$ rpki-client -vvf rpki.apnic.net/member_repository/A914E070/808B4D6CBC1011EE8BEB137AC4F9AE02/5AD6391EBC1111EE92B7B02DC4F9AE02.roa File: 5AD6391EBC1111EE92B7B02DC4F9AE02.roa (raw, json) Hash identifier: pN1OWdiGw4OEkjeO/p/GHkPUsCswdzeq2aXMmLYYqcw= Subject key identifier: 69:E2:16:CA:A1:D6:62:18:7C:E8:0A:19:78:B4:78:B2:A9:36:E1:49 Certificate issuer: /CN=A914E070/serialNumber=C36CF5DE25339B91456E5CC2317248B36EA45B7D Certificate serial: 0120 Authority key identifier: C3:6C:F5:DE:25:33:9B:91:45:6E:5C:C2:31:72:48:B3:6E:A4:5B:7D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w2z13iUzm5FFblzCMXJIs26kW30.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E070/808B4D6CBC1011EE8BEB137AC4F9AE02/5AD6391EBC1111EE92B7B02DC4F9AE02.roa Signing time: Thu 31 Jul 2025 05:41:30 +0000 ROA not before: Thu 31 Jul 2025 05:41:30 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 45960 IP address blocks: 192.82.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E070/808B4D6CBC1011EE8BEB137AC4F9AE02/w2z13iUzm5FFblzCMXJIs26kW30.crl rsync://rpki.apnic.net/member_repository/A914E070/808B4D6CBC1011EE8BEB137AC4F9AE02/w2z13iUzm5FFblzCMXJIs26kW30.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w2z13iUzm5FFblzCMXJIs26kW30.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 06:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 288 (0x120) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E070, serialNumber=C36CF5DE25339B91456E5CC2317248B36EA45B7D Validity Not Before: Jul 31 05:41:30 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=688b020a-f3eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0d:ec:bf:fc:08:4e:c1:14:bb:c4:b0:64:34: 51:8c:ad:23:ae:8f:1e:1a:00:34:c1:b7:f3:a6:9b: ee:9e:18:8a:9e:2c:b0:ff:95:42:fb:38:62:a6:32: ce:1c:4c:80:bb:ed:93:48:01:28:f2:59:0a:8d:91: 12:8a:66:f7:cd:71:1b:34:40:d9:da:ca:6d:69:63: 57:53:4c:19:67:87:3d:80:36:b6:6b:e3:c4:9f:59: 15:79:58:65:8a:0b:85:82:ac:5d:ad:b1:9f:c1:23: 98:05:ec:be:13:7e:12:fc:4c:9d:ce:c5:82:71:a5: 96:10:6d:62:1e:e2:f6:fd:9b:b7:7f:21:81:dd:7d: 2a:20:51:7f:ee:0c:b4:01:1d:06:e5:d1:71:4b:12: 04:89:20:ff:85:df:55:99:79:5d:51:9a:9f:b0:dc: 19:8e:34:9a:85:27:cc:38:27:7c:30:bf:0c:42:1b: e3:5e:19:f0:a7:f8:c3:ec:96:83:2a:36:dc:1c:aa: 18:f1:ea:35:e0:db:c1:08:b8:59:09:61:52:91:b7: 91:d8:18:35:5c:88:92:95:ea:c8:96:bc:af:6e:66: 8a:54:da:bc:e6:f7:dc:e2:fd:f6:9b:f5:98:71:ff: 19:74:de:f3:cd:a4:8b:60:d5:1c:d9:4d:75:00:71: a1:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:E2:16:CA:A1:D6:62:18:7C:E8:0A:19:78:B4:78:B2:A9:36:E1:49 X509v3 Authority Key Identifier: keyid:C3:6C:F5:DE:25:33:9B:91:45:6E:5C:C2:31:72:48:B3:6E:A4:5B:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E070/808B4D6CBC1011EE8BEB137AC4F9AE02/w2z13iUzm5FFblzCMXJIs26kW30.