$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/12FAF07EA47B11E9867CBF58C4F9AE02.roa File: 12FAF07EA47B11E9867CBF58C4F9AE02.roa (raw, json) Hash identifier: LDnpUV+i1iRAJrBm2unF32JWcSXChORTnvD3fUQwbdk= Subject key identifier: B9:70:72:C7:EF:35:85:E3:24:BE:F0:59:51:66:8E:99:07:BE:E1:22 Certificate issuer: /CN=A915F89C/serialNumber=D697BB6F3F99E94480EE0BBAD3D26800AB416260 Certificate serial: 354A Authority key identifier: D6:97:BB:6F:3F:99:E9:44:80:EE:0B:BA:D3:D2:68:00:AB:41:62:60 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/12FAF07EA47B11E9867CBF58C4F9AE02.roa Signing time: Mon 18 Aug 2025 14:50:20 +0000 ROA not before: Mon 18 Aug 2025 14:50:20 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 9255 IP address blocks: 128.106.8.0/24 maxlen: 24 128.106.9.0/24 maxlen: 24 128.106.84.0/22 maxlen: 22 128.106.156.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.crl rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:22:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13642 (0x354a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F89C, serialNumber=D697BB6F3F99E94480EE0BBAD3D26800AB416260 Validity Not Before: Aug 18 14:50:20 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68a33dab-b351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:9d:a1:b9:69:9c:6c:80:1a:36:09:19:55:1b: e6:00:bf:57:b9:6d:25:29:2a:a7:cc:95:07:5c:fd: 9a:69:cc:83:1e:bf:d3:46:ce:e9:f7:c7:8d:84:e3: a9:54:c6:39:2a:7f:c7:b8:e7:42:62:16:16:e6:43: 25:67:2c:04:aa:b8:66:87:6a:f1:47:8a:80:f6:b6: 51:c2:d5:41:ef:2d:38:e3:40:77:dd:a5:d1:c2:5f: 7e:ca:ba:6f:ea:2a:a6:9d:21:cf:5e:5a:64:ac:52: a0:17:0b:43:57:35:a4:58:e9:10:c0:01:d6:1e:f4: cb:78:ee:46:17:d2:93:ed:53:c6:56:e7:49:40:e5: d1:5c:e4:d3:95:77:bd:04:86:e8:bf:58:d8:9b:a4: 9e:eb:72:1c:54:60:15:d1:e0:07:eb:e0:9e:53:ae: c2:91:31:b6:05:3e:90:42:a4:59:68:30:0f:18:d3: e7:e0:65:66:90:30:90:6a:b7:da:b1:29:72:3a:62: db:7e:16:ae:59:d1:d5:61:ab:23:c4:52:fa:32:7f: 99:21:f5:e5:b3:69:a8:d6:ce:4e:64:e4:ee:b1:8c: 93:ca:df:48:30:72:a5:5e:9f:9f:10:5f:8b:76:72: ec:2c:b1:ba:31:0e:75:46:22:7f:f1:b6:d0:c3:cc: d8:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:70:72:C7:EF:35:85:E3:24:BE:F0:59:51:66:8E:99:07:BE:E1:22 X509v3 Authority Key Identifier: keyid:D6:97:BB:6F:3F:99:E9:44:80:EE:0B:BA:D3:D2:68:00:AB:41:62:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/12FAF07EA47B11E9867CBF58C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 128.106.8.0/23 128.106.84.0/22 128.106.156.0/23 Signature Algorithm: