$ rpki-client -vvf rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/4664F7042B7411EF9E28ED19C4F9AE02.roa File: 4664F7042B7411EF9E28ED19C4F9AE02.roa (raw, json) Hash identifier: mcsOJ/PSjF+pyGpbfB/eXtIe/0dKHqcd9NaSWEDdEYo= Subject key identifier: 6F:A2:2D:0A:F9:BC:59:B0:1C:62:27:11:1C:EF:9B:6B:80:10:44:C1 Certificate issuer: /CN=A919C77D/serialNumber=9409808C8A32C58494DAE574D05D6BB22272C35A Certificate serial: 1E74 Authority key identifier: 94:09:80:8C:8A:32:C5:84:94:DA:E5:74:D0:5D:6B:B2:22:72:C3:5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAmAjIoyxYSU2uV00F1rsiJyw1o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/4664F7042B7411EF9E28ED19C4F9AE02.roa Signing time: Sun 04 May 2025 16:23:58 +0000 ROA not before: Sun 04 May 2025 16:23:58 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9297 IP address blocks: 43.248.44.0/22 maxlen: 22 119.252.0.0/19 maxlen: 19 2401:1400::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.crl rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAmAjIoyxYSU2uV00F1rsiJyw1o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:08:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7796 (0x1e74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C77D, serialNumber=9409808C8A32C58494DAE574D05D6BB22272C35A Validity Not Before: May 4 16:23:58 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6817949d-9bc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:3c:fc:56:61:0e:3f:7c:73:84:74:bc:06:d5: 48:11:05:b8:6e:cc:4c:15:00:89:72:22:9f:78:c8: 90:e3:a6:d5:7e:30:6c:d9:d0:33:b3:6f:4e:2b:cd: 92:37:00:6b:26:fd:fc:a4:3c:93:e2:c1:83:5a:ce: e5:4d:98:48:60:4c:39:6d:d0:33:7d:d9:19:c0:6b: e1:91:5b:2d:79:60:f2:74:dc:07:0f:61:58:19:1e: 8b:30:fb:b2:bf:c0:1c:f3:bb:9a:63:f0:71:84:15: d3:ad:da:90:4a:e7:f6:d8:c8:50:b2:82:93:ab:95: 59:f5:de:21:10:a9:72:b6:c8:f5:a3:fc:3b:5a:e7: 0e:1e:c9:37:e7:bc:2f:fb:85:7e:02:ea:a2:3d:20: f2:1c:94:9e:e3:4c:c5:26:26:26:ad:9e:c0:57:b7: 0d:9b:94:2a:39:26:74:ea:23:04:92:a1:c6:c3:96: 04:5b:6a:fa:c6:ff:cb:1a:f7:52:d0:00:6d:40:04: 3a:b0:b7:02:e5:4b:c4:a1:cd:3c:42:26:2b:4e:21: b9:13:bf:ae:96:60:de:4d:fa:31:e4:16:63:da:d8: 5f:c6:6b:fd:18:f7:fa:fc:31:60:8e:7e:9a:4c:bd: 41:dd:ee:9f:9a:f9:8a:70:22:54:8d:d4:e8:8c:c4: 0c:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:A2:2D:0A:F9:BC:59:B0:1C:62:27:11:1C:EF:9B:6B:80:10:44:C1 X509v3 Authority Key Identifier: keyid:94:09:80:8C:8A:32:C5:84:94:DA:E5:74:D0:5D:6B:B2:22:72:C3:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/lAmAjIoyxYSU2uV00F1rsiJyw1o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAmAjIoyxYSU2uV00F1rsiJyw1o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C77D/7D4BFE06749911E6B0252B84C4F9AE02/4664F7042B7411EF9E28ED19C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.248.44.0/22 