$ rpki-client -vvf rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/7D7B467CE06011EDBB10FD53C4F9AE02.roa File: 7D7B467CE06011EDBB10FD53C4F9AE02.roa (raw, json) Hash identifier: S7PCclJgGscLtYe2Pj+Y6a3iFp4ZeeTuzvJeZrm+yCA= Subject key identifier: 88:70:FD:FD:B3:5A:25:5F:99:B2:F2:DB:B3:B1:23:9E:28:C4:93:FB Certificate issuer: /CN=A912096C/serialNumber=8197663A7F6347D591B6B2B9ADD5A2D574E91124 Certificate serial: 076B Authority key identifier: 81:97:66:3A:7F:63:47:D5:91:B6:B2:B9:AD:D5:A2:D5:74:E9:11:24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZdmOn9jR9WRtrK5rdWi1XTpESQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/7D7B467CE06011EDBB10FD53C4F9AE02.roa Signing time: Fri 04 Jul 2025 22:02:50 +0000 ROA not before: Fri 04 Jul 2025 22:02:50 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 45250 IP address blocks: 114.199.64.0/24 maxlen: 24 114.199.66.0/24 maxlen: 24 114.199.72.0/24 maxlen: 24 114.199.76.0/24 maxlen: 24 114.199.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.crl rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZdmOn9jR9WRtrK5rdWi1XTpESQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 21:51:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1899 (0x76b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912096C, serialNumber=8197663A7F6347D591B6B2B9ADD5A2D574E91124 Validity Not Before: Jul 4 22:02:50 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=68684f89-396b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:12:1a:cc:1a:9b:f6:52:e3:f8:b7:79:79:ca: 61:83:c5:13:8e:1d:e8:77:de:9e:b5:22:af:40:1f: 22:57:62:a4:b5:d9:ee:6d:44:e3:b0:f7:36:37:e0: ea:46:dc:f2:64:8b:8c:41:42:d1:24:4f:ec:15:9d: c0:38:ab:44:52:21:ab:7c:c3:d2:7f:4b:9c:ee:bd: a3:12:33:90:80:da:85:c9:50:50:43:9e:49:9d:b5: 11:82:8d:39:59:e5:25:8a:ca:f4:05:03:28:3e:5e: 5e:08:9a:d1:cf:99:58:ad:e8:a3:ee:89:cc:d4:ed: f8:12:1d:96:87:d5:da:94:54:8e:ff:01:36:36:3b: 50:f3:6a:b4:65:b8:74:7d:c5:6c:ec:e8:10:3e:3f: be:c8:2d:e2:b0:c6:27:46:9b:06:12:58:9c:36:5c: 10:fb:db:ef:4b:aa:b2:5d:87:6e:0e:43:ed:05:00: db:0c:85:5a:ce:f0:8f:a9:d1:53:1c:7f:0b:7a:25: 6e:02:78:f2:c3:ba:36:4c:67:27:cc:78:a5:45:c7: 2d:82:23:fb:47:b5:ba:fc:79:59:f5:bf:69:94:29: 2e:34:6a:f3:ba:3e:92:d6:e8:58:06:f0:84:06:1c: b4:17:16:3c:bb:eb:aa:d7:87:6d:b1:5c:7a:0a:c8: 29:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:70:FD:FD:B3:5A:25:5F:99:B2:F2:DB:B3:B1:23:9E:28:C4:93:FB X509v3 Authority Key Identifier: keyid:81:97:66:3A:7F:63:47:D5:91:B6:B2:B9:AD:D5:A2:D5:74:E9:11:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZdmOn9jR9WRtrK5rdWi1XTpESQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/7D7B467CE06011EDBB10FD53C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 