$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/5C61E59E342911F09B7E033FC4F9AE02.roa File: 5C61E59E342911F09B7E033FC4F9AE02.roa (raw, json) Hash identifier: WRZoK+iZyeMzNhZdba16QYMJR2v2eZ20WmCnNljI/lI= Subject key identifier: 88:0B:FF:9E:98:1F:51:8C:6A:6A:31:4B:BF:2E:C6:AE:86:2D:A8:62 Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93 Certificate serial: 2859 Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/5C61E59E342911F09B7E033FC4F9AE02.roa Signing time: Wed 16 Jul 2025 16:53:25 +0000 ROA not before: Wed 16 Jul 2025 16:53:25 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 7489 IP address blocks: 27.100.36.0/23 maxlen: 24 45.124.64.0/22 maxlen: 24 103.192.176.0/22 maxlen: 24 103.196.20.0/23 maxlen: 24 103.217.252.0/22 maxlen: 22 103.217.253.0/24 maxlen: 24 2402:9e80::/48 maxlen: 48 2402:9e80:1::/48 maxlen: 48 2402:9e80:5::/48 maxlen: 48 2402:9e80:a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 15:51:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10329 (0x2859) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93 Validity Not Before: Jul 16 16:53:25 2025 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=6877d905-921a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:4d:2f:c6:d2:b2:1e:70:cd:2e:25:24:33:b5: 17:fa:1c:15:19:55:d3:e0:cc:0d:94:c8:3c:55:27: 6b:dc:2b:0c:90:22:2b:7c:7f:5e:50:73:dd:55:ad: 2a:1a:d9:4a:91:31:b6:c7:7f:4a:d0:ef:b6:84:8a: 78:cb:8c:49:07:24:f1:9f:99:ed:cf:23:b6:69:66: c7:f1:3d:d8:b2:09:e4:9f:1e:d3:fc:a9:d3:dc:e9: 51:81:0e:a0:5e:10:2b:a6:f5:8f:e3:4c:e4:19:cd: fb:94:24:12:f0:7a:61:96:0c:a2:7c:0f:6b:b6:7e: c5:fc:d9:43:d0:5c:e3:ac:aa:60:f7:db:03:64:30: 60:e0:ef:c2:89:09:34:d3:9d:98:0e:45:e1:49:10: 82:e4:7e:12:7f:7f:5a:ee:d1:55:16:2a:ea:d1:ca: 6b:ec:a6:b8:92:1c:d6:5d:f7:03:84:b8:d3:30:c8: cb:77:ba:54:8d:bc:e1:63:b1:82:94:18:68:9a:ac: e2:6e:44:b7:4b:37:6d:86:9e:77:73:07:32:24:39: 10:4a:1c:73:dd:da:de:3c:9b:60:1c:62:e9:18:a2: 20:c8:d7:70:c5:ad:88:ea:cd:10:af:2b:b5:cb:5d: 1d:fa:94:b3:a6:21:73:a6:5a:24:82:3d:89:90:ad: b0:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:0B:FF:9E:98:1F:51:8C:6A:6A:31:4B:BF:2E:C6:AE:86:2D:A8:62 X509v3 Authority Key Identifier: keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/5C61E59E342911F09B7E033FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.100.36.0/23 45.124.64.0/22 103.192.176.0/22 103.196.20.0/23 103.217.252.0/22 IPv6: 2402:9e80::/47 2402:9e80:5::/48 2402:9e80:a::/48 Signature Algorithm: sha256WithRSAEncryption 24:2a:bd:e8:ba:de:da:41:aa:b1:10:b1:4a:63:98:9a:27:2b: