$ rpki-client -vvf rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/D10BFC0C1E6E11F08BA4E242C4F9AE02.roa File: D10BFC0C1E6E11F08BA4E242C4F9AE02.roa (raw, json) Hash identifier: EOzFrfxeZy9i3C7VOuLCjsEp1hatdbtq95gRT2Ax4xo= Subject key identifier: 62:1A:35:DD:88:1E:AD:2F:C7:85:AE:28:60:E9:1B:93:C7:32:EB:F6 Certificate issuer: /CN=A917E1FE/serialNumber=EDEB96F04C8D3EDCCBEEBA40C4242922A8136B53 Certificate serial: 0721 Authority key identifier: ED:EB:96:F0:4C:8D:3E:DC:CB:EE:BA:40:C4:24:29:22:A8:13:6B:53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/D10BFC0C1E6E11F08BA4E242C4F9AE02.roa Signing time: Fri 20 Jun 2025 22:11:28 +0000 ROA not before: Fri 20 Jun 2025 22:11:28 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 5065 IP address blocks: 36.255.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.crl rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:28:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1825 (0x721) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E1FE, serialNumber=EDEB96F04C8D3EDCCBEEBA40C4242922A8136B53 Validity Not Before: Jun 20 22:11:28 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=6855dc8f-d5fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:22:3a:4a:db:8a:da:81:07:90:6b:54:8d:98: 3a:4d:81:87:a8:5c:41:7b:6a:93:6e:68:a7:9a:34: 3c:fd:5b:ff:0e:8b:ae:cf:25:32:37:17:a9:6b:e3: be:2f:1f:00:a9:9d:88:82:eb:4e:a5:07:9e:df:30: 8d:bb:9e:18:6a:d8:2a:b2:30:3b:68:39:1f:2a:bc: 46:c4:a9:86:25:a7:eb:2d:b7:89:9d:93:9b:3f:7a: bc:fa:a8:0c:65:e0:46:93:57:db:5a:49:73:70:9c: b8:9c:dc:ed:6d:1d:56:27:0d:c6:a7:9d:a3:20:4e: eb:41:9b:c0:c7:4b:22:2e:ae:3e:a1:f6:ca:b5:38: 9e:74:86:4a:a0:de:29:12:60:46:5b:6f:2b:7b:03: 73:72:37:21:d3:7c:3c:06:1a:9b:e3:0b:b1:58:b3: 73:d4:38:74:78:a3:a4:96:a2:5f:1a:2f:e9:87:ed: 4a:e4:71:61:b7:93:55:5e:42:7c:ef:f6:51:98:c9: 7b:74:77:ae:95:fc:a0:fb:33:7a:9d:11:e6:c9:c1: 89:7b:67:bc:70:87:e0:24:a2:74:0b:df:2e:8b:c6: 2d:3c:58:88:2e:c5:5b:15:83:e5:59:00:e4:cc:e0: 52:db:75:73:09:77:c0:a4:5c:60:c2:dc:36:d1:dc: c4:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:1A:35:DD:88:1E:AD:2F:C7:85:AE:28:60:E9:1B:93:C7:32:EB:F6 X509v3 Authority Key Identifier: keyid:ED:EB:96:F0:4C:8D:3E:DC:CB:EE:BA:40:C4:24:29:22:A8:13:6B:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/D10BFC0C1E6E11F08BA4E242C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 36.255.197.