$ rpki-client -vvf rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6492D4985B9011EF8DB48C24C4F9AE02.roa File: 6492D4985B9011EF8DB48C24C4F9AE02.roa (raw, json) Hash identifier: +qicq3SiG34H0LUvV6UL+NqNS0SKtMERr+ZX27fAeKw= Subject key identifier: 3B:72:9B:F7:C1:54:D9:AC:C6:1D:48:95:50:E9:A7:16:D7:77:DB:A6 Certificate issuer: /CN=A911C362/serialNumber=EA83AF4A21CBC2071F56956E5DDD584C7638FA5B Certificate serial: 0115 Authority key identifier: EA:83:AF:4A:21:CB:C2:07:1F:56:95:6E:5D:DD:58:4C:76:38:FA:5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6oOvSiHLwgcfVpVuXd1YTHY4-ls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6492D4985B9011EF8DB48C24C4F9AE02.roa Signing time: Sat 05 Jul 2025 06:12:21 +0000 ROA not before: Sat 05 Jul 2025 06:12:21 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 146943 IP address blocks: 43.230.203.0/24 maxlen: 24 45.64.107.0/24 maxlen: 24 45.113.224.0/24 maxlen: 24 45.113.226.0/24 maxlen: 24 45.113.227.0/24 maxlen: 24 45.120.137.0/24 maxlen: 24 45.120.138.0/24 maxlen: 24 157.119.41.0/24 maxlen: 24 157.119.42.0/24 maxlen: 24 157.119.43.0/24 maxlen: 24 2405:7140:2::/48 maxlen: 48 2405:7140:4::/48 maxlen: 48 2405:7140:5::/48 maxlen: 48 2405:7140:6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.crl rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6oOvSiHLwgcfVpVuXd1YTHY4-ls.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 05:50:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 277 (0x115) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C362, serialNumber=EA83AF4A21CBC2071F56956E5DDD584C7638FA5B Validity Not Before: Jul 5 06:12:21 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=6868c245-3dde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:52:17:a3:b0:d5:94:b8:54:8d:78:a9:a6:74: e7:71:ca:31:86:83:10:e1:fd:ea:5f:50:1b:56:87: a6:87:a9:3a:5a:95:e6:54:49:3e:d1:4d:6f:b4:97: 33:14:8b:0d:6c:f5:d6:2e:42:94:c7:fa:0f:5d:65: db:c2:1f:b4:e9:16:ba:ae:d3:de:f1:26:a7:26:85: 7b:53:42:05:e9:43:64:11:69:57:71:e3:5c:86:09: c6:3d:05:7d:9d:82:c4:fe:4f:65:b6:c9:ae:34:53: 64:4f:37:a6:96:4f:d5:c4:59:7f:bd:e2:81:8d:ea: b4:b2:b1:40:b4:4f:04:b9:00:18:11:11:6d:3c:59: 4a:7a:03:38:b8:f8:cc:b9:9f:99:0f:8e:87:c5:ce: 2f:cd:97:e6:10:0d:73:cc:73:d5:eb:54:95:81:2f: 1e:fc:02:f6:60:27:8e:0e:2e:90:ac:c6:05:a9:c7: 76:95:ca:9d:03:fd:76:94:8a:d8:2c:ff:8f:b2:7d: 09:91:e9:71:bd:b3:13:e3:b5:56:1e:43:ef:28:11: ce:b5:22:bd:1d:7b:c6:c5:d9:a6:86:26:a5:87:09: 14:dd:61:56:2b:32:a8:bf:56:0a:ca:e6:26:87:67: 9a:d3:9f:e8:da:0b:ef:c5:d3:16:74:b2:75:ab:32: 73:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:72:9B:F7:C1:54:D9:AC:C6:1D:48:95:50:E9:A7:16:D7:77:DB:A6 X509v3 Authority Key Identifier: keyid:EA:83:AF:4A:21:CB:C2:07:1F:56:95:6E:5D:DD:58:4C:76:38:FA:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6oOvSiHLwgcfVpVuXd1YTHY4-ls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6492D4985B9011EF8DB48C24C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.230.203.0/24 