119.252.0.0/19 IPv6: 2401:1400::/32 Signature Algorithm: sha256WithRSAEncryption 71:48:e8:cc:ba:07:9b:12:29:02:38:9e:40:ea:07:85:0d:9b: d5:f1:c0:a1:4e:9b:5b:e6:22:77:a8:5b:28:5b:22:91:c6:6e: 99:9d:17:74:0c:a3:e7:91:a2:33:12:0e:4a:ad:e8:d2:f8:06: 44:3a:60:86:69:33:e2:e2:37:1f:9c:3c:f2:f0:dc:ea:dd:cb: 94:5e:3f:fd:d7:db:8f:34:fc:eb:d0:a0:33:6d:44:28:e1:66: 33:72:dc:81:93:a6:52:41:a5:a3:07:90:10:c8:6e:22:11:6b: d4:42:a7:81:b9:37:bf:7e:6b:0b:08:17:11:99:03:51:84:cd: 04:b8:47:97:54:77:7a:76:fb:9b:5b:71:6e:ef:1c:16:91:96: 35:f8:08:2a:51:e9:a4:3a:49:5e:f9:a3:42:84:eb:79:8c:f0: 0d:d4:c9:cd:59:19:b6:d8:b1:ce:78:ba:5c:d1:23:c8:a4:dd: 41:c0:96:ae:ab:93:6b:f6:37:2f:ca:07:17:29:01:ed:a0:49: 1f:9e:46:22:50:81:2a:55:f7:d6:54:02:bf:9c:8f:42:35:29: cc:1c:35:f9:eb:eb:55:ad:0f:be:93:46:9b:d6:e7:dd:ac:2f: 64:5e:c0:de:09:03:32:8d:77:a9:97:c1:9f:77:fd:73:9b:bd: 22:8b:0e:9d -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICHnQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM3N0QxMTAvBgNVBAUTKDk0MDk4MDhDOEEzMkM1ODQ5NERBRTU3NEQwNUQ2QkIy MjI3MkMzNUEwHhcNMjUwNTA0MTYyMzU4WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODE3OTQ5ZC05YmMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5jz8VmEOP3xzhHS8BtVIEQW4bsxMFQCJciKfeMiQ46bVfjBs2dAzs29OK82S NwBrJv38pDyT4sGDWs7lTZhIYEw5bdAzfdkZwGvhkVsteWDydNwHD2FYGR6LMPuy v8Ac87uaY/BxhBXTrdqQSuf22MhQsoKTq5VZ9d4hEKlytsj1o/w7WucOHsk357wv +4V+AuqiPSDyHJSe40zFJiYmrZ7AV7cNm5QqOSZ06iMEkqHGw5YEW2r6xv/LGvdS 0ABtQAQ6sLcC5UvEoc08QiYrTiG5E7+ulmDeTfox5BZj2thfxmv9GPf6/DFgjn6a TL1B3e6fmvmKcCJUjdTojMQM4wIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFG+iLQr5 vFmwHGInERzvm2uAEETBMB8GA1UdIwQYMBaAFJQJgIyKMsWElNrldNBda7IicsNa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Qzc3RC83RDRCRkUwNjc0 OTkxMUU2QjAyNTJCODRDNEY5QUUwMi9sQW1BaklveXhZU1UydVYwMEYxcnNpSnl3 MW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xBbUFqSW95eFlTVTJ1VjAwRjFyc2lKeXcxby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUM3N0QvN0Q0QkZFMDY3NDk5MTFFNkIwMjUyQjg0QzRGOUFFMDIvNDY2NEY3MDQy Qjc0MTFFRjlFMjhFRDE5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAIr+CwDBAV3/AAwDQQCAAIwBwMFACQBFAAwDQYJKoZIhvcN AQELBQADggEBAHFI6My6B5sSKQI4nkDqB4UNm9XxwKFOm1vmIneoWyhbIpHGbpmd F3QMo+eRojMSDkqt6NL4BkQ6YIZpM+LiNx+cPPLw3Ordy5ReP/3X2480/OvQoDNt RCjhZjNy3IGTplJBpaMHkBDIbiIRa9RCp4G5N79+awsIFxGZA1GEzQS4R5dUd3p2 +5tbcW7vHBaRljX4CCpR6aQ6SV75o0KE63mM8A3Uyc1ZGbbYsc54ulzRI8ik3UHA lq6rk2v2Ny/KBxcpAe2gSR+eRiJQgSpV99ZUAr+cj0I1KcwcNfnr61WtD76TRpvW 592sL2RewN4JAzKNd6mXwZ93/XObvSKLDp0= -----END CERTIFICATE-----Generated at Tue Nov 4 19:03:34 2025 by rpki-client