$ rpki-client -vvf rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/D8B25C54EC2211EA84C17E26C4F9AE02.roa File: D8B25C54EC2211EA84C17E26C4F9AE02.roa (raw, json) Hash identifier: blrAgl3fjG1pjrvf4Xs1bBFsczydDh5kF9/bkGOAsSQ= Subject key identifier: C3:F0:72:63:EC:F9:AB:87:6B:B3:A8:4F:C0:C2:4E:9B:2C:3E:C0:8B Certificate issuer: /CN=A915B536/serialNumber=8210D43756654B10705D5AB3F37BF01A78B78C47 Certificate serial: 0817 Authority key identifier: 82:10:D4:37:56:65:4B:10:70:5D:5A:B3:F3:7B:F0:1A:78:B7:8C:47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/D8B25C54EC2211EA84C17E26C4F9AE02.roa Signing time: Fri 04 Apr 2025 21:34:33 +0000 ROA not before: Fri 04 Apr 2025 21:34:33 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 24049 IP address blocks: 203.119.18.0/24 maxlen: 24 2001:dd8:1b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.crl rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Nov 2025 21:27:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2071 (0x817) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B536, serialNumber=8210D43756654B10705D5AB3F37BF01A78B78C47 Validity Not Before: Apr 4 21:34:33 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=67f05069-3f63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4a:27:e0:3d:57:36:4d:3b:fa:3f:80:0f:2b: f3:c4:ba:71:f9:00:2e:0b:94:55:39:9d:3f:20:e2: 98:d8:06:9a:01:f0:35:77:a7:de:de:4f:0c:09:69: c7:ca:d7:22:47:dd:e8:4e:07:ea:1e:38:f7:ba:57: 5a:c0:a4:08:d4:fc:bb:b3:b3:18:0d:3c:ed:db:89: bb:72:d5:5d:00:63:dd:f7:40:9b:31:20:de:9c:20: 8c:c8:c0:70:f3:e7:60:e2:94:30:49:69:3f:5b:4f: 7d:e7:71:33:03:52:a1:43:61:ab:46:b7:c4:38:c1: 0d:fb:bd:e2:f6:c4:5f:8b:81:60:65:fe:15:16:82: e7:88:f8:e1:99:51:42:73:a6:6d:20:36:fd:84:95: 42:c8:a7:31:9c:37:b0:ce:32:c2:77:4b:a3:2b:d9: 6e:b0:4f:1f:0b:ae:b8:ff:cc:f5:a7:36:09:01:50: 69:57:e5:f1:a7:cb:40:b7:be:24:02:b1:f1:4b:57: 76:71:40:26:d2:9a:f4:04:0c:ad:9a:4d:b3:ff:e0: 65:b1:39:bd:79:4d:60:2c:d3:5c:24:3e:25:a9:4f: b8:ec:bc:48:5a:5b:61:cc:34:37:ba:fa:ab:1c:12: e9:28:3a:ce:c4:28:bd:28:06:a2:3f:29:e0:50:6e: b1:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:F0:72:63:EC:F9:AB:87:6B:B3:A8:4F:C0:C2:4E:9B:2C:3E:C0:8B X509v3 Authority Key Identifier: keyid:82:10:D4:37:56:65:4B:10:70:5D:5A:B3:F3:7B:F0:1A:78:B7:8C:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/D8B25C54EC2211EA84C17E26C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.119.18.0/24 IPv6: 2001:dd8:1b::/48 Signature Algorithm: sha256WithRSAEncryption