$ rpki-client -vvf rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/29BE072046FF11EF9A76C461C4F9AE02.roa File: 29BE072046FF11EF9A76C461C4F9AE02.roa (raw, json) Hash identifier: Z8zcoQtFS3z9ZE1TqMKGoB34rHpti60MXfkV1lqD5Ws= Subject key identifier: 77:65:D2:2C:EF:02:C8:22:41:D8:F8:09:FB:7B:A3:40:17:D5:5B:1A Certificate issuer: /CN=A915BCB1/serialNumber=072CDF651B312CAFBDB049A33569FEA6EF6C9517 Certificate serial: 0915 Authority key identifier: 07:2C:DF:65:1B:31:2C:AF:BD:B0:49:A3:35:69:FE:A6:EF:6C:95:17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/29BE072046FF11EF9A76C461C4F9AE02.roa Signing time: Tue 02 Sep 2025 21:11:32 +0000 ROA not before: Tue 02 Sep 2025 21:11:32 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 139468 IP address blocks: 45.116.134.0/23 maxlen: 23 45.116.134.0/24 maxlen: 24 103.9.94.0/23 maxlen: 23 103.28.28.0/22 maxlen: 22 103.37.132.0/22 maxlen: 22 103.37.134.0/23 maxlen: 23 103.240.12.0/22 maxlen: 22 103.240.13.0/24 maxlen: 24 103.245.4.0/22 maxlen: 22 103.245.4.0/23 maxlen: 23 103.245.7.0/24 maxlen: 24 2405:9e40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.crl rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Sep 2025 20:37:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2325 (0x915) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BCB1, serialNumber=072CDF651B312CAFBDB049A33569FEA6EF6C9517 Validity Not Before: Sep 2 21:11:32 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68b75d84-070b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f9:b0:43:73:4f:95:b9:fb:e5:e9:c4:f3:5a: 23:6a:04:a0:c6:ac:b8:0a:20:f2:70:6d:0e:0b:e1: 4b:49:4b:72:29:3a:ff:04:42:1c:66:9a:38:f8:89: dd:ab:74:5d:a8:7f:10:c3:06:43:79:d4:e2:2d:7d: 3f:07:8c:62:8e:96:15:c1:e3:7d:43:ef:0a:19:52: 51:35:5e:da:2d:ff:e2:ef:15:7b:61:d1:5d:47:a5: 1d:c6:34:73:e6:3e:5a:fe:02:76:a6:95:c4:10:a9: b6:96:8d:ff:e0:91:77:c1:e1:2a:40:52:2d:a1:bc: 43:31:92:a8:ff:6e:f8:f5:1a:22:84:f4:04:54:18: f2:bf:25:9e:3f:d0:4f:25:e9:c7:84:2e:5a:be:10: 96:26:cc:af:8b:a4:58:53:b0:c0:de:27:ea:da:f0: 4f:1d:a0:9b:5a:5a:93:b2:01:d6:20:0f:88:10:e5: 4b:39:ab:c4:2d:69:51:b0:c4:e3:22:f7:5b:70:a2: 45:2e:f3:33:de:73:b9:cb:56:d9:ab:1b:a9:9b:c5: 8e:b2:f3:a6:4a:ad:62:cd:78:5b:28:7e:8d:73:a3: 94:96:cf:a8:af:f7:a3:ac:8e:0a:68:e0:50:62:05: 4f:37:f5:05:55:a5:ad:64:fa:71:61:81:97:9b:50: 8d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:65:D2:2C:EF:02:C8:22:41:D8:F8:09:FB:7B:A3:40:17:D5:5B:1A X509v3 Authority Key Identifier: keyid:07:2C:DF:65:1B:31:2C:AF:BD:B0:49:A3:35:69:FE:A6:EF:6C:95:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/29BE072046FF11EF9A76C461C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.116.134.0/23 103.9.94.0/23 