$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/712D274624BF11F0ADDD3D44C4F9AE02.roa File: 712D274624BF11F0ADDD3D44C4F9AE02.roa (raw, json) Hash identifier: 8IDSRMNBvXeXw2mu7llXxPcH6JNNmuLcKMRlH4jMi/M= Subject key identifier: 6D:EA:D3:30:6B:6A:5D:24:8F:A4:8F:B2:02:4E:6A:17:94:E8:8A:5D Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264 Certificate serial: 0D82 Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/712D274624BF11F0ADDD3D44C4F9AE02.roa Signing time: Wed 02 Jul 2025 20:30:07 +0000 ROA not before: Wed 02 Jul 2025 20:30:07 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 18811 IP address blocks: 14.192.133.0/24 maxlen: 24 14.192.145.0/24 maxlen: 24 111.92.128.0/24 maxlen: 24 111.92.132.0/24 maxlen: 24 111.92.136.0/24 maxlen: 24 111.92.137.0/24 maxlen: 24 111.92.141.0/24 maxlen: 24 111.92.143.0/24 maxlen: 24 111.92.144.0/24 maxlen: 24 111.92.145.0/24 maxlen: 24 111.92.146.0/24 maxlen: 24 111.92.147.0/24 maxlen: 24 111.92.148.0/24 maxlen: 24 111.92.149.0/24 maxlen: 24 111.92.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:30:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3458 (0xd82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264 Validity Not Before: Jul 2 20:30:07 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=686596cf-47bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:8b:7e:9b:52:27:f9:78:87:a8:8f:f4:93:6f: f5:a3:0d:7a:82:1a:0c:a9:f3:f6:a0:64:0c:2f:ee: 2a:5f:ea:84:ba:2c:4d:43:b8:17:49:db:68:94:47: 00:5d:26:33:b0:4b:f9:b1:26:6a:54:59:e5:8d:58: b0:ce:a4:02:b2:c4:b1:b8:6f:2b:71:60:ba:d3:93: cd:47:10:41:bb:88:b9:d7:fd:06:13:55:48:e7:9f: c4:6f:68:4e:34:41:18:ce:0c:41:ed:f7:a8:c8:01: f5:3f:6f:5c:c8:f7:da:e3:12:39:fd:8e:13:64:b1: b3:a9:3d:0e:41:17:6f:0b:25:46:1d:81:f4:96:52: f7:7f:cf:8f:03:6b:3b:b9:8d:08:06:0d:01:2b:af: 94:4c:16:b7:42:93:d8:6d:72:1a:79:de:5c:68:91: 38:63:0e:47:36:c1:79:a4:ab:51:e0:b2:75:7a:cb: 49:72:0b:7a:ef:fd:df:8e:f9:86:52:f9:ef:af:4a: 1f:06:ab:31:75:5e:e6:2d:f3:54:c6:5b:09:0a:05: 05:84:8a:f1:ed:38:81:be:b2:35:39:09:bc:ce:34: 90:12:8d:5b:8e:7e:2a:49:c9:92:73:e9:d2:76:4f: b5:19:b4:6e:e2:f2:d9:eb:07:78:7e:6a:8c:a9:3e: 4d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:EA:D3:30:6B:6A:5D:24:8F:A4:8F:B2:02:4E:6A:17:94:E8:8A:5D X509v3 Authority Key Identifier: keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/712D274624BF11F0ADDD3D44C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 14.192.133.0/24 14.192.145.0/24 111.92.128.0/24 111.92.132.0/24 111.92.136.0/23 111.92.141.0/24 111.92.143.0-111.92.149.255 111.92.151.