$ rpki-client -vvf rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/69FDEAC6645511EFB98C143DC4F9AE02.roa File: 69FDEAC6645511EFB98C143DC4F9AE02.roa (raw, json) Hash identifier: r61Y1na2DnCg+opz0fva/EXKcH2bwZStVIeQ3Bbr1wo= Subject key identifier: 23:38:63:84:CC:6E:00:2A:36:12:22:9A:70:7B:99:5D:31:74:EE:F3 Certificate issuer: /CN=A917E678/serialNumber=FF3341972DD8A1F6871EDE869A3A1DD92528AEB6 Certificate serial: 0D23 Authority key identifier: FF:33:41:97:2D:D8:A1:F6:87:1E:DE:86:9A:3A:1D:D9:25:28:AE:B6 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_zNBly3YofaHHt6Gmjod2SUorrY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/69FDEAC6645511EFB98C143DC4F9AE02.roa Signing time: Tue 08 Jul 2025 17:26:04 +0000 ROA not before: Tue 08 Jul 2025 17:26:04 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 141180 IP address blocks: 87.119.2.0/24 maxlen: 24 87.119.3.0/24 maxlen: 24 87.119.4.0/24 maxlen: 24 87.119.5.0/24 maxlen: 24 87.119.6.0/24 maxlen: 24 87.119.7.0/24 maxlen: 24 87.119.8.0/24 maxlen: 24 87.119.10.0/24 maxlen: 24 87.119.11.0/24 maxlen: 24 87.119.13.0/24 maxlen: 24 87.119.14.0/24 maxlen: 24 87.119.15.0/24 maxlen: 24 87.119.16.0/24 maxlen: 24 87.119.17.0/24 maxlen: 24 87.119.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.crl rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_zNBly3YofaHHt6Gmjod2SUorrY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 14:50:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3363 (0xd23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E678, serialNumber=FF3341972DD8A1F6871EDE869A3A1DD92528AEB6 Validity Not Before: Jul 8 17:26:04 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=686d54ac-d4a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:40:49:e5:b3:36:e8:21:5a:9a:7c:79:ce:6f: 2d:a0:3a:ee:7f:74:f8:61:a4:cf:b9:d4:df:70:61: 4e:ea:67:cb:a0:fe:48:d2:b3:17:97:e5:9d:49:f7: 98:4e:f8:ec:75:98:fd:23:d9:34:9e:42:d5:5b:e0: c6:a7:1e:71:1e:71:d6:cf:91:1c:6c:82:29:d3:1b: 52:b5:d2:3a:84:c2:b6:f9:23:d5:b0:a5:c4:cf:b7: 82:9b:14:d7:f6:6e:f3:6e:20:39:17:dd:e1:c1:fb: 65:8e:d7:4d:a3:9e:19:7a:d3:ce:78:de:fd:80:90: f7:9c:78:6f:59:85:a4:80:88:62:46:f7:7c:7c:ec: cb:cf:02:e1:07:54:d3:bd:9c:07:ab:a9:bb:a0:bc: 3c:fa:01:09:39:3b:85:f0:b7:2c:21:2d:ca:98:de: 47:67:61:ba:5c:66:1f:8c:39:f2:c7:70:e5:78:92: 5b:ce:ea:6c:33:b2:82:9c:c8:1a:64:bc:50:67:55: 56:06:62:43:43:49:f0:fd:bf:f6:06:f9:8d:73:c4: 54:14:6d:60:ae:48:c0:66:e0:94:68:97:03:d2:3c: 98:9e:8e:06:5c:17:8a:c1:66:5e:2c:74:a0:ef:8e: ba:46:f2:21:ff:42:ed:8e:50:45:4c:7d:3c:bb:64: bf:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:38:63:84:CC:6E:00:2A:36:12:22:9A:70:7B:99:5D:31:74:EE:F3 X509v3 Authority Key Identifier: