$ rpki-client -vvf rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/C31F44C25BD211F0962D6F5BC4F9AE02.roa File: C31F44C25BD211F0962D6F5BC4F9AE02.roa (raw, json) Hash identifier: BfA3s4/uFwS/+pxJ7ydc7p+vBZQ3SLc68WxBr74xpL8= Subject key identifier: DD:1C:71:51:BE:AA:71:2F:95:3D:22:2A:CE:37:A2:B6:E3:9F:67:8D Certificate issuer: /CN=A911DF56/serialNumber=1BD6336B97868C2F54EB3D9478D39E41731D4487 Certificate serial: 02 Authority key identifier: 1B:D6:33:6B:97:86:8C:2F:54:EB:3D:94:78:D3:9E:41:73:1D:44:87 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G9Yza5eGjC9U6z2UeNOeQXMdRIc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/C31F44C25BD211F0962D6F5BC4F9AE02.roa Signing time: Tue 08 Jul 2025 08:08:42 +0000 ROA not before: Tue 08 Jul 2025 08:08:42 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 152320 IP address blocks: 165.101.122.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/G9Yza5eGjC9U6z2UeNOeQXMdRIc.crl rsync://rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/G9Yza5eGjC9U6z2UeNOeQXMdRIc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G9Yza5eGjC9U6z2UeNOeQXMdRIc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 08:25:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DF56, serialNumber=1BD6336B97868C2F54EB3D9478D39E41731D4487 Validity Not Before: Jul 8 08:08:42 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=686cd20a-3997 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:98:af:4c:fd:38:7a:02:cc:32:27:a7:6a:f5: 49:93:61:09:a6:56:1a:e6:b2:e4:ed:ca:7f:d2:24: b1:41:e1:64:7a:41:7b:2d:a9:08:85:93:4c:32:fd: 33:30:ce:d9:e9:32:50:bb:96:54:d8:93:ed:dc:50: 61:f3:82:5f:b1:c7:90:4f:8f:4f:b5:2a:41:29:3d: a0:b6:e2:31:d5:10:2f:13:24:8e:03:30:9e:e8:99: f5:e1:3d:d6:5e:f2:b0:42:dc:6f:43:cf:7d:e5:54: 59:9f:ea:5e:53:15:c4:fb:a2:0a:b4:18:93:8b:bd: 34:ed:21:8c:ad:d7:37:17:a3:fb:5e:77:66:2d:5e: a0:31:6a:b2:94:ad:2e:3e:76:28:04:1d:db:e4:0f: 8f:b6:0f:3c:50:0e:7b:79:0a:e3:69:c7:ce:2a:fe: 23:37:20:c2:9f:f2:d5:2a:f5:0e:e6:30:eb:8e:ae: 7a:3a:3f:65:e5:89:b7:74:56:70:f8:73:9e:48:0d: 8a:df:ca:3e:5e:35:07:3b:b6:fd:71:03:ff:4a:b8: 3a:df:02:13:33:83:00:ec:23:77:ba:9c:f8:04:87: 11:98:18:8b:59:a5:17:d2:36:a9:be:3d:e6:53:e4: b2:f0:a0:2d:50:5b:93:82:79:88:72:15:95:01:81: d1:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:1C:71:51:BE:AA:71:2F:95:3D:22:2A:CE:37:A2:B6:E3:9F:67:8D X509v3 Authority Key Identifier: keyid:1B:D6:33:6B:97:86:8C:2F:54:EB:3D:94:78:D3:9E:41:73:1D:44:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/G9Yza5eGjC9U6z2UeNOeQXMdRIc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G9Yza5eGjC9U6z2UeNOeQXMdRIc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/C31F44C25BD211F0962D6F5BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 