$ rpki-client -vvf rpki.apnic.net/member_repository/A917F4A6/3B67AD8E63B711F088DDF365C4F9AE02/254F258E7ED011F083509E2BC4F9AE02.roa File: 254F258E7ED011F083509E2BC4F9AE02.roa (raw, json) Hash identifier: CSetpI3z0nRywdagrYhbtYI0LFEAfY7qgb1M0CIYRF0= Subject key identifier: 10:8F:8B:FB:FC:51:53:1E:1F:B3:4A:E3:C2:46:29:33:4B:AB:32:0D Certificate issuer: /CN=A917F4A6/serialNumber=737582EC4E8FE39DF42C0DC229BA37D1B6B3865A Certificate serial: 26 Authority key identifier: 73:75:82:EC:4E:8F:E3:9D:F4:2C:0D:C2:29:BA:37:D1:B6:B3:86:5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c3WC7E6P4530LA3CKbo30bazhlo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F4A6/3B67AD8E63B711F088DDF365C4F9AE02/254F258E7ED011F083509E2BC4F9AE02.roa Signing time: Fri 22 Aug 2025 06:29:43 +0000 ROA not before: Fri 22 Aug 2025 06:29:43 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 153773 IP address blocks: 36.255.76.0/24 maxlen: 24 36.255.77.0/24 maxlen: 24 36.255.78.0/24 maxlen: 24 36.255.79.0/24 maxlen: 24 203.24.98.0/24 maxlen: 24 203.29.60.0/24 maxlen: 24 2401:fce0:10::/48 maxlen: 48 2401:fce0:11::/48 maxlen: 48 2401:fce0:20::/48 maxlen: 48 2401:fce0:21::/48 maxlen: 48 2401:fce0:30::/48 maxlen: 48 2401:fce0:31::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F4A6/3B67AD8E63B711F088DDF365C4F9AE02/c3WC7E6P4530LA3CKbo30bazhlo.crl rsync://rpki.apnic.net/member_repository/A917F4A6/3B67AD8E63B711F088DDF365C4F9AE02/c3WC7E6P4530LA3CKbo30bazhlo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c3WC7E6P4530LA3CKbo30bazhlo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:15:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38 (0x26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F4A6, serialNumber=737582EC4E8FE39DF42C0DC229BA37D1B6B3865A Validity Not Before: Aug 22 06:29:43 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=68a80e57-684e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:3c:a0:0e:c5:22:7d:e1:58:2d:4b:35:d7:f9: f1:91:ac:12:7e:95:b7:8b:e4:f1:36:d7:b7:ac:90: d7:b8:92:49:6a:41:c9:9b:61:88:9d:6b:4b:5f:07: 3c:a1:35:dc:56:c8:c8:1e:32:30:2d:eb:9f:ee:65: 40:d9:14:ae:50:9e:23:82:80:57:b6:5a:a0:a7:be: 88:7a:b3:44:c3:04:44:11:0d:6d:a9:f3:18:53:59: eb:77:c4:ee:9d:63:4a:f7:7b:87:e8:06:63:3c:df: d1:bf:b1:7f:91:6b:6b:02:d0:b4:4d:80:9d:ac:4f: 53:2e:80:2d:26:53:a2:5e:d2:6f:27:5c:ad:03:53: ea:40:cf:15:ac:cd:03:33:cc:ab:81:5d:6b:68:f4: 6f:9f:90:ab:09:6c:b7:58:cb:d8:05:4a:9e:a5:06: 49:b7:86:d9:c1:6a:1d:9d:71:e4:c1:8b:45:8b:fd: 75:6e:18:4c:8d:f4:47:d8:1d:6d:de:cf:23:2b:2c: da:81:d2:8e:82:71:8d:0c:44:ee:d3:99:f6:b2:84: e4:80:41:77:e5:86:b1:80:22:77:2d:b2:50:b3:96: 0a:f0:9d:6c:55:a7:fa:a6:ef:33:18:bd:a0:73:02: 78:3d:51:cb:b9:3a:80:be:d7:73:aa:1b:08:d2:71: cb:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:8F:8B:FB:FC:51:53:1E:1F:B3:4A:E3:C2:46:29:33:4B:AB:32:0D X509v3 Authority Key Identifier: