$ rpki-client -vvf rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/C3290D00636F11F0A1C6DA70C4F9AE02.roa File: C3290D00636F11F0A1C6DA70C4F9AE02.roa (raw, json) Hash identifier: 8Tbgpx8gUvUc2SgE2bzhwZumwm0PHzRHYd3oL+k8YIs= Subject key identifier: 25:D4:2A:43:D1:25:C1:DD:47:CF:8E:A7:86:C7:75:EF:FD:0A:6A:AB Certificate issuer: /CN=A9158E3F/serialNumber=7E313AB7FF26E783E03C07851612751881AE4918 Certificate serial: 0C28 Authority key identifier: 7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/C3290D00636F11F0A1C6DA70C4F9AE02.roa Signing time: Fri 18 Jul 2025 00:40:12 +0000 ROA not before: Fri 18 Jul 2025 00:40:12 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 17819 IP address blocks: 119.27.0.0/24 maxlen: 24 119.27.1.0/24 maxlen: 24 180.189.8.0/21 maxlen: 21 183.177.0.0/20 maxlen: 20 202.167.226.0/24 maxlen: 24 202.167.236.0/22 maxlen: 22 202.167.243.0/24 maxlen: 24 202.167.255.0/24 maxlen: 24 203.190.224.0/23 maxlen: 23 203.190.224.0/24 maxlen: 24 203.190.226.0/24 maxlen: 24 2407:b000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 19:43:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3112 (0xc28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158E3F, serialNumber=7E313AB7FF26E783E03C07851612751881AE4918 Validity Not Before: Jul 18 00:40:12 2025 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=687997eb-cca6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:4a:f3:a4:07:fd:41:62:04:0e:d2:3c:89:fb: b6:29:1a:3b:da:8f:9f:68:5f:7d:7e:8b:e0:45:49: 74:b1:41:f7:ff:2c:60:a9:c0:ca:3a:93:96:9e:62: 1e:16:ae:f3:8a:24:f7:69:d7:fc:3b:c6:cf:2d:a2: e6:97:f6:1f:71:37:40:4e:e1:e9:25:dc:39:40:f1: 71:3a:b0:78:ee:0e:0d:fb:be:43:e5:85:45:a3:63: f7:b2:3f:ca:33:42:2a:f2:85:21:b8:ac:d5:05:54: 0f:06:ef:8a:f1:a1:29:64:39:e2:40:c8:07:c6:9b: eb:da:c3:a9:3a:00:81:54:fb:f0:7b:0c:98:32:0e: 7e:f0:9c:a7:83:8c:26:ac:5e:cc:c9:4a:ad:f4:65: d4:04:b6:f1:91:43:07:3e:2a:57:44:df:b7:4c:34: 14:c5:0f:19:19:2c:09:de:6c:51:6c:fc:92:d4:b5: 28:e5:cf:6d:14:98:ea:42:96:94:0a:1f:2c:09:91: d7:ed:21:9f:a6:ec:14:31:d8:6d:49:d7:10:c3:46: 93:94:42:36:70:f6:2f:02:79:b9:37:8a:77:a8:29: f3:72:aa:14:3a:82:a6:b2:fe:bb:18:cb:2a:39:ba: e2:bc:ee:21:41:65:1d:55:25:33:bf:11:f4:70:7f: 1e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:D4:2A:43:D1:25:C1:DD:47:CF:8E:A7:86:C7:75:EF:FD:0A:6A:AB X509v3 Authority Key Identifier: keyid:7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/C3290D00636F11F0A1C6DA70C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 119.27.0.0/23 180.189.8.0/21 183.177.0.0/20 202.167.226.0/24 202.167.236.0/22 202.167.243.0/24 202.167.255.0/24 203.190.224.0-203.190.226.255 IPv6: 2407:b000::/33 