$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/696ECAD4881311F0BDB4B016C4F9AE02.roa File: 696ECAD4881311F0BDB4B016C4F9AE02.roa (raw, json) Hash identifier: WOqG+5tSWG84qPrc5s5ituMYLAvkj7e0xswpxjmVkbQ= Subject key identifier: 80:C5:1C:1A:0E:21:B4:CB:6F:F3:DB:B4:35:1D:21:6E:FA:80:07:95 Certificate issuer: /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206 Certificate serial: 3975 Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/696ECAD4881311F0BDB4B016C4F9AE02.roa Signing time: Tue 02 Sep 2025 15:42:20 +0000 ROA not before: Tue 02 Sep 2025 15:42:20 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 135660 IP address blocks: 111.88.77.0/24 maxlen: 24 117.102.0.0/24 maxlen: 24 117.102.1.0/24 maxlen: 24 117.102.2.0/24 maxlen: 24 117.102.3.0/24 maxlen: 24 117.102.4.0/24 maxlen: 24 117.102.5.0/24 maxlen: 24 117.102.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 14:31:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14709 (0x3975) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206 Validity Not Before: Sep 2 15:42:20 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=68b7105c-84cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:81:40:e8:01:06:b5:72:5b:10:a6:a8:d0:48: d6:f5:ef:9a:18:0d:3e:d6:d8:00:04:48:8d:13:f7: 46:80:27:da:8f:fe:19:33:97:ea:42:b1:62:21:c1: d9:7d:c8:56:37:44:44:ab:3e:50:20:3c:2b:02:74: af:a2:ee:c0:01:77:51:a6:ff:43:6a:33:6a:d0:23: 98:43:a1:ee:33:f9:57:c6:69:a1:d4:7d:ba:95:4e: 5c:64:3a:a7:39:28:d3:51:c0:10:6d:c5:ab:d4:e2: 61:a8:0c:1f:fb:fb:4b:fe:5e:5b:d7:fb:7d:34:63: bc:1f:2e:f2:75:18:e7:a4:3d:16:db:90:b8:9a:9e: cb:c8:ba:be:8f:86:b3:7d:e8:22:7d:c1:88:46:f0: 53:a9:38:30:b6:43:0d:b1:b8:f3:b5:83:d9:12:aa: 0f:e3:2c:c3:ac:06:51:0a:12:21:a5:ab:b2:1f:4e: 78:f5:05:8c:2b:3e:f2:8c:e7:dc:a2:5c:c6:7f:d4: 1d:be:e7:61:b4:3c:80:c3:87:b2:05:31:cc:1e:19: d2:95:fd:e6:18:0d:a3:df:1c:86:f4:75:77:b1:9a: a5:12:6b:8c:56:98:ba:72:5c:f7:b9:e1:27:55:f1: e5:8e:98:e8:5f:3a:1e:6b:21:08:c4:ca:85:91:d9: ca:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:C5:1C:1A:0E:21:B4:CB:6F:F3:DB:B4:35:1D:21:6E:FA:80:07:95 X509v3 Authority Key Identifier: keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/696ECAD4881311F0BDB4B016C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 111.88.77.0/24 117.102.0.0-117.102.6.255 Signature Algorithm: sha256WithRSAEncryption 94:fa:be:17:d4:b9:05:de:0b:66:31:c3:97:bc:2f:9e:6d:a3: 