$ rpki-client -vvf rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/2605BA6A267D11ECAF7F166DC4F9AE02.roa File: 2605BA6A267D11ECAF7F166DC4F9AE02.roa (raw, json) Hash identifier: 9WV5k4NfwBvcudGQwMKdlFtGBtJgUcwspBP19Jw4D/s= Subject key identifier: 85:25:FF:E9:0A:F2:51:04:B0:6E:8A:5B:E9:53:76:8C:84:41:F1:CE Certificate issuer: /CN=A916D0D2/serialNumber=D5E53AF115997C7FA3B86552F95F5114AF3405E9 Certificate serial: 07C3 Authority key identifier: D5:E5:3A:F1:15:99:7C:7F:A3:B8:65:52:F9:5F:51:14:AF:34:05:E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/2605BA6A267D11ECAF7F166DC4F9AE02.roa Signing time: Mon 30 Jun 2025 22:39:00 +0000 ROA not before: Mon 30 Jun 2025 22:39:00 +0000 ROA not after: Thu 30 Oct 2025 00:00:00 +0000 asID: 20473 IP address blocks: 45.114.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.crl rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 22:39:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1987 (0x7c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D0D2, serialNumber=D5E53AF115997C7FA3B86552F95F5114AF3405E9 Validity Not Before: Jun 30 22:39:00 2025 GMT Not After : Oct 30 00:00:00 2025 GMT Subject: CN=68631203-f070 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:0e:96:29:bb:75:cb:eb:1d:41:90:cf:3e:83: 4b:0e:4e:e4:0d:ed:fe:06:6d:48:d0:46:32:75:79: 44:5b:b1:d9:82:9b:43:cb:f2:32:33:57:f6:1d:89: 71:ef:c4:c1:5b:61:53:6e:a1:53:8f:cf:99:e5:4c: 0d:fd:42:48:37:7e:4e:c8:fa:be:25:33:1a:49:9e: ec:fa:d0:16:28:64:f5:50:16:b8:58:f4:90:24:10: 70:1f:55:99:d8:fe:ea:f6:ac:b8:12:64:35:38:45: ec:3c:5c:08:23:79:f6:53:7b:b7:d9:c8:da:59:49: 0e:df:c9:90:f3:7b:e7:7b:38:53:1e:e4:50:60:d9: 6f:62:21:7c:55:93:a6:64:00:36:49:62:b5:5a:0b: 78:c2:33:ab:97:98:4f:4b:7e:05:31:d6:36:5b:11: 42:af:d5:ca:1d:82:cf:6f:f0:98:ba:62:7b:c3:42: 18:41:4a:72:61:cd:25:6c:a6:f7:a4:70:02:d7:49: 00:6b:1c:56:c2:c7:4b:60:b9:b2:58:30:2e:f2:96: 5c:7e:8b:55:f0:16:28:08:ed:8c:18:c3:bd:d1:43: de:46:01:7e:8c:84:85:6e:03:0b:48:9a:dd:d9:b0: ca:42:12:c7:87:4b:e8:4e:47:17:eb:1f:10:fc:71: 42:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:25:FF:E9:0A:F2:51:04:B0:6E:8A:5B:E9:53:76:8C:84:41:F1:CE X509v3 Authority Key Identifier: keyid:D5:E5:3A:F1:15:99:7C:7F:A3:B8:65:52:F9:5F:51:14:AF:34:05:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/2605BA6A267D11ECAF7F166DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.114.190.0/24 Signature Algorithm: sha256WithRSAEncryption 