$ rpki-client -vvf rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/7BF36C680DCB11EBA17D032EC4F9AE02.roa File: 7BF36C680DCB11EBA17D032EC4F9AE02.roa (raw, json) Hash identifier: x1swDqDbdRpW1YcvJW4XZPVqkw29NgcBcxcpOtDQ400= Subject key identifier: 5F:77:D0:C3:49:27:27:91:02:4E:A4:6D:50:B2:AA:03:2D:84:60:92 Certificate issuer: /CN=A917BB59/serialNumber=22892E3D8C449F5A9AC64CFCB634B59F6C53136B Certificate serial: 079F Authority key identifier: 22:89:2E:3D:8C:44:9F:5A:9A:C6:4C:FC:B6:34:B5:9F:6C:53:13:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IokuPYxEn1qaxkz8tjS1n2xTE2s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/7BF36C680DCB11EBA17D032EC4F9AE02.roa Signing time: Thu 12 Jun 2025 21:38:59 +0000 ROA not before: Thu 12 Jun 2025 21:38:59 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 55720 IP address blocks: 45.117.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.crl rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IokuPYxEn1qaxkz8tjS1n2xTE2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1951 (0x79f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BB59, serialNumber=22892E3D8C449F5A9AC64CFCB634B59F6C53136B Validity Not Before: Jun 12 21:38:59 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=684b48f2-432f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:96:2a:ec:aa:ea:f8:7e:b3:fd:52:b6:a5:ff: 1c:b7:f4:17:f7:43:cb:c7:33:36:a9:71:d1:21:ae: 98:86:d6:2f:d1:2f:b1:4e:96:12:a3:13:51:54:0b: 95:a2:5b:bc:5e:76:6b:da:cb:dd:0e:de:22:0b:18: 21:04:90:d7:e4:01:48:d2:24:1f:38:80:96:8e:13: c5:07:14:74:12:2a:40:11:83:b9:8d:66:f5:ec:b8: 46:24:87:23:89:09:38:46:c3:01:4a:34:d1:73:8e: fd:05:fd:c6:90:a0:74:34:ad:e5:a0:dd:6b:2e:9f: e1:7e:78:5f:85:83:5d:f0:05:b5:54:34:a1:0d:77: b6:40:da:0a:e0:8e:a5:7b:33:e1:62:78:e9:c0:03: e4:0c:c5:56:a8:12:2e:8f:49:a5:16:28:cd:67:59: 7b:33:7b:c5:7a:84:49:8c:b2:b6:b0:ef:47:bc:11: fd:26:8b:41:12:ef:cc:6d:a1:08:c7:46:20:45:67: 2d:5c:d7:99:b6:74:cd:e5:f3:a9:ee:26:ef:db:51: 09:c0:20:cc:46:ac:c5:01:61:9c:96:31:56:73:36: 76:46:e7:64:bd:71:35:cd:76:43:89:04:52:36:99: 3d:30:a0:41:ba:04:11:18:ad:a5:d9:21:45:95:08: ea:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:77:D0:C3:49:27:27:91:02:4E:A4:6D:50:B2:AA:03:2D:84:60:92 X509v3 Authority Key Identifier: keyid:22:89:2E:3D:8C:44:9F:5A:9A:C6:4C:FC:B6:34:B5:9F:6C:53:13:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IokuPYxEn1qaxkz8tjS1n2xTE2s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/7BF36C680DCB11EBA17D032EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.117.230.