$ rpki-client -vvf rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/65DCB430F25A11E9937D9D73C4F9AE02.roa File: 65DCB430F25A11E9937D9D73C4F9AE02.roa (raw, json) Hash identifier: /aVclLD4E4tWBUOjWLIy9WCs0APOAP9s7RhIp3StsiQ= Subject key identifier: FB:08:D9:18:E4:F4:05:0F:98:B7:5F:C9:90:5A:87:E7:6E:61:90:87 Certificate issuer: /CN=A919A998/serialNumber=5EA1A7B802E7E7EFC77CA1A38E52F72ACD463930 Certificate serial: 0D44 Authority key identifier: 5E:A1:A7:B8:02:E7:E7:EF:C7:7C:A1:A3:8E:52:F7:2A:CD:46:39:30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/65DCB430F25A11E9937D9D73C4F9AE02.roa Signing time: Sat 04 Oct 2025 18:17:45 +0000 ROA not before: Sat 04 Oct 2025 18:17:45 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 63969 IP address blocks: 59.152.96.0/20 maxlen: 24 103.85.156.0/22 maxlen: 24 144.48.116.0/22 maxlen: 24 182.48.64.0/19 maxlen: 24 2404:4f80:29::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.crl rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 18:23:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3396 (0xd44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A998, serialNumber=5EA1A7B802E7E7EFC77CA1A38E52F72ACD463930 Validity Not Before: Oct 4 18:17:45 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68e164c9-bf27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b4:40:4c:44:0c:d8:ad:85:d5:cb:9a:5f:7f: 8c:1d:ab:68:4a:91:f2:67:41:2c:6c:42:95:4a:5f: 62:34:af:30:bd:97:57:39:0e:75:8d:c9:29:0c:37: 3b:9f:d0:fb:fe:3e:80:ff:05:d4:d7:3c:46:93:b9: 01:4e:67:90:e4:fe:8a:cd:aa:57:02:5a:2d:90:ad: dd:0d:ea:9a:3e:d2:ea:04:f2:65:04:04:4d:29:53: 42:21:39:2d:5d:d9:ed:28:dd:19:d1:c3:e2:96:9a: 88:3b:b2:d2:a1:f1:a9:37:62:b2:92:a8:55:24:98: 64:29:59:77:8f:ea:40:df:44:d1:53:ad:97:ed:c3: 72:76:92:43:7f:4d:fc:82:a9:9c:21:92:5b:b7:63: 29:41:af:be:00:07:60:a6:c4:40:6a:b3:ab:dc:d5: cb:4b:4d:41:e6:ab:28:78:5a:bc:12:be:5e:4c:44: ac:1a:3a:8d:53:55:ba:1d:43:3b:22:c7:41:1f:08: 28:a3:e3:79:a9:f4:10:bc:c4:18:db:85:e9:24:3c: 65:1d:35:48:a6:07:85:6b:e1:b5:89:0b:64:a4:3e: 5f:32:1f:53:d2:6f:f4:5b:1f:db:c3:ca:2c:c8:32: f6:ee:79:ed:50:8c:fa:bf:5a:31:6d:e7:b7:85:c4: 23:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:08:D9:18:E4:F4:05:0F:98:B7:5F:C9:90:5A:87:E7:6E:61:90:87 X509v3 Authority Key Identifier: keyid:5E:A1:A7:B8:02:E7:E7:EF:C7:7C:A1:A3:8E:52:F7:2A:CD:46:39:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/65DCB430F25A11E9937D9D73C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 59.152.96.0/20 103.85.156.0/22 144.48.116.0/22 182.48.64.0/19 IPv6: 2404:4f80:29::/48 Signature