Signature Algorithm: sha256WithRSAEncryption 10:e2:2c:18:7a:23:71:62:69:9f:ae:a1:21:88:9f:34:f4:97: 5c:05:08:6e:98:f0:dd:d7:0b:33:08:bb:b1:a7:3b:f7:db:2c: f8:81:17:79:d0:77:64:d3:c9:7b:65:9e:4c:cd:7c:72:6a:39: 5e:21:f6:8d:92:fd:3c:fe:4b:06:30:fc:b5:27:dd:b1:f7:4d: 3a:8f:44:fb:22:8d:99:d8:8f:49:e8:86:93:95:55:de:86:89: 56:76:09:95:6d:76:02:6d:a7:c7:11:93:e5:8e:a6:6f:ad:ce: c5:bd:00:86:5b:cc:65:2b:0e:ea:b3:5c:81:e0:9d:22:eb:cd: 35:e3:9e:89:dc:65:84:1f:73:ef:ba:78:0b:98:a3:fb:d7:af: 46:28:25:dd:9b:97:58:a4:3e:ef:99:95:69:89:66:43:2c:e4: 8f:50:50:25:97:5a:52:30:fd:af:4d:b4:99:43:1e:57:65:8e: 71:1d:27:3b:ac:ca:19:4e:26:5b:87:99:5f:f8:84:b5:55:20: 99:f4:23:4d:0a:91:a8:ac:ef:85:bd:74:93:35:26:3b:16:7d: 8d:d5:31:81:99:da:83:6d:55:b8:3e:29:ed:1f:a3:b4:09:1c: 63:dc:c2:ab:b1:2a:52:90:49:aa:99:64:b8:38:58:c1:35:58: ae:04:36:0d -----BEGIN CERTIFICATE----- MIIFszCCBJugAwIBAgICDCgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThFM0YxMTAvBgNVBAUTKDdFMzEzQUI3RkYyNkU3ODNFMDNDMDc4NTE2MTI3NTE4 ODFBRTQ5MTgwHhcNMjUwNzE4MDA0MDEyWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODc5OTdlYi1jY2E2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArErzpAf9QWIEDtI8ifu2KRo72o+faF99fovgRUl0sUH3/yxgqcDKOpOWnmIe Fq7ziiT3adf8O8bPLaLml/YfcTdATuHpJdw5QPFxOrB47g4N+75D5YVFo2P3sj/K M0Iq8oUhuKzVBVQPBu+K8aEpZDniQMgHxpvr2sOpOgCBVPvwewyYMg5+8Jyng4wm rF7MyUqt9GXUBLbxkUMHPipXRN+3TDQUxQ8ZGSwJ3mxRbPyS1LUo5c9tFJjqQpaU Ch8sCZHX7SGfpuwUMdhtSdcQw0aTlEI2cPYvAnm5N4p3qCnzcqoUOoKmsv67GMsq ObrivO4hQWUdVSUzvxH0cH8ebwIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFCXUKkPR JcHdR8+Op4bHde/9CmqrMB8GA1UdIwQYMBaAFH4xOrf/JueD4DwHhRYSdRiBrkkY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEUzRi9DMjQzMjJCQTU0 NDYxMUVBOEMwNTY1MURDNEY5QUUwMi9makU2dF84bTU0UGdQQWVGRmhKMUdJR3VT UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZqRTZ0XzhtNTRQZ1BBZUZGaEoxR0lHdVNSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NThFM0YvQzI0MzIyQkE1NDQ2MTFFQThDMDU2NTFEQzRGOUFFMDIvQzMyOTBEMDA2 MzZGMTFGMEExQzZEQTcwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwYQYIKwYBBQUHAQcBAf8E UjBQMD4EAgABMDgDBAF3GwADBAO0vQgDBAS3sQADBADKp+IDBALKp+wDBADKp/MD BADKp/8wDAMEBcu+4AMEAMu+4jAOBAIAAjAIAwYHJAewAAAwDQYJKoZIhvcNAQEL BQADggEBABDiLBh6I3FiaZ+uoSGInzT0l1wFCG6Y8N3XCzMIu7GnO/fbLPiBF3nQ d2TTyXtlnkzNfHJqOV4h9o2S/Tz+SwYw/LUn3bH3TTqPRPsijZnYj0nohpOVVd6G iVZ2CZVtdgJtp8cRk+WOpm+tzsW9AIZbzGUrDuqzXIHgnSLrzTXjnoncZYQfc++6 eAuYo/vXr0YoJd2bl1ikPu+ZlWmJZkMs5I9QUCWXWlIw/a9NtJlDHldljnEdJzus yhlOJluHmV/4hLVVIJn0I00Kkais74W9dJM1JjsWfY3VMYGZ2oNtVbg+Ke0fo7QJ HGPcwquxKlKQSaqZZLg4WME1WK4ENg0= -----END CERTIFICATE-----Generated at Wed Jul 23 02:30:52 2025 by rpki-client