46:16:12:3d:83:08:04:8c:76:39:ef:8b:a0:0b:ea:32:bd:90: e5:e6:6b:bf:54:be:55:c0:65:c6:ee:74:45:45:64:64:c3:5a: 6f:ca:8b:4a:3f:83:9a:b1:dd:66:ca:12:de:3e:a1:b8:9f:41: ab:dd:ca:d1:37:b3:58:b6:2e:d0:13:fe:1e:8e:54:e7:ba:47: 9e:28:24:82:d0:c8:8a:b0:7b:46:2d:6d:2c:d4:ae:ff:23:f4: 56:f0:54:25:bc:7e:cf:fe:10:6d:3d:a1:b8:77:ff:26:a3:21: a3:0c:f6:50:b2:3a:ee:7d:35:d2:66:7d:13:aa:c0:e6:3e:49: 23:a6:b3:a3:3e:0c:16:85:00:ac:be:ed:da:4e:0f:f3:ae:41: 6e:71:78:70:53:fb:48:f1:bb:eb:45:94:79:c7:66:85:ab:3c: 65:d6:db:4e:a1:ba:15:68:d5:46:fd:63:7e:f8:66:20:d8:1f: 42:5e:bb:8b:68:fd:2e:cc:6d:33:b2:83:30:6e:dc:fe:53:6a: 3a:2b:79:97:b2:53:80:13:83:47:d6:3e:78:98:37:a2:e0:1c: 28:87:73:29:5d:0c:5b:ea:7a:34:06:99:80:4c:4e:9d:00:52: 74:1f:28:45:13:ff:67:d4:a7:fa:16:cb:ac:34:85:07:b0:97: a5:d7:74:44 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB8MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQwRDIxMTAvBgNVBAUTKEQ1RTUzQUYxMTU5OTdDN0ZBM0I4NjU1MkY5NUY1MTE0 QUYzNDA1RTkwHhcNMjUwNjMwMjIzOTAwWhcNMjUxMDMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODYzMTIwMy1mMDcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuA6WKbt1y+sdQZDPPoNLDk7kDe3+Bm1I0EYydXlEW7HZgptDy/IyM1f2HYlx 78TBW2FTbqFTj8+Z5UwN/UJIN35OyPq+JTMaSZ7s+tAWKGT1UBa4WPSQJBBwH1WZ 2P7q9qy4EmQ1OEXsPFwII3n2U3u32cjaWUkO38mQ83vnezhTHuRQYNlvYiF8VZOm ZAA2SWK1Wgt4wjOrl5hPS34FMdY2WxFCr9XKHYLPb/CYumJ7w0IYQUpyYc0lbKb3 pHAC10kAaxxWwsdLYLmyWDAu8pZcfotV8BYoCO2MGMO90UPeRgF+jISFbgMLSJrd 2bDKQhLHh0voTkcX6x8Q/HFCBQIDAQABo4IClTCCApEwHQYDVR0OBBYEFIUl/+kK 8lEEsG6KW+lTdoyEQfHOMB8GA1UdIwQYMBaAFNXlOvEVmXx/o7hlUvlfURSvNAXp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDBEMi81OTM3RDQzRTM1 QUQxMUVCODFFRUFEMTJDNEY5QUUwMi8xZVU2OFJXWmZILWp1R1ZTLVY5UkZLODBC ZWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFlVTY4UldaZkgtanVHVlMtVjlSRks4MEJlay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkQwRDIvNTkzN0Q0M0UzNUFEMTFFQjgxRUVBRDEyQzRGOUFFMDIvMjYwNUJBNkEy NjdEMTFFQ0FGN0YxNjZEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAtcr4wDQYJKoZIhvcNAQELBQADggEBAEYWEj2DCASMdjnv i6AL6jK9kOXma79UvlXAZcbudEVFZGTDWm/Ki0o/g5qx3WbKEt4+obifQavdytE3 s1i2LtAT/h6OVOe6R54oJILQyIqwe0YtbSzUrv8j9FbwVCW8fs/+EG09obh3/yaj IaMM9lCyOu59NdJmfROqwOY+SSOms6M+DBaFAKy+7dpOD/OuQW5xeHBT+0jxu+tF lHnHZoWrPGXW206huhVo1Ub9Y374ZiDYH0Jeu4to/S7MbTOygzBu3P5TajoreZey U4ATg0fWPniYN6LgHCiHcyldDFvqejQGmYBMTp0AUnQfKEUT/2fUp/oWy6w0hQew l6XXdEQ= -----END CERTIFICATE-----Generated at Wed Jul 2 12:23:55 2025 by rpki-client