103.28.28.0/22 103.37.132.0/22 103.240.12.0/22 103.245.4.0/22 IPv6: 2405:9e40::/32 Signature Algorithm: sha256WithRSAEncryption 4e:7c:f4:a3:bb:19:5c:06:66:15:93:db:8c:bc:e7:f0:5e:87: 91:8f:8f:48:47:40:b7:0c:95:16:4c:cb:56:b3:46:c0:13:cb: e0:94:17:9f:91:26:1b:4e:4f:cc:0f:af:20:42:8f:c1:03:a3: b6:55:b0:2e:a3:be:39:89:71:ba:be:07:db:1a:84:88:ee:15: 8d:92:9c:b0:4b:ff:05:73:77:66:ea:95:a4:a1:dd:50:67:4c: 3a:7f:8a:af:5a:9a:fd:5d:5e:d9:db:e5:9e:5a:32:74:af:e5: 62:2e:1b:60:59:f3:ea:d7:5e:68:5f:cd:77:75:e0:2a:1f:b6: 3a:5b:9f:af:bb:62:3c:62:ae:b1:dd:a7:25:ad:f0:76:c5:09: d0:44:ba:da:48:c3:d8:19:e2:58:f1:e6:30:59:ef:87:39:72: d2:2c:76:7f:12:f8:05:e7:e8:c5:13:6e:5a:ad:96:af:71:8c: 0e:20:cc:2a:a7:3e:34:5c:8f:a4:41:57:83:5b:a2:ba:bb:dd: 7a:6f:31:75:66:dc:a0:50:e1:ac:7d:5d:81:ba:44:76:ad:44: ab:09:c5:c5:4a:d0:9a:af:ec:dd:30:a3:4c:1e:10:0c:90:fb: 27:dc:7c:f1:66:82:87:ee:d0:58:fa:00:07:75:1e:ab:c6:8b: 1d:73:44:c3 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgICCRUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJDQjExMTAvBgNVBAUTKDA3MkNERjY1MUIzMTJDQUZCREIwNDlBMzM1NjlGRUE2 RUY2Qzk1MTcwHhcNMjUwOTAyMjExMTMyWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGI3NWQ4NC0wNzBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApfmwQ3NPlbn75enE81ojagSgxqy4CiDycG0OC+FLSUtyKTr/BEIcZpo4+Ind q3RdqH8QwwZDedTiLX0/B4xijpYVweN9Q+8KGVJRNV7aLf/i7xV7YdFdR6UdxjRz 5j5a/gJ2ppXEEKm2lo3/4JF3weEqQFItobxDMZKo/2749RoihPQEVBjyvyWeP9BP JenHhC5avhCWJsyvi6RYU7DA3ifq2vBPHaCbWlqTsgHWIA+IEOVLOavELWlRsMTj IvdbcKJFLvMz3nO5y1bZqxupm8WOsvOmSq1izXhbKH6Nc6OUls+or/ejrI4KaOBQ YgVPN/UFVaWtZPpxYYGXm1CNNQIDAQABo4ICwjCCAr4wHQYDVR0OBBYEFHdl0izv AsgiQdj4Cft7o0AX1VsaMB8GA1UdIwQYMBaAFAcs32UbMSyvvbBJozVp/qbvbJUX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkNCMS9EMDBERDQ5OEJD MDIxMUVBQjhDNzkwNDhDNEY5QUUwMi9CeXpmWlJzeExLLTlzRW1qTlduLXB1OXNs UmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0J5emZaUnN4TEstOXNFbWpOV24tcHU5c2xSYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUJDQjEvRDAwREQ0OThCQzAyMTFFQUI4Qzc5MDQ4QzRGOUFFMDIvMjlCRTA3MjA0 NkZGMTFFRjlBNzZDNDYxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwTAYIKwYBBQUHAQcBAf8E PTA7MCoEAgABMCQDBAEtdIYDBAFnCV4DBAJnHBwDBAJnJYQDBAJn8AwDBAJn9QQw DQQCAAIwBwMFACQFnkAwDQYJKoZIhvcNAQELBQADggEBAE589KO7GVwGZhWT24y8 5/Beh5GPj0hHQLcMlRZMy1azRsATy+CUF5+RJhtOT8wPryBCj8EDo7ZVsC6jvjmJ cbq+B9sahIjuFY2SnLBL/wVzd2bqlaSh3VBnTDp/iq9amv1dXtnb5Z5aMnSv5WIu G2BZ8+rXXmhfzXd14Coftjpbn6+7YjxirrHdpyWt8HbFCdBEutpIw9gZ4ljx5jBZ 74c5ctIsdn8S+AXn6MUTblqtlq9xjA4gzCqnPjRcj6RBV4Nborq73XpvMXVm3KBQ 4ax9XYG6RHatRKsJxcVK0Jqv7N0wo0weEAyQ+yfcfPFmgofu0Fj6AAd1HqvGix1z RMM= -----END CERTIFICATE-----Generated at Thu Sep 11 02:10:34 2025 by rpki-client