$ rpki-client -vvf rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/B364F656C0AD11EEACCA627AC4F9AE02.roa File: B364F656C0AD11EEACCA627AC4F9AE02.roa (raw, json) Hash identifier: JBBQP0K67WdCWLZg5hsxTdVEIVYUz0SAm7vkyl5/wZ0= Subject key identifier: 70:01:12:24:C1:9D:82:73:11:19:1C:BE:14:BD:20:81:82:AD:5C:0F Certificate issuer: /CN=A917576D/serialNumber=B1E84FACFACBC0B7838561EF21E28F2FACF5DFEC Certificate serial: 0A8D Authority key identifier: B1:E8:4F:AC:FA:CB:C0:B7:83:85:61:EF:21:E2:8F:2F:AC:F5:DF:EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sehPrPrLwLeDhWHvIeKPL6z13-w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/B364F656C0AD11EEACCA627AC4F9AE02.roa Signing time: Thu 24 Jul 2025 03:30:00 +0000 ROA not before: Thu 24 Jul 2025 03:30:00 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 64079 IP address blocks: 61.29.244.0/22 maxlen: 24 61.29.254.0/23 maxlen: 23 61.29.254.0/24 maxlen: 24 103.211.192.0/24 maxlen: 24 103.211.193.0/24 maxlen: 24 146.196.78.0/23 maxlen: 24 2400:9380:9265::/48 maxlen: 48 2400:9380:f000::/40 maxlen: 40 2400:9380:f100::/40 maxlen: 40 2400:9380:f200::/40 maxlen: 40 2400:9380:f300::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.crl rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sehPrPrLwLeDhWHvIeKPL6z13-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 31 Jul 2025 20:04:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2701 (0xa8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917576D, serialNumber=B1E84FACFACBC0B7838561EF21E28F2FACF5DFEC Validity Not Before: Jul 24 03:30:00 2025 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=6881a8b8-e2bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:06:58:c2:27:8e:e3:93:27:59:0a:80:c3:21: 52:9e:3b:f8:a8:d7:ff:61:9d:c8:7f:ea:ac:a1:e4: c5:dd:cb:53:44:33:38:db:48:88:0e:96:3b:d6:47: ba:72:6c:e6:a9:89:59:0d:fa:b2:d7:65:32:4f:02: 85:76:80:ff:9b:78:a8:9b:49:3f:e0:76:b8:ba:68: 15:35:fb:30:41:67:43:c0:21:c7:dc:9e:90:59:6a: 50:70:5e:29:e2:88:6e:6e:e6:72:4b:8c:c5:bf:26: e9:99:f9:c4:de:37:46:28:94:5d:32:4e:18:e4:8e: f6:3a:dc:e0:07:fd:a5:c1:18:cf:bc:9d:74:f4:9f: ff:ea:47:e0:7f:6d:6e:22:6d:9c:85:e6:a7:d4:c0: 78:fb:97:23:12:58:5c:7c:cc:25:d5:76:be:be:b8: b8:1f:51:88:d4:9c:e5:20:31:8c:ed:33:22:78:6d: f2:c0:6e:9f:28:dd:2e:47:45:6c:1d:93:cd:49:a9: 92:62:9f:1a:1c:68:ed:8f:94:03:d0:94:5f:57:ac: 9b:4d:26:72:17:d7:d1:89:16:70:62:ed:24:cc:53: 44:25:3e:d1:d9:6a:85:7e:c5:e7:5c:57:fa:72:89: 97:bc:f9:34:b2:d2:76:bf:62:83:23:fd:bd:67:ec: e3:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:01:12:24:C1:9D:82:73:11:19:1C:BE:14:BD:20:81:82:AD:5C:0F X509v3 Authority Key Identifier: keyid:B1:E8:4F:AC:FA:CB:C0:B7:83:85:61:EF:21:E2:8F:2F:AC:F5:DF:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sehPrPrLwLeDhWHvIeKPL6z13-w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/B364F656C0AD11EEACCA627AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.29.244.0/22 