$ rpki-client -vvf rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/570B12E0562611F09F085F44C4F9AE02.roa File: 570B12E0562611F09F085F44C4F9AE02.roa (raw, json) Hash identifier: CaHNy+5XgMUOPof5CFjhIu8D1eRPSffz8Arg3q0Y77U= Subject key identifier: 6F:DF:1D:81:5A:E1:37:BF:F7:23:3A:AD:83:D0:84:E1:06:7F:E9:7B Certificate issuer: /CN=A911DFC9/serialNumber=7665E2835D160085E31EC245222D4B2F7E484409 Certificate serial: 25 Authority key identifier: 76:65:E2:83:5D:16:00:85:E3:1E:C2:45:22:2D:4B:2F:7E:48:44:09 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dmXig10WAIXjHsJFIi1LL35IRAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/570B12E0562611F09F085F44C4F9AE02.roa Signing time: Tue 01 Jul 2025 02:51:52 +0000 ROA not before: Tue 01 Jul 2025 02:51:52 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 401696 IP address blocks: 165.99.42.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.crl rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dmXig10WAIXjHsJFIi1LL35IRAk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 08:05:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37 (0x25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DFC9, serialNumber=7665E2835D160085E31EC245222D4B2F7E484409 Validity Not Before: Jul 1 02:51:52 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=68634d48-ed1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:de:2e:12:e1:14:e9:41:46:e0:b9:86:fc:22: 23:26:af:b4:f5:ac:3d:fe:54:de:6f:7d:ce:2a:6a: 06:79:ea:49:a4:7b:20:97:f7:98:8c:8f:28:6a:38: af:db:3f:28:24:5e:6d:f6:60:04:90:fc:64:0a:d3: 76:82:a2:bc:90:69:39:2c:9d:4f:65:58:dc:a7:3f: 43:59:e0:d6:00:74:f0:58:da:40:ee:f8:2d:69:e6: 52:2d:a4:b0:6c:5f:bf:0c:61:a7:c6:6c:8b:30:a0: 65:2f:bb:66:78:b0:34:a6:36:04:d9:f2:1d:75:14: 08:4b:1a:07:33:a9:1e:95:7b:e4:96:d4:92:ff:dc: b2:35:f1:cf:36:f7:73:f7:77:24:be:9b:d8:cc:12: a5:42:df:00:79:36:26:75:cc:0b:91:fa:dc:be:d9: cb:68:af:f3:06:43:e7:15:81:0c:2a:86:b5:36:af: 3d:95:bb:cd:ff:af:e1:d7:e5:98:9e:57:67:bf:fa: 6f:e1:6f:25:20:72:cb:cd:f0:e3:ef:4d:b9:80:8b: 1b:31:91:4f:6b:4a:6b:df:ce:b6:68:53:15:ad:e6: de:56:31:d6:59:58:f0:4c:63:ff:d0:36:45:8b:fb: 8c:1b:7c:e7:3f:cf:2e:6e:0c:12:2c:a5:d5:48:3e: 93:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:DF:1D:81:5A:E1:37:BF:F7:23:3A:AD:83:D0:84:E1:06:7F:E9:7B X509v3 Authority Key Identifier: keyid:76:65:E2:83:5D:16:00:85:E3:1E:C2:45:22:2D:4B:2F:7E:48:44:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dmXig10WAIXjHsJFIi1LL35IRAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/570B12E0562611F09F085F44C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 