45.64.107.0/24 45.113.224.0/24 45.113.226.0/23 45.120.137.0-45.120.138.255 157.119.41.0-157.119.43.255 IPv6: 2405:7140:2::/48 2405:7140:4::-2405:7140:6:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 09:7e:af:2c:83:44:4c:97:88:be:bd:21:b4:a1:c3:44:87:2f: 42:fe:d1:95:9c:73:4f:8c:df:08:76:80:c6:99:9e:aa:1e:4f: 8f:f9:ed:7b:a6:3f:de:1a:14:e0:76:51:ea:f2:d8:ac:39:09: e9:fa:29:2e:ed:45:02:3d:eb:d4:0b:fe:00:df:d9:79:60:45: 0d:47:ae:90:75:7d:ab:64:7a:12:6c:cb:cd:19:65:a6:24:ba: 60:ca:dc:22:76:dd:c9:31:bd:2f:97:6d:f4:eb:3d:65:39:7c: 46:bf:2d:43:9e:cd:03:4b:a1:d2:da:88:90:ce:05:5e:9b:fe: 02:f9:2a:49:51:35:fd:d1:07:69:8d:c2:c3:4a:75:4b:3a:88: f2:d9:c9:13:d2:cf:11:bf:70:03:93:cc:3b:ad:43:4f:6e:44: d6:89:43:cd:a5:27:89:eb:c4:06:0b:ec:3c:0f:69:8b:91:34: 83:78:ac:f7:59:6c:3b:87:15:b7:d5:53:fc:1e:b5:a9:fd:8e: 37:5f:2d:e7:af:7c:a9:d4:6a:0c:50:3a:24:f5:7a:16:91:3e: d5:27:a3:53:68:d8:07:80:af:ae:8b:8b:56:5a:d9:6c:22:34: 65:39:12:a4:02:b9:20:56:92:56:2f:94:60:7f:c4:a5:d2:63: 48:2e:d0:ef -----BEGIN CERTIFICATE----- MIIFxDCCBKygAwIBAgICARUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMzNjIxMTAvBgNVBAUTKEVBODNBRjRBMjFDQkMyMDcxRjU2OTU2RTVEREQ1ODRD NzYzOEZBNUIwHhcNMjUwNzA1MDYxMjIxWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODY4YzI0NS0zZGRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3lIXo7DVlLhUjXippnTnccoxhoMQ4f3qX1AbVoemh6k6WpXmVEk+0U1vtJcz FIsNbPXWLkKUx/oPXWXbwh+06Ra6rtPe8SanJoV7U0IF6UNkEWlXceNchgnGPQV9 nYLE/k9ltsmuNFNkTzemlk/VxFl/veKBjeq0srFAtE8EuQAYERFtPFlKegM4uPjM uZ+ZD46Hxc4vzZfmEA1zzHPV61SVgS8e/AL2YCeODi6QrMYFqcd2lcqdA/12lIrY LP+Psn0JkelxvbMT47VWHkPvKBHOtSK9HXvGxdmmhialhwkU3WFWKzKov1YKyuYm h2ea05/o2gvvxdMWdLJ1qzJzoQIDAQABo4IC6DCCAuQwHQYDVR0OBBYEFDtym/fB VNmsxh1IlVDppxbXd9umMB8GA1UdIwQYMBaAFOqDr0ohy8IHH1aVbl3dWEx2OPpb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzM2Mi82QTA4RjQ5MjI1 NzcxMUVGQkIwQjgyNTFDNEY5QUUwMi82b092U2lITHdnY2ZWcFZ1WGQxWVRIWTQt bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZvT3ZTaUhMd2djZlZwVnVYZDFZVEhZNC1scy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUMzNjIvNkEwOEY0OTIyNTc3MTFFRkJCMEI4MjUxQzRGOUFFMDIvNjQ5MkQ0OTg1 QjkwMTFFRjhEQjQ4QzI0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwcgYIKwYBBQUHAQcBAf8E YzBhMDoEAgABMDQDBAAr5ssDBAAtQGsDBAAtceADBAEtceIwDAMEAC14iQMEAC14 ijAMAwQAnXcpAwQCnXcoMCMEAgACMB0DBwAkBXFAAAIwEgMHAiQFcUAABAMHACQF cUAABjANBgkqhkiG9w0BAQsFAAOCAQEACX6vLINETJeIvr0htKHDRIcvQv7RlZxz T4zfCHaAxpmeqh5Pj/nte6Y/3hoU4HZR6vLYrDkJ6fopLu1FAj3r1Av+AN/ZeWBF DUeukHV9q2R6EmzLzRllpiS6YMrcInbdyTG9L5dt9Os9ZTl8Rr8tQ57NA0uh0tqI kM4FXpv+AvkqSVE1/dEHaY3Cw0p1SzqI8tnJE9LPEb9wA5PMO61DT25E1olDzaUn ievEBgvsPA9pi5E0g3is91lsO4cVt9VT/B61qf2ON18t5698qdRqDFA6JPV6FpE+ 1SejU2jYB4CvrouLVlrZbCI0ZTkSpAK5IFaSVi+UYH/EpdJjSC7Q7w== -----END CERTIFICATE-----Generated at Sun Jul 20 14:35:41 2025 by rpki-client