$ rpki-client -vvf rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/0A6FBB5C152811EE8E31B969C4F9AE02.roa File: 0A6FBB5C152811EE8E31B969C4F9AE02.roa (raw, json) Hash identifier: 5I4mkuzTRCcZxX7UvwwKVbi9k7/9Psr2bqSOu77xZws= Subject key identifier: C6:CC:B9:0F:4D:B0:3C:C9:20:49:87:E5:9B:19:6E:C2:EA:24:15:7B Certificate issuer: /CN=A912FC73/serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC Certificate serial: 04AF Authority key identifier: CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/0A6FBB5C152811EE8E31B969C4F9AE02.roa Signing time: Wed 03 Sep 2025 13:08:22 +0000 ROA not before: Wed 03 Sep 2025 13:08:22 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 45461 IP address blocks: 113.20.32.0/21 maxlen: 24 113.20.47.0/24 maxlen: 24 223.29.128.0/19 maxlen: 19 223.29.160.0/21 maxlen: 24 2403:200::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 01:03:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1199 (0x4af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FC73, serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC Validity Not Before: Sep 3 13:08:22 2025 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=68b83dc5-2660 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:86:8a:8c:03:24:e4:f7:42:93:2a:a4:04:30: ae:40:27:a2:23:ef:c1:42:82:41:c8:56:af:7d:6b: 0e:ee:dd:0b:2f:13:0e:b7:a3:a7:d6:25:e8:62:d3: 12:01:98:8b:70:81:06:ac:b1:58:24:32:4e:04:8a: cc:8d:3e:24:3c:c3:8e:47:b8:f8:09:bd:44:48:17: b2:50:7d:22:3f:ff:8a:3f:90:6e:c1:e4:81:47:53: af:5a:9b:67:79:a2:73:38:e2:2f:7f:0a:90:d8:65: 94:b4:91:28:c2:ea:f5:a8:ae:c1:02:9c:0e:8e:54: 8c:33:0f:67:af:3d:b9:09:02:71:c3:16:3d:4d:d6: af:90:f7:8f:99:3b:e7:49:fb:d2:d2:ba:f9:84:d5: cb:61:04:77:0b:a0:89:ed:be:b6:dc:5a:16:c2:9f: f4:0b:63:23:61:4e:05:a6:31:d4:41:66:26:e1:c7: c2:f4:a9:39:bc:2d:5f:c1:91:55:cd:b1:18:e0:d4: 79:08:bf:30:6a:0c:3f:77:90:62:58:16:b7:c7:a8: 00:2f:2c:63:4f:95:0b:75:81:b9:a5:fc:f9:f2:57: 32:60:ac:f1:50:56:e5:9b:e5:63:4a:3b:de:50:81: d3:23:4f:c9:67:ae:03:de:50:30:c1:ec:c6:f8:1c: 43:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:CC:B9:0F:4D:B0:3C:C9:20:49:87:E5:9B:19:6E:C2:EA:24:15:7B X509v3 Authority Key Identifier: keyid:CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/0A6FBB5C152811EE8E31B969C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 113.20.32.0/21 113.20.47.0/24 223.29.128.0-223.29.167.255 IPv6: 2403:200::/32 Signature Algorithm: sha256WithRSAEncryption 70:c2:c6:0a:28:92:7c:5b:a0:f1:f0:4d:10:ee:8b:c0:ec:35: