$ rpki-client -vvf rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/413AD9F852E411EC9E19AA2FC4F9AE02.roa File: 413AD9F852E411EC9E19AA2FC4F9AE02.roa (raw, json) Hash identifier: Y2Z1jehKepnssjRVP8joGvXLmK9adM98wErhHrOtaeg= Subject key identifier: BB:FB:CE:A1:06:77:1F:7C:01:01:33:4B:EA:C5:E9:9C:E5:BB:F9:69 Certificate issuer: /CN=A916CCFF/serialNumber=0803662C571325728F24FAAD8CB1A5F1900715ED Certificate serial: 04AF Authority key identifier: 08:03:66:2C:57:13:25:72:8F:24:FA:AD:8C:B1:A5:F1:90:07:15:ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CANmLFcTJXKPJPqtjLGl8ZAHFe0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/413AD9F852E411EC9E19AA2FC4F9AE02.roa Signing time: Sat 19 Jul 2025 00:37:24 +0000 ROA not before: Sat 19 Jul 2025 00:37:23 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 14618 IP address blocks: 202.92.192.0/24 maxlen: 24 202.92.193.0/24 maxlen: 24 202.92.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.crl rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CANmLFcTJXKPJPqtjLGl8ZAHFe0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 00:24:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1199 (0x4af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CCFF, serialNumber=0803662C571325728F24FAAD8CB1A5F1900715ED Validity Not Before: Jul 19 00:37:23 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=687ae8c3-15f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:47:bd:c1:80:c0:55:d5:e8:6d:71:3e:8c:4a: 76:d4:1c:e7:b5:fe:d8:a1:40:50:d9:17:fa:26:2c: 65:3c:15:82:1a:ac:71:08:6a:96:bf:9a:85:39:82: c6:c1:a1:02:83:57:15:80:3e:3d:7a:60:c8:e7:42: 5d:54:74:59:de:9f:f4:30:ae:10:19:df:28:ab:a9: ae:30:0a:92:de:21:a0:6e:73:e3:95:f1:a4:66:ac: 7a:e0:75:d4:f4:d7:df:30:f3:0d:ca:7f:db:cc:c9: 40:72:f4:9d:cc:49:39:69:1e:87:ce:07:fb:8f:2e: 30:d2:0b:41:f9:de:ab:7b:08:d3:0e:78:34:97:ba: e6:63:33:42:e7:08:67:57:f0:41:c3:98:cb:41:05: b6:15:66:e5:f7:3c:f8:e7:a2:27:33:c3:3c:6c:b1: f0:0b:f4:45:e0:4e:7a:4f:91:76:ea:66:83:13:39: a6:81:9a:e3:40:0d:02:0b:a2:4c:79:35:b1:9f:4b: 74:14:04:1c:92:95:c1:b9:57:be:52:a1:19:81:7d: 02:68:2f:f2:bc:6d:9c:a0:5e:c4:0d:db:f4:d0:08: af:ee:7a:5f:19:67:8c:a0:1d:22:2e:60:df:ab:6a: a4:38:0c:4f:60:38:7c:7a:1a:32:2d:84:5b:86:a8: ac:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:FB:CE:A1:06:77:1F:7C:01:01:33:4B:EA:C5:E9:9C:E5:BB:F9:69 X509v3 Authority Key Identifier: keyid:08:03:66:2C:57:13:25:72:8F:24:FA:AD:8C:B1:A5:F1:90:07:15:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CANmLFcTJXKPJPqtjLGl8ZAHFe0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/413AD9F852E411EC9E19AA2FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.92.192.0/23 202.92.196.