$ rpki-client -vvf rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/C1C12662CFC811EB9A5C5879C4F9AE02.roa File: C1C12662CFC811EB9A5C5879C4F9AE02.roa (raw, json) Hash identifier: XNKpRb8/02tHDrrS9S3tLwWbmiJabIsnKyEKhJUYUM8= Subject key identifier: 37:01:48:32:4D:35:60:F9:8A:56:E6:1D:F9:C6:A4:F3:51:12:54:FD Certificate issuer: /CN=A917B1B1/serialNumber=62CFB610E9650FE3C8002BC617B705724D2A02DD Certificate serial: 184B Authority key identifier: 62:CF:B6:10:E9:65:0F:E3:C8:00:2B:C6:17:B7:05:72:4D:2A:02:DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys-2EOllD-PIACvGF7cFck0qAt0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/C1C12662CFC811EB9A5C5879C4F9AE02.roa Signing time: Fri 08 Aug 2025 16:55:21 +0000 ROA not before: Fri 08 Aug 2025 16:55:21 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 55792 IP address blocks: 27.122.16.0/20 maxlen: 24 103.3.168.0/22 maxlen: 24 202.95.192.0/20 maxlen: 24 2400:9300::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.crl rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys-2EOllD-PIACvGF7cFck0qAt0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:37:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6219 (0x184b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B1B1, serialNumber=62CFB610E9650FE3C8002BC617B705724D2A02DD Validity Not Before: Aug 8 16:55:21 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68962bf9-8fcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c6:3d:3f:d4:44:3e:7a:6c:b9:be:2a:b0:60: 03:33:c1:9e:ab:c3:04:84:97:46:50:0f:c7:01:2b: fd:fb:94:29:3c:d2:d7:4e:a4:3d:ed:f1:e7:f7:07: a7:05:52:2d:56:2f:92:d4:df:42:da:5a:f9:fb:b5: 56:68:c7:d0:59:f6:21:e5:16:bc:01:19:48:6b:4a: 82:9f:0f:1b:06:56:3e:c0:b7:ed:7e:f8:2f:6f:a4: 21:93:2d:2a:06:d5:3f:c5:8a:07:af:57:ed:8e:69: ed:de:60:6e:f9:80:5c:51:e1:b5:37:29:9e:9b:02: 96:0c:fb:39:7b:29:44:5d:a7:3c:cf:11:30:49:4b: 40:f4:5f:56:7a:02:9d:00:e9:dc:45:61:90:b1:30: eb:ba:88:74:e1:e6:a5:67:e4:19:06:be:81:81:c5: c6:99:83:3e:98:b2:39:25:55:4f:e7:42:6b:2a:6a: a3:91:50:58:0b:de:ea:34:5b:6d:81:75:e3:73:05: 06:d4:1a:0f:e1:98:ea:6a:d0:1b:86:5f:27:2e:b5: bd:d6:79:36:80:39:0f:6a:1a:7a:94:4e:61:80:dd: 2d:30:06:16:bf:fd:96:7d:91:5a:f5:ce:86:5e:f1: 46:8d:1a:97:9d:5e:e3:d9:6f:46:41:7f:e3:90:5f: 59:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:01:48:32:4D:35:60:F9:8A:56:E6:1D:F9:C6:A4:F3:51:12:54:FD X509v3 Authority Key Identifier: keyid:62:CF:B6:10:E9:65:0F:E3:C8:00:2B:C6:17:B7:05:72:4D:2A:02:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/Ys-2EOllD-PIACvGF7cFck0qAt0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys-2EOllD-PIACvGF7cFck0qAt0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B1B1/A0F0ADF0B25211E78B50FF60C4F9AE02/C1C12662CFC811EB9A5C5879C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.122.16.0/20 