$ rpki-client -vvf rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/DB056F0C688011F09D2C9A15C4F9AE02.roa File: DB056F0C688011F09D2C9A15C4F9AE02.roa (raw, json) Hash identifier: coykcxq4VLCnsonSqLhttvR91cEiMTFYZHe/zqxnEJ4= Subject key identifier: 9C:6D:C0:BB:AE:D0:F9:07:42:FE:14:A5:93:62:81:9E:0B:5C:A3:4E Certificate issuer: /CN=A9111F72/serialNumber=6C49B9537C26701EDA7C03B536AD7F52E6C9D51A Certificate serial: 11BA Authority key identifier: 6C:49:B9:53:7C:26:70:1E:DA:7C:03:B5:36:AD:7F:52:E6:C9:D5:1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/DB056F0C688011F09D2C9A15C4F9AE02.roa Signing time: Thu 24 Jul 2025 11:25:59 +0000 ROA not before: Thu 24 Jul 2025 11:25:59 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 38056 IP address blocks: 125.253.132.0/22 maxlen: 24 125.253.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.crl rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 01 Aug 2025 06:30:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4538 (0x11ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111F72, serialNumber=6C49B9537C26701EDA7C03B536AD7F52E6C9D51A Validity Not Before: Jul 24 11:25:59 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=68821847-a88f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c2:a0:03:e4:ba:7b:c3:b8:3f:5c:82:78:c4: 9b:56:52:79:e6:68:d7:00:6b:9d:51:33:5d:46:e5: f7:b8:ef:83:46:92:f7:d8:09:6e:90:8e:82:85:46: 65:a3:b0:65:e4:50:1d:da:ef:f4:d3:55:40:a0:41: de:78:9f:3e:20:fa:98:11:75:49:90:90:5f:59:5d: f3:19:ef:b7:1d:80:c8:42:42:25:a2:c0:74:5d:e1: d4:c1:0c:bb:c3:49:44:f6:ac:6e:54:63:d5:db:48: 7d:c9:85:83:49:3f:fd:8e:de:ad:3a:9f:63:15:1a: 95:02:3e:5c:aa:dc:5b:7f:d5:de:db:83:fb:11:fe: 3d:7b:3f:9e:91:80:ab:7a:9e:3b:45:58:b6:c0:9e: 69:dc:bd:72:27:a5:fc:d5:1a:3e:61:6f:c8:c6:58: b7:cb:ff:ea:0c:9c:b5:b6:ba:2b:62:28:53:d2:14: b2:b2:5f:de:e2:a9:d4:2d:67:03:fc:fa:67:46:34: 07:af:fa:77:3c:34:d8:85:51:33:86:d0:c7:56:ec: eb:36:5b:f9:05:dc:58:90:ec:5b:4c:7a:b7:c7:f5: a5:74:4c:4b:ab:dc:47:5f:af:21:58:48:1b:fa:38: 86:d4:82:62:79:b6:94:5c:b4:df:a9:51:79:2b:8e: 54:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:6D:C0:BB:AE:D0:F9:07:42:FE:14:A5:93:62:81:9E:0B:5C:A3:4E X509v3 Authority Key Identifier: keyid:6C:49:B9:53:7C:26:70:1E:DA:7C:03:B5:36:AD:7F:52:E6:C9:D5:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/DB056F0C688011F09D2C9A15C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 125.253.132.0-125.253.139.255 Signature Algorithm: sha256WithRSAEncryption