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w2z13iUzm5FFblzCMXJIs26kW30.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E070/808B4D6CBC1011EE8BEB137AC4F9AE02/5AD6391EBC1111EE92B7B02DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 192.82.222.0/24 Signature Algorithm: sha256WithRSAEncryption a7:22:cf:0a:67:84:b7:af:31:f2:a9:14:c6:7b:01:b4:11:93: 3b:61:c8:fe:5e:8f:83:56:bc:b6:3e:4e:0a:79:5b:96:42:d6: 1d:ec:0d:a6:0c:a8:00:f6:cb:06:ca:86:52:e1:c9:3a:53:1a: 65:f4:d4:7b:5a:5c:3f:d5:80:01:f4:49:89:98:b3:cf:36:44: 41:a6:de:d6:0c:39:a2:9d:85:da:68:2a:30:63:e0:58:de:29: 13:1d:c5:03:74:15:f1:d2:4a:9c:45:62:39:55:b9:8f:71:7b: f7:49:6c:33:48:f4:02:1a:a1:83:0b:15:5c:24:e2:88:c0:b4: 31:77:5c:51:0f:7b:2a:79:d5:5a:e5:21:b5:a3:d0:9f:46:28: b9:c6:18:96:41:c2:03:97:bb:39:9d:c9:13:38:c4:b2:e0:44: 4a:7f:c1:bd:f2:61:d8:ef:80:fc:65:dc:91:6a:73:c8:19:9d: 41:b0:94:f3:af:20:03:10:35:f4:7d:6f:93:46:7a:b8:0f:23: 3d:4b:d3:f5:e4:ff:1c:e3:00:80:50:cc:cb:9a:4f:8e:f5:cd: 40:9b:04:07:6d:d0:24:7e:ec:8c:40:7c:d9:60:33:10:96:1d: aa:64:ab:ff:36:a3:08:09:00:c0:5c:7d:89:22:c1:a4:f7:03: 12:29:e6:56 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICASAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUwNzAxMTAvBgNVBAUTKEMzNkNGNURFMjUzMzlCOTE0NTZFNUNDMjMxNzI0OEIz NkVBNDVCN0QwHhcNMjUwNzMxMDU0MTMwWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODhiMDIwYS1mM2ViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtA3sv/wITsEUu8SwZDRRjK0jro8eGgA0wbfzppvunhiKniyw/5VC+zhipjLO HEyAu+2TSAEo8lkKjZESimb3zXEbNEDZ2sptaWNXU0wZZ4c9gDa2a+PEn1kVeVhl iguFgqxdrbGfwSOYBey+E34S/EydzsWCcaWWEG1iHuL2/Zu3fyGB3X0qIFF/7gy0 AR0G5dFxSxIEiSD/hd9VmXldUZqfsNwZjjSahSfMOCd8ML8MQhvjXhnwp/jD7JaD KjbcHKoY8eo14NvBCLhZCWFSkbeR2Bg1XIiSlerIlryvbmaKVNq85vfc4v32m/WY cf8ZdN7zzaSLYNUc2U11AHGhwwIDAQABo4IClTCCApEwHQYDVR0OBBYEFGniFsqh 1mIYfOgKGXi0eLKpNuFJMB8GA1UdIwQYMBaAFMNs9d4lM5uRRW5cwjFySLNupFt9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTA3MC84MDhCNEQ2Q0JD MTAxMUVFOEJFQjEzN0FDNEY5QUUwMi93MnoxM2lVem01RkZibHpDTVhKSXMyNmtX MzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3cyejEzaVV6bTVGRmJsekNNWEpJczI2a1czMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEUwNzAvODA4QjRENkNCQzEwMTFFRThCRUIxMzdBQzRGOUFFMDIvNUFENjM5MUVC QzExMTFFRTkyQjdCMDJEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADAUt4wDQYJKoZIhvcNAQELBQADggEBAKcizwpnhLevMfKp FMZ7AbQRkzthyP5ej4NWvLY+Tgp5W5ZC1h3sDaYMqAD2ywbKhlLhyTpTGmX01Hta XD/VgAH0SYmYs882REGm3tYMOaKdhdpoKjBj4FjeKRMdxQN0FfHSSpxFYjlVuY9x e/dJbDNI9AIaoYMLFVwk4ojAtDF3XFEPeyp51VrlIbWj0J9GKLnGGJZBwgOXuzmd yRM4xLLgREp/wb3yYdjvgPxl3JFqc8gZnUGwlPOvIAMQNfR9b5NGergPIz1L0/Xk /xzjAIBQzMuaT471zUCbBAdt0CR+7IxAfNlgMxCWHapkq/82owgJAMBcfYkiwaT3 AxIp5lY= -----END CERTIFICATE-----Generated at Fri Aug 1 18:23:32 2025 by rpki-client