7c:94:fb:da:ee:4a:d8:7d:cb:24:ca:7f:f4:a9:80:20:c2:e4: 52:ae:23:79:50:99:ee:9e:a7:12:9b:89:6f:3e:58:3a:3f:c0: d3:13:4b:e4:5a:d2:83:67:18:f1:a1:17:be:3e:41:63:c3:d3: c6:95:3b:2c:98:67:75:69:c3:ab:87:ad:2e:62:34:5f:48:8b: 90:86:1b:cd:cd:5d:45:4e:df:83:cf:c4:8e:ec:a6:18:d9:43: 97:1b:94:ce:df:f2:d3:55:f3:aa:ed:55:df:9a:3c:d9:5b:86: 51:23:dd:a9:f9:8e:93:29:49:76:c5:ac:c6:22:55:2c:8c:48: 37:af:ac:19:80:29:4e:34:a0:cf:54:75:f4:8b:16:cf:74:20: dd:6e:a2:15:4a:15:81:35:a8:63:ca:a6:4b:3c:43:1f:fc:54: 86:70:f6:92:3d:17:da:07:eb:94:25:e8:c3:a1:06:96:ad:74: f5:97:98:0c:af:d2:a3:15:29:df:3f:5b:6d:69:a3:45:f0:74: 86:12:f8:4f:ee:c0:1e:b9:bb:bd:ec:4b:d7:ac:cc:b4:88:87: 13:44:89:8b:35:78:2b:a0:fb:60:eb:a2:55:a3:34:b3:60:43: 17:69:3b:26 -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgICOXUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM4M0IxMTAvBgNVBAUTKEU3NkVCMjU2QzBGQ0IwN0UyOTA3OTc4MzQzRTlBRDlE RDIxRkUyMDYwHhcNMjUwOTAyMTU0MjIwWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGI3MTA1Yy04NGNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuYFA6AEGtXJbEKao0EjW9e+aGA0+1tgABEiNE/dGgCfaj/4ZM5fqQrFiIcHZ fchWN0REqz5QIDwrAnSvou7AAXdRpv9DajNq0COYQ6HuM/lXxmmh1H26lU5cZDqn OSjTUcAQbcWr1OJhqAwf+/tL/l5b1/t9NGO8Hy7ydRjnpD0W25C4mp7LyLq+j4az fegifcGIRvBTqTgwtkMNsbjztYPZEqoP4yzDrAZRChIhpauyH0549QWMKz7yjOfc olzGf9QdvudhtDyAw4eyBTHMHhnSlf3mGA2j3xyG9HV3sZqlEmuMVpi6clz3ueEn VfHljpjoXzoeayEIxMqFkdnKswIDAQABo4ICojCCAp4wHQYDVR0OBBYEFIDFHBoO IbTLb/PbtDUdIW76gAeVMB8GA1UdIwQYMBaAFOduslbA/LB+KQeXg0PprZ3SH+IG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzgzQi9FNEUxMEI0QTFE ODgxMUUyQTAxMkNCRTEwOEIwMkNEMi81MjZ5VnNEOHNINHBCNWVEUS1tdG5kSWY0 Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzUyNnlWc0Q4c0g0cEI1ZURRLW10bmRJZjRnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkM4M0IvRTRFMTBCNEExRDg4MTFFMkEwMTJDQkUxMDhCMDJDRDIvNjk2RUNBRDQ4 ODEzMTFGMEJEQjRCMDE2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLAYIKwYBBQUHAQcBAf8E HTAbMBkEAgABMBMDBABvWE0wCwMDAXVmAwQAdWYGMA0GCSqGSIb3DQEBCwUAA4IB AQCU+r4X1LkF3gtmMcOXvC+ebaN8lPva7krYfcskyn/0qYAgwuRSriN5UJnunqcS m4lvPlg6P8DTE0vkWtKDZxjxoRe+PkFjw9PGlTssmGd1acOrh60uYjRfSIuQhhvN zV1FTt+Dz8SO7KYY2UOXG5TO3/LTVfOq7VXfmjzZW4ZRI92p+Y6TKUl2xazGIlUs jEg3r6wZgClONKDPVHX0ixbPdCDdbqIVShWBNahjyqZLPEMf/FSGcPaSPRfaB+uU JejDoQaWrXT1l5gMr9KjFSnfP1ttaaNF8HSGEvhP7sAeubu97EvXrMy0iIcTRImL NXgroPtg66JVozSzYEMXaTsm -----END CERTIFICATE-----Generated at Mon Sep 8 07:27:20 2025 by rpki-client