$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/35D6766E1E0111E9A590C837C4F9AE02.roa File: 35D6766E1E0111E9A590C837C4F9AE02.roa (raw, json) Hash identifier: hFXbUAdUqD1wPChl6Bn5ZHh0DUHgiqa5zUJS3qvVI7U= Subject key identifier: 64:64:78:4B:BA:E8:B8:1B:B0:B4:E2:D3:54:5E:1B:E4:18:26:1F:A9 Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Certificate serial: 39C2 Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/35D6766E1E0111E9A590C837C4F9AE02.roa Signing time: Mon 14 Jul 2025 14:50:25 +0000 ROA not before: Mon 14 Jul 2025 14:50:25 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 133791 IP address blocks: 110.170.142.0/24 maxlen: 24 203.144.154.0/24 maxlen: 24 2001:fb0:10b6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 14:20:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14786 (0x39c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Validity Not Before: Jul 14 14:50:25 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68751931-fbd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:84:c5:9b:27:5a:01:37:93:30:58:9f:c0:11: 53:b5:c1:5d:5b:e4:48:18:76:ea:62:46:79:90:4f: ae:22:42:cc:20:47:ff:9d:94:f3:c7:b5:b5:67:2f: 0b:9c:07:06:3f:03:ef:5d:85:78:1c:6b:f1:0e:9e: 77:97:53:2a:38:06:cf:d7:37:a3:be:2a:6f:10:f2: 7e:df:85:df:54:a2:b7:9a:55:d5:8a:23:a9:c8:d1: 17:96:0e:b2:ec:46:d1:b3:ac:4c:d8:ad:10:b0:85: 65:ed:80:69:2f:90:60:24:4b:8c:7d:b3:11:e0:00: 04:fb:fc:2c:9f:bd:d9:f8:f3:64:64:15:18:e6:96: 5f:6f:db:f5:68:26:17:53:40:56:86:db:e2:c4:66: a2:25:2e:ae:da:6d:a2:13:1c:d1:53:a8:b0:de:1c: b6:b7:c1:36:94:94:84:f7:ea:5e:81:c8:15:54:8a: 03:a6:fc:9a:5b:55:73:3e:d7:63:5e:01:88:af:a3: 75:e1:f5:41:0f:02:31:36:38:85:92:1f:84:a7:96: 4b:da:90:a3:35:ec:c4:a8:90:f9:ad:c0:37:ff:24: df:29:29:9e:ee:e9:f4:bf:2f:0c:e5:78:8e:81:55: 21:1a:32:93:91:17:4f:ba:36:02:c8:36:a9:5f:7c: f9:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:64:78:4B:BA:E8:B8:1B:B0:B4:E2:D3:54:5E:1B:E4:18:26:1F:A9 X509v3 Authority Key Identifier: keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/35D6766E1E0111E9A590C837C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.170.142.0/24 203.144.154.0/24 IPv6: 2001:fb0:10b6::/48 Signature Algorithm: sha256WithRSAEncryption 90:fb:d4:39:01:9a:f1:49:11:d6:ee:2c:12:15:9e:0b:69:9e: 1d:53:09:e2:a7:a2:f1:d3:9e:a4:22:e7:53:e8:cb:e6:46:1c: 72:23:f5:46:5f:b0:c1:3c:d6:be:50:44:9a:c8:13:e1:fd:00: b1:b1:ec:97:b5:27:55:9b:87:55:d6:3b:11:09:0c:a4:5e:42: 78:88:ef:6d:25:1b:a5:04:a8:fa:68:43:03:a8:cb:8b:bb:07: a3:58:ce:cd:91:d3:4f:53:bf:d9:35:f3:60:a5:7d:1d:d0:1c: 94:13:cf:95:c2:8f:54:aa:c0:cf:64:af:84:ce:f9:67:30:60: a6:f3:a8:7b:8f:13:d1:03:7b:08:3e:f6:0d:87:80:b9:c9:d3: b8:fb:1d:54:2b:88:f0:42:35:11:b7:96:13:03:1a:f7:91:80: 14:d6:c7:1c:ea:8e:9a:af:22:fe:62:79:4b:32:1d:2d:ee:8b: c5:e5:09:23:72:a4:0d:98:50:0a:8a:22:19:41:32:2e:d3:b0: e0:ca:14:85:32:b1:71:1d:47:b8:bb:f9:bb:f3:8b:da:57:1e: 64:43:7c:50:ed:59:cd:50:94:a8:3f:b1:e2:92:b3:3f:ea:c2: 94:da:37:14:af:ea:f4:71:b9:d3:dd:54:c0:fa:aa:5a:f1:87: cf:40:42:18 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICOcIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB NDM3QUYwMkMwHhcNMjUwNzE0MTQ1MDI1WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODc1MTkzMS1mYmQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwYTFmydaATeTMFifwBFTtcFdW+RIGHbqYkZ5kE+uIkLMIEf/nZTzx7W1Zy8L nAcGPwPvXYV4HGvxDp53l1MqOAbP1zejvipvEPJ+34XfVKK3mlXViiOpyNEXlg6y 7EbRs6xM2K0QsIVl7YBpL5BgJEuMfbMR4AAE+/wsn73Z+PNkZBUY5pZfb9v1aCYX U0BWhtvixGaiJS6u2m2iExzRU6iw3hy2t8E2lJSE9+pegcgVVIoDpvyaW1VzPtdj XgGIr6N14fVBDwIxNjiFkh+Ep5ZL2pCjNezEqJD5rcA3/yTfKSme7un0vy8M5XiO gVUhGjKTkRdPujYCyDapX3z5gwIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFGRkeEu6 6LgbsLTi01ReG+QYJh+pMB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4 Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvMzVENjc2NkUx RTAxMTFFOUE1OTBDODM3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBABuqo4DBADLkJowDwQCAAIwCQMHACABD7AQtjANBgkqhkiG 9w0BAQsFAAOCAQEAkPvUOQGa8UkR1u4sEhWeC2meHVMJ4qei8dOepCLnU+jL5kYc ciP1Rl+wwTzWvlBEmsgT4f0AsbHsl7UnVZuHVdY7EQkMpF5CeIjvbSUbpQSo+mhD A6jLi7sHo1jOzZHTT1O/2TXzYKV9HdAclBPPlcKPVKrAz2SvhM75ZzBgpvOoe48T 0QN7CD72DYeAucnTuPsdVCuI8EI1EbeWEwMa95GAFNbHHOqOmq8i/mJ5SzIdLe6L xeUJI3KkDZhQCooiGUEyLtOw4MoUhTKxcR1HuLv5u/OL2lceZEN8UO1ZzVCUqD+x 4pKzP+rClNo3FK/q9HG5091UwPqqWvGHz0BCGA== -----END CERTIFICATE-----Generated at Tue Jul 22 12:10:45 2025 by rpki-client