61.29.254.0/23 103.211.192.0/23 146.196.78.0/23 IPv6: 2400:9380:9265::/48 2400:9380:f000::/38 Signature Algorithm: sha256WithRSAEncryption 47:c7:d5:fe:c0:c0:3a:89:67:7d:59:d8:9b:e6:ff:ce:b9:26: 49:c9:f3:17:88:ed:61:18:2d:59:7a:75:f2:29:ae:e1:19:97: 90:37:17:0e:74:0f:30:05:81:8d:46:89:e5:dd:05:bd:4b:92: 61:4f:8a:b1:be:3b:b0:db:00:5a:b9:a2:a0:2b:05:81:3e:e3: d7:df:83:e3:06:cb:0e:53:4b:cd:19:4c:8c:dc:9d:42:a0:a4: b4:72:da:b2:18:4c:f0:ac:74:20:fb:0f:bc:c1:aa:7b:31:fd: 28:ba:63:b9:2c:7f:ad:cc:b7:15:2b:aa:59:8e:e0:ba:72:a3: a9:03:b5:f6:b7:fa:38:85:40:39:c4:90:53:5f:74:64:bf:16: f0:e8:0a:b7:b5:30:75:a1:82:0d:46:c7:c5:47:ed:6d:4c:9b: d2:2f:3c:08:e5:84:03:4b:d0:35:dd:26:5c:ef:31:67:33:d9: 16:5a:d9:f0:ed:4e:78:f1:f2:9f:df:0a:6d:0e:dd:aa:70:4e: 4c:a8:3c:a3:d1:99:22:ad:ed:29:9c:a5:f3:8f:99:0f:02:36: b3:16:61:80:d7:98:2b:42:44:bb:4c:b6:06:eb:fc:4c:fc:7e: 9c:96:c6:0e:35:c4:97:a3:3d:50:52:48:24:72:a3:76:a7:5c: 46:b7:19:a4 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgICCo0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU3NkQxMTAvBgNVBAUTKEIxRTg0RkFDRkFDQkMwQjc4Mzg1NjFFRjIxRTI4RjJG QUNGNURGRUMwHhcNMjUwNzI0MDMzMDAwWhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODgxYThiOC1lMmJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6QZYwieO45MnWQqAwyFSnjv4qNf/YZ3If+qsoeTF3ctTRDM420iIDpY71ke6 cmzmqYlZDfqy12UyTwKFdoD/m3iom0k/4Ha4umgVNfswQWdDwCHH3J6QWWpQcF4p 4ohubuZyS4zFvybpmfnE3jdGKJRdMk4Y5I72OtzgB/2lwRjPvJ109J//6kfgf21u Im2chean1MB4+5cjElhcfMwl1Xa+vri4H1GI1JzlIDGM7TMieG3ywG6fKN0uR0Vs HZPNSamSYp8aHGjtj5QD0JRfV6ybTSZyF9fRiRZwYu0kzFNEJT7R2WqFfsXnXFf6 comXvPk0stJ2v2KDI/29Z+zjLQIDAQABo4ICwDCCArwwHQYDVR0OBBYEFHABEiTB nYJzERkcvhS9IIGCrVwPMB8GA1UdIwQYMBaAFLHoT6z6y8C3g4Vh7yHijy+s9d/s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTc2RC8zNjg3MkE1RTgy Q0QxMUVBODk1QzdCNUNDNEY5QUUwMi9zZWhQclByTHdMZURoV0h2SWVLUEw2ejEz LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NlaFByUHJMd0xlRGhXSHZJZUtQTDZ6MTMtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzU3NkQvMzY4NzJBNUU4MkNEMTFFQTg5NUM3QjVDQzRGOUFFMDIvQjM2NEY2NTZD MEFEMTFFRUFDQ0E2MjdBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwSgYIKwYBBQUHAQcBAf8E OzA5MB4EAgABMBgDBAI9HfQDBAE9Hf4DBAFn08ADBAGSxE4wFwQCAAIwEQMHACQA k4CSZQMGAiQAk4DwMA0GCSqGSIb3DQEBCwUAA4IBAQBHx9X+wMA6iWd9Wdib5v/O uSZJyfMXiO1hGC1ZenXyKa7hGZeQNxcOdA8wBYGNRonl3QW9S5JhT4qxvjuw2wBa uaKgKwWBPuPX34PjBssOU0vNGUyM3J1CoKS0ctqyGEzwrHQg+w+8wap7Mf0oumO5 LH+tzLcVK6pZjuC6cqOpA7X2t/o4hUA5xJBTX3Rkvxbw6Aq3tTB1oYINRsfFR+1t TJvSLzwI5YQDS9A13SZc7zFnM9kWWtnw7U548fKf3wptDt2qcE5MqDyj0Zkire0p nKXzj5kPAjazFmGA15grQkS7TLYG6/xM/H6clsYONcSXoz1QUkgkcqN2p1xGtxmk -----END CERTIFICATE-----Generated at Fri Jul 25 00:56:57 2025 by rpki-client