114.199.64.0/24 114.199.66.0/24 114.199.72.0/24 114.199.76.0/24 114.199.79.0/24 Signature Algorithm: sha256WithRSAEncryption af:78:50:69:28:e3:6b:72:bd:71:ac:36:f1:11:c4:34:be:78: ca:3d:49:f2:9c:dd:96:d0:2d:93:0d:bc:29:4f:4b:a8:31:c9: 58:f2:e6:4f:c3:be:17:72:97:80:f1:b6:e3:94:6e:f5:4b:1e: d4:f5:bc:d0:06:b8:49:01:95:a1:4b:5a:85:2b:8e:06:08:d3: 7b:73:42:08:4c:c1:01:9b:c4:f6:3b:13:66:f1:77:87:df:aa: 50:51:12:3a:89:c6:d2:53:cf:50:29:2b:cf:c9:07:f2:82:f1: 27:1d:e7:30:18:99:bf:62:a3:b9:21:20:e2:8c:f1:00:f9:67: 72:06:f0:d8:b8:e2:34:64:a2:01:29:5d:64:b6:6a:8e:39:49: 13:41:01:c1:c3:8e:6c:87:47:c3:b4:1d:34:d6:67:70:7b:6d: 16:c8:ac:d9:78:f2:ad:e1:9c:fd:6c:02:23:bc:ce:0a:67:5e: e1:f1:48:9c:f6:8a:62:f1:fb:4d:12:3e:a1:08:95:cb:f6:91: 85:4b:2f:25:ae:cd:ad:6a:78:4e:30:87:82:fb:43:2d:0f:9a: 9a:57:ec:55:b2:93:f2:91:41:69:4f:12:1b:ae:d5:25:e5:d6: a7:5f:14:ac:d0:77:f4:a3:b0:d7:a4:48:62:17:38:fb:51:ec: f9:74:3f:b9 -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgICB2swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA5NkMxMTAvBgNVBAUTKDgxOTc2NjNBN0Y2MzQ3RDU5MUI2QjJCOUFERDVBMkQ1 NzRFOTExMjQwHhcNMjUwNzA0MjIwMjUwWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODY4NGY4OS0zOTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuhIazBqb9lLj+Ld5ecphg8UTjh3od96etSKvQB8iV2KktdnubUTjsPc2N+Dq RtzyZIuMQULRJE/sFZ3AOKtEUiGrfMPSf0uc7r2jEjOQgNqFyVBQQ55JnbURgo05 WeUlisr0BQMoPl5eCJrRz5lYreij7onM1O34Eh2Wh9XalFSO/wE2NjtQ82q0Zbh0 fcVs7OgQPj++yC3isMYnRpsGElicNlwQ+9vvS6qyXYduDkPtBQDbDIVazvCPqdFT HH8LeiVuAnjyw7o2TGcnzHilRcctgiP7R7W6/HlZ9b9plCkuNGrzuj6S1uhYBvCE Bhy0FxY8u+uq14dtsVx6CsgpDwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFIhw/f2z WiVfmbLy27OxI54oxJP7MB8GA1UdIwQYMBaAFIGXZjp/Y0fVkbayua3VotV06REk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDk2Qy8xRDMxQzE4NDI4 OTIxMUVCQUM4Q0NFMTNDNEY5QUUwMi9nWmRtT245alI5V1J0cks1cmRXaTFYVHBF U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2daZG1PbjlqUjlXUnRySzVyZFdpMVhUcEVTUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjA5NkMvMUQzMUMxODQyODkyMTFFQkFDOENDRTEzQzRGOUFFMDIvN0Q3QjQ2N0NF MDYwMTFFREJCMTBGRDUzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNwYIKwYBBQUHAQcBAf8E KDAmMCQEAgABMB4DBAByx0ADBAByx0IDBAByx0gDBAByx0wDBAByx08wDQYJKoZI hvcNAQELBQADggEBAK94UGko42tyvXGsNvERxDS+eMo9SfKc3ZbQLZMNvClPS6gx yVjy5k/Dvhdyl4DxtuOUbvVLHtT1vNAGuEkBlaFLWoUrjgYI03tzQghMwQGbxPY7 E2bxd4ffqlBREjqJxtJTz1ApK8/JB/KC8Scd5zAYmb9io7khIOKM8QD5Z3IG8Ni4 4jRkogEpXWS2ao45SRNBAcHDjmyHR8O0HTTWZ3B7bRbIrNl48q3hnP1sAiO8zgpn XuHxSJz2imLx+00SPqEIlcv2kYVLLyWuza1qeE4wh4L7Qy0PmppX7FWyk/KRQWlP Ehuu1SXl1qdfFKzQd/SjsNekSGIXOPtR7Pl0P7k= -----END CERTIFICATE-----Generated at Sun Jul 20 14:31:45 2025 by rpki-client