$ rpki-client -vvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/72DF94424A8611F08884C659C4F9AE02.roa File: 72DF94424A8611F08884C659C4F9AE02.roa (raw, json) Hash identifier: qmNY1eT8lZOzhKaaMTZ00EicG6iJpbcFbDvpSF0q2To= Subject key identifier: A9:D9:22:CD:49:C1:8F:0F:29:47:BC:31:3F:77:01:3E:DF:C0:A0:57 Certificate issuer: /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Certificate serial: 07E9 Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/72DF94424A8611F08884C659C4F9AE02.roa Signing time: Mon 16 Jun 2025 07:49:36 +0000 ROA not before: Mon 16 Jun 2025 07:49:36 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 10103 IP address blocks: 43.252.209.0/24 maxlen: 24 103.225.196.0/24 maxlen: 24 103.234.54.0/24 maxlen: 24 150.107.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 23:33:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2025 (0x7e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B412, serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Validity Not Before: Jun 16 07:49:36 2025 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=684fcc90-a4e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b3:6e:60:17:9e:72:c5:8a:06:1f:5c:ea:eb: 22:91:3f:e3:30:12:e8:d4:c8:ad:04:a4:a1:7f:78: 5f:57:68:df:71:c4:61:0b:e6:9f:dc:1c:37:64:70: a9:cb:ab:8e:e7:57:3f:8a:b2:31:36:20:62:ed:6d: 93:aa:46:74:a1:ea:f8:96:30:2a:08:cb:db:01:91: 8c:4e:9f:a7:29:f9:c9:25:97:9e:61:65:a8:4e:53: 64:fe:c0:61:25:47:99:6e:97:76:47:0f:6a:b4:54: 31:c0:e6:85:11:fd:b0:07:bb:bc:0f:e0:47:80:8d: 16:5c:ad:d8:5d:4a:68:6d:c9:b0:dd:50:a5:9e:ab: 23:bf:5f:a1:26:e3:10:a5:bd:2a:54:86:c8:bd:ac: 18:4b:df:09:0d:f6:00:c3:07:7f:d6:db:e3:ce:6c: 6f:27:db:58:d9:74:42:4d:d7:57:d5:29:20:1e:50: 71:08:30:c0:c3:c1:42:d2:5a:2d:cf:39:8c:fa:aa: b8:db:03:94:a2:a5:6a:48:45:1d:3d:2d:fb:9a:6a: cb:61:9f:1c:db:40:23:6f:b9:1e:a3:f6:bc:77:87: 6f:23:ca:dc:be:20:a1:b6:b1:e6:f3:05:e3:48:8c: c5:85:6c:93:d3:0b:15:17:a1:76:eb:45:6a:d6:c6: 65:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:D9:22:CD:49:C1:8F:0F:29:47:BC:31:3F:77:01:3E:DF:C0:A0:57 X509v3 Authority Key Identifier: keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/72DF94424A8611F08884C659C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.252.209.0/24 103.225.196.0/24 103.234.54.0/24 150.107.2.0/24 Signature Algorithm: sha256WithRSAEncryption a9:cd:b0:25:ec:2f:58:55:48:e5:21:92:05:be:40:89:70:7e: 1d:c2:f7:e9:ea:fe:92:aa:20:2d:7b:88:6c:ce:48:c6:f7:6b: 63:3d:d3:25:db:ba:43:dc:98:a8:21:0b:6f:fd:b1:4b:48:d8: 9c:72:47:b9:54:1e:6a:74:0e:03:78:9d:0e:52:3d:57:89:36: 71:86:ef:1a:f2:88:ed:5e:e9:73:29:6a:a7:5e:b3:91:94:f1: 70:a0:8b:d8:3f:79:73:e3:fb:57:51:a5:f0:16:66:84:0b:d4: 8d:5f:16:d4:cc:ea:41:d6:7e:f6:76:1b:91:d5:71:75:be:f8: 0b:ad:68:dd:e7:88:e4:cb:19:4c:b2:a5:42:38:28:85:f0:b7: be:f2:c3:94:7e:24:63:0d:6c:9b:e9:6b:33:dd:e4:fb:f8:1f: 48:82:7b:d3:9e:57:37:20:a5:75:68:48:02:be:ca:6d:73:2e: 51:e4:34:c1:42:06:2f:c9:8e:90:a3:c8:2c:b0:d7:06:cd:3a: 24:e4:77:26:6c:4e:24:ba:c8:7f:49:9d:94:b5:07:31:fc:fd: f5:ac:f6:dd:e4:1a:5a:ca:a9:33:ef:1e:0f:ee:e3:ab:84:16: c7:d9:10:72:81:b8:40:74:82:76:06:8d:a3:76:ca:9a:80:27: e0:ba:52:0b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICB+kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI0MTIxMTAvBgNVBAUTKDg3M0Q1OTVBRjU1NjlDMjAyMzlGNTNERDgwRUIxMTc3 RDgwQjA5MzQwHhcNMjUwNjE2MDc0OTM2WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODRmY2M5MC1hNGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr7NuYBeecsWKBh9c6usikT/jMBLo1MitBKShf3hfV2jfccRhC+af3Bw3ZHCp y6uO51c/irIxNiBi7W2TqkZ0oer4ljAqCMvbAZGMTp+nKfnJJZeeYWWoTlNk/sBh JUeZbpd2Rw9qtFQxwOaFEf2wB7u8D+BHgI0WXK3YXUpobcmw3VClnqsjv1+hJuMQ pb0qVIbIvawYS98JDfYAwwd/1tvjzmxvJ9tY2XRCTddX1SkgHlBxCDDAw8FC0lot zzmM+qq42wOUoqVqSEUdPS37mmrLYZ8c20Ajb7keo/a8d4dvI8rcviChtrHm8wXj SIzFhWyT0wsVF6F260Vq1sZlcwIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFKnZIs1J wY8PKUe8MT93AT7fwKBXMB8GA1UdIwQYMBaAFIc9WVr1VpwgI59T3YDrEXfYCwk0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjQxMi9DMUVBMDMzQ0Qy RUExMUVCQTIwNkIxNzhDNEY5QUUwMi9oejFaV3ZWV25DQWpuMVBkZ09zUmQ5Z0xD VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h6MVpXdlZXbkNBam4xUGRnT3NSZDlnTENUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUI0MTIvQzFFQTAzM0NEMkVBMTFFQkEyMDZCMTc4QzRGOUFFMDIvNzJERjk0NDI0 QTg2MTFGMDg4ODRDNjU5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBAAr/NEDBABn4cQDBABn6jYDBACWawIwDQYJKoZIhvcNAQEL BQADggEBAKnNsCXsL1hVSOUhkgW+QIlwfh3C9+nq/pKqIC17iGzOSMb3a2M90yXb ukPcmKghC2/9sUtI2JxyR7lUHmp0DgN4nQ5SPVeJNnGG7xryiO1e6XMpaqdes5GU 8XCgi9g/eXPj+1dRpfAWZoQL1I1fFtTM6kHWfvZ2G5HVcXW++AutaN3niOTLGUyy pUI4KIXwt77yw5R+JGMNbJvpazPd5Pv4H0iCe9OeVzcgpXVoSAK+ym1zLlHkNMFC Bi/JjpCjyCyw1wbNOiTkdyZsTiS6yH9JnZS1BzH8/fWs9t3kGlrKqTPvHg/u46uE FsfZEHKBuEB0gnYGjaN2ypqAJ+C6Ugs= -----END CERTIFICATE-----Generated at Tue Jul 1 01:24:05 2025 by rpki-client