165.99.42.0/23 Signature Algorithm: sha256WithRSAEncryption 04:a0:81:f9:aa:db:02:26:c9:40:c9:f8:b8:01:68:5f:7a:26: 80:e7:33:8e:7d:2b:01:2b:52:9c:aa:37:04:8e:06:d0:78:99: 64:66:6d:b4:26:52:66:5b:f0:0f:c1:67:9a:ce:5e:33:e5:ed: 45:42:fd:e1:91:90:75:de:dc:3a:2d:67:87:fd:06:56:3c:18: 3c:a1:26:b3:24:d2:d9:2b:86:96:c7:6b:03:f0:ed:f8:e5:fb: 3d:7f:e9:52:2d:3c:06:a0:ca:91:cb:d1:18:c1:9e:44:95:6c: 27:87:4d:db:6e:8c:58:96:aa:2e:d2:ba:50:4d:86:75:99:e6: 05:07:64:01:53:3c:78:9d:39:17:8c:db:7e:77:f8:1c:bf:08: d3:d3:88:26:1c:55:41:96:1a:e1:a3:e9:b1:99:51:5d:1d:9e: ae:0c:25:7a:07:a4:18:1f:32:2c:34:81:63:85:06:28:24:6c: 2a:5f:f6:2f:e6:cd:44:7c:aa:84:5d:d3:15:76:bc:d0:dd:79: 0b:53:7d:b1:0c:0a:0f:d8:90:d7:a3:39:03:23:ad:3a:a7:e3: d5:90:4b:03:3e:9b:bc:eb:79:01:39:62:e3:51:bd:d6:6c:e8: 62:52:1c:f3:21:b0:ac:12:96:df:03:e5:63:09:e4:84:3e:9a: 22:ae:66:66 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBJTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx REZDOTExMC8GA1UEBRMoNzY2NUUyODM1RDE2MDA4NUUzMUVDMjQ1MjIyRDRCMkY3 RTQ4NDQwOTAeFw0yNTA3MDEwMjUxNTJaFw0yNjA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4NjM0ZDQ4LWVkMWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDP3i4S4RTpQUbguYb8IiMmr7T1rD3+VN5vfc4qagZ56kmkeyCX95iMjyhqOK/b PygkXm32YASQ/GQK03aCoryQaTksnU9lWNynP0NZ4NYAdPBY2kDu+C1p5lItpLBs X78MYafGbIswoGUvu2Z4sDSmNgTZ8h11FAhLGgczqR6Ve+SW1JL/3LI18c8293P3 dyS+m9jMEqVC3wB5NiZ1zAuR+ty+2ctor/MGQ+cVgQwqhrU2rz2Vu83/r+HX5Zie V2e/+m/hbyUgcsvN8OPvTbmAixsxkU9rSmvfzrZoUxWt5t5WMdZZWPBMY//QNkWL +4wbfOc/zy5uDBIspdVIPpNPAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUb98dgVrh N7/3Izqtg9CE4QZ/6XswHwYDVR0jBBgwFoAUdmXig10WAIXjHsJFIi1LL35IRAkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFERkM5LzhEMzVFODJFMzAy QzExRjA4Nzc2NEEyQkM0RjlBRTAyL2RtWGlnMTBXQUlYakhzSkZJaTFMTDM1SVJB ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZG1YaWcxMFdBSVhqSHNKRklpMUxMMzVJUkFrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REZDOS84RDM1RTgyRTMwMkMxMUYwODc3NjRBMkJDNEY5QUUwMi81NzBCMTJFMDU2 MjYxMUYwOUYwODVGNDRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaVjKjANBgkqhkiG9w0BAQsFAAOCAQEABKCB+arbAibJQMn4 uAFoX3omgOczjn0rAStSnKo3BI4G0HiZZGZttCZSZlvwD8Fnms5eM+XtRUL94ZGQ dd7cOi1nh/0GVjwYPKEmsyTS2SuGlsdrA/Dt+OX7PX/pUi08BqDKkcvRGMGeRJVs J4dN226MWJaqLtK6UE2GdZnmBQdkAVM8eJ05F4zbfnf4HL8I09OIJhxVQZYa4aPp sZlRXR2ergwlegekGB8yLDSBY4UGKCRsKl/2L+bNRHyqhF3TFXa80N15C1N9sQwK D9iQ16M5AyOtOqfj1ZBLAz6bvOt5ATli41G91mzoYlIc8yGwrBKW3wPlYwnkhD6a Iq5mZg== -----END CERTIFICATE-----Generated at Sun Jul 20 14:26:39 2025 by rpki-client