c6:03:de:8b:60:85:59:1f:cd:e2:b6:f5:64:5e:d4:76:2e:d9: 74:98:ab:00:22:8d:fe:73:6f:6b:a0:d9:2b:28:ea:d2:b0:84: 58:c9:69:6c:71:f9:6c:21:4c:16:d3:46:fb:10:e9:ba:ba:35: 86:c2:8b:47:75:3a:03:48:b9:f5:0a:3e:e1:de:74:e1:6c:4a: 40:49:52:d4:dd:66:c5:40:8a:ff:3c:c5:51:a2:94:ba:c4:86: 42:41:33:53:78:c1:84:c0:2e:ca:88:99:92:fc:0f:2c:ed:3b: a3:ff:45:37:a7:46:96:92:2f:59:54:d1:f7:04:1d:c1:a5:6b: 81:3a:ba:e0:d8:8f:97:d9:df:04:20:e1:75:d0:41:6a:da:d1: 6a:45:fc:ea:6e:a8:13:71:2b:3a:09:90:15:c0:d5:ef:61:24: c0:6f:7a:1a:86:63:7c:67:af:a6:c1:28:3b:73:4f:c6:ed:23: ef:4c:b8:1b:4a:5d:f3:6f:a5:0e:a4:1e:3e:40:c6:32:9c:cd: 89:3b:19:a8:a3:48:60:fc:1d:73:15:23:e4:88:82:e8:ce:ac: 78:7b:6a:72:91:0a:cb:f9:3b:6a:3d:1b:a4:b2:21:3c:88:fa: bb:5a:1d:24 -----BEGIN CERTIFICATE----- MIIFrDCCBJSgAwIBAgICKFkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMyOEQxMTAvBgNVBAUTKDk5REZCNkJGNzk1MEU2QjQwMTk1QTU5MDI0RjRCNzUw ODYzRDNEOTMwHhcNMjUwNzE2MTY1MzI1WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODc3ZDkwNS05MjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4E0vxtKyHnDNLiUkM7UX+hwVGVXT4MwNlMg8VSdr3CsMkCIrfH9eUHPdVa0q GtlKkTG2x39K0O+2hIp4y4xJByTxn5ntzyO2aWbH8T3Ysgnknx7T/KnT3OlRgQ6g XhArpvWP40zkGc37lCQS8HphlgyifA9rtn7F/NlD0FzjrKpg99sDZDBg4O/CiQk0 052YDkXhSRCC5H4Sf39a7tFVFirq0cpr7Ka4khzWXfcDhLjTMMjLd7pUjbzhY7GC lBhomqzibkS3Szdthp53cwcyJDkQShxz3drePJtgHGLpGKIgyNdwxa2I6s0Qryu1 y10d+pSzpiFzplokgj2JkK2wyQIDAQABo4IC0DCCAswwHQYDVR0OBBYEFIgL/56Y H1GMamoxS78uxq6GLahiMB8GA1UdIwQYMBaAFJnftr95UOa0AZWlkCT0t1CGPT2T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzI4RC9CREFCNjdGNjNB ODAxMUU1QUUzOTAxNTVDNEY5QUUwMi9tZC0ydjNsUTVyUUJsYVdRSlBTM1VJWTlQ Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21kLTJ2M2xRNXJRQmxhV1FKUFMzVUlZOVBaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUMyOEQvQkRBQjY3RjYzQTgwMTFFNUFFMzkwMTU1QzRGOUFFMDIvNUM2MUU1OUUz NDI5MTFGMDlCN0UwMzNGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwWgYIKwYBBQUHAQcBAf8E SzBJMCQEAgABMB4DBAEbZCQDBAItfEADBAJnwLADBAFnxBQDBAJn2fwwIQQCAAIw GwMHASQCnoAAAAMHACQCnoAABQMHACQCnoAACjANBgkqhkiG9w0BAQsFAAOCAQEA JCq96Lre2kGqsRCxSmOYmicrxgPei2CFWR/N4rb1ZF7Udi7ZdJirACKN/nNva6DZ Kyjq0rCEWMlpbHH5bCFMFtNG+xDpuro1hsKLR3U6A0i59Qo+4d504WxKQElS1N1m xUCK/zzFUaKUusSGQkEzU3jBhMAuyoiZkvwPLO07o/9FN6dGlpIvWVTR9wQdwaVr gTq64NiPl9nfBCDhddBBatrRakX86m6oE3ErOgmQFcDV72EkwG96GoZjfGevpsEo O3NPxu0j70y4G0pd82+lDqQePkDGMpzNiTsZqKNIYPwdcxUj5IiC6M6seHtqcpEK y/k7aj0bpLIhPIj6u1odJA== -----END CERTIFICATE-----Generated at Tue Jul 22 20:23:49 2025 by rpki-client