$ rpki-client -vvf rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/DFA7FACA54F711E7BFB4804BC4F9AE02.roa File: DFA7FACA54F711E7BFB4804BC4F9AE02.roa (raw, json) Hash identifier: N5Vn59/DXOfi3X7rqOdzQLvOw6/oh8X23e/dgbXYsyU= Subject key identifier: 1A:9A:17:30:DD:71:B9:A8:11:39:E3:EF:F7:D7:FE:A6:88:93:4D:55 Certificate issuer: /CN=A916AA0F/serialNumber=2559CF5C80CBFD4547203BD05168CC3649D564C4 Certificate serial: 2513 Authority key identifier: 25:59:CF:5C:80:CB:FD:45:47:20:3B:D0:51:68:CC:36:49:D5:64:C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVnPXIDL_UVHIDvQUWjMNknVZMQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/DFA7FACA54F711E7BFB4804BC4F9AE02.roa Signing time: Wed 30 Jul 2025 15:53:22 +0000 ROA not before: Wed 30 Jul 2025 15:53:22 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 134431 IP address blocks: 36.255.106.0/23 maxlen: 23 36.255.106.0/24 maxlen: 24 103.62.30.0/23 maxlen: 29 103.82.46.0/23 maxlen: 23 185.146.208.0/22 maxlen: 22 185.146.210.0/23 maxlen: 23 2407:c540::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.crl rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVnPXIDL_UVHIDvQUWjMNknVZMQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:49:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9491 (0x2513) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916AA0F, serialNumber=2559CF5C80CBFD4547203BD05168CC3649D564C4 Validity Not Before: Jul 30 15:53:22 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=688a3ff1-9403 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6c:ee:5b:67:7c:04:2b:c4:ea:70:da:c9:d4: 17:31:b3:b8:79:07:a6:b7:cf:c7:fc:2a:4b:fd:3f: 32:1a:09:80:cf:48:50:2c:47:77:cf:f6:4f:31:52: 2b:e6:68:c8:7f:98:33:a5:60:03:f5:74:51:fd:80: a5:fa:e4:94:c8:93:79:b5:87:79:a4:4a:33:fd:0e: 82:76:22:14:a9:97:df:b6:2b:35:cb:a4:b9:8f:41: 2f:5e:12:5e:8c:96:97:a3:9d:68:a5:9c:84:39:83: d6:83:5a:13:8e:c7:34:24:1e:3b:ec:63:52:45:22: a4:8e:54:41:9d:40:7e:22:d2:8d:05:ee:0b:4d:ae: 88:49:67:1a:b1:1b:e9:14:f6:a4:f2:9f:04:b8:6b: 5e:02:9a:d5:84:67:f2:87:3b:3f:dc:92:fd:40:db: 5f:a5:a2:bf:f3:94:f7:32:66:32:57:49:de:3c:97: 1a:a1:d1:23:c6:0d:f9:07:37:72:54:fd:d6:bb:7e: c9:18:36:e0:72:2e:fa:0f:39:cd:59:bb:a2:eb:a5: c6:73:79:dc:1e:34:be:97:4f:74:cb:67:5d:d7:68: 46:95:0b:13:6c:a9:24:f6:19:d5:35:5a:52:61:dd: 1e:71:8b:f1:b6:59:f3:fb:36:bd:6b:e4:b4:84:7c: 61:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:9A:17:30:DD:71:B9:A8:11:39:E3:EF:F7:D7:FE:A6:88:93:4D:55 X509v3 Authority Key Identifier: keyid:25:59:CF:5C:80:CB:FD:45:47:20:3B:D0:51:68:CC:36:49:D5:64:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/JVnPXIDL_UVHIDvQUWjMNknVZMQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVnPXIDL_UVHIDvQUWjMNknVZMQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AA0F/2277425235A111E5B053D927C4F9AE02/DFA7FACA54F711E7BFB4804BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 