165.101.122.0/23 Signature Algorithm: sha256WithRSAEncryption 6a:9d:02:e7:30:46:f2:34:36:07:36:33:c0:c5:e2:e7:06:3a: ae:88:1a:83:8a:b9:71:67:a6:cb:9f:fa:6a:d8:c3:7a:ea:2b: 54:05:42:fa:f0:49:46:f9:f8:9d:48:d7:d6:5d:4f:fd:bc:64: 47:b3:da:15:04:3a:4c:af:2e:62:e1:b0:a3:e3:35:37:49:c3: ca:59:9e:26:ed:75:2b:a3:bc:82:dd:94:d1:11:ba:35:b4:38: 89:ac:59:a8:14:27:58:57:30:54:85:50:5b:1b:98:a9:2f:73: 12:77:c2:16:5f:02:ff:d3:29:e0:0a:ce:76:66:36:1b:34:e6: bf:a3:3b:d6:df:c1:f5:35:e7:d0:ae:2f:f6:e7:a5:ce:db:ca: 5f:cf:2b:c7:29:bc:ec:57:e8:dc:70:c0:cb:a3:69:81:14:5c: b3:a4:65:1e:2c:90:60:55:b7:77:ee:3d:00:01:8d:7d:d1:6f: 3f:71:00:df:5e:59:69:19:4b:25:90:d0:52:18:ed:a3:25:36: 6c:93:bc:1b:de:3f:f7:e9:c6:df:69:e9:fe:97:fd:f2:8c:2b: 21:17:c5:ec:92:0c:e8:21:80:75:71:3b:f8:2d:34:64:89:bc: d6:dc:4b:43:bf:bb:0f:00:f7:35:dc:20:38:0d:44:61:14:e2: 2f:6f:4c:66 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx REY1NjExMC8GA1UEBRMoMUJENjMzNkI5Nzg2OEMyRjU0RUIzRDk0NzhEMzlFNDE3 MzFENDQ4NzAeFw0yNTA3MDgwODA4NDJaFw0yNjEwMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4NmNkMjBhLTM5OTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLmK9M/Th6AswyJ6dq9UmTYQmmVhrmsuTtyn/SJLFB4WR6QXstqQiFk0wy/TMw ztnpMlC7llTYk+3cUGHzgl+xx5BPj0+1KkEpPaC24jHVEC8TJI4DMJ7omfXhPdZe 8rBC3G9Dz33lVFmf6l5TFcT7ogq0GJOLvTTtIYyt1zcXo/ted2YtXqAxarKUrS4+ digEHdvkD4+2DzxQDnt5CuNpx84q/iM3IMKf8tUq9Q7mMOuOrno6P2Xlibd0VnD4 c55IDYrfyj5eNQc7tv1xA/9KuDrfAhMzgwDsI3e6nPgEhxGYGItZpRfSNqm+PeZT 5LLwoC1QW5OCeYhyFZUBgdFZAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU3RxxUb6q cS+VPSIqzjeituOfZ40wHwYDVR0jBBgwFoAUG9Yza5eGjC9U6z2UeNOeQXMdRIcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFERjU2LzZENUU2QTU0NUJE MjExRjBCNzM3RDQ1QUM0RjlBRTAyL0c5WXphNWVHakM5VTZ6MlVlTk9lUVhNZFJJ Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRzlZemE1ZUdqQzlVNnoyVWVOT2VRWE1kUkljLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REY1Ni82RDVFNkE1NDVCRDIxMUYwQjczN0Q0NUFDNEY5QUUwMi9DMzFGNDRDMjVC RDIxMUYwOTYyRDZGNUJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaVlejANBgkqhkiG9w0BAQsFAAOCAQEAap0C5zBG8jQ2BzYz wMXi5wY6rogag4q5cWemy5/6atjDeuorVAVC+vBJRvn4nUjX1l1P/bxkR7PaFQQ6 TK8uYuGwo+M1N0nDylmeJu11K6O8gt2U0RG6NbQ4iaxZqBQnWFcwVIVQWxuYqS9z EnfCFl8C/9Mp4ArOdmY2GzTmv6M71t/B9TXn0K4v9uelztvKX88rxym87Ffo3HDA y6NpgRRcs6RlHiyQYFW3d+49AAGNfdFvP3EA315ZaRlLJZDQUhjtoyU2bJO8G94/ 9+nG32np/pf98owrIRfF7JIM6CGAdXE7+C00ZIm81txLQ7+7DwD3NdwgOA1EYRTi L29MZg== -----END CERTIFICATE-----Generated at Mon Jul 21 07:18:43 2025 by rpki-client