sha256WithRSAEncryption 64:cf:e6:13:47:a1:b3:37:6f:cc:ea:50:34:01:26:8e:d9:53: b7:75:b8:38:70:de:c2:bc:62:56:de:60:b7:c7:b5:8b:12:d7: 9a:1a:a9:94:fd:02:26:0f:b8:57:0e:76:97:e4:ae:b7:0d:4b: b7:8d:a1:c1:f6:97:89:69:4b:37:fc:d9:ba:0a:ea:e7:7d:f5: 6c:5d:a3:90:35:e4:c4:0d:b7:c0:78:ab:33:b3:6b:b5:54:06: 40:bd:10:c9:f1:12:6b:e8:1c:0b:79:7a:fe:9a:6e:c2:9a:32: 01:24:56:2b:89:27:fb:8c:a6:d9:20:a5:d2:2a:d0:bb:13:81: 4f:0f:96:96:40:81:c1:46:43:99:b1:b1:30:d8:79:f9:50:5b: 98:0e:97:37:04:d7:d7:8a:b3:bb:66:65:24:c9:23:2a:3b:fb: ba:5d:d7:b4:db:86:76:75:16:68:a7:68:2e:55:46:4b:b8:b6: f4:fe:a6:d9:d8:06:71:32:f2:c2:6e:0d:65:1e:d4:38:4f:f8: 6e:01:5f:1e:12:9d:72:e1:b9:02:2a:f4:76:d1:38:ac:4f:ff: 51:64:a4:28:a6:c2:1b:30:1f:0b:40:cf:f6:2c:45:cc:ef:fc: d7:79:dd:af:12:5f:04:0d:5d:4e:d2:c4:ef:15:3a:3c:45:b0: f6:37:8e:c6 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICNUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUY4OUMxMTAvBgNVBAUTKEQ2OTdCQjZGM0Y5OUU5NDQ4MEVFMEJCQUQzRDI2ODAw QUI0MTYyNjAwHhcNMjUwODE4MTQ1MDIwWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGEzM2RhYi1iMzUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx52huWmcbIAaNgkZVRvmAL9XuW0lKSqnzJUHXP2aacyDHr/TRs7p98eNhOOp VMY5Kn/HuOdCYhYW5kMlZywEqrhmh2rxR4qA9rZRwtVB7y0440B33aXRwl9+yrpv 6iqmnSHPXlpkrFKgFwtDVzWkWOkQwAHWHvTLeO5GF9KT7VPGVudJQOXRXOTTlXe9 BIbov1jYm6Se63IcVGAV0eAH6+CeU67CkTG2BT6QQqRZaDAPGNPn4GVmkDCQarfa sSlyOmLbfhauWdHVYasjxFL6Mn+ZIfXls2mo1s5OZOTusYyTyt9IMHKlXp+fEF+L dnLsLLG6MQ51RiJ/8bbQw8zYeQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFLlwcsfv NYXjJL7wWVFmjpkHvuEiMB8GA1UdIwQYMBaAFNaXu28/melEgO4LutPSaACrQWJg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Rjg5Qy81QjA3RjNBQzFE ODMxMUUyOUIzNUE1RDgwOEIwMkNEMi8xcGU3YnotWjZVU0E3Z3U2MDlKb0FLdEJZ bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzFwZTdiei1aNlVTQTdndTYwOUpvQUt0QlltQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUY4OUMvNUIwN0YzQUMxRDgzMTFFMjlCMzVBNUQ4MDhCMDJDRDIvMTJGQUYwN0VB NDdCMTFFOTg2N0NCRjU4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAGAaggDBAKAalQDBAGAapwwDQYJKoZIhvcNAQELBQADggEB AGTP5hNHobM3b8zqUDQBJo7ZU7d1uDhw3sK8YlbeYLfHtYsS15oaqZT9AiYPuFcO dpfkrrcNS7eNocH2l4lpSzf82boK6ud99Wxdo5A15MQNt8B4qzOza7VUBkC9EMnx EmvoHAt5ev6absKaMgEkViuJJ/uMptkgpdIq0LsTgU8PlpZAgcFGQ5mxsTDYeflQ W5gOlzcE19eKs7tmZSTJIyo7+7pd17TbhnZ1FminaC5VRku4tvT+ptnYBnEy8sJu DWUe1DhP+G4BXx4SnXLhuQIq9HbROKxP/1FkpCimwhswHwtAz/YsRczv/Nd53a8S XwQNXU7SxO8VOjxFsPY3jsY= -----END CERTIFICATE-----Generated at Sun Aug 24 03:14:59 2025 by rpki-client