$ rpki-client -vvf rpki.apnic.net/member_repository/A9120AC1/3E9A4AE0309711ECB285A64BC4F9AE02/579B33AE886F11F0A02D4009C4F9AE02.roa File: 579B33AE886F11F0A02D4009C4F9AE02.roa (raw, json) Hash identifier: YP1QtoS6tJ0tfsbd9mqDdJjDX65W26gYVq3o6iBYRuU= Subject key identifier: 29:F5:08:E7:C2:46:69:4D:1B:19:37:78:C9:FE:38:07:A1:72:53:9E Certificate issuer: /CN=A9120AC1/serialNumber=E43DD233316BF0E29BA06D20DEC25DB4CC116E08 Certificate serial: 04EE Authority key identifier: E4:3D:D2:33:31:6B:F0:E2:9B:A0:6D:20:DE:C2:5D:B4:CC:11:6E:08 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5D3SMzFr8OKboG0g3sJdtMwRbgg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120AC1/3E9A4AE0309711ECB285A64BC4F9AE02/579B33AE886F11F0A02D4009C4F9AE02.roa Signing time: Wed 03 Sep 2025 02:40:24 +0000 ROA not before: Wed 03 Sep 2025 02:40:24 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 45753 IP address blocks: 69.72.80.0/21 maxlen: 21 69.72.80.0/24 maxlen: 24 69.72.81.0/24 maxlen: 24 69.72.82.0/24 maxlen: 24 69.72.83.0/24 maxlen: 24 69.72.84.0/24 maxlen: 24 69.72.85.0/24 maxlen: 24 69.72.86.0/24 maxlen: 24 69.72.87.0/24 maxlen: 24 148.66.48.0/20 maxlen: 21 148.66.48.0/21 maxlen: 24 148.66.56.0/22 maxlen: 22 148.66.56.0/23 maxlen: 24 148.66.58.0/24 maxlen: 24 148.66.59.0/24 maxlen: 24 148.66.60.0/24 maxlen: 24 148.66.61.0/24 maxlen: 24 148.66.62.0/24 maxlen: 24 148.66.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120AC1/3E9A4AE0309711ECB285A64BC4F9AE02/5D3SMzFr8OKboG0g3sJdtMwRbgg.crl rsync://rpki.apnic.net/member_repository/A9120AC1/3E9A4AE0309711ECB285A64BC4F9AE02/5D3SMzFr8OKboG0g3sJdtMwRbgg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5D3SMzFr8OKboG0g3sJdtMwRbgg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 00:41:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1262 (0x4ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120AC1, serialNumber=E43DD233316BF0E29BA06D20DEC25DB4CC116E08 Validity Not Before: Sep 3 02:40:24 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=68b7aa98-583e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:80:c8:99:57:c3:47:a9:61:5b:86:3b:64:45: 63:12:83:8c:e4:8c:38:4c:45:71:ef:3c:7f:e2:64: 8b:3e:be:57:36:f8:e8:60:41:e2:0c:df:f3:a9:db: de:3a:c3:35:bc:73:8c:f2:55:ac:be:17:51:38:72: 39:ab:85:9a:e0:3a:40:1f:01:52:90:5c:9e:3d:52: de:2f:6f:d1:98:3b:a8:80:19:42:24:76:81:a7:db: b4:f1:aa:b3:cc:82:ca:f9:68:a5:e3:12:f3:c3:9d: ea:63:44:ed:53:9b:00:9b:4b:0e:f2:cc:c6:50:9f: 0d:84:c3:fd:d5:90:cc:b2:bf:77:b1:9d:76:73:a6: 72:bf:d0:26:75:df:44:f9:b3:bc:30:66:4a:53:a7: ba:78:b0:e5:75:cc:e2:ae:b6:dc:8f:0d:57:d8:fc: 8e:48:56:dd:38:6b:51:d2:ea:52:25:e1:73:e7:2e: e9:b2:48:95:9a:24:1a:36:b1:5d:d7:d7:6c:28:64: 55:09:8d:5e:42:07:c0:34:89:20:c9:03:8c:ce:cf: 06:fe:7e:2b:f4:a1:d9:4e:11:e4:eb:e3:7e:a2:87: 4e:0f:42:35:9c:6b:86:ad:85:e2:2c:1e:cf:1c:bf: bb:c3:91:2c:35:47:63:f8:86:3f:66:f7:f7:40:43: b0:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:F5:08:E7:C2:46:69:4D:1B:19:37:78:C9:FE:38:07:A1:72:53:9E