$ rpki-client -vvf rpki.apnic.net/member_repository/A911BC62/3288C312A2E611E4A081C46DC4F9AE02/8BD42F1CDEB111EA971A1721C4F9AE02.roa File: 8BD42F1CDEB111EA971A1721C4F9AE02.roa (raw, json) Hash identifier: 0S9GAzXdX8/eY+v1QihZwNwaaUy/f0ZCSclJYlMg6j0= Subject key identifier: 9C:C1:FB:FD:89:67:BC:29:2B:4C:15:9B:1B:B4:83:B1:B0:07:5C:2B Certificate issuer: /CN=A911BC62/serialNumber=24F0C1D8E3F4A296FDCDEB235A6C483B6B2DC97A Certificate serial: 2824 Authority key identifier: 24:F0:C1:D8:E3:F4:A2:96:FD:CD:EB:23:5A:6C:48:3B:6B:2D:C9:7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPDB2OP0opb9zesjWmxIO2styXo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BC62/3288C312A2E611E4A081C46DC4F9AE02/8BD42F1CDEB111EA971A1721C4F9AE02.roa Signing time: Thu 04 Sep 2025 15:53:02 +0000 ROA not before: Thu 04 Sep 2025 15:53:02 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 45356 IP address blocks: 43.250.240.0/22 maxlen: 24 61.245.160.0/20 maxlen: 24 103.2.152.0/22 maxlen: 24 124.6.240.0/20 maxlen: 24 202.129.232.0/22 maxlen: 24 2407:c00::/32 maxlen: 34 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BC62/3288C312A2E611E4A081C46DC4F9AE02/JPDB2OP0opb9zesjWmxIO2styXo.crl rsync://rpki.apnic.net/member_repository/A911BC62/3288C312A2E611E4A081C46DC4F9AE02/JPDB2OP0opb9zesjWmxIO2styXo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPDB2OP0opb9zesjWmxIO2styXo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 15:42:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10276 (0x2824) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BC62, serialNumber=24F0C1D8E3F4A296FDCDEB235A6C483B6B2DC97A Validity Not Before: Sep 4 15:53:02 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68b9b5de-5898 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:6d:71:ee:55:88:81:ed:0e:bf:83:26:26:69: 4a:2d:ed:58:ca:38:12:b3:af:bf:ef:9c:5f:9f:a6: 5a:ab:6f:d0:c9:f2:4c:10:e1:ee:ca:1d:b2:b3:ff: 9d:06:20:be:f6:e2:c9:ad:d5:72:c5:76:93:f1:e8: 53:2e:54:87:13:84:59:5a:fd:0f:76:99:fa:38:7f: 1f:5c:d8:6d:46:fb:95:e8:6d:1e:c2:60:04:fb:45: 9f:33:13:9b:94:b8:c8:58:32:44:9f:14:71:0e:6b: 35:9b:96:8a:41:a2:95:29:d1:b2:99:26:e2:2a:5f: 5e:3f:74:f1:ac:be:67:fe:98:5d:f8:bd:73:35:17: 65:34:02:17:e6:66:1a:09:d2:3f:c5:f4:bd:d9:d8: 7f:bf:fd:12:b6:12:2d:1c:7d:c9:d8:37:d9:12:a7: 86:f5:bd:7c:b5:1f:2e:90:06:43:b7:da:27:be:b1: 2c:5f:2f:30:02:29:96:b0:c8:30:b8:7f:aa:7d:fc: ba:26:e2:14:ad:53:0b:0b:e5:68:8b:a0:a0:7d:ef: a1:4b:52:f4:1f:69:11:2b:42:57:57:6c:79:cf:ec: df:fa:6f:3e:d6:22:28:bf:29:3c:fc:cb:83:44:cc: bf:1d:7e:76:f3:ee:4e:54:c0:0b:49:ab:9b:08:a9: 8e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:C1:FB:FD:89:67:BC:29:2B:4C:15:9B:1B:B4:83:B1:B0:07:5C:2B X509v3 Authority Key Identifier: