$ rpki-client -vvf rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/E265728A877911EA9E28DF0BC4F9AE02.roa File: E265728A877911EA9E28DF0BC4F9AE02.roa (raw, json) Hash identifier: s5FxAXvHyHM95JkI0bpkB+0cESUkZdTctd6oGAI/wW8= Subject key identifier: 3E:5C:36:19:49:32:C6:35:6C:4E:1B:60:48:F2:0B:78:20:19:3E:6B Certificate issuer: /CN=A916D23A/serialNumber=F87227C6653D69BAEE2E9948842CEB0B4049E786 Certificate serial: 0B09 Authority key identifier: F8:72:27:C6:65:3D:69:BA:EE:2E:99:48:84:2C:EB:0B:40:49:E7:86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HInxmU9abruLplIhCzrC0BJ54Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/E265728A877911EA9E28DF0BC4F9AE02.roa Signing time: Wed 02 Jul 2025 19:58:16 +0000 ROA not before: Wed 02 Jul 2025 19:58:16 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 59362 IP address blocks: 45.251.228.0/22 maxlen: 22 45.251.228.0/23 maxlen: 24 45.251.230.0/23 maxlen: 24 103.220.204.0/22 maxlen: 24 2407:5c80::/32 maxlen: 35 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.crl rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HInxmU9abruLplIhCzrC0BJ54Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Nov 2025 19:45:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2825 (0xb09) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D23A, serialNumber=F87227C6653D69BAEE2E9948842CEB0B4049E786 Validity Not Before: Jul 2 19:58:16 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=68658f58-101a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:fb:b1:5a:f8:27:f2:f6:0c:fb:46:a5:75:87: d7:8b:6b:59:cc:c2:fd:ed:36:b8:e7:90:14:12:7c: 5b:0c:c6:40:79:91:9d:80:57:1d:96:89:ce:d0:6e: 6b:60:5e:e4:92:ca:56:a6:2d:58:a9:42:6c:22:3c: 4a:e3:3b:e3:0e:fd:aa:c4:35:40:ba:e5:33:e5:84: f4:26:9a:90:44:a0:7d:58:34:3e:98:22:aa:b2:77: 53:3d:21:b0:5d:5a:ec:26:c1:00:48:e0:cc:f8:98: 36:f0:c8:33:f1:44:6c:a7:e5:57:cd:86:fb:3d:01: 0c:1c:66:42:12:ca:0a:29:03:73:24:a7:cc:cc:1c: fb:50:cf:18:40:a7:64:57:e3:3c:a0:d2:b8:98:44: 13:0e:b4:6f:a0:51:9f:70:a9:2d:f4:42:ad:5a:6f: 5f:6e:01:e9:e5:cf:51:fa:e2:b2:54:7a:8b:02:c2: 6e:3b:2b:e6:cc:d5:45:a8:28:ad:1f:43:4c:69:70: c3:ce:c2:06:b0:e1:61:39:30:66:e8:70:45:cb:77: 90:48:1f:09:ab:09:45:c1:eb:f0:b3:06:a1:10:1d: 23:06:48:dc:55:fd:c6:cf:d1:5f:3e:e3:ae:dc:16: 23:ca:f1:de:b6:14:6b:11:9b:f1:36:e8:09:50:bf: 44:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:5C:36:19:49:32:C6:35:6C:4E:1B:60:48:F2:0B:78:20:19:3E:6B X509v3 Authority Key Identifier: keyid:F8:72:27:C6:65:3D:69:BA:EE:2E:99:48:84:2C:EB:0B:40:49:E7:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HInxmU9abruLplIhCzrC0BJ54Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/E265728A877911EA9E28DF0BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.251.228.0/22 