$ rpki-client -vvf rpki.apnic.net/member_repository/A914FD01/36A71E4E7D5F11F09EC9C938C4F9AE02/44AA60D87D6311F0BC413466C4F9AE02.roa File: 44AA60D87D6311F0BC413466C4F9AE02.roa (raw, json) Hash identifier: E4IkE6FRMTE0lAhudQztXcTO2n4pZjttFwQTGBoNBn0= Subject key identifier: E9:A8:0E:12:EB:37:58:48:CC:A6:69:3E:42:A8:8F:C0:BE:BC:37:CA Certificate issuer: /CN=A914FD01/serialNumber=D25F8796E70D670E986C6C24773E6B778C360577 Certificate serial: 03 Authority key identifier: D2:5F:87:96:E7:0D:67:0E:98:6C:6C:24:77:3E:6B:77:8C:36:05:77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0l-HlucNZw6YbGwkdz5rd4w2BXc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914FD01/36A71E4E7D5F11F09EC9C938C4F9AE02/44AA60D87D6311F0BC413466C4F9AE02.roa Signing time: Wed 20 Aug 2025 01:16:15 +0000 ROA not before: Wed 20 Aug 2025 01:16:15 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 7716 IP address blocks: 203.29.98.0/24 maxlen: 24 203.34.88.0/24 maxlen: 24 2400:de60::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914FD01/36A71E4E7D5F11F09EC9C938C4F9AE02/0l-HlucNZw6YbGwkdz5rd4w2BXc.crl rsync://rpki.apnic.net/member_repository/A914FD01/36A71E4E7D5F11F09EC9C938C4F9AE02/0l-HlucNZw6YbGwkdz5rd4w2BXc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0l-HlucNZw6YbGwkdz5rd4w2BXc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:24:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914FD01, serialNumber=D25F8796E70D670E986C6C24773E6B778C360577 Validity Not Before: Aug 20 01:16:15 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=68a521df-2d22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:8f:ec:b4:5a:32:42:0c:93:13:06:25:cb:d8: 59:56:b3:e8:32:7b:a5:46:b8:31:95:ee:d9:50:89: 4b:a3:6a:e5:c7:79:2c:95:45:52:14:64:52:18:8b: 3d:7f:d5:af:1b:3f:69:6c:53:d4:27:a0:6e:0d:51: bc:6c:ee:a7:53:05:53:0b:4e:6a:f6:75:e5:1f:5b: 58:17:1a:4c:3b:31:e8:d9:fb:1f:af:79:a3:78:fc: e4:13:a7:89:2d:02:03:cb:c1:16:65:2e:33:65:a7: b5:1c:91:96:74:04:80:d1:6a:a5:c3:3f:d3:ff:e1: 32:7b:36:ea:4b:22:d6:b5:81:ae:7f:99:fe:51:36: 7e:fb:3c:19:82:9f:f0:b6:35:80:19:d8:18:6f:70: 7c:cd:53:ee:11:6b:da:9a:eb:6a:2a:32:12:df:4b: 93:f6:d6:88:61:90:5a:24:47:17:be:d9:ff:df:ad: 91:5b:ef:73:77:fd:64:4d:3f:3c:5e:f9:2c:7a:2d: c1:b2:a7:69:82:bf:75:b7:3f:c5:e6:83:e8:f2:12: 69:df:64:ae:a6:18:f7:e1:a3:31:9c:9d:90:f7:87: c0:a9:cf:a2:cc:d2:c3:8e:96:9b:e1:c6:17:ca:49: 26:3d:91:b8:3f:c5:cc:b9:a1:8e:47:ec:1e:45:09: 97:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:A8:0E:12:EB:37:58:48:CC:A6:69:3E:42:A8:8F:C0:BE:BC:37:CA X509v3 Authority Key Identifier: