$ rpki-client -vvf rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/8152A64441CC11F0B9232057C4F9AE02.roa File: 8152A64441CC11F0B9232057C4F9AE02.roa (raw, json) Hash identifier: uYLFrXFeM2q4JrBsK51uNU2aBWkGjwj5M1ulBMDb/Ps= Subject key identifier: FA:83:14:80:CE:AD:27:61:8F:2F:9F:C8:CA:1F:16:8F:E1:FA:23:D7 Certificate issuer: /CN=A9111F72/serialNumber=6C49B9537C26701EDA7C03B536AD7F52E6C9D51A Certificate serial: 119D Authority key identifier: 6C:49:B9:53:7C:26:70:1E:DA:7C:03:B5:36:AD:7F:52:E6:C9:D5:1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/8152A64441CC11F0B9232057C4F9AE02.roa Signing time: Thu 05 Jun 2025 05:18:25 +0000 ROA not before: Thu 05 Jun 2025 05:18:25 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 38056 IP address blocks: 125.253.128.0/19 maxlen: 19 125.253.132.0/22 maxlen: 22 125.253.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.crl rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 17:13:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4509 (0x119d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111F72, serialNumber=6C49B9537C26701EDA7C03B536AD7F52E6C9D51A Validity Not Before: Jun 5 05:18:25 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=684128a0-9fdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:a1:90:01:2a:77:a1:aa:b3:de:f7:00:ce:2a: e2:60:61:2d:03:55:a5:8a:28:93:62:0e:59:0a:95: 62:a8:72:a8:cb:68:e5:0c:f9:b3:d9:a2:d1:b3:8f: 9c:ab:79:2a:6d:91:24:06:d8:1a:38:be:1c:49:bd: e4:7b:17:e5:77:91:c7:05:dd:ba:83:24:17:77:1a: 20:6a:5c:6d:65:43:b2:a5:22:94:67:65:c6:80:ae: 22:48:a0:67:9e:3b:1f:92:b5:a2:78:9b:72:29:08: 5a:71:75:f2:75:1c:14:ee:42:3d:46:33:01:2d:34: 1e:0e:8d:9b:60:1b:79:20:69:8e:94:10:6e:41:d8: 00:50:94:69:7c:54:df:a8:12:8e:6b:7b:9e:62:7c: 5c:20:7f:80:bd:f1:ea:52:2a:d3:09:ae:c7:3a:52: e7:71:e8:18:be:36:0e:1c:71:cb:01:53:e0:96:34: f2:59:6f:df:29:a3:88:e7:64:d1:bb:db:e9:25:d3: c9:ce:bf:8e:72:74:2f:df:1a:cc:25:c5:68:ac:16: 46:fc:ff:35:fb:fb:ab:a0:05:78:8a:14:a4:c1:e7: 40:51:80:41:3c:a3:eb:db:ba:d4:f2:6c:d7:62:cf: 8e:05:e3:ee:d0:99:37:b3:55:67:30:6c:28:94:4e: 19:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:83:14:80:CE:AD:27:61:8F:2F:9F:C8:CA:1F:16:8F:E1:FA:23:D7 X509v3 Authority Key Identifier: keyid:6C:49:B9:53:7C:26:70:1E:DA:7C:03:B5:36:AD:7F:52:E6:C9:D5:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/8152A64441CC11F0B9232057C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 125.253.128.0/19 Signature Algorithm: