$ rpki-client -vvf rpki.apnic.net/member_repository/A915EBC8/6262F6D6EF0211ED8C2DD91FC4F9AE02/C662FB52399511EFA72CB43DC4F9AE02.roa File: C662FB52399511EFA72CB43DC4F9AE02.roa (raw, json) Hash identifier: 4VVohuqo/b+MNkkhnn5y++P3zzZEer8IMETCYH0ujFE= Subject key identifier: FF:2C:80:7B:B2:86:00:E5:60:29:AE:ED:6A:E8:96:6E:2F:68:8F:7A Certificate issuer: /CN=A915EBC8/serialNumber=23F0DA697CAA1D9247A669DF8781BA30137D7A59 Certificate serial: 01B6 Authority key identifier: 23:F0:DA:69:7C:AA:1D:92:47:A6:69:DF:87:81:BA:30:13:7D:7A:59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_DaaXyqHZJHpmnfh4G6MBN9elk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915EBC8/6262F6D6EF0211ED8C2DD91FC4F9AE02/C662FB52399511EFA72CB43DC4F9AE02.roa Signing time: Thu 21 Aug 2025 08:11:08 +0000 ROA not before: Thu 21 Aug 2025 08:11:08 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 10235 IP address blocks: 203.8.32.0/19 maxlen: 19 203.8.56.0/24 maxlen: 24 203.8.57.0/24 maxlen: 24 203.8.58.0/24 maxlen: 24 203.8.59.0/24 maxlen: 24 203.57.240.0/24 maxlen: 24 203.57.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915EBC8/6262F6D6EF0211ED8C2DD91FC4F9AE02/I_DaaXyqHZJHpmnfh4G6MBN9elk.crl rsync://rpki.apnic.net/member_repository/A915EBC8/6262F6D6EF0211ED8C2DD91FC4F9AE02/I_DaaXyqHZJHpmnfh4G6MBN9elk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_DaaXyqHZJHpmnfh4G6MBN9elk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:16:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 438 (0x1b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915EBC8, serialNumber=23F0DA697CAA1D9247A669DF8781BA30137D7A59 Validity Not Before: Aug 21 08:11:08 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=68a6d49b-f739 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:92:c1:2d:a5:5b:f0:90:73:0d:11:8d:79:8a: 50:93:cb:df:c5:2f:6c:df:f5:c3:24:86:cf:e7:7d: 9a:7f:e4:13:16:44:bc:d7:31:11:7f:eb:ef:8a:ea: e5:78:dc:51:5b:3f:ae:24:8a:c0:c4:7c:bf:e2:90: 02:b2:ca:60:5f:55:a0:2e:f0:3d:49:e4:a1:89:93: 8d:cb:a4:56:6b:85:23:2c:f7:d1:21:ea:ea:90:f3: 24:68:ff:5d:aa:b2:ff:85:9d:1b:43:4b:d4:2d:3d: 02:c9:a6:48:1e:bb:31:dd:e9:78:52:2d:41:2d:79: 5f:52:98:a0:89:8f:49:87:dc:2e:3e:db:54:65:46: d8:a7:19:9a:d7:2d:25:ad:56:d7:8f:78:48:be:f7: 73:40:56:5d:da:d5:75:c8:64:57:ac:70:c8:27:4c: fd:cd:e8:58:73:6a:a7:6e:6c:f2:2d:5e:0e:18:6a: b8:51:6c:ea:ef:41:f6:fb:d3:fb:9c:18:c0:06:ee: eb:39:bd:29:99:86:64:1c:1c:22:22:c6:6d:5d:37: 56:70:01:15:a7:ef:a7:91:e9:0d:19:9d:df:3e:2c: 9a:12:2e:61:41:dd:ae:ba:31:4f:70:f0:d1:d6:9c: 2d:16:41:89:24:05:cc:b1:85:d3:d0:01:11:3b:20: 9f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:2C:80:7B:B2:86:00:E5:60:29:AE:ED:6A:E8:96:6E:2F:68:8F:7A X509v3 Authority Key Identifier: