$ rpki-client -vvf rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/D694BD82DBBA11EEB4125A3EC4F9AE02.roa File: D694BD82DBBA11EEB4125A3EC4F9AE02.roa (raw, json) Hash identifier: +SD5oyeqwCVbJIR3Rca7WRwH9ic0DsTEAz6kXO4nmEw= Subject key identifier: 25:6A:30:82:AD:49:3D:A9:0E:3E:2A:5F:C8:62:39:EE:A9:CD:2A:4D Certificate issuer: /CN=A916EB94/serialNumber=C4D4FB0FF027796E9DAA17B75551FD0B77F1982F Certificate serial: 0421 Authority key identifier: C4:D4:FB:0F:F0:27:79:6E:9D:AA:17:B7:55:51:FD:0B:77:F1:98:2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNT7D_AneW6dqhe3VVH9C3fxmC8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/D694BD82DBBA11EEB4125A3EC4F9AE02.roa Signing time: Tue 01 Jul 2025 01:06:19 +0000 ROA not before: Tue 01 Jul 2025 01:06:19 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 147179 IP address blocks: 45.248.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.crl rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNT7D_AneW6dqhe3VVH9C3fxmC8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 01:06:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1057 (0x421) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916EB94, serialNumber=C4D4FB0FF027796E9DAA17B75551FD0B77F1982F Validity Not Before: Jul 1 01:06:19 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=6863348b-993a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:7e:15:41:5f:86:63:16:b3:88:61:57:d9:3c: b6:ab:9a:95:74:4d:cb:ff:48:a9:38:12:e1:b6:86: 47:51:99:dc:ea:ca:ed:be:46:a2:4a:84:55:66:bc: 75:e5:36:f8:1b:3d:fc:5c:19:32:e8:9f:10:f1:d4: 64:79:2f:c8:0f:35:83:af:66:e6:56:fc:15:d9:52: 51:c7:b2:6b:8e:82:5a:31:44:1d:e6:58:c9:05:c8: b3:1b:93:b1:c3:d3:db:f1:b7:0a:22:9d:31:76:b4: 8e:c5:9f:46:01:65:27:f7:d8:96:6f:48:bb:41:eb: f2:24:ec:3b:94:5c:0f:a2:b5:02:ef:bd:0b:8a:04: 14:58:ea:de:35:80:9f:fe:50:9d:4f:77:3f:6d:28: f6:10:d1:db:46:bc:7d:15:1c:97:53:e9:ee:d9:96: 5c:a9:fb:54:2f:e6:ae:81:19:47:b7:b3:da:ee:52: c8:cc:30:b3:56:4d:8c:67:34:04:82:02:c9:1f:b2: c7:16:69:63:7c:26:b1:04:cc:46:cb:02:7f:e7:69: 31:08:50:ec:c2:c6:6b:5f:d3:ea:cc:e6:42:70:89: fa:37:16:eb:a3:d0:70:18:f1:5e:1b:eb:13:1a:55: 9f:14:8f:25:18:19:ea:ac:87:12:66:ff:fe:25:1e: 78:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:6A:30:82:AD:49:3D:A9:0E:3E:2A:5F:C8:62:39:EE:A9:CD:2A:4D X509v3 Authority Key Identifier: keyid:C4:D4:FB:0F:F0:27:79:6E:9D:AA:17:B7:55:51:FD:0B:77:F1:98:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNT7D_AneW6dqhe3VVH9C3fxmC8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/D694BD82DBBA11EEB4125A3EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.248.152.