a3:1b:90:63:64:a7:37:d8:56:cb:e9:ea:0e:04:80:65:90:40: 48:9c:33:6e:57:0a:57:32:b8:2a:7b:e2:40:80:4a:6d:dd:7c: 20:7a:c9:96:cb:61:95:9e:86:30:04:c7:b4:31:79:8a:96:3d: 91:4c:a2:4b:d4:18:39:b7:4d:21:16:15:10:1f:e7:9a:4d:bc: 50:bc:9b:a9:fd:e0:8e:a1:63:74:10:5d:1f:9b:dc:04:47:e8: c3:60:fa:07:6b:e5:6d:36:db:83:a3:92:87:3b:35:1f:d8:23: 65:55:55:56:52:0b:85:f6:a1:8e:d5:d0:d4:3d:eb:a8:fe:ca: f3:3d:8a:c9:e4:dc:e2:d4:ba:7c:e7:6a:33:6b:38:8b:cc:49: da:cc:b4:9f:4a:ce:63:f1:d7:b8:f7:ee:5d:b7:b7:2a:62:06: 5f:7f:86:98:b7:b6:6a:88:ff:66:4e:e7:cb:7d:db:ba:64:3b: 0e:96:c0:13:89:c7:00:21:5a:9e:70:7e:c4:34:34:38:8f:9b: 45:ae:83:18:c0:d0:53:01:5e:ee:7b:4b:f9:38:f1:70:de:c1: 4f:74:34:ba:8d:bd:09:40:cb:25:ba:a7:2a:fb:b9:1e:77:f0: 3e:d9:7b:77:79:70:29:bc:82:6c:4c:3e:38:81:d8:70:36:02: 54:3e:ef:80 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICCBcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI1MzYxMTAvBgNVBAUTKDgyMTBENDM3NTY2NTRCMTA3MDVENUFCM0YzN0JGMDFB NzhCNzhDNDcwHhcNMjUwNDA0MjEzNDMzWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2YwNTA2OS0zZjYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxEon4D1XNk07+j+ADyvzxLpx+QAuC5RVOZ0/IOKY2AaaAfA1d6fe3k8MCWnH ytciR93oTgfqHjj3uldawKQI1Py7s7MYDTzt24m7ctVdAGPd90CbMSDenCCMyMBw 8+dg4pQwSWk/W09953EzA1KhQ2GrRrfEOMEN+73i9sRfi4FgZf4VFoLniPjhmVFC c6ZtIDb9hJVCyKcxnDewzjLCd0ujK9lusE8fC664/8z1pzYJAVBpV+Xxp8tAt74k ArHxS1d2cUAm0pr0BAytmk2z/+BlsTm9eU1gLNNcJD4lqU+47LxIWlthzDQ3uvqr HBLpKDrOxCi9KAaiPyngUG6xcQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFMPwcmPs +auHa7OoT8DCTpssPsCLMB8GA1UdIwQYMBaAFIIQ1DdWZUsQcF1as/N78Bp4t4xH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjUzNi9FNEM4ODk3MkVC NzQxMUVBQkEwQTlFNDhDNEY5QUUwMi9naERVTjFabFN4QndYVnF6ODN2d0duaTNq RWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2doRFVOMVpsU3hCd1hWcXo4M3Z3R25pM2pFYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUI1MzYvRTRDODg5NzJFQjc0MTFFQUJBMEE5RTQ4QzRGOUFFMDIvRDhCMjVDNTRF QzIyMTFFQTg0QzE3RTI2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBADLdxIwDwQCAAIwCQMHACABDdgAGzANBgkqhkiG9w0BAQsF AAOCAQEAoxuQY2SnN9hWy+nqDgSAZZBASJwzblcKVzK4KnviQIBKbd18IHrJlsth lZ6GMATHtDF5ipY9kUyiS9QYObdNIRYVEB/nmk28ULybqf3gjqFjdBBdH5vcBEfo w2D6B2vlbTbbg6OShzs1H9gjZVVVVlILhfahjtXQ1D3rqP7K8z2KyeTc4tS6fOdq M2s4i8xJ2sy0n0rOY/HXuPfuXbe3KmIGX3+GmLe2aoj/Zk7ny33bumQ7DpbAE4nH ACFannB+xDQ0OI+bRa6DGMDQUwFe7ntL+TjxcN7BT3Q0uo29CUDLJbqnKvu5Hnfw Ptl7d3lwKbyCbEw+OIHYcDYCVD7vgA== -----END CERTIFICATE-----Generated at Tue Oct 28 14:21:11 2025 by rpki-client