$ rpki-client -vvf rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/CFF5A20078E011EC8357FA15C4F9AE02.roa File: CFF5A20078E011EC8357FA15C4F9AE02.roa (raw, json) Hash identifier: 0lnFnxu0rWa+p9n4oerH1rvUz5x82J6mnvG019TSBpo= Subject key identifier: 7E:C5:AE:65:A8:38:2F:79:C5:28:41:0A:68:6F:82:1C:03:06:66:CB Certificate issuer: /CN=A915EE53/serialNumber=F8AA70916B6CA583C0363EB7A9A5F7F2627D7360 Certificate serial: 2650 Authority key identifier: F8:AA:70:91:6B:6C:A5:83:C0:36:3E:B7:A9:A5:F7:F2:62:7D:73:60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/CFF5A20078E011EC8357FA15C4F9AE02.roa Signing time: Fri 04 Jul 2025 16:22:56 +0000 ROA not before: Fri 04 Jul 2025 16:22:56 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 140928 IP address blocks: 58.146.128.0/20 maxlen: 24 59.189.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.crl rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9808 (0x2650) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915EE53, serialNumber=F8AA70916B6CA583C0363EB7A9A5F7F2627D7360 Validity Not Before: Jul 4 16:22:56 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=6867ffdf-4666 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:84:a9:4a:af:0a:a7:b1:1a:ec:c1:9c:76:e3: fc:2a:91:00:16:73:68:84:fd:51:69:da:1a:3b:f3: 07:4a:65:b8:f3:a0:60:6c:25:69:1b:34:42:63:99: 9c:6a:b6:e1:43:9c:4d:2e:91:99:00:ed:25:2d:bb: 44:43:34:e6:2f:bb:cb:ad:4c:59:31:df:ca:61:4a: d9:b1:62:1b:78:7d:61:99:90:4a:7b:e6:1e:0c:38: 08:ac:bf:5f:bc:29:4c:44:16:8e:9b:aa:73:a8:32: 17:bf:34:9c:8d:74:b3:b9:8d:cd:1f:22:0b:3c:31: 6b:35:28:60:b1:88:43:61:70:be:e3:21:2f:0a:bc: a1:36:7d:75:4d:83:6d:a8:a0:c4:19:9d:ad:78:ba: 63:9b:7c:d5:5a:f2:33:ee:dd:2a:62:cd:1b:59:9c: 20:5c:93:bb:64:cd:81:eb:d3:77:b4:a2:86:27:17: 17:51:57:a8:d6:06:39:9e:9c:e4:a9:ce:fb:98:3c: 97:55:96:90:10:7b:1a:c6:0f:dd:fb:8b:79:df:db: c6:28:09:ce:cb:33:83:de:fa:bb:88:67:ff:88:e5: 13:d4:37:37:a1:ea:ac:4b:9b:00:60:34:23:64:85: fe:68:bb:9d:5f:9b:c0:97:f7:ee:69:cb:bb:84:82: e7:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:C5:AE:65:A8:38:2F:79:C5:28:41:0A:68:6F:82:1C:03:06:66:CB X509v3 Authority Key Identifier: keyid:F8:AA:70:91:6B:6C:A5:83:C0:36:3E:B7:A9:A5:F7:F2:62:7D:73:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/CFF5A20078E011EC8357FA15C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 58.146.128.0/20 59.189.0.0/16 Signature Algorithm: sha256WithRSAEncryption 03:6b:74:20:df:62:65:42:e6:66:9f:d5:88:8c:11:7e:b1:9c: 