Algorithm: sha256WithRSAEncryption a4:eb:d1:8c:58:d5:36:5d:df:ca:bb:b7:fe:ff:a6:af:53:a9: 7d:27:72:2f:a7:96:f1:85:0c:e7:4c:78:48:61:f5:6a:57:a2: 38:81:bb:63:c6:08:35:1b:f8:3a:47:a4:4e:e2:dc:90:b3:2b: 9a:c6:de:78:25:4f:37:a1:3b:3f:19:8b:b7:ae:94:6a:d7:b7: c5:16:de:7c:fb:56:a3:82:46:4d:da:47:4e:a0:0c:04:ce:c0: 4c:2d:b5:3c:12:c3:78:3a:9c:2d:43:87:90:3f:c7:f8:d5:06: e1:cf:ab:5e:cf:cd:b5:9c:e4:cc:0d:1b:f6:0b:83:6b:7c:cd: 37:dd:7b:7e:37:3c:3f:b4:c2:46:af:45:f0:79:68:a1:a3:3a: 00:8f:d3:48:0e:a3:a8:27:15:86:59:d3:c1:14:dd:09:60:14: 85:97:ab:18:cb:89:8c:a4:ce:83:b9:85:3c:40:19:04:e1:9d: d8:8c:df:e3:f7:b4:35:66:1e:ac:96:6c:e2:ea:12:6d:22:57: 8f:ba:18:39:d5:6c:d7:c4:23:46:27:66:5f:a5:a5:ad:98:d6: e4:dd:36:62:62:ea:33:43:c5:e5:17:e8:72:01:d4:4a:1e:aa: 66:8f:51:d1:2a:b2:8f:96:53:60:6e:4a:dc:c0:24:61:2c:f2: 26:d4:79:8b -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgICDUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE5OTgxMTAvBgNVBAUTKDVFQTFBN0I4MDJFN0U3RUZDNzdDQTFBMzhFNTJGNzJB Q0Q0NjM5MzAwHhcNMjUxMDA0MTgxNzQ1WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGUxNjRjOS1iZjI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt7RATEQM2K2F1cuaX3+MHatoSpHyZ0EsbEKVSl9iNK8wvZdXOQ51jckpDDc7 n9D7/j6A/wXU1zxGk7kBTmeQ5P6KzapXAlotkK3dDeqaPtLqBPJlBARNKVNCITkt XdntKN0Z0cPilpqIO7LSofGpN2KykqhVJJhkKVl3j+pA30TRU62X7cNydpJDf038 gqmcIZJbt2MpQa++AAdgpsRAarOr3NXLS01B5qsoeFq8Er5eTESsGjqNU1W6HUM7 IsdBHwgoo+N5qfQQvMQY24XpJDxlHTVIpgeFa+G1iQtkpD5fMh9T0m/0Wx/bw8os yDL27nntUIz6v1oxbee3hcQjCwIDAQABo4ICuDCCArQwHQYDVR0OBBYEFPsI2Rjk 9AUPmLdfyZBah+duYZCHMB8GA1UdIwQYMBaAFF6hp7gC5+fvx3yho45S9yrNRjkw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTk5OC9BQjM0RkJENEYy NTgxMUU5Qjc1RTNDNzBDNEY5QUUwMi9YcUdudUFMbjUtX0hmS0dqamxMM0tzMUdP VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hxR251QUxuNS1fSGZLR2pqbEwzS3MxR09UQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUE5OTgvQUIzNEZCRDRGMjU4MTFFOUI3NUUzQzcwQzRGOUFFMDIvNjVEQ0I0MzBG MjVBMTFFOTkzN0Q5RDczQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQgYIKwYBBQUHAQcBAf8E MzAxMB4EAgABMBgDBAQ7mGADBAJnVZwDBAKQMHQDBAW2MEAwDwQCAAIwCQMHACQE T4AAKTANBgkqhkiG9w0BAQsFAAOCAQEApOvRjFjVNl3fyru3/v+mr1OpfSdyL6eW 8YUM50x4SGH1aleiOIG7Y8YINRv4OkekTuLckLMrmsbeeCVPN6E7PxmLt66Uate3 xRbefPtWo4JGTdpHTqAMBM7ATC21PBLDeDqcLUOHkD/H+NUG4c+rXs/NtZzkzA0b 9guDa3zNN917fjc8P7TCRq9F8HlooaM6AI/TSA6jqCcVhlnTwRTdCWAUhZerGMuJ jKTOg7mFPEAZBOGd2Izf4/e0NWYerJZs4uoSbSJXj7oYOdVs18QjRidmX6WlrZjW 5N02YmLqM0PF5RfocgHUSh6qZo9R0Sqyj5ZTYG5K3MAkYSzyJtR5iw== -----END CERTIFICATE-----Generated at Mon Oct 20 21:36:10 2025 by rpki-client