keyid:23:F0:DA:69:7C:AA:1D:92:47:A6:69:DF:87:81:BA:30:13:7D:7A:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915EBC8/6262F6D6EF0211ED8C2DD91FC4F9AE02/I_DaaXyqHZJHpmnfh4G6MBN9elk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_DaaXyqHZJHpmnfh4G6MBN9elk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EBC8/6262F6D6EF0211ED8C2DD91FC4F9AE02/C662FB52399511EFA72CB43DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.8.32.0/19 203.57.240.0/23 Signature Algorithm: sha256WithRSAEncryption bb:f5:e4:26:7a:95:40:1a:f9:39:a4:d0:f6:52:94:e9:ae:ba: 12:65:82:b9:b1:a1:a5:59:fe:ad:ae:af:c7:45:d0:01:da:b8: d7:d8:5f:6d:1f:ef:d6:cb:2d:23:9f:61:2f:f9:ce:7b:8a:94: 3d:89:1f:c3:a1:60:de:ee:5e:6a:1b:67:73:75:28:09:70:e2: 6a:18:53:0b:12:1e:21:81:be:10:a2:e4:80:dc:8a:85:67:ef: 6f:3f:fe:5e:79:86:6c:85:4f:32:3c:bf:16:e4:de:b6:a4:67: 05:48:35:46:9f:29:f6:3f:ff:eb:2e:f0:53:15:5e:ff:48:23: 80:b4:30:0b:39:62:3f:7d:29:c6:f5:8d:a9:78:92:f9:e9:89: dd:65:c1:52:d1:c3:10:84:90:5e:b0:cb:a9:24:b6:d6:d1:b7: 56:51:db:a9:81:15:97:a0:d7:ed:95:a0:07:ab:08:6a:e2:01: 37:6d:fa:74:4c:45:57:4e:42:3a:42:2d:d9:8a:1f:fc:17:ea: b5:8b:18:c1:e4:4f:4e:f5:aa:61:aa:05:e4:d1:61:ef:e6:08: 49:b2:0f:46:9b:54:60:72:2e:c7:db:9d:22:50:2c:1d:6f:4e: 1e:92:73:76:32:de:f6:8c:71:98:13:e6:91:97:36:a7:4d:39: 57:5c:15:a0 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUVCQzgxMTAvBgNVBAUTKDIzRjBEQTY5N0NBQTFEOTI0N0E2NjlERjg3ODFCQTMw MTM3RDdBNTkwHhcNMjUwODIxMDgxMTA4WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGE2ZDQ5Yi1mNzM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx5LBLaVb8JBzDRGNeYpQk8vfxS9s3/XDJIbP532af+QTFkS81zERf+vviurl eNxRWz+uJIrAxHy/4pACsspgX1WgLvA9SeShiZONy6RWa4UjLPfRIerqkPMkaP9d qrL/hZ0bQ0vULT0CyaZIHrsx3el4Ui1BLXlfUpigiY9Jh9wuPttUZUbYpxma1y0l rVbXj3hIvvdzQFZd2tV1yGRXrHDIJ0z9zehYc2qnbmzyLV4OGGq4UWzq70H2+9P7 nBjABu7rOb0pmYZkHBwiIsZtXTdWcAEVp++nkekNGZ3fPiyaEi5hQd2uujFPcPDR 1pwtFkGJJAXMsYXT0AEROyCfswIDAQABo4ICmzCCApcwHQYDVR0OBBYEFP8sgHuy hgDlYCmu7Wrolm4vaI96MB8GA1UdIwQYMBaAFCPw2ml8qh2SR6Zp34eBujATfXpZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUJDOC82MjYyRjZENkVG MDIxMUVEOEMyREQ5MUZDNEY5QUUwMi9JX0RhYVh5cUhaSkhwbW5maDRHNk1CTjll bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lfRGFhWHlxSFpKSHBtbmZoNEc2TUJOOWVsay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUVCQzgvNjI2MkY2RDZFRjAyMTFFRDhDMkREOTFGQzRGOUFFMDIvQzY2MkZCNTIz OTk1MTFFRkE3MkNCNDNEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAXLCCADBAHLOfAwDQYJKoZIhvcNAQELBQADggEBALv15CZ6 lUAa+Tmk0PZSlOmuuhJlgrmxoaVZ/q2ur8dF0AHauNfYX20f79bLLSOfYS/5znuK lD2JH8OhYN7uXmobZ3N1KAlw4moYUwsSHiGBvhCi5IDcioVn728//l55hmyFTzI8 vxbk3rakZwVINUafKfY//+su8FMVXv9II4C0MAs5Yj99Kcb1jal4kvnpid1lwVLR wxCEkF6wy6kkttbRt1ZR26mBFZeg1+2VoAerCGriATdt+nRMRVdOQjpCLdmKH/wX 6rWLGMHkT071qmGqBeTRYe/mCEmyD0abVGByLsfbnSJQLB1vTh6Sc3Yy3vaMcZgT 5pGXNqdNOVdcFaA= -----END CERTIFICATE-----Generated at Sun Aug 24 01:27:20 2025 by rpki-client