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:35:19:5f:e0:ba:15:7a:a8:99:79:50:6b:f4:6b:e7:b4:42: aa:8d:17:64:70:52:8f:40:e0:7c:b6:e7:db:8f:22:c6:89:67: ba:3d:b9:ee:be:d8:f8:15:6e:93:db:ca:1a:18:f2:9e:79:ef: 17:b0:0c:ab:8e:f7:32:db:61:99:eb:e9:37:82:5d:53:75:6b: a2:c2:e8:3c:90:fa:3e:1f:e8:27:89:83:35:c9:0b:72:4a:d7: 41:9d:6c:f0:35:53:7e:f8:41:62:6e:42:5c:b4:3b:34:94:88: a7:fd:f9:4d:8f:fa:b2:b9:b7:58:39:56:c8:5c:12:d3:01:9d: 2b:0a:0e:50:4e:3d:15:eb:32:f5:36:2d:f8:c9:c6:57:43:77: ba:4d:7c:0a:ee:1c:20:10:70:9c:6b:e8:7a:76:68:d7:1b:9b: 5c:ad:c0:74:51:31:59:8a:68:15:65:e7:25:87:79:b9:d6:db: 02:a9:05:54:73:f3:bb:d2:be:00:a1:5d:ac:f9:6e:97:b9:39: 83:2a:22:8d:fc:3f:f9:bd:08:08:33:46:e6:62:76:f3:c4:ad: 13:a6:20:7a:2a:60:5a:39:99:90:7b:b0:89:ea:3a:40:e2:7a: 7a:59:f7:e6:4d:53:8d:18:b1:56:06:30:ba:65:41:40:8c:74: 22:01:a4:18 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgICDYIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEwQ0QxMTAvBgNVBAUTKDM4MTkzNzIwODIxRTA3RDY5MThFM0E3OUZCRTA4MjND NjczMkUyNjQwHhcNMjUwNzAyMjAzMDA3WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODY1OTZjZi00N2JmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu4t+m1In+XiHqI/0k2/1ow16ghoMqfP2oGQML+4qX+qEuixNQ7gXSdtolEcA XSYzsEv5sSZqVFnljViwzqQCssSxuG8rcWC605PNRxBBu4i51/0GE1VI55/Eb2hO NEEYzgxB7feoyAH1P29cyPfa4xI5/Y4TZLGzqT0OQRdvCyVGHYH0llL3f8+PA2s7 uY0IBg0BK6+UTBa3QpPYbXIaed5caJE4Yw5HNsF5pKtR4LJ1estJcgt67/3fjvmG Uvnvr0ofBqsxdV7mLfNUxlsJCgUFhIrx7TiBvrI1OQm8zjSQEo1bjn4qScmSc+nS dk+1GbRu4vLZ6wd4fmqMqT5NOQIDAQABo4ICxzCCAsMwHQYDVR0OBBYEFG3q0zBr al0kj6SPsgJOaheU6IpdMB8GA1UdIwQYMBaAFDgZNyCCHgfWkY46efvggjxnMuJk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBDRC80NjcyM0YxRTg5 RUMxMUVBODFDMDRGMUVDNEY5QUUwMi9PQmszSUlJZUI5YVJqanA1LS1DQ1BHY3k0 bVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09CazNJSUllQjlhUmpqcDUtLUNDUEdjeTRtUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUEwQ0QvNDY3MjNGMUU4OUVDMTFFQTgxQzA0RjFFQzRGOUFFMDIvNzEyRDI3NDYy NEJGMTFGMEFEREQzRDQ0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwUQYIKwYBBQUHAQcBAf8E QjBAMD4EAgABMDgDBAAOwIUDBAAOwJEDBABvXIADBABvXIQDBAFvXIgDBABvXI0w DAMEAG9cjwMEAW9clAMEAG9clzANBgkqhkiG9w0BAQsFAAOCAQEAazUZX+C6FXqo mXlQa/Rr57RCqo0XZHBSj0DgfLbn248ixolnuj257r7Y+BVuk9vKGhjynnnvF7AM q473MtthmevpN4JdU3VrosLoPJD6Ph/oJ4mDNckLckrXQZ1s8DVTfvhBYm5CXLQ7 NJSIp/35TY/6srm3WDlWyFwS0wGdKwoOUE49Fesy9TYt+MnGV0N3uk18Cu4cIBBw nGvoenZo1xubXK3AdFExWYpoFWXnJYd5udbbAqkFVHPzu9K+AKFdrPlul7k5gyoi jfw/+b0ICDNG5mJ288StE6YgeipgWjmZkHuwieo6QOJ6eln35k1TjRixVgYwumVB QIx0IgGkGA== -----END CERTIFICATE-----Generated at Thu Jul 3 04:28:57 2025 by rpki-client