103.220.204.0/22 IPv6: 2407:5c80::/32 Signature Algorithm: sha256WithRSAEncryption 19:98:02:39:e7:a3:94:c7:5e:58:bf:1e:6c:83:b6:67:83:b3: e9:d0:97:07:d9:08:12:01:94:f7:94:77:93:32:68:00:01:e1: 58:c3:74:d6:ed:7b:43:68:e7:f3:71:31:ff:f5:1a:ba:df:d4: 0d:bf:2b:9d:4b:69:b0:09:06:bb:40:cf:93:73:5d:c9:45:f4: b9:71:cf:b2:b0:e6:9c:a6:b3:50:f0:3b:5d:01:cc:5b:52:bf: e5:9a:93:37:26:83:50:2e:63:49:bd:06:c4:d8:e0:5c:89:d1: ea:10:94:41:7c:59:42:f2:5d:77:31:f5:73:4a:ef:00:78:e9: 83:9f:b6:79:b6:81:ec:36:4b:45:85:00:6d:4d:bf:51:07:95: 9f:d3:86:27:c4:e0:45:ba:8f:c2:c2:32:6b:4b:9e:18:bc:07: 17:58:61:52:a9:f5:dd:57:5c:80:f4:ea:c9:ff:7e:52:47:ba: 47:2c:16:d3:77:08:80:83:7c:d0:ee:1e:a6:5e:1e:4e:1e:60: 85:87:65:87:e0:40:4f:c1:fd:02:a3:42:35:5b:62:fb:06:bd: be:3a:43:f8:b3:fa:9f:3b:af:be:bb:e4:9d:ba:74:80:9f:0f: 4b:cb:1a:fe:7a:34:69:de:90:fb:cb:94:ba:e3:0c:f2:01:e7: 8e:b9:31:2f -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICCwkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQyM0ExMTAvBgNVBAUTKEY4NzIyN0M2NjUzRDY5QkFFRTJFOTk0ODg0MkNFQjBC NDA0OUU3ODYwHhcNMjUwNzAyMTk1ODE2WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODY1OGY1OC0xMDFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzfuxWvgn8vYM+0aldYfXi2tZzML97Ta455AUEnxbDMZAeZGdgFcdlonO0G5r YF7kkspWpi1YqUJsIjxK4zvjDv2qxDVAuuUz5YT0JpqQRKB9WDQ+mCKqsndTPSGw XVrsJsEASODM+Jg28Mgz8URsp+VXzYb7PQEMHGZCEsoKKQNzJKfMzBz7UM8YQKdk V+M8oNK4mEQTDrRvoFGfcKkt9EKtWm9fbgHp5c9R+uKyVHqLAsJuOyvmzNVFqCit H0NMaXDDzsIGsOFhOTBm6HBFy3eQSB8JqwlFwevwswahEB0jBkjcVf3Gz9FfPuOu 3BYjyvHethRrEZvxNugJUL9EzQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFD5cNhlJ MsY1bE4bYEjyC3ggGT5rMB8GA1UdIwQYMBaAFPhyJ8ZlPWm67i6ZSIQs6wtASeeG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDIzQS84RTNDMTIxRTQ4 RDUxMUVBODMzNTE3NzFDNEY5QUUwMi8tSElueG1VOWFicnVMcGxJaEN6ckMwQko1 NFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1ISW54bVU5YWJydUxwbEloQ3pyQzBCSjU0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkQyM0EvOEUzQzEyMUU0OEQ1MTFFQTgzMzUxNzcxQzRGOUFFMDIvRTI2NTcyOEE4 Nzc5MTFFQTlFMjhERjBCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAIt++QDBAJn3MwwDQQCAAIwBwMFACQHXIAwDQYJKoZIhvcN AQELBQADggEBABmYAjnno5THXli/HmyDtmeDs+nQlwfZCBIBlPeUd5MyaAAB4VjD dNbte0No5/NxMf/1Grrf1A2/K51LabAJBrtAz5NzXclF9Llxz7Kw5pyms1DwO10B zFtSv+Wakzcmg1AuY0m9BsTY4FyJ0eoQlEF8WULyXXcx9XNK7wB46YOftnm2gew2 S0WFAG1Nv1EHlZ/ThifE4EW6j8LCMmtLnhi8BxdYYVKp9d1XXID06sn/flJHukcs FtN3CICDfNDuHqZeHk4eYIWHZYfgQE/B/QKjQjVbYvsGvb46Q/iz+p87r7675J26 dICfD0vLGv56NGnekPvLlLrjDPIB5465MS8= -----END CERTIFICATE-----Generated at Mon Oct 27 01:43:01 2025 by rpki-client