$ rpki-client -vvf rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/4F7540B64BE311F096B8CE67C4F9AE02.roa File: 4F7540B64BE311F096B8CE67C4F9AE02.roa (raw, json) Hash identifier: jCc2/9qAzsxKeS4WJR+FVeuqaWwB8WeG7jjEO6HnLws= Subject key identifier: F2:40:E9:9B:DD:41:B4:96:0D:DB:40:5C:A6:BD:C3:B5:84:4E:AD:A7 Certificate issuer: /CN=A9134172/serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7 Certificate serial: 0A92 Authority key identifier: F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/4F7540B64BE311F096B8CE67C4F9AE02.roa Signing time: Thu 10 Jul 2025 03:23:57 +0000 ROA not before: Thu 10 Jul 2025 03:23:57 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 149175 IP address blocks: 203.168.238.0/24 maxlen: 24 203.168.244.0/24 maxlen: 24 203.168.245.0/24 maxlen: 24 203.168.246.0/24 maxlen: 24 203.168.247.0/24 maxlen: 24 203.168.248.0/24 maxlen: 24 203.168.249.0/24 maxlen: 24 203.168.250.0/24 maxlen: 24 203.168.251.0/24 maxlen: 24 203.168.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 20:25:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2706 (0xa92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134172, serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7 Validity Not Before: Jul 10 03:23:57 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=686f324d-45b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d4:34:99:ec:0d:de:79:99:cb:77:26:56:d3: 8e:0e:c7:ac:f5:13:18:d6:bf:a0:f7:a7:73:46:79: b6:fc:31:e4:5e:b7:b1:a4:23:8e:bd:79:87:a9:ab: 96:27:39:cd:7b:7e:0e:61:ee:a5:9b:2f:29:2c:6f: 15:04:8c:17:42:84:53:0c:2e:73:80:e9:a2:74:54: d3:0f:f8:df:d2:fa:41:a3:8f:e3:dc:6e:e4:e7:1e: a1:12:bc:9b:8b:94:dc:26:b0:b0:da:6d:10:ad:fe: a3:37:39:09:e5:8c:89:c1:a0:94:3e:32:14:22:60: 21:29:17:2f:d0:b9:63:b6:9e:70:e1:33:61:fe:95: f3:b9:45:7a:ab:ab:62:a7:14:1c:4b:97:7f:19:56: 09:f6:65:a9:25:a2:18:48:55:28:73:4b:98:ba:e5: 7d:bb:53:dd:c1:2a:6a:cb:f6:8d:a0:0a:12:ee:7f: d8:3a:5c:df:7c:4b:fc:29:63:11:4e:96:07:6b:a0: ba:d5:37:a9:3e:fa:ae:10:5c:0a:4e:33:40:a1:14: 9d:a4:f0:fa:28:08:c5:4c:5c:bc:bb:9b:31:25:e2: 4d:68:11:fa:5f:03:93:bc:a3:53:d4:34:b6:8e:f5: 5f:48:0d:a6:45:4e:2c:1e:72:ea:b5:5a:33:01:e6: ca:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:40:E9:9B:DD:41:B4:96:0D:DB:40:5C:A6:BD:C3:B5:84:4E:AD:A7 X509v3 Authority Key Identifier: keyid:F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/4F7540B64BE311F096B8CE67C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.168.238.0/24 203.168.244.0-203.168.251.255 203.168.253.