103.3.168.0/22 202.95.192.0/20 IPv6: 2400:9300::/32 Signature Algorithm: sha256WithRSAEncryption b2:78:ba:47:34:35:28:02:d3:08:50:cf:f3:23:87:25:8d:de: 04:e2:22:79:a3:48:b2:a7:1c:5e:6b:7e:88:ba:d7:53:63:14: 63:52:8f:c0:c1:fd:c7:1d:c7:17:a9:ef:05:e2:03:93:ac:59: 8d:4f:b6:41:6e:b1:87:02:7c:49:6a:bf:c2:7f:e2:74:9e:d2: 96:fb:d5:52:70:f8:22:da:a3:31:97:30:27:d5:77:d9:39:d1: 26:17:6e:55:03:3e:b9:27:c2:b8:04:b6:e6:a5:f8:c5:40:3f: 59:41:3f:e5:20:7f:44:92:00:39:35:d0:cd:8f:ed:b0:b5:c1: e7:40:d7:7e:43:b0:fa:be:a8:02:9a:be:bb:5d:47:48:1c:21: 24:e6:a2:02:94:e8:4a:7b:95:59:ae:97:18:5b:37:51:a2:f7: 18:1c:b4:82:e6:3f:71:31:10:44:38:66:2f:da:7a:4b:71:4c: 81:6b:ed:b4:06:1a:b9:29:0c:5f:a1:1e:fe:e9:ea:e8:07:a7: b8:25:14:10:19:d8:55:05:34:b1:52:6b:6f:e1:30:88:c2:37: f0:52:4e:0d:3e:f1:75:d5:94:74:f1:68:ad:f8:d6:77:1f:86: 56:56:59:9f:b6:39:2e:1d:3d:df:4c:30:79:35:0b:74:2d:66: ed:4a:c5:36 -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICGEswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0IxQjExMTAvBgNVBAUTKDYyQ0ZCNjEwRTk2NTBGRTNDODAwMkJDNjE3QjcwNTcy NEQyQTAyREQwHhcNMjUwODA4MTY1NTIxWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODk2MmJmOS04ZmNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvcY9P9REPnpsub4qsGADM8Geq8MEhJdGUA/HASv9+5QpPNLXTqQ97fHn9wen BVItVi+S1N9C2lr5+7VWaMfQWfYh5Ra8ARlIa0qCnw8bBlY+wLftfvgvb6Qhky0q BtU/xYoHr1ftjmnt3mBu+YBcUeG1NymemwKWDPs5eylEXac8zxEwSUtA9F9WegKd AOncRWGQsTDruoh04ealZ+QZBr6BgcXGmYM+mLI5JVVP50JrKmqjkVBYC97qNFtt gXXjcwUG1BoP4ZjqatAbhl8nLrW91nk2gDkPahp6lE5hgN0tMAYWv/2WfZFa9c6G XvFGjRqXnV7j2W9GQX/jkF9ZuQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFDcBSDJN NWD5ilbmHfnGpPNRElT9MB8GA1UdIwQYMBaAFGLPthDpZQ/jyAArxhe3BXJNKgLd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjFCMS9BMEYwQURGMEIy NTIxMUU3OEI1MEZGNjBDNEY5QUUwMi9Zcy0yRU9sbEQtUElBQ3ZHRjdjRmNrMHFB dDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lzLTJFT2xsRC1QSUFDdkdGN2NGY2swcUF0MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0IxQjEvQTBGMEFERjBCMjUyMTFFNzhCNTBGRjYwQzRGOUFFMDIvQzFDMTI2NjJD RkM4MTFFQjlBNUM1ODc5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E KzApMBgEAgABMBIDBAQbehADBAJnA6gDBATKX8AwDQQCAAIwBwMFACQAkwAwDQYJ KoZIhvcNAQELBQADggEBALJ4ukc0NSgC0whQz/MjhyWN3gTiInmjSLKnHF5rfoi6 11NjFGNSj8DB/ccdxxep7wXiA5OsWY1PtkFusYcCfElqv8J/4nSe0pb71VJw+CLa ozGXMCfVd9k50SYXblUDPrknwrgEtual+MVAP1lBP+Ugf0SSADk10M2P7bC1wedA 135DsPq+qAKavrtdR0gcISTmogKU6Ep7lVmulxhbN1Gi9xgctILmP3ExEEQ4Zi/a ektxTIFr7bQGGrkpDF+hHv7p6ugHp7glFBAZ2FUFNLFSa2/hMIjCN/BSTg0+8XXV lHTxaK341ncfhlZWWZ+2OS4dPd9MMHk1C3QtZu1KxTY= -----END CERTIFICATE-----Generated at Sat Aug 23 20:27:35 2025 by rpki-client