$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/E166AF6C7DBB11E8B2F55A1CC4F9AE02.roa File: E166AF6C7DBB11E8B2F55A1CC4F9AE02.roa (raw, json) Hash identifier: 1K+9S1sR5zUWai8ex9N9n/76HNI4BPdmtDN7Tp2ZXUE= Subject key identifier: A7:FE:B1:9A:38:FA:0F:FF:34:59:06:9F:72:54:E1:F6:C4:3F:8F:5D Certificate issuer: /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C Certificate serial: 2961 Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/E166AF6C7DBB11E8B2F55A1CC4F9AE02.roa Signing time: Tue 31 Dec 2024 15:52:40 +0000 ROA not before: Tue 31 Dec 2024 15:52:40 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 132681 IP address blocks: 49.231.25.0/24 maxlen: 24 49.231.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 15:53:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10593 (0x2961) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BD54, serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C Validity Not Before: Dec 31 15:52:40 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=67741348-df26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:05:ca:02:d1:fa:e2:cf:aa:e0:d4:cf:c3:4e: 7d:18:0a:b7:7a:3e:ee:e9:6f:a3:47:07:f7:ba:a7: 1d:69:55:5d:cf:27:25:a7:07:db:be:95:be:ea:b0: 48:f6:7f:c5:fe:62:9d:a0:d1:55:90:e5:69:c7:a1: eb:1c:88:be:4c:cb:17:a7:09:51:0d:83:17:51:7a: 2e:4c:2e:ef:fe:1e:9d:c6:ed:ef:ae:70:f3:05:4c: 0d:3b:81:2c:94:07:ba:b1:04:8a:34:47:a8:06:8a: 2c:c9:8d:95:ba:2c:e9:e1:aa:65:28:e1:07:e0:70: 2b:a4:c6:80:45:68:80:03:79:9a:93:20:8a:d3:4a: b4:d9:c1:c4:5f:fc:4c:60:0b:91:73:d2:4e:56:35: 75:c5:bf:7e:83:a1:c8:1a:a3:4d:e5:af:59:82:a7: 86:e7:1d:55:97:30:a5:e4:08:71:14:99:7a:dd:2e: ce:ab:b7:85:2e:8f:ce:a5:62:d4:b5:c2:42:49:76: bc:2b:9a:69:f1:9e:af:31:80:b4:91:cf:7d:ca:1f: 81:7d:da:4a:d3:6a:c5:9c:ea:11:26:26:8c:40:b3: 7f:69:bf:0a:89:12:2c:e3:8c:95:d2:83:6a:2d:69: 02:27:4b:b3:36:53:31:73:b7:5f:6d:0d:df:2c:5b: 14:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:FE:B1:9A:38:FA:0F:FF:34:59:06:9F:72:54:E1:F6:C4:3F:8F:5D X509v3 Authority Key Identifier: keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/E166AF6C7DBB11E8B2F55A1CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.231.25.0-49.231.26.255 Signature Algorithm: sha256WithRSAEncryption 9d:91:36:d9:02:c6:8c:9b:61:c1:f6:33:10:ab:8d:88:aa:12: 32:7c:d7:b1:ac:ed:89:a8:31:53:97:d5:9f:1d:c5:28:39:a7: 7a:b6:36:57:77:da:63:2c:cd:29:47:9a:6d:35:6f:b0:b6:a4: 3e:04:47:f8:31:6d:48:37:8f:be:5f:53:22:dd:0b:83:0d:5b: 06:44:b7:57:49:29:c8:90:b2:b4:c6:42:13:91:2c:6e:7b:f8: d7:f2:be:68:88:f7:f1:b5:21:7a:9f:fc:01:ad:59:ad:3a:17: 50:b3:ac:f3:c9:fe:a6:80:9b:ae:4c:90:4f:ef:80:88:77:83: 55:c0:6e:6f:37:d0:d5:91:4d:2d:ed:24:52:0a:14:9b:82:39: 93:c1:fd:ba:cf:06:0d:c4:d7:2c:cd:98:43:2f:40:02:b8:58: 82:0c:2e:94:22:5e:ad:ed:38:5d:81:1f:81:20:50:c3:de:16: 9b:59:9f:b4:11:22:de:e6:c4:f1:43:bd:a4:b4:7b:8d:c6:8b: 8b:96:22:f0:ec:99:40:d8:ea:ba:9a:20:fd:0f:c6:8a:9d:d5: b8:20:2c:e8:a6:eb:fd:2c:47:5d:c5:51:29:32:41:f9:90:58: e7:15:6a:25:c1:f2:52:76:87:ab:62:b0:06:07:fe:87:d8:b0: 4f:0e:da:4f -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgICKWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJENTQxMTAvBgNVBAUTKEJDRkFGOEQzM0YxOEE4RDM2MDIwMjlFQkNFREUxRTM2 QUYyMDcxNUMwHhcNMjQxMjMxMTU1MjQwWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02Nzc0MTM0OC1kZjI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtQXKAtH64s+q4NTPw059GAq3ej7u6W+jRwf3uqcdaVVdzyclpwfbvpW+6rBI 9n/F/mKdoNFVkOVpx6HrHIi+TMsXpwlRDYMXUXouTC7v/h6dxu3vrnDzBUwNO4Es lAe6sQSKNEeoBoosyY2Vuizp4aplKOEH4HArpMaARWiAA3makyCK00q02cHEX/xM YAuRc9JOVjV1xb9+g6HIGqNN5a9ZgqeG5x1VlzCl5AhxFJl63S7Oq7eFLo/OpWLU tcJCSXa8K5pp8Z6vMYC0kc99yh+BfdpK02rFnOoRJiaMQLN/ab8KiRIs44yV0oNq LWkCJ0uzNlMxc7dfbQ3fLFsUIQIDAQABo4ICnTCCApkwHQYDVR0OBBYEFKf+sZo4 +g//NFkGn3JU4fbEP49dMB8GA1UdIwQYMBaAFLz6+NM/GKjTYCAp687eHjavIHFc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkQ1NC8zRTI4MUM5ODAw NDkxMUU1QjRCNjRGNjNDNEY5QUUwMi92UHI0MHo4WXFOTmdJQ25yenQ0ZU5xOGdj VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZQcjQwejhZcU5OZ0lDbnJ6dDRlTnE4Z2NWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUJENTQvM0UyODFDOTgwMDQ5MTFFNUI0QjY0RjYzQzRGOUFFMDIvRTE2NkFGNkM3 REJCMTFFOEIyRjU1QTFDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E GDAWMBQEAgABMA4wDAMEADHnGQMEADHnGjANBgkqhkiG9w0BAQsFAAOCAQEAnZE2 2QLGjJthwfYzEKuNiKoSMnzXsaztiagxU5fVnx3FKDmnerY2V3faYyzNKUeabTVv sLakPgRH+DFtSDePvl9TIt0Lgw1bBkS3V0kpyJCytMZCE5Esbnv41/K+aIj38bUh ep/8Aa1ZrToXULOs88n+poCbrkyQT++AiHeDVcBubzfQ1ZFNLe0kUgoUm4I5k8H9 us8GDcTXLM2YQy9AArhYggwulCJere04XYEfgSBQw94Wm1mftBEi3ubE8UO9pLR7 jcaLi5Yi8OyZQNjqupog/Q/Gip3VuCAs6Kbr/SxHXcVRKTJB+ZBY5xVqJcHyUnaH q2KwBgf+h9iwTw7aTw== -----END CERTIFICATE-----Generated at Fri Oct 24 06:40:07 2025 by rpki-client