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:fc:ac:ed:89:0c:02:ef:02:21:ad:fc:7e:45:ea:12:d2:0c: a0:3a:57:58:82:45:5f:2d:23:e2:9f:af:19:32:49:be:84:fb: 5d:05:a8:87:e8:6b:c1:00:24:94:45:e6:d6:68:21:1c:d3:20: 2a:57:50:e3:17:b6:3a:e4:f2:a8:1d:d5:ec:14:f3:a2:82:ab: 4f:8c:c8:d2:c3:ce:9b:e8:e1:8d:62:bb:54:10:ba:20:65:88: ae:1f:60:aa:5a:b3:01:0a:3e:8f:e9:c3:92:e7:16:4d:71:fc: 9e:52:51:6a:87:82:ec:80:3b:9a:3b:72:62:af:ad:61:26:46: 2d:e6:0e:54:55:5b:7d:cb:09:77:09:b4:45:88:9b:d0:55:0b: f1:03:57:f3:ec:01:c2:02:41:97:2a:42:14:db:7e:2c:b6:f1: 84:04:67:9d:0c:6e:b8:df:bc:aa:ce:bb:09:24:f4:7e:e6:64: f6:dd:1a:f6:99:33:bb:38:a7:07:2d:38:7f:40:b7:6a:74:3d: 97:34:99:e7:3d:6a:d6:04:b1:e6:e2:fe:82:de:f6:49:71:6c: 37:da:32:5b:a9:a3:f3:59:cc:4b:d3:1a:6a:47:87:dc:94:03: 71:82:dd:6c:a6:f3:e8:16:b7:ff:26:3f:18:9a:dc:7e:50:85: 9b:7d:11:0c -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgICCpIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQxNzIxMTAvBgNVBAUTKEY0NUMwRjRGNDY3Q0UxNTc2RTVFRTlFNDFFNTU3NkYw MzQ4QzQ2QTcwHhcNMjUwNzEwMDMyMzU3WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02ODZmMzI0ZC00NWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmNQ0mewN3nmZy3cmVtOODses9RMY1r+g96dzRnm2/DHkXrexpCOOvXmHqauW JznNe34OYe6lmy8pLG8VBIwXQoRTDC5zgOmidFTTD/jf0vpBo4/j3G7k5x6hEryb i5TcJrCw2m0Qrf6jNzkJ5YyJwaCUPjIUImAhKRcv0Lljtp5w4TNh/pXzuUV6q6ti pxQcS5d/GVYJ9mWpJaIYSFUoc0uYuuV9u1PdwSpqy/aNoAoS7n/YOlzffEv8KWMR TpYHa6C61TepPvquEFwKTjNAoRSdpPD6KAjFTFy8u5sxJeJNaBH6XwOTvKNT1DS2 jvVfSA2mRU4sHnLqtVozAebKAQIDAQABo4ICqTCCAqUwHQYDVR0OBBYEFPJA6Zvd QbSWDdtAXKa9w7WETq2nMB8GA1UdIwQYMBaAFPRcD09GfOFXbl7p5B5VdvA0jEan MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDE3Mi81OTc2MTI2NDlF NEQxMUVBOUMyM0FGMUZDNEY5QUUwMi85RndQVDBaODRWZHVYdW5rSGxWMjhEU01S cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlGd1BUMFo4NFZkdVh1bmtIbFYyOERTTVJxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzQxNzIvNTk3NjEyNjQ5RTREMTFFQTlDMjNBRjFGQzRGOUFFMDIvNEY3NTQwQjY0 QkUzMTFGMDk2QjhDRTY3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMwYIKwYBBQUHAQcBAf8E JDAiMCAEAgABMBoDBADLqO4wDAMEAsuo9AMEAsuo+AMEAMuo/TANBgkqhkiG9w0B AQsFAAOCAQEADvys7YkMAu8CIa38fkXqEtIMoDpXWIJFXy0j4p+vGTJJvoT7XQWo h+hrwQAklEXm1mghHNMgKldQ4xe2OuTyqB3V7BTzooKrT4zI0sPOm+jhjWK7VBC6 IGWIrh9gqlqzAQo+j+nDkucWTXH8nlJRaoeC7IA7mjtyYq+tYSZGLeYOVFVbfcsJ dwm0RYib0FUL8QNX8+wBwgJBlypCFNt+LLbxhARnnQxuuN+8qs67CST0fuZk9t0a 9pkzuzinBy04f0C3anQ9lzSZ5z1q1gSx5uL+gt72SXFsN9oyW6mj81nMS9MaakeH 3JQDcYLdbKbz6Ba3/yY/GJrcflCFm30RDA== -----END CERTIFICATE-----Generated at Sun Jul 20 16:31:45 2025 by rpki-client