keyid:FF:33:41:97:2D:D8:A1:F6:87:1E:DE:86:9A:3A:1D:D9:25:28:AE:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_zNBly3YofaHHt6Gmjod2SUorrY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/69FDEAC6645511EFB98C143DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 87.119.2.0-87.119.8.255 87.119.10.0/23 87.119.13.0-87.119.18.255 Signature Algorithm: sha256WithRSAEncryption 3f:73:b5:9e:69:2e:4f:1b:4f:86:51:07:f8:58:77:e3:6d:63: 87:c7:ca:a9:ec:08:ec:b8:e8:37:1b:9c:2e:73:f1:c1:32:04: 62:b9:fc:f4:cd:4b:23:b2:bf:d3:0f:1d:54:55:ff:b7:7a:f4: f8:4b:c7:5b:13:3c:f3:5a:f2:d0:fd:2c:c3:27:b8:aa:3d:57: f5:22:96:81:49:91:54:fd:5c:cc:a9:ee:77:d6:3b:2a:c3:4a: 82:78:34:7f:49:9f:2b:95:b4:5c:b2:dc:61:d1:51:51:52:db: ab:22:3f:6a:11:dc:ad:1d:3a:90:c3:d0:e8:96:20:88:e5:d4: a3:66:7a:77:cb:8b:28:d0:e0:61:9d:0e:04:62:86:cd:85:40: 8b:b8:df:e8:13:87:50:db:03:c2:2a:ec:9a:bf:1e:79:56:fc: 37:4c:1f:c1:8c:77:e5:09:cc:b5:0e:cc:9c:6e:84:b6:79:4a: b5:39:c3:04:6e:6d:1a:92:da:f2:cc:42:0b:2d:4d:f2:1e:ed: a3:c4:1e:26:a4:da:1a:42:ca:f5:c9:6f:f0:71:ea:11:3c:5b: 09:dd:48:29:89:9d:3f:b0:62:f7:0a:1d:f9:ca:2f:88:dc:47: 0c:a3:1e:23:ef:d6:cb:b2:9d:6e:31:24:8f:5c:d6:98:84:59: 4e:33:43:01 -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgICDSMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U2NzgxMTAvBgNVBAUTKEZGMzM0MTk3MkREOEExRjY4NzFFREU4NjlBM0ExREQ5 MjUyOEFFQjYwHhcNMjUwNzA4MTcyNjA0WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODZkNTRhYy1kNGEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxEBJ5bM26CFamnx5zm8toDruf3T4YaTPudTfcGFO6mfLoP5I0rMXl+WdSfeY TvjsdZj9I9k0nkLVW+DGpx5xHnHWz5EcbIIp0xtStdI6hMK2+SPVsKXEz7eCmxTX 9m7zbiA5F93hwftljtdNo54ZetPOeN79gJD3nHhvWYWkgIhiRvd8fOzLzwLhB1TT vZwHq6m7oLw8+gEJOTuF8LcsIS3KmN5HZ2G6XGYfjDnyx3DleJJbzupsM7KCnMga ZLxQZ1VWBmJDQ0nw/b/2BvmNc8RUFG1grkjAZuCUaJcD0jyYno4GXBeKwWZeLHSg 7466RvIh/0LtjlBFTH08u2S/NQIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFCM4Y4TM bgAqNhIimnB7mV0xdO7zMB8GA1UdIwQYMBaAFP8zQZct2KH2hx7ehpo6HdklKK62 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTY3OC9CRUIzMzNGQTIy NTExMUVBQjJDQjg0NjlDNEY5QUUwMi9fek5CbHkzWW9mYUhIdDZHbWpvZDJTVW9y clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL196TkJseTNZb2ZhSEh0Nkdtam9kMlNVb3JyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0U2NzgvQkVCMzMzRkEyMjUxMTFFQUIyQ0I4NDY5QzRGOUFFMDIvNjlGREVBQzY2 NDU1MTFFRkI5OEMxNDNEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOwYIKwYBBQUHAQcBAf8E LDAqMCgEAgABMCIwDAMEAVd3AgMEAFd3CAMEAVd3CjAMAwQAV3cNAwQAV3cSMA0G CSqGSIb3DQEBCwUAA4IBAQA/c7WeaS5PG0+GUQf4WHfjbWOHx8qp7AjsuOg3G5wu c/HBMgRiufz0zUsjsr/TDx1UVf+3evT4S8dbEzzzWvLQ/SzDJ7iqPVf1IpaBSZFU /VzMqe531jsqw0qCeDR/SZ8rlbRcstxh0VFRUturIj9qEdytHTqQw9DoliCI5dSj Znp3y4so0OBhnQ4EYobNhUCLuN/oE4dQ2wPCKuyavx55Vvw3TB/BjHflCcy1Dsyc boS2eUq1OcMEbm0aktryzEILLU3yHu2jxB4mpNoaQsr1yW/wceoRPFsJ3UgpiZ0/ sGL3Ch35yi+I3EcMox4j79bLsp1uMSSPXNaYhFlOM0MB -----END CERTIFICATE-----Generated at Sun Jul 20 19:03:10 2025 by rpki-client