$ rpki-client -vvf rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/2EDEA8344A5711F0BD4BC13AC4F9AE02.roa File: 2EDEA8344A5711F0BD4BC13AC4F9AE02.roa (raw, json) Hash identifier: /F/gYX/L863YX0w0vTOKFM1DOvBiDwzCSuLCvUmNqSk= Subject key identifier: 47:88:25:48:E2:13:70:DB:EB:44:4E:AE:23:95:AA:37:0C:A5:A8:65 Certificate issuer: /CN=A9120522/serialNumber=4DBFB7C0F2D8576BA508F36369198B8491C2B334 Certificate serial: 0801 Authority key identifier: 4D:BF:B7:C0:F2:D8:57:6B:A5:08:F3:63:69:19:8B:84:91:C2:B3:34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/2EDEA8344A5711F0BD4BC13AC4F9AE02.roa Signing time: Tue 26 Aug 2025 21:31:08 +0000 ROA not before: Tue 26 Aug 2025 21:31:08 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 4049 IP address blocks: 202.49.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.crl rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 21:08:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2049 (0x801) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120522, serialNumber=4DBFB7C0F2D8576BA508F36369198B8491C2B334 Validity Not Before: Aug 26 21:31:08 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68ae279b-644e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:28:ca:00:28:b3:49:59:18:b1:87:3e:c9:6e: 19:e0:64:63:1f:cd:fe:84:57:02:7c:83:27:59:47: 27:11:fa:d7:3c:b4:7a:81:2f:4b:cb:67:ff:f0:42: 60:47:82:38:b8:3e:ef:77:82:63:2f:db:7d:64:e6: af:09:0d:92:1a:b0:71:5d:bb:6e:f3:4c:0f:ad:92: 11:eb:d7:7e:4e:00:29:e3:94:e5:0f:90:8d:d4:54: 60:0b:e1:49:7c:b7:0a:44:51:98:08:4f:7e:0a:96: e4:57:03:dc:11:c0:cc:ba:00:5a:92:f5:56:6a:b6: c1:58:04:41:33:48:39:84:83:50:c7:e1:90:59:b6: 08:2c:24:91:e2:da:aa:2b:47:97:bb:e7:ec:2a:c7: 7c:3b:c6:0c:a3:c9:70:c8:8a:db:da:35:10:67:a2: 09:08:cd:93:85:b9:2f:0a:94:a0:e4:2a:85:09:d5: ec:14:41:7f:84:a6:cb:25:14:4e:38:d2:89:dc:7c: 29:0e:68:89:32:fa:e7:5a:58:7c:cc:b8:e4:c9:49: 54:f2:9a:59:66:b3:a1:90:23:ee:0a:5f:63:08:94: f7:c0:d9:ae:1c:04:96:b2:a4:b9:50:0e:aa:99:91: 0f:c2:e9:62:df:fd:4c:b7:5c:d5:be:1d:e6:61:97: e7:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:88:25:48:E2:13:70:DB:EB:44:4E:AE:23:95:AA:37:0C:A5:A8:65 X509v3 Authority Key Identifier: keyid:4D:BF:B7:C0:F2:D8:57:6B:A5:08:F3:63:69:19:8B:84:91:C2:B3:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/2EDEA8344A5711F0BD4BC13AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.49.16.0/22 Signature Algorithm: sha256WithRSAEncryption 