$ rpki-client -vvf rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/CC3E7A3A30E111F09B76D311C4F9AE02.roa File: CC3E7A3A30E111F09B76D311C4F9AE02.roa (raw, json) Hash identifier: qvmxAIblo8LoVtJQCEVB0mOCUBhb2PQ/53hCphSqwWE= Subject key identifier: 18:8B:D8:9B:E0:49:79:E4:FA:69:9F:46:FC:F1:0F:6E:3D:4F:60:73 Certificate issuer: /CN=A911DFC9/serialNumber=7665E2835D160085E31EC245222D4B2F7E484409 Certificate serial: 0D Authority key identifier: 76:65:E2:83:5D:16:00:85:E3:1E:C2:45:22:2D:4B:2F:7E:48:44:09 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dmXig10WAIXjHsJFIi1LL35IRAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/CC3E7A3A30E111F09B76D311C4F9AE02.roa Signing time: Wed 14 May 2025 16:38:00 +0000 ROA not before: Wed 14 May 2025 16:38:00 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 40779 IP address blocks: 165.99.42.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.crl rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dmXig10WAIXjHsJFIi1LL35IRAk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 07:29:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DFC9, serialNumber=7665E2835D160085E31EC245222D4B2F7E484409 Validity Not Before: May 14 16:38:00 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=6824c6e8-9311 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:3c:d7:7d:c0:c7:54:ec:92:31:71:30:ab:ff: d2:8a:34:5e:45:a4:98:ce:da:24:6c:2b:27:38:7f: 43:08:a2:d8:7c:02:8b:30:54:76:84:cc:a9:0b:d8: db:68:62:77:eb:cf:12:27:72:ff:68:09:ec:59:b3: b9:22:b4:75:dd:c3:53:69:a8:81:7a:2d:2a:29:c9: fe:fd:e0:fc:4b:5d:79:0d:96:6c:f3:1f:08:13:c7: 6b:6a:d5:3d:98:79:02:49:68:0c:df:00:39:89:cf: 67:01:8b:71:45:ff:fa:a0:1a:2a:e7:48:52:22:3a: 72:29:d6:d5:8f:cf:d4:c0:5f:bd:a9:3e:3e:cd:a0: 1a:25:bb:a3:d2:91:c0:e0:c1:ed:7d:e2:f8:45:55: d8:4a:8e:5f:b4:4e:91:83:2e:3c:5b:27:d2:5b:a3: 25:61:9c:43:4c:4d:fb:de:ba:29:72:62:87:ba:92: fb:ea:6a:4f:51:34:2b:9a:6c:33:0e:1a:0f:37:6f: a9:c2:55:6f:0d:19:82:d7:ac:32:14:70:50:9b:23: 69:ac:35:c4:c3:cf:be:69:b5:28:35:67:49:88:0e: 27:41:dc:05:dd:cc:cf:8b:a0:4d:26:f6:db:df:27: f4:4f:9d:f1:36:c1:ee:9c:36:3b:a5:d5:ce:d0:54: e2:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:8B:D8:9B:E0:49:79:E4:FA:69:9F:46:FC:F1:0F:6E:3D:4F:60:73 X509v3 Authority Key Identifier: keyid:76:65:E2:83:5D:16:00:85:E3:1E:C2:45:22:2D:4B:2F:7E:48:44:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dmXig10WAIXjHsJFIi1LL35IRAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/CC3E7A3A30E111F09B76D311C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 