: kwHBlGIR+jm5Ej5kABIZ/iPvo1ebkMi20lOVX9QW4oI= Subject key identifier: EF:5C:A0:15:B9:6C:8B:DB:A2:84:99:A3:96:C5:4F:9C:30:A9:B6:50 Certificate issuer: /CN=A9134FAF/serialNumber=1566C161BBB3E35347A97AC4D5816D8EDE54218E Certificate serial: 29 Authority key identifier: 15:66:C1:61:BB:B3:E3:53:47:A9:7A:C4:D5:81:6D:8E:DE:54:21:8E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FWbBYbuz41NHqXrE1YFtjt5UIY4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134FAF/8248E914449711F0A9757362C4F9AE02/4CB714B644AA11F0B7FB6E72C4F9AE02.roa Signing time: Tue 19 Aug 2025 08:40:39 +0000 ROA not before: Tue 19 Aug 2025 08:40:39 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 139008 IP address blocks: 165.99.216.0/24 maxlen: 24 165.99.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134FAF/8248E914449711F0A9757362C4F9AE02/FWbBYbuz41NHqXrE1YFtjt5UIY4.crl rsync://rpki.apnic.net/member_repository/A9134FAF/8248E914449711F0A9757362C4F9AE02/FWbBYbuz41NHqXrE1YFtjt5UIY4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FWbBYbuz41NHqXrE1YFtjt5UIY4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:59:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134FAF, serialNumber=1566C161BBB3E35347A97AC4D5816D8EDE54218E Validity Not Before: Aug 19 08:40:39 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68a43887-8845 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:af:fd:29:e2:c4:24:18:f0:84:98:85:ae:79: 69:ce:88:46:31:7b:4c:2e:22:27:02:91:21:9e:49: ea:63:36:3e:ef:fb:ae:2b:7e:e1:e4:4b:54:10:93: e1:ca:3e:df:c3:6b:4c:9c:52:41:fa:10:70:29:53: 29:1b:4d:7d:d8:85:2f:6b:12:0d:5d:62:9f:48:27: b6:19:d0:cd:93:98:5f:de:0a:fb:95:a2:a7:95:fb: 73:3c:c9:4f:f1:73:81:29:98:cd:75:f5:25:83:91: c4:01:a4:23:f9:6d:64:00:4e:b9:5e:82:9f:3f:c0: d0:cd:32:1c:d1:40:de:d7:8d:a4:53:8b:da:34:b3: 38:1a:d5:38:e8:b5:03:b1:ee:14:5f:59:06:0e:a8: 19:95:7b:04:6e:5e:cf:3f:4f:b2:de:86:ca:a7:e3: 9e:a3:6c:a3:37:79:22:aa:9b:68:db:b8:39:4a:ba: 22:f9:46:a2:b6:00:4b:de:30:be:c7:41:18:3b:fe: db:e9:6d:19:e4:de:4d:49:bc:92:6c:54:72:60:9d: c3:61:b2:58:c4:aa:96:91:4e:8d:2c:13:59:72:8f: e3:27:b2:49:a4:86:f5:91:0e:03:c6:92:8e:5f:70: c3:e5:bf:df:6a:8a:3f:20:cb:ef:94:9a:31:59:45: e1:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:5C:A0:15:B9:6C:8B:DB:A2:84:99:A3:96:C5:4F:9C:30:A9:B6:50 X509v3 Authority Key Identifier: keyid:15:66:C1:61:BB:B3:E3:53:47:A9:7A:C4:D5:81:6D:8E:DE:54:21:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134FAF/8248E914449711F0A9757362C4F9AE02/FWbBYbuz41NHqXrE1YFtjt5UIY4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FWbBYbuz41NHqXrE1YFtjt5UIY4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134FAF/8248E914449711F0A9757362C4F9AE02/4CB714B644AA11F0B7FB6E72C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 