$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/3898AE761E0111E9A590C837C4F9AE02.roa File: 3898AE761E0111E9A590C837C4F9AE02.roa (raw, json) Hash identifier: GTHxRdiWkwKoCJkILQ/VmLAzCJ/v6j1d+mpv2CNiZwQ= Subject key identifier: 2C:8A:A5:35:1A:22:EC:B3:ED:06:B9:33:57:91:68:AD:19:96:CF:2D Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Certificate serial: 39CA Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/3898AE761E0111E9A590C837C4F9AE02.roa Signing time: Mon 14 Jul 2025 14:50:31 +0000 ROA not before: Mon 14 Jul 2025 14:50:31 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 136182 IP address blocks: 210.86.205.0/24 maxlen: 24 210.86.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 14:20:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14794 (0x39ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Validity Not Before: Jul 14 14:50:31 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68751937-b22b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:9e:c6:cf:d9:36:6b:a4:b0:c8:90:7c:ff:28: d5:93:aa:52:56:d6:ce:ca:2d:61:b8:5a:8e:a7:71: 71:af:14:e8:79:a1:40:e8:c2:fc:89:72:df:64:22: 5e:fc:df:92:51:77:5c:1a:67:0b:9c:33:1c:a4:60: 59:78:c9:0b:aa:3f:24:14:a5:15:94:89:76:19:bb: ac:5b:15:f3:c3:bc:d9:5c:2a:3a:90:85:a1:05:b0: 6b:6e:8a:c7:ee:97:a6:f7:2f:42:46:0e:17:d0:30: 6d:7b:b0:7d:63:20:e1:37:9f:07:3b:4e:4a:99:80: 13:aa:48:5d:3f:fa:b9:c3:94:6e:e0:4c:10:b1:72: b1:27:51:bb:93:69:64:75:90:95:b9:f4:52:5e:99: 37:5f:7f:3b:c6:90:37:ff:6a:12:14:30:16:e9:a0: 36:4d:52:2c:77:6b:34:ce:e7:98:24:36:83:40:d6: 32:ad:05:eb:a2:bf:41:12:a6:33:9b:1d:90:11:3b: 42:98:61:48:de:e5:6b:56:ed:0a:55:f0:37:f8:c7: 30:bd:68:94:d3:eb:39:77:b3:ac:8c:2a:f6:43:03: ac:03:3f:2a:35:4c:af:a1:39:1c:cd:8e:90:fb:0f: e1:f4:8b:b9:d1:53:91:25:5b:9e:97:30:03:df:72: b0:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:8A:A5:35:1A:22:EC:B3:ED:06:B9:33:57:91:68:AD:19:96:CF:2D X509v3 Authority Key Identifier: keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/3898AE761E0111E9A590C837C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.86.205.0/24 210.86.222.0/24 Signature Algorithm: sha256WithRSAEncryption 78:9d:68:7d:07:96:8d:ca:08:40:ea:db:0e:4b:6e:28:34:31: 62:ea:72:06:65:b4:a1:4f:7b:f7:ae:4b:e2:e2:9e:ec:ce:05: c0:d1:1a:c4:4b:26:c0:95:f1:ba:dd:26:0c:89:d7:9c:b9:bb: 29:ea:05:f0:c3:e9:2f:08:51:14:65:d9:87:3f:67:23:60:24: dc:3d:0c:69:99:87:85:11:73:c5:bf:5a:56:c0:16:65:3b:54: 1b:68:a2:1a:1e:12:8e:c7:73:a7:d1:6e:57:8d:4c:30:fc:90: 8f:84:86:05:23:7c:d1:59:af:07:ce:85:70:5c:ac:55:10:66: 62:58:da:99:90:af:20:bb:23:c5:2c:f5:96:d8:09:e8:fe:e0: b8:83:4b:98:c5:c9:fd:c5:bf:ae:c6:31:e6:a6:9a:ea:74:78: 52:8a:9e:07:5f:b8:e9:10:f5:05:f7:52:8c:30:79:e5:ea:e3: e4:3c:44:78:31:b9:82:49:df:1f:37:e5:6a:30:c0:21:8c:75: 00:c5:03:83:6a:b9:bd:92:4f:af:28:b7:4c:0d:61:0d:ca:53: 00:8c:a3:2f:4d:7a:23:c0:5b:da:be:27:e5:b1:41:85:3d:a4: 0f:b6:1f:49:c6:16:87:ce:75:bb:6e:5b:bc:b5:0a:66:b6:16: f5:ce:7d:ea -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICOcowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB NDM3QUYwMkMwHhcNMjUwNzE0MTQ1MDMxWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODc1MTkzNy1iMjJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoJ7Gz9k2a6SwyJB8/yjVk6pSVtbOyi1huFqOp3FxrxToeaFA6ML8iXLfZCJe /N+SUXdcGmcLnDMcpGBZeMkLqj8kFKUVlIl2GbusWxXzw7zZXCo6kIWhBbBrborH 7pem9y9CRg4X0DBte7B9YyDhN58HO05KmYATqkhdP/q5w5Ru4EwQsXKxJ1G7k2lk dZCVufRSXpk3X387xpA3/2oSFDAW6aA2TVIsd2s0zueYJDaDQNYyrQXror9BEqYz mx2QETtCmGFI3uVrVu0KVfA3+McwvWiU0+s5d7OsjCr2QwOsAz8qNUyvoTkczY6Q +w/h9Iu50VORJVuelzAD33KwzQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFCyKpTUa Iuyz7Qa5M1eRaK0Zls8tMB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4 Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvMzg5OEFFNzYx RTAxMTFFOUE1OTBDODM3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBADSVs0DBADSVt4wDQYJKoZIhvcNAQELBQADggEBAHidaH0H lo3KCEDq2w5Lbig0MWLqcgZltKFPe/euS+LinuzOBcDRGsRLJsCV8brdJgyJ15y5 uynqBfDD6S8IURRl2Yc/ZyNgJNw9DGmZh4URc8W/WlbAFmU7VBtoohoeEo7Hc6fR bleNTDD8kI+EhgUjfNFZrwfOhXBcrFUQZmJY2pmQryC7I8Us9ZbYCej+4LiDS5jF yf3Fv67GMeammup0eFKKngdfuOkQ9QX3UowweeXq4+Q8RHgxuYJJ3x835WowwCGM dQDFA4Nqub2ST68ot0wNYQ3KUwCMoy9NeiPAW9q+J+WxQYU9pA+2H0nGFofOdbtu W7y1Cma2FvXOfeo= -----END CERTIFICATE-----Generated at Mon Jul 21 13:10:44 2025 by rpki-client