d9:b5:d6:c0:4a:d8:62:01:b7:d9:4a:8a:45:2e:71:a6:e9:7a: 44:90:65:e4:ff:d0:3f:9b:c8:48:17:b7:83:a9:c4:cd:43:16: 52:6a:e6:2a:78:9c:22:26:ec:38:8b:45:8a:a4:07:45:31:38: 8b:3f:ce:b0:89:15:3b:be:5d:0f:81:1f:a9:70:72:84:f9:1d: f5:32:61:00:f5:05:c1:90:bd:ee:d7:23:b9:d5:7f:ca:bc:72: 7e:d6:36:d2:66:75:f5:58:4f:9d:0e:e3:7a:86:4e:e4:25:76: d2:0e:3e:c4:39:0b:8e:1b:db:c1:50:d6:97:89:1c:7f:55:c2: ba:56:1b:9d:5f:11:ca:27:e9:16:22:19:9e:b7:f0:c6:95:5b: dd:2c:2d:3d:5f:40:74:ba:10:06:fd:b2:bd:6e:3a:61:37:86: 13:d9:b8:32:d3:9e:9c:9b:54:9a:56:6e:64:4d:4b:2c:82:60: 06:22:b9:13:b7:bc:fa:e0:25:d1:9c:c2:a6:e3:5d:aa:9a:03: 1d:bb:cb:c0:79:2d:16:67:34:d5:ca:ba:ff:0f:26:4f:2e:03: 6d:0c:bf:5d:a3:c8:ba:2a:d6:50:91:2d:f0:a0:61:bf:b7:b7: 04:12:06:59 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgICBK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZDNzMxMTAvBgNVBAUTKENFRTQxNjAxRUVBOUY1MUIzNTI1REE1NURENEFDOTVD RUZBRjVBQkMwHhcNMjUwOTAzMTMwODIyWhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGI4M2RjNS0yNjYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu4aKjAMk5PdCkyqkBDCuQCeiI+/BQoJByFavfWsO7t0LLxMOt6On1iXoYtMS AZiLcIEGrLFYJDJOBIrMjT4kPMOOR7j4Cb1ESBeyUH0iP/+KP5BuweSBR1OvWptn eaJzOOIvfwqQ2GWUtJEowur1qK7BApwOjlSMMw9nrz25CQJxwxY9TdavkPePmTvn SfvS0rr5hNXLYQR3C6CJ7b623FoWwp/0C2MjYU4FpjHUQWYm4cfC9Kk5vC1fwZFV zbEY4NR5CL8wagw/d5BiWBa3x6gALyxjT5ULdYG5pfz58lcyYKzxUFblm+VjSjve UIHTI0/JZ64D3lAwwezG+BxD9QIDAQABo4ICuDCCArQwHQYDVR0OBBYEFMbMuQ9N sDzJIEmH5ZsZbsLqJBV7MB8GA1UdIwQYMBaAFM7kFgHuqfUbNSXaVd1KyVzvr1q8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkM3My8wMTQ0Q0RGODlG MzQxMUVDOUNFQkM2NzBDNEY5QUUwMi96dVFXQWU2cDlSczFKZHBWM1VySlhPLXZX cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p1UVdBZTZwOVJzMUpkcFYzVXJKWE8tdldydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkZDNzMvMDE0NENERjg5RjM0MTFFQzlDRUJDNjcwQzRGOUFFMDIvMEE2RkJCNUMx NTI4MTFFRThFMzFCOTY5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQgYIKwYBBQUHAQcBAf8E MzAxMCAEAgABMBoDBANxFCADBABxFC8wDAMEB98dgAMEA98doDANBAIAAjAHAwUA JAMCADANBgkqhkiG9w0BAQsFAAOCAQEAcMLGCiiSfFug8fBNEO6LwOw12bXWwErY YgG32UqKRS5xpul6RJBl5P/QP5vISBe3g6nEzUMWUmrmKnicIibsOItFiqQHRTE4 iz/OsIkVO75dD4EfqXByhPkd9TJhAPUFwZC97tcjudV/yrxyftY20mZ19VhPnQ7j eoZO5CV20g4+xDkLjhvbwVDWl4kcf1XCulYbnV8RyifpFiIZnrfwxpVb3SwtPV9A dLoQBv2yvW46YTeGE9m4MtOenJtUmlZuZE1LLIJgBiK5E7e8+uAl0ZzCpuNdqpoD HbvLwHktFmc01cq6/w8mTy4DbQy/XaPIuirWUJEt8KBhv7e3BBIGWQ== -----END CERTIFICATE-----Generated at Mon Sep 8 10:08:03 2025 by rpki-client