$ rpki-client -vvf rpki.apnic.net/member_repository/A917C9BF/BE1D4A347B4D11EFB0236C78C4F9AE02/15875DC27B5E11EFAB71253BC4F9AE02.roa File: 15875DC27B5E11EFAB71253BC4F9AE02.roa (raw, json) Hash identifier: 0W2/njWu/4NeHHOITSUzSzI4ic/vgB1fnauNrzPM4sc= Subject key identifier: 74:D5:59:22:66:F3:4F:1C:9C:FC:2E:F3:AC:30:FE:56:04:65:E7:6B Certificate issuer: /CN=A917C9BF/serialNumber=5CACE5BF655AACF7CBC6272C5C697F377A06CE8C Certificate serial: 8C Authority key identifier: 5C:AC:E5:BF:65:5A:AC:F7:CB:C6:27:2C:5C:69:7F:37:7A:06:CE:8C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKzlv2VarPfLxicsXGl_N3oGzow.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C9BF/BE1D4A347B4D11EFB0236C78C4F9AE02/15875DC27B5E11EFAB71253BC4F9AE02.roa Signing time: Sat 31 May 2025 06:58:08 +0000 ROA not before: Sat 31 May 2025 06:58:08 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 26380 IP address blocks: 45.115.128.0/23 maxlen: 24 45.115.130.0/23 maxlen: 24 103.55.148.0/23 maxlen: 24 103.55.150.0/23 maxlen: 24 180.92.176.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C9BF/BE1D4A347B4D11EFB0236C78C4F9AE02/XKzlv2VarPfLxicsXGl_N3oGzow.crl rsync://rpki.apnic.net/member_repository/A917C9BF/BE1D4A347B4D11EFB0236C78C4F9AE02/XKzlv2VarPfLxicsXGl_N3oGzow.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKzlv2VarPfLxicsXGl_N3oGzow.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 06:24:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 140 (0x8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C9BF, serialNumber=5CACE5BF655AACF7CBC6272C5C697F377A06CE8C Validity Not Before: May 31 06:58:08 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=683aa87f-bf22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ea:42:fa:c8:82:f8:75:8c:87:92:9d:91:ee: be:16:32:6d:e2:0e:4e:0c:90:b2:13:b5:14:cd:63: 4a:04:2f:d5:e8:eb:22:dd:63:4e:71:da:ed:a8:31: dc:6b:d0:bf:fa:68:60:d6:d2:2a:ae:bd:f5:86:e7: cc:cb:d3:59:13:d1:86:e5:90:ed:16:4b:54:47:31: e8:26:7f:65:9c:bc:f5:b8:de:fa:e2:52:24:b3:37: 25:3b:2a:94:8f:b6:2d:12:f4:01:0d:f0:ab:69:3a: 24:6b:fc:79:42:3c:1c:2a:fa:96:40:a3:7b:88:e4: 51:98:e0:21:f6:f9:7f:34:38:fe:5f:56:cb:3c:af: cc:78:10:de:dd:48:8a:72:69:51:02:8b:96:4d:f9: 57:b2:21:8b:23:97:31:0b:99:ca:fb:dc:b2:b3:50: 2e:08:18:fc:4d:64:33:e2:58:1c:90:d3:e5:93:b0: 79:31:a7:2c:92:c9:b8:ac:40:29:30:e4:54:ad:3d: 7f:6e:f4:9e:cd:18:07:8f:5e:bb:4c:7c:6f:32:04: f5:8f:e3:a8:91:03:44:d1:52:9f:5e:4f:55:86:60: 57:91:53:b2:36:9e:28:43:99:38:0b:43:cd:c8:5a: c2:0a:7a:05:1e:52:bf:c0:d1:bd:cc:d2:ae:43:6a: ea:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:D5:59:22:66:F3:4F:1C:9C:FC:2E:F3:AC:30:FE:56:04:65:E7:6B X509v3 Authority Key Identifier: keyid:5C:AC:E5:BF:65:5A:AC:F7:CB:C6:27:2C:5C:69:7F:37:7A:06:CE:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C9BF/BE1D4A347B4D11EFB0236C78C4F9AE02/XKzlv2VarPfLxicsXGl_N3oGzow.