a6:c8:08:68:d1:92:4b:32:51:81:52:20:12:a0:13:bd:14:06: 5e:39:c4:c6:4c:d0:a8:b8:48:62:d5:66:64:85:41:27:9d:07: bc:4f:a1:65:98:aa:29:c8:94:a6:fd:11:2c:48:0c:a2:30:68: 04:80:4a:2c:88:29:df:a6:67:28:a5:66:47:4f:a1:30:db:29: 30:9a:a0:db:76:99:b7:94:9a:fd:fd:a1:f7:e2:e1:c2:77:52: 75:9d:c8:51:98:fe:82:14:34:6c:a9:e9:8d:dd:04:ee:38:1e: f5:a2:15:83:c4:99:99:4e:d7:2d:d6:e2:51:af:9c:b5:a5:f5: a7:e1:f4:36:ec:e6:49:91:76:66:54:fa:79:4f:b5:ce:05:e0: 6c:fa:39:02:aa:78:27:56:93:0e:5a:ce:1d:f1:5b:f8:1f:de: 4c:99:33:dd:66:72:ef:bd:b3:25:e4:6c:45:5b:9b:da:b4:7a: 36:45:a7:d6:60:49:22:86:43:20:d3:ea:2e:29:7e:d0:65:7a: f1:b7:03:32:d1:59:87:f9:89:7a:38:f4:34:e0:5a:5e:14:0c: 08:17:9f:59:57:b5:31:d9:5b:4d:b4:c2:5a:e1:63:66:74:9f: 5c:ee:72:b9:04:91:6a:58:93:f0:6d:a5:9c:6c:6e:c1:d1:59: b5:24:37:fd -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgICEbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTFGNzIxMTAvBgNVBAUTKDZDNDlCOTUzN0MyNjcwMUVEQTdDMDNCNTM2QUQ3RjUy RTZDOUQ1MUEwHhcNMjUwNzI0MTEyNTU5WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02ODgyMTg0Ny1hODhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0MKgA+S6e8O4P1yCeMSbVlJ55mjXAGudUTNdRuX3uO+DRpL32AlukI6ChUZl o7Bl5FAd2u/001VAoEHeeJ8+IPqYEXVJkJBfWV3zGe+3HYDIQkIlosB0XeHUwQy7 w0lE9qxuVGPV20h9yYWDST/9jt6tOp9jFRqVAj5cqtxbf9Xe24P7Ef49ez+ekYCr ep47RVi2wJ5p3L1yJ6X81Ro+YW/Ixli3y//qDJy1trorYihT0hSysl/e4qnULWcD /PpnRjQHr/p3PDTYhVEzhtDHVuzrNlv5BdxYkOxbTHq3x/WldExLq9xHX68hWEgb +jiG1IJiebaUXLTfqVF5K45U/wIDAQABo4ICnTCCApkwHQYDVR0OBBYEFJxtwLuu 0PkHQv4UpZNigZ4LXKNOMB8GA1UdIwQYMBaAFGxJuVN8JnAe2nwDtTatf1LmydUa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUY3Mi82RjQyOTNENEY4 RDUxMUU4ODM2MzFEN0FDNEY5QUUwMi9iRW01VTN3bWNCN2FmQU8xTnExX1V1Ykox Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JFbTVVM3dtY0I3YWZBTzFOcTFfVXViSjFSby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTFGNzIvNkY0MjkzRDRGOEQ1MTFFODgzNjMxRDdBQzRGOUFFMDIvREIwNTZGMEM2 ODgwMTFGMDlEMkM5QTE1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E GDAWMBQEAgABMA4wDAMEAn39hAMEAn39iDANBgkqhkiG9w0BAQsFAAOCAQEApsgI aNGSSzJRgVIgEqATvRQGXjnExkzQqLhIYtVmZIVBJ50HvE+hZZiqKciUpv0RLEgM ojBoBIBKLIgp36ZnKKVmR0+hMNspMJqg23aZt5Sa/f2h9+LhwndSdZ3IUZj+ghQ0 bKnpjd0E7jge9aIVg8SZmU7XLdbiUa+ctaX1p+H0NuzmSZF2ZlT6eU+1zgXgbPo5 Aqp4J1aTDlrOHfFb+B/eTJkz3WZy772zJeRsRVub2rR6NkWn1mBJIoZDINPqLil+ 0GV68bcDMtFZh/mJejj0NOBaXhQMCBefWVe1MdlbTbTCWuFjZnSfXO5yuQSRaliT 8G2lnGxuwdFZtSQ3/Q== -----END CERTIFICATE-----Generated at Sat Jul 26 12:33:38 2025 by rpki-client