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:88:db:1f:b7:39:d0:07:4e:57:f2:0e:fc:b7:38:91:4a:35: 54:de:1e:4c:4e:21:ac:f7:d4:ae:ab:5e:0b:64:6e:98:02:8a: 50:41:c7:6a:93:60:07:d3:8e:ec:e1:82:6c:b8:73:0d:f7:22: 58:d8:8e:35:57:5b:9e:37:ef:07:84:18:48:1a:ba:b1:6b:ab: 5c:64:0c:f0:89:a7:82:a5:ce:e3:b8:96:8a:93:a9:df:d0:c0: 56:2a:eb:65:d4:93:27:b7:b4:d0:e9:88:fc:42:b4:1e:30:1c: 95:a7:e1:e2:08:91:d0:b9:5b:b4:85:ab:2f:ee:ad:b9:ec:80: 4a:44:64:2c:19:04:c2:27:dd:df:14:0d:85:22:11:59:7c:f7: 97:f3:45:28:91:58:d0:f3:d6:b2:90:ab:c4:6e:d8:f4:32:22: 86:93:31:84:dd:68:f7:24:da:f4:1c:07:78:29:90:05:9d:72: 3c:46:44:4c:bf:a2:c7:c3:1a:6c:7e:eb:36:36:69:04:95:fc: e9:4a:b6:22:08:77:17:c3:78:fb:45:28:8d:8c:47:a8:a1:5c: 57:05:ab:b1:37:96:0e:e0:72:4a:59:1b:4b:4c:c7:fa:a8:cd: 1b:fa:99:5b:9c:05:7f:ae:12:09:1c:36:c2:2d:1f:f0:0c:25: 92:39:47:55 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkNDRkYxMTAvBgNVBAUTKDA4MDM2NjJDNTcxMzI1NzI4RjI0RkFBRDhDQjFBNUYx OTAwNzE1RUQwHhcNMjUwNzE5MDAzNzIzWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODdhZThjMy0xNWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzUe9wYDAVdXobXE+jEp21Bzntf7YoUBQ2Rf6JixlPBWCGqxxCGqWv5qFOYLG waECg1cVgD49emDI50JdVHRZ3p/0MK4QGd8oq6muMAqS3iGgbnPjlfGkZqx64HXU 9NffMPMNyn/bzMlAcvSdzEk5aR6Hzgf7jy4w0gtB+d6rewjTDng0l7rmYzNC5whn V/BBw5jLQQW2FWbl9zz456InM8M8bLHwC/RF4E56T5F26maDEzmmgZrjQA0CC6JM eTWxn0t0FAQckpXBuVe+UqEZgX0CaC/yvG2coF7EDdv00Aiv7npfGWeMoB0iLmDf q2qkOAxPYDh8ehoyLYRbhqisowIDAQABo4ICmzCCApcwHQYDVR0OBBYEFLv7zqEG dx98AQEzS+rF6Zzlu/lpMB8GA1UdIwQYMBaAFAgDZixXEyVyjyT6rYyxpfGQBxXt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0NGRi85QTVFQzE2QzQ2 RkUxMUVDOTRFM0QyNEFDNEY5QUUwMi9DQU5tTEZjVEpYS1BKUHF0akxHbDhaQUhG ZTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NBTm1MRmNUSlhLUEpQcXRqTEdsOFpBSEZlMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkNDRkYvOUE1RUMxNkM0NkZFMTFFQzk0RTNEMjRBQzRGOUFFMDIvNDEzQUQ5Rjg1 MkU0MTFFQzlFMTlBQTJGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAHKXMADBADKXMQwDQYJKoZIhvcNAQELBQADggEBAI+I2x+3 OdAHTlfyDvy3OJFKNVTeHkxOIaz31K6rXgtkbpgCilBBx2qTYAfTjuzhgmy4cw33 IljYjjVXW5437weEGEgaurFrq1xkDPCJp4KlzuO4loqTqd/QwFYq62XUkye3tNDp iPxCtB4wHJWn4eIIkdC5W7SFqy/urbnsgEpEZCwZBMIn3d8UDYUiEVl895fzRSiR WNDz1rKQq8Ru2PQyIoaTMYTdaPck2vQcB3gpkAWdcjxGREy/osfDGmx+6zY2aQSV /OlKtiIIdxfDePtFKI2MR6ihXFcFq7E3lg7gckpZG0tMx/qozRv6mVucBX+uEgkc NsItH/AMJZI5R1U= -----END CERTIFICATE-----Generated at Thu Jul 24 12:07:33 2025 by rpki-client