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:a1:e3:6e:eb:42:59:66:23:e0:34:94:ec:e5:32:9c:c5:72: 1a:e8:23:3b:9e:19:37:4d:d8:59:8c:99:b4:3d:45:c4:43:79: de:c7:08:5e:93:f0:b2:49:41:f5:25:25:52:d6:ae:c5:a9:30: d7:73:77:36:0b:f9:cd:3c:64:5d:62:42:05:7f:c1:8d:18:06: 5a:91:3b:1b:aa:13:1a:92:7b:06:da:29:3a:a3:c7:16:ad:27: 01:9c:d3:88:0c:c5:a2:97:59:6f:55:df:9a:df:98:21:8a:50: c1:ec:19:66:99:03:6c:92:bf:67:8f:47:a4:3f:88:60:6b:c1: 92:9e:2f:6b:69:52:87:09:3f:72:25:15:fd:83:a4:dc:47:71: ac:14:45:74:2d:a7:eb:a9:15:25:0c:b5:f1:f0:cc:81:55:d0: 01:40:9e:15:4f:f0:9f:39:d1:53:a8:ec:3e:25:f3:ca:2d:64: 9d:4c:53:e2:0b:f6:98:d1:4d:f1:e9:1f:8b:9f:a9:dc:8f:58: 69:88:67:7f:ee:d2:43:40:09:f3:cd:29:77:a2:b5:d2:08:fd: 5f:6c:8f:91:ab:88:87:d6:38:9f:3d:c9:39:94:dd:61:d0:27: 6c:24:48:fc:0e:92:43:0e:e6:d6:b8:ac:61:f6:70:0b:d6:9f: 25:f0:af:a7 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICByEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UxRkUxMTAvBgNVBAUTKEVERUI5NkYwNEM4RDNFRENDQkVFQkE0MEM0MjQyOTIy QTgxMzZCNTMwHhcNMjUwNjIwMjIxMTI4WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODU1ZGM4Zi1kNWZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAviI6StuK2oEHkGtUjZg6TYGHqFxBe2qTbminmjQ8/Vv/DouuzyUyNxepa+O+ Lx8AqZ2IgutOpQee3zCNu54YatgqsjA7aDkfKrxGxKmGJafrLbeJnZObP3q8+qgM ZeBGk1fbWklzcJy4nNztbR1WJw3Gp52jIE7rQZvAx0siLq4+ofbKtTiedIZKoN4p EmBGW28rewNzcjch03w8Bhqb4wuxWLNz1Dh0eKOklqJfGi/ph+1K5HFht5NVXkJ8 7/ZRmMl7dHeulfyg+zN6nRHmycGJe2e8cIfgJKJ0C98ui8YtPFiILsVbFYPlWQDk zOBS23VzCXfApFxgwtw20dzErQIDAQABo4IClTCCApEwHQYDVR0OBBYEFGIaNd2I Hq0vx4WuKGDpG5PHMuv2MB8GA1UdIwQYMBaAFO3rlvBMjT7cy+66QMQkKSKoE2tT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTFGRS8zODYyMzVGMDZG ODgxMUVCQTg2QkY2NEFDNEY5QUUwMi83ZXVXOEV5TlB0ekw3cnBBeENRcElxZ1Rh MU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdldVc4RXlOUHR6TDdycEF4Q1FwSXFnVGExTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0UxRkUvMzg2MjM1RjA2Rjg4MTFFQkE4NkJGNjRBQzRGOUFFMDIvRDEwQkZDMEMx RTZFMTFGMDhCQTRFMjQyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAk/8UwDQYJKoZIhvcNAQELBQADggEBAA6h427rQllmI+A0 lOzlMpzFchroIzueGTdN2FmMmbQ9RcRDed7HCF6T8LJJQfUlJVLWrsWpMNdzdzYL +c08ZF1iQgV/wY0YBlqROxuqExqSewbaKTqjxxatJwGc04gMxaKXWW9V35rfmCGK UMHsGWaZA2ySv2ePR6Q/iGBrwZKeL2tpUocJP3IlFf2DpNxHcawURXQtp+upFSUM tfHwzIFV0AFAnhVP8J850VOo7D4l88otZJ1MU+IL9pjRTfHpH4ufqdyPWGmIZ3/u 0kNACfPNKXeitdII/V9sj5GriIfWOJ89yTmU3WHQJ2wkSPwOkkMO5ta4rGH2cAvW nyXwr6c= -----END CERTIFICATE-----Generated at Fri Jul 4 00:48:30 2025 by rpki-client