keyid:D2:5F:87:96:E7:0D:67:0E:98:6C:6C:24:77:3E:6B:77:8C:36:05:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914FD01/36A71E4E7D5F11F09EC9C938C4F9AE02/0l-HlucNZw6YbGwkdz5rd4w2BXc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0l-HlucNZw6YbGwkdz5rd4w2BXc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FD01/36A71E4E7D5F11F09EC9C938C4F9AE02/44AA60D87D6311F0BC413466C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.29.98.0/24 203.34.88.0/24 IPv6: 2400:de60::/32 Signature Algorithm: sha256WithRSAEncryption 56:13:ec:3c:dd:f2:2d:15:59:6d:d7:2d:41:c4:fd:8d:10:cd: 8c:11:d8:fa:4e:a2:e9:38:a9:6a:61:2d:55:b3:c1:4b:18:3f: 6d:be:ef:8e:17:35:df:a7:43:a8:fc:75:73:86:f0:15:89:ea: 25:80:ff:49:5c:77:8d:76:1f:30:e7:d9:8d:a3:31:ce:bf:9f: c7:f7:32:a4:de:53:1e:7c:d2:a3:13:18:b9:c3:ac:2c:9b:10: 81:d8:23:e3:81:9b:b1:19:62:b1:06:49:ea:08:38:d9:9f:13: d1:fc:c9:bb:9f:8c:1d:03:ae:c5:ba:0b:d8:a2:db:9a:2c:d9: d2:ba:08:11:ce:ce:4b:95:3c:cb:fc:ed:cc:e5:22:e6:7b:fb: 8a:bc:0b:f0:43:6a:f4:a0:5e:47:2c:7d:29:0b:62:61:32:ff: 51:95:c9:77:1d:5d:f1:d3:e2:65:05:ed:d0:ca:4f:08:db:d7: 91:6d:e8:8d:b9:f6:07:67:77:4d:db:57:6e:90:27:b8:0d:17: b1:23:8d:e1:35:02:9b:57:ea:1a:4e:d4:c7:b9:0c:37:d9:54: 5f:e6:1e:29:7e:a8:0b:5b:d1:39:bf:24:16:99:f9:af:10:ce: 23:b8:5e:52:f9:b4:87:3d:19:70:c4:36:67:60:67:16:96:e9: d2:e1:68:a2 -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 RkQwMTExMC8GA1UEBRMoRDI1Rjg3OTZFNzBENjcwRTk4NkM2QzI0NzczRTZCNzc4 QzM2MDU3NzAeFw0yNTA4MjAwMTE2MTVaFw0yNjA1MjgwMDAwMDBaMBgxFjAUBgNV BAMTDTY4YTUyMWRmLTJkMjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQj+y0WjJCDJMTBiXL2FlWs+gye6VGuDGV7tlQiUujauXHeSyVRVIUZFIYiz1/ 1a8bP2lsU9QnoG4NUbxs7qdTBVMLTmr2deUfW1gXGkw7MejZ+x+veaN4/OQTp4kt AgPLwRZlLjNlp7UckZZ0BIDRaqXDP9P/4TJ7NupLIta1ga5/mf5RNn77PBmCn/C2 NYAZ2BhvcHzNU+4Ra9qa62oqMhLfS5P21ohhkFokRxe+2f/frZFb73N3/WRNPzxe +Sx6LcGyp2mCv3W3P8Xmg+jyEmnfZK6mGPfhozGcnZD3h8Cpz6LM0sOOlpvhxhfK SSY9kbg/xcy5oY5H7B5FCZelAgMBAAGjggKqMIICpjAdBgNVHQ4EFgQU6agOEus3 WEjMpmk+QqiPwL68N8owHwYDVR0jBBgwFoAU0l+HlucNZw6YbGwkdz5rd4w2BXcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRGRDAxLzM2QTcxRTRFN0Q1 RjExRjA5RUM5QzkzOEM0RjlBRTAyLzBsLUhsdWNOWnc2WWJHd2tkejVyZDR3MkJY Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMGwtSGx1Y05adzZZYkd3a2R6NXJkNHcyQlhjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RkQwMS8zNkE3MUU0RTdENUYxMUYwOUVDOUM5MzhDNEY5QUUwMi80NEFBNjBEODdE NjMxMUYwQkM0MTM0NjZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDA0BggrBgEFBQcBBwEB/wQl MCMwEgQCAAEwDAMEAMsdYgMEAMsiWDANBAIAAjAHAwUAJADeYDANBgkqhkiG9w0B AQsFAAOCAQEAVhPsPN3yLRVZbdctQcT9jRDNjBHY+k6i6TipamEtVbPBSxg/bb7v jhc136dDqPx1c4bwFYnqJYD/SVx3jXYfMOfZjaMxzr+fx/cypN5THnzSoxMYucOs LJsQgdgj44GbsRlisQZJ6gg42Z8T0fzJu5+MHQOuxboL2KLbmizZ0roIEc7OS5U8 y/ztzOUi5nv7irwL8ENq9KBeRyx9KQtiYTL/UZXJdx1d8dPiZQXt0MpPCNvXkW3o jbn2B2d3TdtXbpAnuA0XsSON4TUCm1fqGk7Ux7kMN9lUX+YeKX6oC1vROb8kFpn5 rxDOI7heUvm0hz0ZcMQ2Z2BnFpbp0uFoog== -----END CERTIFICATE-----Generated at Sat Aug 23 21:34:47 2025 by rpki-client