sha256WithRSAEncryption 93:05:b6:8c:bc:a3:9b:0c:64:35:e8:7d:30:78:df:6a:71:a4: 0c:3f:29:a8:34:a6:43:bf:cb:55:f4:03:1f:f3:f9:85:57:ba: 54:15:6c:bb:14:8a:52:e9:2b:b1:e0:5e:c2:33:ee:1d:75:7e: a4:29:41:8e:cb:b5:08:12:13:2d:65:cf:ad:02:98:7d:6b:8d: 68:00:ba:7c:4c:8d:91:f6:5d:c0:0e:c2:65:22:bb:1e:17:eb: 8a:10:25:47:ce:33:75:44:47:f0:22:d8:7c:23:f0:e9:42:1a: 3a:95:fe:8c:00:d4:cf:e3:e8:fd:80:e7:86:2c:07:e4:23:58: 8c:61:f2:43:d4:9a:16:e5:65:b3:5f:bd:e9:75:8a:64:68:38: 00:64:32:03:a2:08:14:24:5d:73:6c:ef:94:bf:69:cb:0c:4c: 58:cf:7c:d7:28:f5:b9:a9:5d:86:04:04:92:c9:5f:1e:72:1f: 2c:62:45:ba:63:2e:8d:b6:07:f2:c7:7d:56:d1:67:7d:0e:eb: 5d:d0:8a:ec:6c:32:42:e7:87:73:d5:c5:61:7a:c2:1b:c0:de: bf:a5:6e:2e:73:5d:42:83:14:18:fe:46:aa:0c:39:ef:b1:4e: 54:01:ba:73:58:01:27:fa:4e:8f:8f:15:d7:3e:d4:ad:b7:a9: 20:58:d9:39 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICEZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTFGNzIxMTAvBgNVBAUTKDZDNDlCOTUzN0MyNjcwMUVEQTdDMDNCNTM2QUQ3RjUy RTZDOUQ1MUEwHhcNMjUwNjA1MDUxODI1WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02ODQxMjhhMC05ZmRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5KGQASp3oaqz3vcAziriYGEtA1WliiiTYg5ZCpViqHKoy2jlDPmz2aLRs4+c q3kqbZEkBtgaOL4cSb3kexfld5HHBd26gyQXdxogalxtZUOypSKUZ2XGgK4iSKBn njsfkrWieJtyKQhacXXydRwU7kI9RjMBLTQeDo2bYBt5IGmOlBBuQdgAUJRpfFTf qBKOa3ueYnxcIH+AvfHqUirTCa7HOlLncegYvjYOHHHLAVPgljTyWW/fKaOI52TR u9vpJdPJzr+OcnQv3xrMJcVorBZG/P81+/uroAV4ihSkwedAUYBBPKPr27rU8mzX Ys+OBePu0Jk3s1VnMGwolE4ZGwIDAQABo4IClTCCApEwHQYDVR0OBBYEFPqDFIDO rSdhjy+fyMofFo/h+iPXMB8GA1UdIwQYMBaAFGxJuVN8JnAe2nwDtTatf1LmydUa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUY3Mi82RjQyOTNENEY4 RDUxMUU4ODM2MzFEN0FDNEY5QUUwMi9iRW01VTN3bWNCN2FmQU8xTnExX1V1Ykox Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JFbTVVM3dtY0I3YWZBTzFOcTFfVXViSjFSby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTFGNzIvNkY0MjkzRDRGOEQ1MTFFODgzNjMxRDdBQzRGOUFFMDIvODE1MkE2NDQ0 MUNDMTFGMEI5MjMyMDU3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAV9/YAwDQYJKoZIhvcNAQELBQADggEBAJMFtoy8o5sMZDXo fTB432pxpAw/Kag0pkO/y1X0Ax/z+YVXulQVbLsUilLpK7HgXsIz7h11fqQpQY7L tQgSEy1lz60CmH1rjWgAunxMjZH2XcAOwmUiux4X64oQJUfOM3VER/Ai2Hwj8OlC GjqV/owA1M/j6P2A54YsB+QjWIxh8kPUmhblZbNfvel1imRoOABkMgOiCBQkXXNs 75S/acsMTFjPfNco9bmpXYYEBJLJXx5yHyxiRbpjLo22B/LHfVbRZ30O613Qiuxs MkLnh3PVxWF6whvA3r+lbi5zXUKDFBj+RqoMOe+xTlQBunNYASf6To+PFdc+1K23 qSBY2Tk= -----END CERTIFICATE-----Generated at Mon Jul 21 07:15:00 2025 by rpki-client