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:4d:26:68:b8:24:2e:2c:a5:72:9f:3c:15:7a:98:5d:2a:07: c5:d7:87:0e:b2:b7:be:09:84:f5:03:b0:57:b1:0b:5c:1f:36: 36:37:c2:c1:c1:9d:ef:67:ca:66:46:56:18:be:9c:1e:20:1c: ab:20:48:eb:a9:94:08:f8:50:07:56:86:f0:09:45:1c:f6:84: 63:41:13:93:87:67:d3:e8:a7:41:c9:ec:f2:31:c2:4c:e8:d9: c0:75:7b:0b:28:55:27:a2:71:46:c6:13:0e:69:c0:a1:7c:8d: 8c:56:48:b8:a0:95:78:91:5b:6d:86:dc:7f:06:a7:06:66:72: ee:cd:93:3b:9c:c6:2d:bf:ff:03:92:52:41:ce:d8:88:e3:d6: ad:22:f7:79:0a:91:14:96:2b:f6:bf:fb:3e:bb:55:3c:f9:f9: 05:3d:05:d0:82:fb:bc:5d:8b:73:f5:ac:ef:41:75:75:db:36: c9:59:67:87:6c:0a:f5:79:c9:a5:1d:94:4b:d3:52:96:c4:4f: d1:dd:d3:b0:df:82:20:c5:1d:be:db:56:b8:b1:04:b1:fd:a5: b7:ee:37:4f:b8:c2:99:fc:e7:44:44:f4:b0:bf:00:da:6a:de: 64:08:98:0a:2c:e5:0b:bf:91:f5:33:17:ee:12:d9:4f:24:da: 54:c4:29:74 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB58wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JCNTkxMTAvBgNVBAUTKDIyODkyRTNEOEM0NDlGNUE5QUM2NENGQ0I2MzRCNTlG NkM1MzEzNkIwHhcNMjUwNjEyMjEzODU5WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODRiNDhmMi00MzJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwpYq7Krq+H6z/VK2pf8ct/QX90PLxzM2qXHRIa6YhtYv0S+xTpYSoxNRVAuV olu8XnZr2svdDt4iCxghBJDX5AFI0iQfOICWjhPFBxR0EipAEYO5jWb17LhGJIcj iQk4RsMBSjTRc479Bf3GkKB0NK3loN1rLp/hfnhfhYNd8AW1VDShDXe2QNoK4I6l ezPhYnjpwAPkDMVWqBIuj0mlFijNZ1l7M3vFeoRJjLK2sO9HvBH9JotBEu/MbaEI x0YgRWctXNeZtnTN5fOp7ibv21EJwCDMRqzFAWGcljFWczZ2RudkvXE1zXZDiQRS Npk9MKBBugQRGK2l2SFFlQjqlwIDAQABo4IClTCCApEwHQYDVR0OBBYEFF930MNJ JyeRAk6kbVCyqgMthGCSMB8GA1UdIwQYMBaAFCKJLj2MRJ9amsZM/LY0tZ9sUxNr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkI1OS9CNjhCOTBENjBE Q0ExMUVCQTdDMkUyMkRDNEY5QUUwMi9Jb2t1UFl4RW4xcWF4a3o4dGpTMW4yeFRF MnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lva3VQWXhFbjFxYXhrejh0alMxbjJ4VEUycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0JCNTkvQjY4QjkwRDYwRENBMTFFQkE3QzJFMjJEQzRGOUFFMDIvN0JGMzZDNjgw RENCMTFFQkExN0QwMzJFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAtdeYwDQYJKoZIhvcNAQELBQADggEBAHtNJmi4JC4spXKf PBV6mF0qB8XXhw6yt74JhPUDsFexC1wfNjY3wsHBne9nymZGVhi+nB4gHKsgSOup lAj4UAdWhvAJRRz2hGNBE5OHZ9Pop0HJ7PIxwkzo2cB1ewsoVSeicUbGEw5pwKF8 jYxWSLiglXiRW22G3H8GpwZmcu7Nkzucxi2//wOSUkHO2Ijj1q0i93kKkRSWK/a/ +z67VTz5+QU9BdCC+7xdi3P1rO9BdXXbNslZZ4dsCvV5yaUdlEvTUpbET9Hd07Df giDFHb7bVrixBLH9pbfuN0+4wpn850RE9LC/ANpq3mQImAos5Qu/kfUzF+4S2U8k 2lTEKXQ= -----END CERTIFICATE-----Generated at Wed Nov 5 11:37:45 2025 by rpki-client