15:80:2e:61:9e:1a:fe:3b:7e:0b:49:cb:7f:7c:92:81:81:97: 47:98:cb:b4:1a:44:ae:17:f0:56:fb:54:1c:6c:8b:64:fb:ab: 54:0d:81:62:e6:0b:c0:ec:1b:1b:23:8d:eb:82:6e:04:0f:0c: b2:8e:59:d9:a8:eb:7a:d6:44:4b:cf:d7:26:79:99:a7:6c:8a: d3:44:08:5d:f6:2f:74:ca:0b:53:e5:bc:39:8a:96:6a:13:e6: e9:a3:68:75:59:bb:33:56:00:48:c1:18:b3:b3:77:5b:c4:f5: 37:a1:5e:13:48:84:32:8f:1d:17:e8:5f:4b:f0:cc:9f:80:dc: cc:0f:e1:ad:be:c4:af:b7:72:b4:74:f2:d2:74:70:d5:b5:a7: 4d:38:f4:be:4f:4e:3b:4f:56:69:0c:de:27:b6:a2:8b:40:e1: 71:ed:69:43:3a:82:5e:61:7f:07:73:7c:f8:cd:38:7b:2f:9d: a5:81:33:de:c3:a6:34:e8:d6:72:ac:f6:82:0c:6a:ab:21:79: 72:f8:9e:99:d3:be:3e:6c:11:2c:46:e7:c4:bd:d9:67:b9:ae: 8e:47:20:e4:a1:d7:18:62:1a:02:8a:ff:c6:8d:f5:b9:fd:70: 11:e7:3f:b3 -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgICJlAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUVFNTMxMTAvBgNVBAUTKEY4QUE3MDkxNkI2Q0E1ODNDMDM2M0VCN0E5QTVGN0Yy NjI3RDczNjAwHhcNMjUwNzA0MTYyMjU2WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODY3ZmZkZi00NjY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw4SpSq8Kp7Ea7MGcduP8KpEAFnNohP1RadoaO/MHSmW486BgbCVpGzRCY5mc arbhQ5xNLpGZAO0lLbtEQzTmL7vLrUxZMd/KYUrZsWIbeH1hmZBKe+YeDDgIrL9f vClMRBaOm6pzqDIXvzScjXSzuY3NHyILPDFrNShgsYhDYXC+4yEvCryhNn11TYNt qKDEGZ2teLpjm3zVWvIz7t0qYs0bWZwgXJO7ZM2B69N3tKKGJxcXUVeo1gY5npzk qc77mDyXVZaQEHsaxg/d+4t539vGKAnOyzOD3vq7iGf/iOUT1Dc3oeqsS5sAYDQj ZIX+aLudX5vAl/fuacu7hILnAQIDAQABo4ICmjCCApYwHQYDVR0OBBYEFH7FrmWo OC95xShBCmhvghwDBmbLMB8GA1UdIwQYMBaAFPiqcJFrbKWDwDY+t6ml9/JifXNg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUU1My8zODUxMTg0MDQ1 ODgxMUU1OUIyRDgzNzFDNEY5QUUwMi8tS3B3a1d0c3BZUEFOajYzcWFYMzhtSjlj MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1LcHdrV3RzcFlQQU5qNjNxYVgzOG1KOWMyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUVFNTMvMzg1MTE4NDA0NTg4MTFFNTlCMkQ4MzcxQzRGOUFFMDIvQ0ZGNUEyMDA3 OEUwMTFFQzgzNTdGQTE1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJAYIKwYBBQUHAQcBAf8E FTATMBEEAgABMAsDBAQ6koADAwA7vTANBgkqhkiG9w0BAQsFAAOCAQEAA2t0IN9i ZULmZp/ViIwRfrGcFYAuYZ4a/jt+C0nLf3ySgYGXR5jLtBpErhfwVvtUHGyLZPur VA2BYuYLwOwbGyON64JuBA8Mso5Z2ajretZES8/XJnmZp2yK00QIXfYvdMoLU+W8 OYqWahPm6aNodVm7M1YASMEYs7N3W8T1N6FeE0iEMo8dF+hfS/DMn4DczA/hrb7E r7dytHTy0nRw1bWnTTj0vk9OO09WaQzeJ7aii0Dhce1pQzqCXmF/B3N8+M04ey+d pYEz3sOmNOjWcqz2ggxqqyF5cviemdO+PmwRLEbnxL3ZZ7mujkcg5KHXGGIaAor/ xo31uf1wEec/sw== -----END CERTIFICATE-----Generated at Sat Jul 5 08:16:23 2025 by rpki-client