03:0b:fa:3a:82:c9:24:03:b3:63:de:9b:a4:b8:59:ff:e3:fa: dd:0b:88:df:69:1b:ea:ae:c1:31:79:99:6e:be:58:81:ae:d8: f9:c4:31:95:07:7f:11:13:83:6a:e8:fe:aa:09:c9:85:ca:fb: 93:02:55:aa:cb:cd:f2:68:0c:01:b9:cd:fb:2c:17:38:86:7b: 05:f8:8a:f1:a1:97:07:97:58:6b:b5:56:30:f6:00:ec:9b:a6: b6:6e:be:da:0b:0f:5c:21:88:95:26:9d:ba:bb:d3:b5:db:3d: 62:13:ca:ec:ba:85:d3:af:50:52:06:2e:a2:53:e6:fa:54:df: 4d:6f:e9:17:7c:3d:e6:97:a1:13:96:39:bd:e7:32:55:8d:27: b0:e8:e6:b4:49:36:78:4a:7c:0c:84:56:cc:c8:39:da:d0:52: 90:c2:61:84:ae:2f:b1:ac:41:58:39:85:c0:96:84:00:d4:e6: e6:69:65:44:a7:be:44:13:38:fb:75:38:84:f1:7d:a8:c0:26: d5:f3:8a:70:2f:ff:e4:73:23:58:aa:cc:a8:09:e5:e5:28:46: a5:30:b5:67:4b:ff:c7:36:6a:ec:39:09:e6:56:1b:fc:45:c9: 59:27:18:e0:09:df:6c:67:54:78:3d:95:50:7d:70:64:b7:90: c5:07:fa:69 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCAEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA1MjIxMTAvBgNVBAUTKDREQkZCN0MwRjJEODU3NkJBNTA4RjM2MzY5MTk4Qjg0 OTFDMkIzMzQwHhcNMjUwODI2MjEzMTA4WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGFlMjc5Yi02NDRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ijKACizSVkYsYc+yW4Z4GRjH83+hFcCfIMnWUcnEfrXPLR6gS9Ly2f/8EJg R4I4uD7vd4JjL9t9ZOavCQ2SGrBxXbtu80wPrZIR69d+TgAp45TlD5CN1FRgC+FJ fLcKRFGYCE9+CpbkVwPcEcDMugBakvVWarbBWARBM0g5hINQx+GQWbYILCSR4tqq K0eXu+fsKsd8O8YMo8lwyIrb2jUQZ6IJCM2ThbkvCpSg5CqFCdXsFEF/hKbLJRRO ONKJ3HwpDmiJMvrnWlh8zLjkyUlU8ppZZrOhkCPuCl9jCJT3wNmuHASWsqS5UA6q mZEPwuli3/1Mt1zVvh3mYZfnSwIDAQABo4IClTCCApEwHQYDVR0OBBYEFEeIJUji E3Db60ROriOVqjcMpahlMB8GA1UdIwQYMBaAFE2/t8Dy2FdrpQjzY2kZi4SRwrM0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDUyMi8xQzNEQTNBQ0Yw QTYxMUVBOTU5RDc2NEFDNEY5QUUwMi9UYi0zd1BMWVYydWxDUE5qYVJtTGhKSENz elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RiLTN3UExZVjJ1bENQTmphUm1MaEpIQ3N6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjA1MjIvMUMzREEzQUNGMEE2MTFFQTk1OUQ3NjRBQzRGOUFFMDIvMkVERUE4MzQ0 QTU3MTFGMEJENEJDMTNBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBALKMRAwDQYJKoZIhvcNAQELBQADggEBAAML+jqCySQDs2Pe m6S4Wf/j+t0LiN9pG+quwTF5mW6+WIGu2PnEMZUHfxETg2ro/qoJyYXK+5MCVarL zfJoDAG5zfssFziGewX4ivGhlweXWGu1VjD2AOybprZuvtoLD1whiJUmnbq707Xb PWITyuy6hdOvUFIGLqJT5vpU301v6Rd8PeaXoROWOb3nMlWNJ7Do5rRJNnhKfAyE VszIOdrQUpDCYYSuL7GsQVg5hcCWhADU5uZpZUSnvkQTOPt1OITxfajAJtXzinAv /+RzI1iqzKgJ5eUoRqUwtWdL/8c2auw5CeZWG/xFyVknGOAJ32xnVHg9lVB9cGS3 kMUH+mk= -----END CERTIFICATE-----Generated at Sat Sep 6 12:51:40 2025 by rpki-client