$ rpki-client -vvf rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/5258D3D4BCE011EFAB38225AC4F9AE02.roa File: 5258D3D4BCE011EFAB38225AC4F9AE02.roa (raw, json) Hash identifier: 4oLW18xAlE3B8nPyqU3w32UG4L4+C+i7k1rNnlKSQ7s= Subject key identifier: C3:C8:1C:DF:93:4D:1B:D7:25:1E:81:7D:0A:C0:A2:79:16:9F:D3:88 Certificate issuer: /CN=A911647C/serialNumber=737E61DAA07BD83342B60C5EBAD4B1BB19BE4003 Certificate serial: 09FA Authority key identifier: 73:7E:61:DA:A0:7B:D8:33:42:B6:0C:5E:BA:D4:B1:BB:19:BE:40:03 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c35h2qB72DNCtgxeutSxuxm-QAM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/5258D3D4BCE011EFAB38225AC4F9AE02.roa Signing time: Wed 02 Jul 2025 20:29:38 +0000 ROA not before: Wed 02 Jul 2025 20:29:38 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 9269 IP address blocks: 138.19.0.0/16 maxlen: 24 165.84.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.crl rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c35h2qB72DNCtgxeutSxuxm-QAM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 20:41:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2554 (0x9fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911647C, serialNumber=737E61DAA07BD83342B60C5EBAD4B1BB19BE4003 Validity Not Before: Jul 2 20:29:38 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=686596b2-f055 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f5:a7:e9:4c:34:b4:47:2b:93:68:7c:ed:6f: 87:48:4b:f2:fa:c3:8d:68:72:cc:02:9b:c3:91:51: b4:c7:b3:37:81:30:a4:53:89:f5:a2:17:3e:4f:ee: 76:9a:fc:3f:a7:fd:8b:f3:1a:6e:ab:6e:09:4d:7f: 4b:eb:6b:3d:b2:d0:ca:c2:f7:f9:3a:93:70:1d:73: 46:bd:aa:15:de:b9:cd:e3:ee:02:67:bc:9f:72:13: a4:ec:e6:28:c4:d5:c4:f6:61:6c:c6:36:0f:39:d0: f2:a3:c2:14:2f:71:f6:dd:25:68:93:b5:c1:2a:2f: 3c:f1:0a:f8:f5:5e:95:37:00:2e:d8:19:f1:fc:54: d1:b3:f4:2b:bb:53:65:d0:07:17:d1:79:74:0c:f6: 05:f4:ac:87:7c:00:83:e8:ca:90:69:2f:d7:6b:c9: a2:39:67:65:ab:96:bf:16:16:fb:86:4b:ce:0d:19: 1b:e7:66:e0:59:d4:9a:ac:fb:f6:dc:db:83:e0:23: 05:69:a9:7b:2a:8f:63:a6:5d:1e:21:b0:44:4a:17: 5d:ba:2f:7a:2d:36:64:d8:49:c4:f4:71:79:28:a4: 6e:fb:cf:21:19:42:15:c2:86:bb:c5:93:3b:43:77: 12:0c:cd:05:56:4e:e8:4d:67:49:0b:1f:6b:4d:56: 0a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:C8:1C:DF:93:4D:1B:D7:25:1E:81:7D:0A:C0:A2:79:16:9F:D3:88 X509v3 Authority Key Identifier: keyid:73:7E:61:DA:A0:7B:D8:33:42:B6:0C:5E:BA:D4:B1:BB:19:BE:40:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c35h2qB72DNCtgxeutSxuxm-QAM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/5258D3D4BCE011EFAB38225AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 