$ rpki-client -vvf rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/D2CFD4468D6D11EB9DB49A32C4F9AE02.roa File: D2CFD4468D6D11EB9DB49A32C4F9AE02.roa (raw, json) Hash identifier: +78td8DudFE3NBUUSYhesW8UdPg8DBg2PU3GJp9moVc= Subject key identifier: 97:33:1F:73:75:98:6E:2B:A8:41:03:37:18:8E:2A:DF:CB:06:44:40 Certificate issuer: /CN=A916988B/serialNumber=BA49F2E02A635DD075F564166F111F5FADE5A7CB Certificate serial: 069F Authority key identifier: BA:49:F2:E0:2A:63:5D:D0:75:F5:64:16:6F:11:1F:5F:AD:E5:A7:CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukny4CpjXdB19WQWbxEfX63lp8s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/D2CFD4468D6D11EB9DB49A32C4F9AE02.roa Signing time: Fri 18 Jul 2025 23:05:01 +0000 ROA not before: Fri 18 Jul 2025 23:05:01 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 4826 IP address blocks: 203.5.33.0/24 maxlen: 24 203.5.35.0/24 maxlen: 24 203.5.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.crl rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukny4CpjXdB19WQWbxEfX63lp8s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 23:05:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1695 (0x69f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916988B, serialNumber=BA49F2E02A635DD075F564166F111F5FADE5A7CB Validity Not Before: Jul 18 23:05:01 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=687ad31d-688a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f4:10:5b:b1:35:c0:99:b2:d7:23:06:d8:a5: 76:7d:a7:df:69:ac:a6:cf:0e:3f:a6:29:80:13:fc: 2a:42:92:92:b3:82:21:43:d3:ad:2a:bb:8c:e3:29: 93:21:84:51:37:96:d1:df:ce:90:db:e5:6e:82:9e: d0:a1:b2:57:52:9d:d3:31:b0:cd:5e:c7:1a:ab:b2: 3a:0a:01:77:25:60:c9:34:48:9c:cd:08:28:8f:53: 5e:9b:60:9b:3b:2f:37:e4:7f:a5:e1:3b:e9:cd:4d: d7:ff:70:41:94:cd:43:72:c6:b6:2c:c0:c6:2b:38: bd:ab:0b:fd:39:05:79:7f:2e:ad:7a:03:09:43:1f: 63:07:f2:c1:53:ce:1f:77:5c:e9:83:b1:66:05:bf: ca:42:64:5a:31:fe:ec:98:00:7e:18:df:c1:43:86: 72:af:3b:f4:c1:c8:98:dc:c5:56:91:b2:04:e9:f2: e2:d1:96:03:a3:d4:9f:0b:fc:c0:7f:3b:6c:3e:39: 54:1e:73:da:5a:d0:40:6f:8a:0d:64:fe:2b:15:62: 83:54:eb:1f:31:0f:18:8e:88:0e:4d:9f:1e:75:ff: 4d:72:4e:7c:f7:35:71:eb:7d:8e:b5:f2:28:91:e2: 8c:35:6d:cc:d9:a4:fb:15:ca:46:cd:ca:fd:40:0d: 5c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:33:1F:73:75:98:6E:2B:A8:41:03:37:18:8E:2A:DF:CB:06:44:40 X509v3 Authority Key Identifier: keyid:BA:49:F2:E0:2A:63:5D:D0:75:F5:64:16:6F:11:1F:5F:AD:E5:A7:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/ukny4CpjXdB19WQWbxEfX63lp8s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukny4CpjXdB19WQWbxEfX63lp8s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916988B/F36B79B0807711EBB925F154C4F9AE02/D2CFD4468D6D11EB9DB49A32C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.5.33.0/24 