keyid:73:75:82:EC:4E:8F:E3:9D:F4:2C:0D:C2:29:BA:37:D1:B6:B3:86:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F4A6/3B67AD8E63B711F088DDF365C4F9AE02/c3WC7E6P4530LA3CKbo30bazhlo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c3WC7E6P4530LA3CKbo30bazhlo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F4A6/3B67AD8E63B711F088DDF365C4F9AE02/254F258E7ED011F083509E2BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 36.255.76.0/22 203.24.98.0/24 203.29.60.0/24 IPv6: 2401:fce0:10::/47 2401:fce0:20::/47 2401:fce0:30::/47 Signature Algorithm: sha256WithRSAEncryption b3:df:67:1a:6a:96:d2:ba:c2:e5:a4:7a:8a:41:3a:d5:4b:6a: d3:f9:99:96:96:10:e6:8c:68:c2:86:0e:47:98:77:d1:5f:5b: 9f:bd:76:78:19:24:31:24:4a:62:b8:f0:7b:d2:c4:53:5c:7b: fc:89:53:6f:15:74:13:4b:73:40:08:a2:6d:91:f8:a1:01:10: 00:d0:ba:a0:6e:6f:30:80:99:1b:b7:b3:93:59:44:9e:68:88: 5f:4c:5b:9a:e8:49:ee:5f:84:b7:9d:51:8e:2b:e7:c4:9f:17: a6:fa:32:cb:7d:14:8b:6e:2c:4c:ad:99:3e:5b:a7:cb:20:a0: 27:74:f3:d6:a8:06:67:27:83:f5:6d:2d:3f:3f:47:8c:f9:6e: 1f:29:d9:62:fb:47:b0:28:be:53:4c:5e:2c:6c:0f:87:30:41: 30:50:92:e7:14:38:95:ff:7f:34:7d:b5:eb:45:7b:cf:04:8c: 4c:ea:a1:c3:58:bb:98:fc:ea:f9:c8:ca:fa:f9:23:1e:98:61: 00:bd:2f:d0:9e:2c:72:7b:33:ae:9d:9f:a1:5a:bd:3c:13:24: f8:8d:22:74:3a:9c:e7:62:49:20:03:5d:d4:b7:6c:43:83:67: b4:ca:e4:f0:bc:66:b5:83:b4:1d:93:73:68:62:57:43:d7:6b: 0c:a8:d5:a1 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIBJjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RjRBNjExMC8GA1UEBRMoNzM3NTgyRUM0RThGRTM5REY0MkMwREMyMjlCQTM3RDFC NkIzODY1QTAeFw0yNTA4MjIwNjI5NDNaFw0yNjA3MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY4YTgwZTU3LTY4NGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCPKAOxSJ94VgtSzXX+fGRrBJ+lbeL5PE217eskNe4kklqQcmbYYida0tfBzyh NdxWyMgeMjAt65/uZUDZFK5QniOCgFe2WqCnvoh6s0TDBEQRDW2p8xhTWet3xO6d Y0r3e4foBmM839G/sX+Ra2sC0LRNgJ2sT1MugC0mU6Je0m8nXK0DU+pAzxWszQMz zKuBXWto9G+fkKsJbLdYy9gFSp6lBkm3htnBah2dceTBi0WL/XVuGEyN9EfYHW3e zyMrLNqB0o6CcY0MRO7TmfayhOSAQXflhrGAInctslCzlgrwnWxVp/qm7zMYvaBz Ang9Ucu5OoC+13OqGwjSccu7AgMBAAGjggLEMIICwDAdBgNVHQ4EFgQUEI+L+/xR Ux4fs0rjwkYpM0urMg0wHwYDVR0jBBgwFoAUc3WC7E6P4530LA3CKbo30bazhlow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdGNEE2LzNCNjdBRDhFNjNC NzExRjA4OERERjM2NUM0RjlBRTAyL2MzV0M3RTZQNDUzMExBM0NLYm8zMGJhemhs by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYzNXQzdFNlA0NTMwTEEzQ0tibzMwYmF6aGxvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjRBNi8zQjY3QUQ4RTYzQjcxMUYwODhEREYzNjVDNEY5QUUwMi8yNTRGMjU4RTdF RDAxMUYwODM1MDlFMkJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDBOBggrBgEFBQcBBwEB/wQ/ MD0wGAQCAAEwEgMEAiT/TAMEAMsYYgMEAMsdPDAhBAIAAjAbAwcBJAH84AAQAwcB JAH84AAgAwcBJAH84AAwMA0GCSqGSIb3DQEBCwUAA4IBAQCz32caapbSusLlpHqK QTrVS2rT+ZmWlhDmjGjChg5HmHfRX1ufvXZ4GSQxJEpiuPB70sRTXHv8iVNvFXQT S3NACKJtkfihARAA0Lqgbm8wgJkbt7OTWUSeaIhfTFua6EnuX4S3nVGOK+fEnxem +jLLfRSLbixMrZk+W6fLIKAndPPWqAZnJ4P1bS0/P0eM+W4fKdli+0ewKL5TTF4s bA+HMEEwUJLnFDiV/380fbXrRXvPBIxM6qHDWLuY/Or5yMr6+SMemGEAvS/Qnixy ezOunZ+hWr08EyT4jSJ0OpznYkkgA13Ut2xDg2e0yuTwvGa1g7Qdk3NoYldD12sM qNWh -----END CERTIFICATE-----Generated at Sat Aug 23 19:01:28 2025 by rpki-client