165.99.42.0/23 Signature Algorithm: sha256WithRSAEncryption 7f:d0:30:78:46:2f:b5:86:8b:24:02:16:96:8f:d6:53:d8:42: 65:31:16:b2:81:8e:a5:c9:cb:a1:35:1d:82:a2:04:06:f8:bc: 5e:90:14:6b:18:4d:cd:5d:35:fc:2f:90:bd:cb:b4:bc:b9:be: 7e:61:05:b5:71:f5:e9:63:ba:d3:84:e9:f7:03:50:db:51:a3: 70:8d:c3:60:9f:db:f2:05:ad:86:d0:85:8f:80:14:30:ed:19: 6f:56:43:0a:16:b2:81:9e:d5:55:e6:ba:be:49:1f:25:ee:7f: 12:7d:fc:50:c1:db:9d:2e:3f:97:2c:e6:10:73:9e:dd:2c:7f: 84:5e:ce:d0:b0:75:ac:3e:8b:2d:f2:d6:45:29:5e:12:26:7e: 5a:4a:ee:9a:48:74:a9:8d:fb:2b:c0:d3:84:17:74:93:d0:8b: 7b:91:de:50:aa:40:ec:47:82:b1:7d:fe:dc:39:e7:c3:94:11: 7d:b4:be:af:85:0f:22:2d:d4:51:ac:d4:45:b1:24:07:01:56: 29:04:03:c6:75:9f:4b:e7:3f:8a:1c:a0:a2:10:35:09:aa:b4: 95:ab:db:40:46:45:0c:e4:83:78:36:23:b5:59:81:91:73:2e: 73:d7:c0:52:6e:e7:ab:5a:3b:40:59:4a:ad:80:83:f7:dc:ed: c4:25:7f:2a -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx REZDOTExMC8GA1UEBRMoNzY2NUUyODM1RDE2MDA4NUUzMUVDMjQ1MjIyRDRCMkY3 RTQ4NDQwOTAeFw0yNTA1MTQxNjM4MDBaFw0yNjA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4MjRjNmU4LTkzMTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDbPNd9wMdU7JIxcTCr/9KKNF5FpJjO2iRsKyc4f0MIoth8AoswVHaEzKkL2Nto YnfrzxIncv9oCexZs7kitHXdw1NpqIF6LSopyf794PxLXXkNlmzzHwgTx2tq1T2Y eQJJaAzfADmJz2cBi3FF//qgGirnSFIiOnIp1tWPz9TAX72pPj7NoBolu6PSkcDg we194vhFVdhKjl+0TpGDLjxbJ9JboyVhnENMTfveuilyYoe6kvvqak9RNCuabDMO Gg83b6nCVW8NGYLXrDIUcFCbI2msNcTDz75ptSg1Z0mIDidB3AXdzM+LoE0m9tvf J/RPnfE2we6cNjul1c7QVOKNAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUGIvYm+BJ eeT6aZ9G/PEPbj1PYHMwHwYDVR0jBBgwFoAUdmXig10WAIXjHsJFIi1LL35IRAkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFERkM5LzhEMzVFODJFMzAy QzExRjA4Nzc2NEEyQkM0RjlBRTAyL2RtWGlnMTBXQUlYakhzSkZJaTFMTDM1SVJB ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZG1YaWcxMFdBSVhqSHNKRklpMUxMMzVJUkFrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REZDOS84RDM1RTgyRTMwMkMxMUYwODc3NjRBMkJDNEY5QUUwMi9DQzNFN0EzQTMw RTExMUYwOUI3NkQzMTFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaVjKjANBgkqhkiG9w0BAQsFAAOCAQEAf9AweEYvtYaLJAIW lo/WU9hCZTEWsoGOpcnLoTUdgqIEBvi8XpAUaxhNzV01/C+Qvcu0vLm+fmEFtXH1 6WO604Tp9wNQ21GjcI3DYJ/b8gWthtCFj4AUMO0Zb1ZDChaygZ7VVea6vkkfJe5/ En38UMHbnS4/lyzmEHOe3Sx/hF7O0LB1rD6LLfLWRSleEiZ+Wkrumkh0qY37K8DT hBd0k9CLe5HeUKpA7EeCsX3+3Dnnw5QRfbS+r4UPIi3UUazURbEkBwFWKQQDxnWf S+c/ihygohA1Caq0lavbQEZFDOSDeDYjtVmBkXMuc9fAUm7nq1o7QFlKrYCD99zt xCV/Kg== -----END CERTIFICATE-----Generated at Thu Jun 5 18:20:44 2025 by rpki-client