$ rpki-client -vvf rpki.apnic.net/member_repository/A911C53D/84B58F668CFB11EB9DC62C3BC4F9AE02/45FE96F6A5F611EFA16E4B2FC4F9AE02.roa File: 45FE96F6A5F611EFA16E4B2FC4F9AE02.roa (raw, json) Hash identifier: ILkhxI5MS0Y08MvVskMnHwF1yNepea938q8G0D4OrHI= Subject key identifier: 79:F5:F0:5A:DA:1C:82:B6:E6:96:1F:B6:D3:23:4F:EB:46:D3:B4:1D Certificate issuer: /CN=A911C53D/serialNumber=A5C763E8A95F6B9AB24113601DA8153A159126EE Certificate serial: 067C Authority key identifier: A5:C7:63:E8:A9:5F:6B:9A:B2:41:13:60:1D:A8:15:3A:15:91:26:EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcdj6Klfa5qyQRNgHagVOhWRJu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C53D/84B58F668CFB11EB9DC62C3BC4F9AE02/45FE96F6A5F611EFA16E4B2FC4F9AE02.roa Signing time: Fri 04 Jul 2025 23:04:25 +0000 ROA not before: Fri 04 Jul 2025 23:04:25 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 141749 IP address blocks: 202.14.152.0/24 maxlen: 24 203.20.94.0/24 maxlen: 24 203.24.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C53D/84B58F668CFB11EB9DC62C3BC4F9AE02/pcdj6Klfa5qyQRNgHagVOhWRJu4.crl rsync://rpki.apnic.net/member_repository/A911C53D/84B58F668CFB11EB9DC62C3BC4F9AE02/pcdj6Klfa5qyQRNgHagVOhWRJu4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcdj6Klfa5qyQRNgHagVOhWRJu4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 22:48:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1660 (0x67c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C53D, serialNumber=A5C763E8A95F6B9AB24113601DA8153A159126EE Validity Not Before: Jul 4 23:04:25 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68685df9-575d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:62:68:10:fb:26:cd:75:f0:ee:d8:79:ba:2a: 74:84:9f:a0:25:b5:60:3d:a2:b5:a0:23:a6:63:f7: ea:29:3a:60:de:fc:4b:71:a3:54:e4:b6:e9:6d:40: ba:c5:55:76:65:81:39:b3:e6:25:81:a8:fe:77:82: db:d1:bd:65:c8:43:b0:c4:8e:c7:27:0b:50:25:48: 1d:a7:65:72:aa:81:74:eb:7a:25:b4:46:43:a4:c2: 53:3f:94:35:e4:ef:15:dc:db:5b:7b:fc:ca:7a:4b: f3:59:0c:11:dc:92:6a:26:c5:f0:0a:dd:82:a2:85: da:bb:8d:67:93:4d:14:38:b5:96:b8:c0:5b:dd:af: 0c:3f:2b:e5:3d:24:59:21:7c:9e:08:82:83:ef:85: 85:33:f4:fa:69:03:36:02:6e:97:1c:ce:a2:06:f5: c5:07:d0:ff:2c:1b:8d:58:cb:a1:14:99:d5:1e:91: 4a:13:b7:bb:d5:8f:ef:44:db:fe:c0:0e:dc:a4:8e: ad:ee:f5:7d:90:26:a6:65:c2:ce:39:d9:8b:75:72: 8c:64:20:db:39:30:02:0e:fd:99:b7:2e:7e:c7:b3: 7d:36:b8:76:d8:c5:2b:ca:5e:e0:6d:f9:c2:f3:26: 08:b6:d3:4d:e8:29:d9:42:5c:cd:26:13:20:15:f8: aa:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:F5:F0:5A:DA:1C:82:B6:E6:96:1F:B6:D3:23:4F:EB:46:D3:B4:1D X509v3 Authority Key Identifier: keyid:A5:C7:63:E8:A9:5F:6B:9A:B2:41:13:60:1D:A8:15:3A:15:91:26:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C53D/84B58F668CFB11EB9DC62C3BC4F9AE02/pcdj6Klfa5qyQRNgHagVOhWRJu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcdj6Klfa5qyQRNgHagVOhWRJu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C53D/84B58F668CFB11EB9DC62C3BC4F9AE02/45FE96F6A5F611EFA16E4B2FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.14.152.0/24 203.20.94.0/24 203.24.48.0/24 Signature Algorithm: sha256WithRSAEncryption 84:02:1a:e9:8f:c1:b9:bd:f1:e2:0b:73:6c:45:d6:99:7b:2f: d4:0d:48:68:5a:4c:20:e6:00:9d:31:59:8c:d4:10:7c:74:92: 91:dd:a6:16:42:41:8b:3c:ef:14:47:5b:91:fa:a2:c5:e5:c8: 90:0c:b8:15:6d:a4:33:1f:4c:08:6f:49:9d:1f:c8:18:a8:35: 17:c0:2a:04:6d:15:9c:3e:89:75:5c:ad:eb:5f:fa:e0:44:46: 97:99:61:6c:76:ac:6b:93:b2:bd:d2:fa:2e:e6:88:e7:f6:0a: 58:83:85:d0:a6:bf:d0:41:21:3d:7d:9d:1a:83:f2:cc:e7:d9: dc:80:7a:65:e2:9f:6e:e8:81:10:df:84:69:dc:f3:96:63:8b: 31:e5:16:d0:a3:0a:6b:c9:93:33:9c:a9:17:d9:26:91:76:da: f6:d1:10:b8:45:d5:1c:00:8d:6d:21:d2:b1:a4:ad:fc:58:09: ce:4e:d6:f7:d1:df:dd:c8:9d:80:2e:e7:78:60:68:f3:eb:cc: 8e:75:0f:9f:fe:50:54:1a:99:9d:6b:bc:cc:55:2b:a9:0e:fe: 1e:af:64:2c:a9:f6:77:e6:32:45:26:61:eb:f7:1c:b9:3e:a7: 98:7f:6e:8e:55:6a:50:6c:6c:6e:c9:7e:b7:dc:0f:fc:48:7e: 64:f3:00:ff -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICBnwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM1M0QxMTAvBgNVBAUTKEE1Qzc2M0U4QTk1RjZCOUFCMjQxMTM2MDFEQTgxNTNB MTU5MTI2RUUwHhcNMjUwNzA0MjMwNDI1WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODY4NWRmOS01NzVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4mJoEPsmzXXw7th5uip0hJ+gJbVgPaK1oCOmY/fqKTpg3vxLcaNU5LbpbUC6 xVV2ZYE5s+Ylgaj+d4Lb0b1lyEOwxI7HJwtQJUgdp2VyqoF063oltEZDpMJTP5Q1 5O8V3Ntbe/zKekvzWQwR3JJqJsXwCt2CooXau41nk00UOLWWuMBb3a8MPyvlPSRZ IXyeCIKD74WFM/T6aQM2Am6XHM6iBvXFB9D/LBuNWMuhFJnVHpFKE7e71Y/vRNv+ wA7cpI6t7vV9kCamZcLOOdmLdXKMZCDbOTACDv2Zty5+x7N9Nrh22MUryl7gbfnC 8yYIttNN6CnZQlzNJhMgFfiqbQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFHn18Fra HIK25pYfttMjT+tG07QdMB8GA1UdIwQYMBaAFKXHY+ipX2uaskETYB2oFToVkSbu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzUzRC84NEI1OEY2NjhD RkIxMUVCOURDNjJDM0JDNEY5QUUwMi9wY2RqNktsZmE1cXlRUk5nSGFnVk9oV1JK dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BjZGo2S2xmYTVxeVFSTmdIYWdWT2hXUkp1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUM1M0QvODRCNThGNjY4Q0ZCMTFFQjlEQzYyQzNCQzRGOUFFMDIvNDVGRTk2RjZB NUY2MTFFRkExNkU0QjJGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBADKDpgDBADLFF4DBADLGDAwDQYJKoZIhvcNAQELBQADggEB AIQCGumPwbm98eILc2xF1pl7L9QNSGhaTCDmAJ0xWYzUEHx0kpHdphZCQYs87xRH W5H6osXlyJAMuBVtpDMfTAhvSZ0fyBioNRfAKgRtFZw+iXVcretf+uBERpeZYWx2 rGuTsr3S+i7miOf2CliDhdCmv9BBIT19nRqD8szn2dyAemXin27ogRDfhGnc85Zj izHlFtCjCmvJkzOcqRfZJpF22vbRELhF1RwAjW0h0rGkrfxYCc5O1vfR393InYAu 53hgaPPrzI51D5/+UFQamZ1rvMxVK6kO/h6vZCyp9nfmMkUmYev3HLk+p5h/bo5V alBsbG7JfrfcD/xIfmTzAP8= -----END CERTIFICATE-----Generated at Sun Jul 20 07:17:57 2025 by rpki-client