$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/3A86E6C61E0111E9A590C837C4F9AE02.roa File: 3A86E6C61E0111E9A590C837C4F9AE02.roa (raw, json) Hash identifier: UEVJKbssBlr3JXe81RgYLuS099/jHQ/cyL9q1KMhTPs= Subject key identifier: 2E:82:36:2B:EB:99:2D:4E:1C:DE:12:16:B5:C6:FC:F4:0A:31:CD:C5 Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Certificate serial: 39CD Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/3A86E6C61E0111E9A590C837C4F9AE02.roa Signing time: Mon 14 Jul 2025 14:50:35 +0000 ROA not before: Mon 14 Jul 2025 14:50:35 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 136581 IP address blocks: 61.90.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 14:20:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14797 (0x39cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Validity Not Before: Jul 14 14:50:35 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=6875193a-4d84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c9:4c:99:1a:eb:90:c6:9b:b1:b5:7a:30:6a: 1f:e3:2c:6e:46:7e:fc:56:df:7a:57:40:77:57:2d: b2:b9:5d:04:5f:4b:03:a4:98:2d:8d:90:fe:30:8f: 77:44:82:b6:41:59:f0:40:6a:62:09:c7:a6:09:19: 37:57:e9:3e:c9:fc:94:65:6c:6d:d9:73:02:8c:97: 3f:32:99:70:3b:9e:06:ea:e1:91:4e:f8:6a:46:aa: 03:2b:66:71:da:8b:38:e8:4a:0b:29:85:26:b1:ba: 1c:5c:04:bd:66:90:06:16:3b:0f:1a:50:f4:fd:7b: 5c:96:00:fc:9b:b4:f0:e5:45:d4:c3:37:f8:da:cc: bf:de:64:79:fe:8c:2f:06:ba:ae:cd:4d:e4:f3:2c: 5a:2e:2d:6d:a1:9a:3e:c9:97:fc:f0:10:c7:34:8e: 1d:81:01:45:84:60:b9:a9:be:87:a4:21:be:77:ab: 2b:72:50:1d:fd:f2:90:69:4e:65:ac:2f:93:da:a2: 39:6a:85:d8:75:32:84:b5:de:1d:e9:b8:8d:c2:e0: 49:5f:2a:e7:ed:7c:44:5d:31:34:78:93:7a:18:cf: d6:7b:2b:d1:e6:71:b1:bf:54:0f:05:21:b1:d6:88: b2:be:86:81:c7:cd:fc:1d:fc:1f:0e:3f:c4:ad:e4: e7:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:82:36:2B:EB:99:2D:4E:1C:DE:12:16:B5:C6:FC:F4:0A:31:CD:C5 X509v3 Authority Key Identifier: keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/3A86E6C61E0111E9A590C837C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.90.183.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:99:6b:06:83:55:38:d9:91:a3:1f:89:56:69:c9:4e:be:46: e7:93:cf:ee:02:a7:96:b5:9f:ad:15:03:14:f4:be:1d:ad:48: 72:8e:04:0b:40:6c:6b:c4:18:91:b8:75:16:1b:e1:42:c7:3f: d9:b9:6a:49:1b:fd:c8:9a:70:07:35:ec:78:5d:4d:5a:e2:da: ac:78:70:af:66:78:b6:30:6f:8b:19:04:ef:fd:ad:90:31:52: 43:7c:66:16:12:6a:c9:42:b9:ad:18:60:ab:1c:8b:01:b4:dc: 6a:d3:ed:4d:14:f8:b3:41:bc:a8:9c:68:dc:71:b7:90:7f:ff: ad:a9:a6:ce:55:47:3e:81:e7:80:36:8c:0f:33:58:9c:08:d2: 4d:c3:e5:dd:99:03:9d:2c:89:50:ae:ae:e2:09:37:29:67:fd: f0:2d:f1:c0:78:bd:76:b0:51:b6:88:63:c3:d2:cc:e5:65:54: fa:3a:2e:d4:48:3f:85:b4:74:5a:ec:8c:ef:4d:9d:32:68:c4: 53:92:fc:2e:a2:c5:fa:0b:4a:a3:a6:22:40:50:e0:10:f9:aa: 72:b1:2b:4c:b8:88:16:21:2b:d5:a7:2d:d8:63:30:b6:05:1e: 7d:d9:d5:da:0a:c5:53:bc:3d:79:16:73:6e:40:f9:65:b4:31: cd:e4:1c:d2 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICOc0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB NDM3QUYwMkMwHhcNMjUwNzE0MTQ1MDM1WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODc1MTkzYS00ZDg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmslMmRrrkMabsbV6MGof4yxuRn78Vt96V0B3Vy2yuV0EX0sDpJgtjZD+MI93 RIK2QVnwQGpiCcemCRk3V+k+yfyUZWxt2XMCjJc/MplwO54G6uGRTvhqRqoDK2Zx 2os46EoLKYUmsbocXAS9ZpAGFjsPGlD0/XtclgD8m7Tw5UXUwzf42sy/3mR5/owv BrquzU3k8yxaLi1toZo+yZf88BDHNI4dgQFFhGC5qb6HpCG+d6srclAd/fKQaU5l rC+T2qI5aoXYdTKEtd4d6biNwuBJXyrn7XxEXTE0eJN6GM/WeyvR5nGxv1QPBSGx 1oiyvoaBx838HfwfDj/EreTnDwIDAQABo4IClTCCApEwHQYDVR0OBBYEFC6CNivr mS1OHN4SFrXG/PQKMc3FMB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4 Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvM0E4NkU2QzYx RTAxMTFFOUE1OTBDODM3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAA9WrcwDQYJKoZIhvcNAQELBQADggEBAH2ZawaDVTjZkaMf iVZpyU6+RueTz+4Cp5a1n60VAxT0vh2tSHKOBAtAbGvEGJG4dRYb4ULHP9m5akkb /ciacAc17HhdTVri2qx4cK9meLYwb4sZBO/9rZAxUkN8ZhYSaslCua0YYKsciwG0 3GrT7U0U+LNBvKicaNxxt5B//62pps5VRz6B54A2jA8zWJwI0k3D5d2ZA50siVCu ruIJNyln/fAt8cB4vXawUbaIY8PSzOVlVPo6LtRIP4W0dFrsjO9NnTJoxFOS/C6i xfoLSqOmIkBQ4BD5qnKxK0y4iBYhK9WnLdhjMLYFHn3Z1doKxVO8PXkWc25A+WW0 Mc3kHNI= -----END CERTIFICATE-----Generated at Mon Jul 21 12:38:25 2025 by rpki-client