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKzlv2VarPfLxicsXGl_N3oGzow.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C9BF/BE1D4A347B4D11EFB0236C78C4F9AE02/15875DC27B5E11EFAB71253BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.115.128.0/22 103.55.148.0/22 180.92.176.0/23 Signature Algorithm: sha256WithRSAEncryption 30:07:aa:53:43:32:45:b7:1a:e4:04:4d:0c:e7:00:d5:9d:de: b5:f8:b1:53:ab:55:93:76:9f:18:fe:65:48:a0:e2:2f:5f:4b: 82:fb:d1:d5:b9:38:98:81:9c:2c:04:f6:a8:bb:13:d0:77:69: 19:02:f5:22:51:0d:09:e8:87:28:e5:df:60:b6:ae:6f:27:ac: 60:97:3a:39:3b:63:d2:c3:f6:1d:bb:05:70:17:38:5b:83:4f: 9c:e7:1f:d4:0d:25:17:1f:d0:8d:41:a7:85:10:37:56:fe:a3: 84:69:f9:c8:aa:fe:5a:23:43:a6:ef:f4:5a:b2:31:c6:d6:76: a7:dd:46:39:84:b8:fe:21:66:27:95:77:98:ea:10:21:26:85: a2:62:d6:4a:cd:2f:c6:50:05:57:d6:39:b0:cc:d9:ba:ab:ae: c6:6f:c4:3b:e9:0d:bd:06:00:af:26:2b:d6:91:6c:1e:ef:02: f1:5d:1e:60:b2:c4:58:a2:cb:38:29:e7:9b:bf:49:c9:28:f4: b7:fd:da:0b:f9:d2:65:83:e3:2b:6e:a6:a8:b8:10:38:de:a4: e9:7d:e5:ff:6d:b0:2c:7e:26:02:24:bc:8e:4f:bf:85:6c:9a: e0:fd:c8:df:f3:d7:d4:41:a9:4e:86:8c:f6:70:e6:06:eb:69: 54:06:87:62 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICAIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M5QkYxMTAvBgNVBAUTKDVDQUNFNUJGNjU1QUFDRjdDQkM2MjcyQzVDNjk3RjM3 N0EwNkNFOEMwHhcNMjUwNTMxMDY1ODA4WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODNhYTg3Zi1iZjIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwepC+siC+HWMh5Kdke6+FjJt4g5ODJCyE7UUzWNKBC/V6Osi3WNOcdrtqDHc a9C/+mhg1tIqrr31hufMy9NZE9GG5ZDtFktURzHoJn9lnLz1uN764lIkszclOyqU j7YtEvQBDfCraToka/x5QjwcKvqWQKN7iORRmOAh9vl/NDj+X1bLPK/MeBDe3UiK cmlRAouWTflXsiGLI5cxC5nK+9yys1AuCBj8TWQz4lgckNPlk7B5Macsksm4rEAp MORUrT1/bvSezRgHj167THxvMgT1j+OokQNE0VKfXk9VhmBXkVOyNp4oQ5k4C0PN yFrCCnoFHlK/wNG9zNKuQ2rqwwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFHTVWSJm 808cnPwu86ww/lYEZedrMB8GA1UdIwQYMBaAFFys5b9lWqz3y8YnLFxpfzd6Bs6M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzlCRi9CRTFENEEzNDdC NEQxMUVGQjAyMzZDNzhDNEY5QUUwMi9YS3psdjJWYXJQZkx4aWNzWEdsX04zb0d6 b3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hLemx2MlZhclBmTHhpY3NYR2xfTjNvR3pvdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0M5QkYvQkUxRDRBMzQ3QjREMTFFRkIwMjM2Qzc4QzRGOUFFMDIvMTU4NzVEQzI3 QjVFMTFFRkFCNzEyNTNCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAItc4ADBAJnN5QDBAG0XLAwDQYJKoZIhvcNAQELBQADggEB ADAHqlNDMkW3GuQETQznANWd3rX4sVOrVZN2nxj+ZUig4i9fS4L70dW5OJiBnCwE 9qi7E9B3aRkC9SJRDQnohyjl32C2rm8nrGCXOjk7Y9LD9h27BXAXOFuDT5znH9QN JRcf0I1Bp4UQN1b+o4Rp+ciq/lojQ6bv9FqyMcbWdqfdRjmEuP4hZieVd5jqECEm haJi1krNL8ZQBVfWObDM2bqrrsZvxDvpDb0GAK8mK9aRbB7vAvFdHmCyxFiiyzgp 55u/Scko9Lf92gv50mWD4ytupqi4EDjepOl95f9tsCx+JgIkvI5Pv4VsmuD9yN/z 19RBqU6GjPZw5gbraVQGh2I= -----END CERTIFICATE-----Generated at Tue Jun 3 23:13:22 2025 by rpki-client