keyid:24:F0:C1:D8:E3:F4:A2:96:FD:CD:EB:23:5A:6C:48:3B:6B:2D:C9:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BC62/3288C312A2E611E4A081C46DC4F9AE02/JPDB2OP0opb9zesjWmxIO2styXo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JPDB2OP0opb9zesjWmxIO2styXo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BC62/3288C312A2E611E4A081C46DC4F9AE02/8BD42F1CDEB111EA971A1721C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.250.240.0/22 61.245.160.0/20 103.2.152.0/22 124.6.240.0/20 202.129.232.0/22 IPv6: 2407:c00::/32 Signature Algorithm: sha256WithRSAEncryption 71:fd:37:dc:9e:9d:8c:d8:4e:bb:0a:cd:02:bb:37:eb:eb:8a: ba:3a:63:56:a4:bb:05:55:d0:50:a1:b2:2b:b6:cb:f6:3e:26: 57:a7:f7:7d:27:03:81:03:e8:13:8c:33:c1:17:3d:99:7a:44: 84:10:ea:f8:22:51:ba:d8:a1:bf:9e:51:0e:cc:85:ce:15:21: 37:0a:ac:e5:3e:1b:c9:4d:b3:6b:30:4e:f3:70:e9:9b:e4:a3: f0:bb:fc:5e:45:86:e1:d7:3d:44:9c:e5:9f:d9:bc:93:75:06: 9f:1b:ec:b5:50:bd:ee:c6:bc:ee:70:03:a5:b9:5c:a9:6e:70: 8f:e9:d5:97:6d:2f:62:dd:f3:db:ea:77:bd:81:91:87:8c:0a: 8b:f2:0e:b3:1c:15:2d:59:13:ae:eb:9c:f4:f1:f5:4c:c5:1d: 31:75:57:b7:cd:f1:89:3b:26:52:c6:99:66:c7:39:7a:cf:a2: c9:e3:84:7a:4b:35:fd:0a:cf:35:35:4e:0c:14:31:82:84:c8: 96:af:00:1b:21:17:a1:38:98:57:4b:08:a0:98:0c:59:1c:6b: 3b:ca:b0:b4:be:44:d9:bc:98:ca:e7:e1:88:6b:7d:dd:ae:9c: 7d:f0:c3:fe:6f:f9:0f:ee:7a:dc:ef:75:61:a7:d1:55:77:d2: 4c:b2:b0:5c -----BEGIN CERTIFICATE----- MIIFmDCCBICgAwIBAgICKCQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJDNjIxMTAvBgNVBAUTKDI0RjBDMUQ4RTNGNEEyOTZGRENERUIyMzVBNkM0ODNC NkIyREM5N0EwHhcNMjUwOTA0MTU1MzAyWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGI5YjVkZS01ODk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA021x7lWIge0Ov4MmJmlKLe1YyjgSs6+/75xfn6Zaq2/QyfJMEOHuyh2ys/+d BiC+9uLJrdVyxXaT8ehTLlSHE4RZWv0Pdpn6OH8fXNhtRvuV6G0ewmAE+0WfMxOb lLjIWDJEnxRxDms1m5aKQaKVKdGymSbiKl9eP3TxrL5n/phd+L1zNRdlNAIX5mYa CdI/xfS92dh/v/0SthItHH3J2DfZEqeG9b18tR8ukAZDt9onvrEsXy8wAimWsMgw uH+qffy6JuIUrVMLC+Voi6Cgfe+hS1L0H2kRK0JXV2x5z+zf+m8+1iIovyk8/MuD RMy/HX528+5OVMALSaubCKmOGQIDAQABo4ICvDCCArgwHQYDVR0OBBYEFJzB+/2J Z7wpK0wVmxu0g7GwB1wrMB8GA1UdIwQYMBaAFCTwwdjj9KKW/c3rI1psSDtrLcl6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkM2Mi8zMjg4QzMxMkEy RTYxMUU0QTA4MUM0NkRDNEY5QUUwMi9KUERCMk9QMG9wYjl6ZXNqV214SU8yc3R5 WG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pQREIyT1Awb3BiOXplc2pXbXhJTzJzdHlYby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUJDNjIvMzI4OEMzMTJBMkU2MTFFNEEwODFDNDZEQzRGOUFFMDIvOEJENDJGMUNE RUIxMTFFQTk3MUExNzIxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRgYIKwYBBQUHAQcBAf8E NzA1MCQEAgABMB4DBAIr+vADBAQ99aADBAJnApgDBAR8BvADBALKgegwDQQCAAIw BwMFACQHDAAwDQYJKoZIhvcNAQELBQADggEBAHH9N9yenYzYTrsKzQK7N+vriro6 Y1akuwVV0FChsiu2y/Y+Jlen930nA4ED6BOMM8EXPZl6RIQQ6vgiUbrYob+eUQ7M hc4VITcKrOU+G8lNs2swTvNw6Zvko/C7/F5FhuHXPUSc5Z/ZvJN1Bp8b7LVQve7G vO5wA6W5XKlucI/p1ZdtL2Ld89vqd72BkYeMCovyDrMcFS1ZE67rnPTx9UzFHTF1 V7fN8Yk7JlLGmWbHOXrPosnjhHpLNf0KzzU1TgwUMYKEyJavABshF6E4mFdLCKCY DFkcazvKsLS+RNm8mMrn4Yhrfd2unH3ww/5v+Q/uetzvdWGn0VV30kyysFw= -----END CERTIFICATE-----Generated at Fri Sep 19 02:36:58 2025 by rpki-client