165.99.216.0/23 Signature Algorithm: sha256WithRSAEncryption 3b:de:26:7c:a9:7d:0e:0c:81:0a:82:64:bd:c8:1d:21:bd:3b: 9e:e8:68:b3:e5:06:ce:99:d7:02:13:f4:73:6e:6d:c6:23:f8: f0:cd:f8:5f:ec:b4:51:af:6b:5d:fa:13:ab:e3:d5:66:77:16: 8a:33:69:01:72:cd:d6:f2:c5:2c:f5:09:fd:b8:c9:bd:b4:cc: 69:a2:08:88:f5:4e:c2:80:a8:c2:8e:88:67:ed:8c:71:dc:1a: fe:de:e8:03:f8:67:ce:15:22:3e:4b:99:35:b1:50:de:c0:6f: 31:7e:f3:ad:ee:29:06:9e:5a:de:19:26:27:e2:02:76:56:b5: 2b:71:d4:10:4c:db:9e:e4:a4:68:c9:0f:35:b3:43:b5:31:0f: 53:37:67:82:44:1a:d6:34:4a:a4:57:84:53:c5:ca:db:14:a0: 28:3e:f0:64:16:9b:58:be:cc:16:e3:b6:0b:f2:e1:97:4e:70: d7:b4:b0:53:09:75:77:0b:ab:76:00:0e:a2:20:74:ca:9f:99: cb:08:03:8e:1e:07:5f:42:8f:ef:20:97:e3:93:6c:a3:0f:57: a0:da:36:17:3f:47:4a:bd:d2:6a:d2:ba:c3:65:14:9a:60:49: 47:6e:65:e8:93:a8:ac:2c:4f:c7:11:43:ee:3f:31:1e:a4:9e: d0:3e:02:c6 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NEZBRjExMC8GA1UEBRMoMTU2NkMxNjFCQkIzRTM1MzQ3QTk3QUM0RDU4MTZEOEVE RTU0MjE4RTAeFw0yNTA4MTkwODQwMzlaFw0yNjA5MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY4YTQzODg3LTg4NDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJr/0p4sQkGPCEmIWueWnOiEYxe0wuIicCkSGeSepjNj7v+64rfuHkS1QQk+HK Pt/Da0ycUkH6EHApUykbTX3YhS9rEg1dYp9IJ7YZ0M2TmF/eCvuVoqeV+3M8yU/x c4EpmM119SWDkcQBpCP5bWQATrlegp8/wNDNMhzRQN7XjaRTi9o0szga1TjotQOx 7hRfWQYOqBmVewRuXs8/T7Lehsqn456jbKM3eSKqm2jbuDlKuiL5RqK2AEveML7H QRg7/tvpbRnk3k1JvJJsVHJgncNhsljEqpaRTo0sE1lyj+MnskmkhvWRDgPGko5f cMPlv99qij8gy++UmjFZReFDAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU71ygFbls i9uihJmjlsVPnDCptlAwHwYDVR0jBBgwFoAUFWbBYbuz41NHqXrE1YFtjt5UIY4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM0RkFGLzgyNDhFOTE0NDQ5 NzExRjBBOTc1NzM2MkM0RjlBRTAyL0ZXYkJZYnV6NDFOSHFYckUxWUZ0anQ1VUlZ NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRldiQllidXo0MU5IcVhyRTFZRnRqdDVVSVk0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NEZBRi84MjQ4RTkxNDQ0OTcxMUYwQTk3NTczNjJDNEY5QUUwMi80Q0I3MTRCNjQ0 QUExMUYwQjdGQjZFNzJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaVj2DANBgkqhkiG9w0BAQsFAAOCAQEAO94mfKl9DgyBCoJk vcgdIb07nuhos+UGzpnXAhP0c25txiP48M34X+y0Ua9rXfoTq+PVZncWijNpAXLN 1vLFLPUJ/bjJvbTMaaIIiPVOwoCowo6IZ+2Mcdwa/t7oA/hnzhUiPkuZNbFQ3sBv MX7zre4pBp5a3hkmJ+ICdla1K3HUEEzbnuSkaMkPNbNDtTEPUzdngkQa1jRKpFeE U8XK2xSgKD7wZBabWL7MFuO2C/Lhl05w17SwUwl1dwurdgAOoiB0yp+ZywgDjh4H X0KP7yCX45Nsow9XoNo2Fz9HSr3SatK6w2UUmmBJR25l6JOorCxPxxFD7j8xHqSe 0D4Cxg== -----END CERTIFICATE-----Generated at Sat Aug 23 20:28:25 2025 by rpki-client