$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/296C70368D0A11EE89E31163C4F9AE02.roa File: 296C70368D0A11EE89E31163C4F9AE02.roa (raw, json) Hash identifier: OZ16ozrcBe43MqjV6wXCXW5TxmwDgs2wbRKlJl3IPBg= Subject key identifier: F2:DB:AC:C1:3D:F7:83:E9:EE:CA:2C:AE:32:15:64:FE:B5:E0:89:13 Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Certificate serial: 39DA Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/296C70368D0A11EE89E31163C4F9AE02.roa Signing time: Mon 14 Jul 2025 14:50:45 +0000 ROA not before: Mon 14 Jul 2025 14:50:45 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 152130 IP address blocks: 110.170.136.0/24 maxlen: 24 2001:fb0:1081::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 14:20:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14810 (0x39da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Validity Not Before: Jul 14 14:50:45 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68751945-34f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:88:e2:15:1e:77:d4:a8:b8:d9:4c:f5:67:ff: 91:95:33:4b:39:7e:1b:a4:e6:64:07:20:63:0a:e2: 04:21:82:f2:1a:8b:36:4c:f7:74:3c:34:d2:83:16: 23:4d:50:7a:92:bd:97:17:a5:e0:d3:42:16:9e:7a: 57:90:cb:f5:cf:ec:b9:2f:dd:cd:f1:8c:84:a2:31: 17:fc:47:8b:6a:cc:73:b4:a7:92:cd:f2:7a:8b:97: ce:61:f6:33:84:9b:b0:53:62:12:dc:c3:bc:b3:d3: 4e:a4:14:06:98:9c:9a:b5:5f:29:e9:a1:b0:af:ea: 38:1d:92:5c:d3:e6:95:4c:05:eb:69:75:42:83:57: a3:46:d5:9c:f5:8b:4d:5e:3c:ee:44:72:7d:c8:e7: 9c:b3:0a:28:f5:f6:52:6f:02:22:76:83:c5:0a:38: 63:da:0a:7e:dd:75:81:af:60:9e:0a:3d:fe:62:61: a5:b6:21:d5:80:ec:ad:59:a6:5f:f7:e1:bc:be:90: 48:b0:42:aa:0d:22:0d:23:e7:19:43:01:37:9d:ab: 8b:4c:36:eb:ea:6c:f8:24:f3:86:6a:9c:2a:82:49: a0:c0:a6:d3:40:63:b2:69:b8:05:ae:37:41:6f:b1: be:8f:d5:11:46:7b:af:60:95:ce:f8:17:f2:8b:ba: 5b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:DB:AC:C1:3D:F7:83:E9:EE:CA:2C:AE:32:15:64:FE:B5:E0:89:13 X509v3 Authority Key Identifier: keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/296C70368D0A11EE89E31163C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.170.136.0/24 IPv6: 2001:fb0:1081::/48 Signature Algorithm: sha256WithRSAEncryption 8d:f3:42:c3:89:ae:24:b4:99:34:12:6e:3b:d4:dd:a4:c8:a8: 7a:a7:6a:01:ef:45:c1:5a:37:7f:e0:cd:b1:7f:93:aa:d1:fe: e2:be:81:52:6a:fd:f2:88:98:1e:ca:7c:85:46:d3:c9:e1:71: 3b:37:6f:c1:d8:cc:9b:0d:5d:f6:32:7f:72:8d:42:45:9d:63: ca:14:09:20:8a:9e:a1:39:4f:94:7d:64:0c:38:58:fd:dc:07: a7:e4:ee:79:7c:7e:43:5e:79:54:e4:c2:31:96:73:66:63:65: 8a:1b:24:39:05:01:95:ab:c2:0b:24:84:e0:c9:7c:a6:8a:78: 59:f7:63:9b:0c:da:ad:24:4e:10:b0:b5:d8:f8:b2:75:54:a3: 68:47:28:71:84:7a:4b:0c:d2:6b:7f:89:f6:9f:f0:85:b2:9d: ce:83:a2:71:e6:55:9b:bf:77:36:87:0a:01:67:80:13:4c:2c: ee:e4:39:ea:23:3f:96:44:74:16:85:0f:b6:31:54:14:e4:36: be:6b:3d:74:5c:c2:26:fe:da:95:19:3e:b5:df:37:20:9d:df: e5:c8:3a:f1:3c:ee:59:fe:13:06:46:21:42:7f:59:f1:24:3a: 73:2d:6b:1d:58:e5:c7:b8:4b:3a:15:ce:37:ba:c6:d8:5a:ed: 61:40:31:4f -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICOdowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB NDM3QUYwMkMwHhcNMjUwNzE0MTQ1MDQ1WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODc1MTk0NS0zNGY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo4jiFR531Ki42Uz1Z/+RlTNLOX4bpOZkByBjCuIEIYLyGos2TPd0PDTSgxYj TVB6kr2XF6Xg00IWnnpXkMv1z+y5L93N8YyEojEX/EeLasxztKeSzfJ6i5fOYfYz hJuwU2IS3MO8s9NOpBQGmJyatV8p6aGwr+o4HZJc0+aVTAXraXVCg1ejRtWc9YtN XjzuRHJ9yOecswoo9fZSbwIidoPFCjhj2gp+3XWBr2CeCj3+YmGltiHVgOytWaZf 9+G8vpBIsEKqDSINI+cZQwE3nauLTDbr6mz4JPOGapwqgkmgwKbTQGOyabgFrjdB b7G+j9URRnuvYJXO+Bfyi7pbvQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFPLbrME9 94Pp7sosrjIVZP614IkTMB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4 Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvMjk2QzcwMzY4 RDBBMTFFRTg5RTMxMTYzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABuqogwDwQCAAIwCQMHACABD7AQgTANBgkqhkiG9w0BAQsF AAOCAQEAjfNCw4muJLSZNBJuO9TdpMioeqdqAe9FwVo3f+DNsX+TqtH+4r6BUmr9 8oiYHsp8hUbTyeFxOzdvwdjMmw1d9jJ/co1CRZ1jyhQJIIqeoTlPlH1kDDhY/dwH p+TueXx+Q155VOTCMZZzZmNlihskOQUBlavCCySE4Ml8pop4WfdjmwzarSROELC1 2PiydVSjaEcocYR6SwzSa3+J9p/whbKdzoOiceZVm793NocKAWeAE0ws7uQ56iM/ lkR0FoUPtjFUFOQ2vms9dFzCJv7alRk+td83IJ3f5cg68TzuWf4TBkYhQn9Z8SQ6 cy1rHVjlx7hLOhXON7rG2FrtYUAxTw== -----END CERTIFICATE-----Generated at Mon Jul 21 12:44:29 2025 by rpki-client