$ rpki-client -vvf rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/A012C5E0AF7911EA869B4722C4F9AE02.roa File: A012C5E0AF7911EA869B4722C4F9AE02.roa (raw, json) Hash identifier: w2SR4epUhMFSAcQK3/dc+xj2nRxXuAifHwZUSCbmzIY= Subject key identifier: 32:56:1B:3E:BD:3A:B9:32:B0:DF:A7:79:B3:73:F6:CC:FE:42:08:E3 Certificate issuer: /CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA Certificate serial: 1F6B Authority key identifier: AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/A012C5E0AF7911EA869B4722C4F9AE02.roa Signing time: Sat 30 Aug 2025 16:35:29 +0000 ROA not before: Sat 30 Aug 2025 16:35:29 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 17638 IP address blocks: 123.151.192.0/19 maxlen: 19 123.151.210.0/24 maxlen: 24 123.151.224.0/19 maxlen: 19 218.30.175.0/24 maxlen: 24 218.30.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 16:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8043 (0x1f6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE4, serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA Validity Not Before: Aug 30 16:35:29 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68b32851-757a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:92:b7:90:d4:a4:9b:37:da:59:7b:02:4f:9e: 62:e5:86:47:c4:02:61:0d:0a:1a:0c:ab:36:cd:8d: 55:6e:75:29:56:9e:dc:78:57:4c:fa:5c:0a:de:5f: 01:de:99:2f:7e:d9:d2:8a:70:2c:5f:76:7c:23:a6: 24:6c:af:ae:d1:1e:4f:1c:d9:e6:74:9e:3c:45:8b: 9f:e2:c2:90:0a:ed:a2:93:67:05:96:7b:02:e7:83: 40:37:33:86:af:12:4c:e2:13:59:39:1f:5a:87:a4: 56:12:16:71:94:6b:10:b9:a1:cb:de:32:42:30:22: 77:8d:9c:fb:9f:3a:f1:0e:8c:b6:d1:4b:28:0f:d6: e7:dc:a1:c6:d0:90:b1:d3:c9:62:14:fe:9f:a8:bf: 86:25:10:58:77:a9:04:a4:ed:0f:89:f9:10:2c:6e: 8a:c9:af:3d:fa:04:0a:f6:2c:b0:70:42:dd:ad:7d: fc:a7:94:51:70:6a:1c:5c:a2:76:f5:f8:40:3b:ea: 7d:06:28:ec:71:e8:85:b6:a9:6b:3d:53:3a:15:d5: bb:8a:81:00:a1:85:e4:4a:a3:99:05:ac:c9:0a:f1: b5:0c:b5:de:72:f3:0e:ad:50:13:7a:32:26:91:d1: e3:f2:3e:80:52:1b:9b:41:47:ca:2b:a3:ee:62:eb: 24:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:56:1B:3E:BD:3A:B9:32:B0:DF:A7:79:B3:73:F6:CC:FE:42:08:E3 X509v3 Authority Key Identifier: keyid:AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/A012C5E0AF7911EA869B4722C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 123.151.192.0/18 218.30.175.0/24 218.30.189.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:48:ef:70:99:da:a3:a9:bc:f9:c3:25:eb:a6:93:29:f4:9c: 89:8d:d4:e5:2a:a9:3c:da:0a:36:06:3e:14:a6:36:95:66:8f: 94:37:8d:bd:18:a1:81:7f:d2:d7:97:8e:f8:f3:f1:46:2b:6a: ab:a2:3a:82:ce:ef:64:6d:03:c7:af:82:2a:01:87:57:5e:05: 14:29:bb:68:08:8f:99:bd:0c:1d:32:d3:12:c3:d1:55:4f:96: 8f:68:1f:f1:a5:75:70:b7:5b:15:7d:6d:98:67:40:a6:5f:53: b7:d3:5f:72:df:dc:36:f5:eb:c3:29:e7:bc:6d:38:13:e8:20: 86:2a:43:4b:d9:ec:7c:8a:75:95:7d:ab:ed:e2:22:e8:e5:68: 7d:18:d8:b8:11:bb:9f:78:96:ca:e4:39:a9:d9:4e:2b:e2:2a: e7:d4:cf:4a:a2:c8:07:67:08:8a:c0:6a:46:c6:26:0e:68:93: f4:bd:28:7b:ed:e7:2b:25:56:f5:c7:10:ab:cc:d0:53:13:1b: ee:45:80:ac:bb:77:95:50:b6:3f:38:04:d4:17:e7:c0:db:a2: 71:00:8a:6c:08:26:02:a6:6b:c8:56:07:56:97:e3:cb:ee:09: ce:33:d7:da:0c:5e:78:30:bf:9f:95:eb:b9:32:ca:d4:29:7d: 3d:63:18:19 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICH2swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVBRTQxMTAvBgNVBAUTKEFENTZCNjcxODdBOThCQTMxNDA4NDQwNTc5N0JEOTY1 NkU4QUM4QkEwHhcNMjUwODMwMTYzNTI5WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGIzMjg1MS03NTdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1pK3kNSkmzfaWXsCT55i5YZHxAJhDQoaDKs2zY1VbnUpVp7ceFdM+lwK3l8B 3pkvftnSinAsX3Z8I6YkbK+u0R5PHNnmdJ48RYuf4sKQCu2ik2cFlnsC54NANzOG rxJM4hNZOR9ah6RWEhZxlGsQuaHL3jJCMCJ3jZz7nzrxDoy20UsoD9bn3KHG0JCx 08liFP6fqL+GJRBYd6kEpO0PifkQLG6Kya89+gQK9iywcELdrX38p5RRcGocXKJ2 9fhAO+p9BijsceiFtqlrPVM6FdW7ioEAoYXkSqOZBazJCvG1DLXecvMOrVATejIm kdHj8j6AUhubQUfKK6PuYuskkQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFDJWGz69 OrkysN+nebNz9sz+QgjjMB8GA1UdIwQYMBaAFK1WtnGHqYujFAhEBXl72WVuisi6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUFFNC82NzUzQjhBRTI1 NzUxMUU3QUMwRDE3MkFDNEY5QUUwMi9yVmEyY1llcGk2TVVDRVFGZVh2WlpXNkt5 TG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JWYTJjWWVwaTZNVUNFUUZlWHZaWlc2S3lMby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEVBRTQvNjc1M0I4QUUyNTc1MTFFN0FDMEQxNzJBQzRGOUFFMDIvQTAxMkM1RTBB Rjc5MTFFQTg2OUI0NzIyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAZ7l8ADBADaHq8DBADaHr0wDQYJKoZIhvcNAQELBQADggEB AH1I73CZ2qOpvPnDJeumkyn0nImN1OUqqTzaCjYGPhSmNpVmj5Q3jb0YoYF/0teX jvjz8UYraquiOoLO72RtA8evgioBh1deBRQpu2gIj5m9DB0y0xLD0VVPlo9oH/Gl dXC3WxV9bZhnQKZfU7fTX3Lf3Db168Mp57xtOBPoIIYqQ0vZ7HyKdZV9q+3iIujl aH0Y2LgRu594lsrkOanZTiviKufUz0qiyAdnCIrAakbGJg5ok/S9KHvt5yslVvXH EKvM0FMTG+5FgKy7d5VQtj84BNQX58DbonEAimwIJgKma8hWB1aX48vuCc4z19oM Xngwv5+V67kyytQpfT1jGBk= -----END CERTIFICATE-----Generated at Sat Sep 6 20:16:30 2025 by rpki-client