X509v3 Authority Key Identifier: keyid:E4:3D:D2:33:31:6B:F0:E2:9B:A0:6D:20:DE:C2:5D:B4:CC:11:6E:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120AC1/3E9A4AE0309711ECB285A64BC4F9AE02/5D3SMzFr8OKboG0g3sJdtMwRbgg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5D3SMzFr8OKboG0g3sJdtMwRbgg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120AC1/3E9A4AE0309711ECB285A64BC4F9AE02/579B33AE886F11F0A02D4009C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 69.72.80.0/21 148.66.48.0/20 Signature Algorithm: sha256WithRSAEncryption 0c:fe:f7:22:c9:10:b6:0d:d4:81:d7:2f:76:80:46:58:0a:a6: 99:77:ac:af:ed:b1:0f:00:af:7c:eb:01:a9:9f:32:1d:09:85: fb:18:4e:bf:10:15:6b:40:6e:34:8a:81:b7:78:3b:c0:80:b4: 35:db:37:0e:6f:ba:19:9e:c8:05:53:bd:0b:98:d5:8d:5d:e3: 52:62:3f:09:a6:1b:bc:e7:5f:50:e9:eb:e2:8b:67:1e:e9:11: 5c:b9:6e:39:91:84:51:2a:39:dd:12:be:13:51:a2:d9:50:a5: 66:fd:c2:78:a6:76:d4:18:6f:61:09:a9:ff:12:97:3c:b9:29: 70:1f:3a:d9:80:9e:bb:59:26:e1:b9:22:ff:5e:0c:de:08:c7: a4:27:9a:bb:19:cf:16:1a:f5:cc:52:78:4e:8a:42:bf:78:df: ed:9d:5b:e1:6c:e7:52:c7:0e:ab:cc:56:0e:e9:b0:43:d7:0a: 76:fd:3d:f6:9f:14:c9:b6:38:33:9b:20:a4:80:5b:43:0b:c3: bb:5e:a1:91:44:2d:b3:10:db:0e:03:03:3c:3a:5a:8b:1f:9f: 26:81:74:a9:5e:52:ec:06:21:e7:06:06:72:cb:88:56:6f:d6: 6c:d0:1c:35:fa:1c:8b:31:d8:19:fa:ae:66:cb:f1:1c:75:2b: 64:75:56:18 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBBQzExMTAvBgNVBAUTKEU0M0REMjMzMzE2QkYwRTI5QkEwNkQyMERFQzI1REI0 Q0MxMTZFMDgwHhcNMjUwOTAzMDI0MDI0WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGI3YWE5OC01ODNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvYDImVfDR6lhW4Y7ZEVjEoOM5Iw4TEVx7zx/4mSLPr5XNvjoYEHiDN/zqdve OsM1vHOM8lWsvhdROHI5q4Wa4DpAHwFSkFyePVLeL2/RmDuogBlCJHaBp9u08aqz zILK+Wil4xLzw53qY0TtU5sAm0sO8szGUJ8NhMP91ZDMsr93sZ12c6Zyv9Amdd9E +bO8MGZKU6e6eLDldczirrbcjw1X2PyOSFbdOGtR0upSJeFz5y7pskiVmiQaNrFd 19dsKGRVCY1eQgfANIkgyQOMzs8G/n4r9KHZThHk6+N+oodOD0I1nGuGrYXiLB7P HL+7w5EsNUdj+IY/Zvf3QEOwJQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFCn1COfC RmlNGxk3eMn+OAehclOeMB8GA1UdIwQYMBaAFOQ90jMxa/Dim6BtIN7CXbTMEW4I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEFDMS8zRTlBNEFFMDMw OTcxMUVDQjI4NUE2NEJDNEY5QUUwMi81RDNTTXpGcjhPS2JvRzBnM3NKZHRNd1Ji Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzVEM1NNekZyOE9LYm9HMGczc0pkdE13UmJnZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjBBQzEvM0U5QTRBRTAzMDk3MTFFQ0IyODVBNjRCQzRGOUFFMDIvNTc5QjMzQUU4 ODZGMTFGMEEwMkQ0MDA5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBANFSFADBASUQjAwDQYJKoZIhvcNAQELBQADggEBAAz+9yLJ ELYN1IHXL3aARlgKppl3rK/tsQ8Ar3zrAamfMh0JhfsYTr8QFWtAbjSKgbd4O8CA tDXbNw5vuhmeyAVTvQuY1Y1d41JiPwmmG7znX1Dp6+KLZx7pEVy5bjmRhFEqOd0S vhNRotlQpWb9wnimdtQYb2EJqf8Slzy5KXAfOtmAnrtZJuG5Iv9eDN4Ix6QnmrsZ zxYa9cxSeE6KQr943+2dW+Fs51LHDqvMVg7psEPXCnb9PfafFMm2ODObIKSAW0ML w7teoZFELbMQ2w4DAzw6WosfnyaBdKleUuwGIecGBnLLiFZv1mzQHDX6HIsx2Bn6 rmbL8Rx1K2R1Vhg= -----END CERTIFICATE-----Generated at Tue Oct 28 02:45:19 2025 by rpki-client