138.19.0.0/16 165.84.128.0/18 Signature Algorithm: sha256WithRSAEncryption 2d:2d:8f:3a:c8:d2:89:27:7d:c2:17:d0:87:59:79:55:b6:78: d5:78:c7:27:2e:40:5f:34:fe:78:cb:73:0a:ba:b6:9c:73:3b: a9:aa:2c:ad:2a:99:09:eb:42:63:ba:6b:aa:6c:e3:a6:43:60: e2:11:46:44:d3:e4:84:f5:6d:98:d2:b0:ff:64:7a:8d:a2:c0: 95:d5:7b:ff:e6:4a:26:66:cf:15:64:e1:b1:51:0c:8b:ba:ca: 0a:46:3d:bd:76:57:3e:72:42:67:d2:73:4b:29:df:26:7f:e1: 50:8d:10:71:98:62:58:a1:15:0f:81:d7:93:5f:58:a3:ed:72: f0:4e:84:1f:82:36:d7:58:c0:da:d1:6b:06:b2:f5:37:8f:80: eb:1a:5d:1f:89:6a:9b:05:7f:d5:54:af:08:57:9f:b0:25:30: 1c:d0:84:e8:a6:dd:70:02:12:59:42:a9:cb:c4:24:43:37:92: 46:0a:14:6d:e9:a6:41:17:a0:70:34:ca:54:30:1f:53:be:69: 62:11:1e:0e:92:fc:f9:0f:8c:1d:7c:8c:d3:d0:87:f4:b6:db: ba:3d:99:04:9c:7a:24:41:67:5d:a4:8f:cf:7a:cd:33:18:33: d1:a6:46:38:fb:ef:a7:46:27:00:4e:94:fe:fd:4f:80:04:cd: 9c:f6:d1:2b -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgICCfowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY0N0MxMTAvBgNVBAUTKDczN0U2MURBQTA3QkQ4MzM0MkI2MEM1RUJBRDRCMUJC MTlCRTQwMDMwHhcNMjUwNzAyMjAyOTM4WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODY1OTZiMi1mMDU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw/Wn6Uw0tEcrk2h87W+HSEvy+sONaHLMApvDkVG0x7M3gTCkU4n1ohc+T+52 mvw/p/2L8xpuq24JTX9L62s9stDKwvf5OpNwHXNGvaoV3rnN4+4CZ7yfchOk7OYo xNXE9mFsxjYPOdDyo8IUL3H23SVok7XBKi888Qr49V6VNwAu2Bnx/FTRs/Qru1Nl 0AcX0Xl0DPYF9KyHfACD6MqQaS/Xa8miOWdlq5a/Fhb7hkvODRkb52bgWdSarPv2 3NuD4CMFaal7Ko9jpl0eIbBEShddui96LTZk2EnE9HF5KKRu+88hGUIVwoa7xZM7 Q3cSDM0FVk7oTWdJCx9rTVYKlQIDAQABo4ICmjCCApYwHQYDVR0OBBYEFMPIHN+T TRvXJR6BfQrAonkWn9OIMB8GA1UdIwQYMBaAFHN+Ydqge9gzQrYMXrrUsbsZvkAD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjQ3Qy8zQjFDREZCQzg1 MTMxMUVBQUEwQjBBN0ZDNEY5QUUwMi9jMzVoMnFCNzJETkN0Z3hldXRTeHV4bS1R QU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2MzNWgycUI3MkROQ3RneGV1dFN4dXhtLVFBTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTY0N0MvM0IxQ0RGQkM4NTEzMTFFQUFBMEIwQTdGQzRGOUFFMDIvNTI1OEQzRDRC Q0UwMTFFRkFCMzgyMjVBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJAYIKwYBBQUHAQcBAf8E FTATMBEEAgABMAsDAwCKEwMEBqVUgDANBgkqhkiG9w0BAQsFAAOCAQEALS2POsjS iSd9whfQh1l5VbZ41XjHJy5AXzT+eMtzCrq2nHM7qaosrSqZCetCY7prqmzjpkNg 4hFGRNPkhPVtmNKw/2R6jaLAldV7/+ZKJmbPFWThsVEMi7rKCkY9vXZXPnJCZ9Jz SynfJn/hUI0QcZhiWKEVD4HXk19Yo+1y8E6EH4I211jA2tFrBrL1N4+A6xpdH4lq mwV/1VSvCFefsCUwHNCE6KbdcAISWUKpy8QkQzeSRgoUbemmQRegcDTKVDAfU75p YhEeDpL8+Q+MHXyM09CH9Lbbuj2ZBJx6JEFnXaSPz3rNMxgz0aZGOPvvp0YnAE6U /v1PgATNnPbRKw== -----END CERTIFICATE-----Generated at Wed Oct 22 11:53:35 2025 by rpki-client