36.255.106.0/23 103.62.30.0/23 103.82.46.0/23 185.146.208.0/22 IPv6: 2407:c540::/32 Signature Algorithm: sha256WithRSAEncryption 7c:ee:4f:18:ca:c9:24:d0:3a:7c:e2:c4:27:f1:e4:2e:47:d9: 6d:b0:86:db:70:87:d3:87:c7:ee:11:ff:b3:a2:84:7c:d2:ab: f8:b4:a5:2a:63:c1:66:85:97:7b:f2:31:cd:99:b4:f0:1e:ee: 88:9a:77:5e:e7:05:f8:30:9e:94:4c:7e:33:a5:f9:75:0b:9d: ff:9f:19:6a:f7:68:0a:25:b4:83:34:9a:a8:e4:45:a6:1b:4d: 80:86:7d:a9:7c:1d:9c:01:74:0b:a1:34:64:18:b2:f6:cd:50: 3f:f1:48:bb:2e:1c:bd:bf:62:61:45:38:cc:be:bf:f3:41:5e: ad:7a:04:3a:a4:45:a8:cf:ad:3f:ec:f2:7e:70:86:c9:2f:b5: ff:52:56:ba:9e:df:73:d7:09:a2:c9:0f:f4:a5:4f:aa:01:9c: a2:a8:5e:0c:ae:60:a1:f9:31:52:77:bf:78:8e:da:df:f2:f8: 1f:7f:15:d3:b4:dc:f3:ad:97:27:ab:8e:ec:52:4b:7c:b6:24: d8:db:b7:98:ff:ec:8b:cf:1b:60:98:7d:ab:94:d0:c4:f0:59: bc:92:60:51:4f:6d:38:75:00:3e:5e:a4:ec:de:19:be:ef:b1: 4b:a9:d5:ba:1f:cc:b4:b9:f8:ae:e9:a5:99:a0:93:f2:49:50: 80:28:91:12 -----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgICJRMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkFBMEYxMTAvBgNVBAUTKDI1NTlDRjVDODBDQkZENDU0NzIwM0JEMDUxNjhDQzM2 NDlENTY0QzQwHhcNMjUwNzMwMTU1MzIyWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODhhM2ZmMS05NDAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvGzuW2d8BCvE6nDaydQXMbO4eQemt8/H/CpL/T8yGgmAz0hQLEd3z/ZPMVIr 5mjIf5gzpWAD9XRR/YCl+uSUyJN5tYd5pEoz/Q6CdiIUqZfftis1y6S5j0EvXhJe jJaXo51opZyEOYPWg1oTjsc0JB477GNSRSKkjlRBnUB+ItKNBe4LTa6ISWcasRvp FPak8p8EuGteAprVhGfyhzs/3JL9QNtfpaK/85T3MmYyV0nePJcaodEjxg35Bzdy VP3Wu37JGDbgci76DznNWbui66XGc3ncHjS+l090y2dd12hGlQsTbKkk9hnVNVpS Yd0ecYvxtlnz+za9a+S0hHxhRQIDAQABo4ICtjCCArIwHQYDVR0OBBYEFBqaFzDd cbmoETnj7/fX/qaIk01VMB8GA1UdIwQYMBaAFCVZz1yAy/1FRyA70FFozDZJ1WTE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QUEwRi8yMjc3NDI1MjM1 QTExMUU1QjA1M0Q5MjdDNEY5QUUwMi9KVm5QWElETF9VVkhJRHZRVVdqTU5rblZa TVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pWblBYSURMX1VWSElEdlFVV2pNTmtuVlpNUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkFBMEYvMjI3NzQyNTIzNUExMTFFNUIwNTNEOTI3QzRGOUFFMDIvREZBN0ZBQ0E1 NEY3MTFFN0JGQjQ4MDRCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQAYIKwYBBQUHAQcBAf8E MTAvMB4EAgABMBgDBAEk/2oDBAFnPh4DBAFnUi4DBAK5ktAwDQQCAAIwBwMFACQH xUAwDQYJKoZIhvcNAQELBQADggEBAHzuTxjKySTQOnzixCfx5C5H2W2whttwh9OH x+4R/7OihHzSq/i0pSpjwWaFl3vyMc2ZtPAe7oiad17nBfgwnpRMfjOl+XULnf+f GWr3aAoltIM0mqjkRaYbTYCGfal8HZwBdAuhNGQYsvbNUD/xSLsuHL2/YmFFOMy+ v/NBXq16BDqkRajPrT/s8n5whskvtf9SVrqe33PXCaLJD/SlT6oBnKKoXgyuYKH5 MVJ3v3iO2t/y+B9/FdO03POtlyerjuxSS3y2JNjbt5j/7IvPG2CYfauU0MTwWbyS YFFPbTh1AD5epOzeGb7vsUup1bofzLS5+K7ppZmgk/JJUIAokRI= -----END CERTIFICATE-----Generated at Wed Nov 5 11:55:56 2025 by rpki-client