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:d0:78:81:3f:86:66:bf:e4:58:43:de:04:a1:f3:f4:ce:91: a0:79:ed:8f:77:60:8e:73:af:80:7a:5e:81:c8:62:27:fa:82: 22:04:1b:bd:d2:33:fc:15:f9:c7:6a:d1:b8:1e:0c:02:35:4d: 31:1f:82:ac:19:a3:ab:61:31:2f:f1:2e:b0:fb:bd:4c:cd:4b: bf:15:a4:9e:c5:3e:10:e1:9a:75:33:e4:77:d8:ab:c2:53:61: 89:8d:3d:fa:39:56:a4:6e:6f:e0:38:c4:72:10:b4:6e:55:d4: a5:b0:49:52:31:7a:ef:3f:24:e7:2e:9b:d5:47:d3:74:06:7a: 2e:75:0a:d2:ae:f4:1c:84:9b:05:0f:1b:51:03:b3:b5:e9:3a: f4:0a:12:ca:15:65:ed:fc:d7:04:ad:96:ba:08:2e:7b:0c:c5: cd:2d:92:78:6d:49:18:61:5f:23:3a:c7:28:c4:0d:a0:dc:b3: 57:91:b1:2c:9a:92:9e:c5:d4:1c:f3:cf:29:d5:a9:d3:63:15: eb:9c:f0:e0:19:90:5b:fd:4a:70:ca:d9:01:9f:b5:a4:11:dc: c3:54:33:92:35:62:8b:39:ac:be:88:2f:e1:c6:3b:cc:70:c4: 14:d5:f7:e2:6d:3f:81:b4:12:78:7c:45:30:23:af:f0:9d:00: 14:eb:8f:29 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBCEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVCOTQxMTAvBgNVBAUTKEM0RDRGQjBGRjAyNzc5NkU5REFBMTdCNzU1NTFGRDBC NzdGMTk4MkYwHhcNMjUwNzAxMDEwNjE5WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODYzMzQ4Yi05OTNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxH4VQV+GYxaziGFX2Ty2q5qVdE3L/0ipOBLhtoZHUZnc6srtvkaiSoRVZrx1 5Tb4Gz38XBky6J8Q8dRkeS/IDzWDr2bmVvwV2VJRx7JrjoJaMUQd5ljJBcizG5Ox w9Pb8bcKIp0xdrSOxZ9GAWUn99iWb0i7QevyJOw7lFwPorUC770LigQUWOreNYCf /lCdT3c/bSj2ENHbRrx9FRyXU+nu2ZZcqftUL+augRlHt7Pa7lLIzDCzVk2MZzQE ggLJH7LHFmljfCaxBMxGywJ/52kxCFDswsZrX9PqzOZCcIn6Nxbro9BwGPFeG+sT GlWfFI8lGBnqrIcSZv/+JR54JwIDAQABo4IClTCCApEwHQYDVR0OBBYEFCVqMIKt ST2pDj4qX8hiOe6pzSpNMB8GA1UdIwQYMBaAFMTU+w/wJ3lunaoXt1VR/Qt38Zgv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUI5NC9FM0NDMjVEODgx MUUxMUVDOTIwMjU1NTFDNEY5QUUwMi94TlQ3RF9BbmVXNmRxaGUzVlZIOUMzZnht QzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hOVDdEX0FuZVc2ZHFoZTNWVkg5QzNmeG1DOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkVCOTQvRTNDQzI1RDg4MTFFMTFFQzkyMDI1NTUxQzRGOUFFMDIvRDY5NEJEODJE QkJBMTFFRUI0MTI1QTNFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAt+JgwDQYJKoZIhvcNAQELBQADggEBAE7QeIE/hma/5FhD 3gSh8/TOkaB57Y93YI5zr4B6XoHIYif6giIEG73SM/wV+cdq0bgeDAI1TTEfgqwZ o6thMS/xLrD7vUzNS78VpJ7FPhDhmnUz5HfYq8JTYYmNPfo5VqRub+A4xHIQtG5V 1KWwSVIxeu8/JOcum9VH03QGei51CtKu9ByEmwUPG1EDs7XpOvQKEsoVZe381wSt lroILnsMxc0tknhtSRhhXyM6xyjEDaDcs1eRsSyakp7F1BzzzynVqdNjFeuc8OAZ kFv9SnDK2QGftaQR3MNUM5I1Yos5rL6IL+HGO8xwxBTV9+JtP4G0Enh8RTAjr/Cd ABTrjyk= -----END CERTIFICATE-----Generated at Wed Jul 2 23:34:45 2025 by rpki-client