203.5.35.0-203.5.36.255 Signature Algorithm: sha256WithRSAEncryption 6f:4d:1d:13:cb:22:67:7a:c6:de:d6:e9:5a:32:56:48:e2:58: d0:c1:6b:dd:42:44:3b:3e:98:3c:34:7d:c9:e7:3d:f0:65:42: 5a:64:89:c1:80:98:75:f7:9e:8c:73:08:df:3e:52:8e:57:ee: 8f:cb:a3:39:aa:84:21:ff:04:25:ac:f0:40:f3:e1:20:52:20: ed:ef:93:45:85:88:bf:29:57:7b:0a:cc:46:21:ac:ed:b2:db: be:68:f4:01:21:36:d3:5b:7b:8a:11:65:97:c5:55:c5:68:eb: cf:92:14:b8:dc:b5:2e:3a:7e:7e:38:fb:da:a0:3a:cc:5f:d9: 85:8a:68:90:af:6a:6a:3b:a5:3a:7b:0c:54:af:3d:71:73:f7: 28:de:3e:73:5c:bd:1c:9f:6b:fb:af:2b:6d:04:81:d5:e9:ed: 8d:b6:5a:97:33:7a:5b:2b:22:84:ba:45:7b:1b:dc:43:62:20: 19:9b:9b:1d:38:3c:eb:12:e2:e7:fe:67:2d:2f:69:ac:cb:b6: 65:be:25:ee:98:a0:41:40:26:fb:1f:d0:16:b4:f4:a9:b3:e6: 18:c5:5c:11:68:95:7f:3d:1a:c4:ed:8c:98:36:3e:68:46:b2: 91:9b:63:76:be:be:e8:a3:ca:5e:4c:4f:68:d3:16:78:08:48: 09:97:4e:eb -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgICBp8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk4OEIxMTAvBgNVBAUTKEJBNDlGMkUwMkE2MzVERDA3NUY1NjQxNjZGMTExRjVG QURFNUE3Q0IwHhcNMjUwNzE4MjMwNTAxWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODdhZDMxZC02ODhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzfQQW7E1wJmy1yMG2KV2faffaaymzw4/pimAE/wqQpKSs4IhQ9OtKruM4ymT IYRRN5bR386Q2+Vugp7QobJXUp3TMbDNXscaq7I6CgF3JWDJNEiczQgoj1Nem2Cb Oy835H+l4TvpzU3X/3BBlM1Dcsa2LMDGKzi9qwv9OQV5fy6tegMJQx9jB/LBU84f d1zpg7FmBb/KQmRaMf7smAB+GN/BQ4Zyrzv0wciY3MVWkbIE6fLi0ZYDo9SfC/zA fztsPjlUHnPaWtBAb4oNZP4rFWKDVOsfMQ8YjogOTZ8edf9Nck589zVx632OtfIo keKMNW3M2aT7FcpGzcr9QA1cGQIDAQABo4ICozCCAp8wHQYDVR0OBBYEFJczH3N1 mG4rqEEDNxiOKt/LBkRAMB8GA1UdIwQYMBaAFLpJ8uAqY13QdfVkFm8RH1+t5afL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTg4Qi9GMzZCNzlCMDgw NzcxMUVCQjkyNUYxNTRDNEY5QUUwMi91a255NENwalhkQjE5V1FXYnhFZlg2M2xw OHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Vrbnk0Q3BqWGRCMTlXUVdieEVmWDYzbHA4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Njk4OEIvRjM2Qjc5QjA4MDc3MTFFQkI5MjVGMTU0QzRGOUFFMDIvRDJDRkQ0NDY4 RDZEMTFFQjlEQjQ5QTMyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLQYIKwYBBQUHAQcBAf8E HjAcMBoEAgABMBQDBADLBSEwDAMEAMsFIwMEAMsFJDANBgkqhkiG9w0BAQsFAAOC AQEAb00dE8siZ3rG3tbpWjJWSOJY0MFr3UJEOz6YPDR9yec98GVCWmSJwYCYdfee jHMI3z5Sjlfuj8ujOaqEIf8EJazwQPPhIFIg7e+TRYWIvylXewrMRiGs7bLbvmj0 ASE201t7ihFll8VVxWjrz5IUuNy1Ljp+fjj72qA6zF/ZhYpokK9qajulOnsMVK89 cXP3KN4+c1y9HJ9r+68rbQSB1entjbZalzN6WysihLpFexvcQ2IgGZubHTg86xLi 5/5nLS9prMu2Zb4l7pigQUAm+x/QFrT0qbPmGMVcEWiVfz0axO2MmDY+aEaykZtj dr6+6KPKXkxPaNMWeAhICZdO6w== -----END CERTIFICATE-----Generated at Sun Jul 20 19:00:24 2025 by rpki-client