$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/3B6CD8201E0111E9A590C837C4F9AE02.roa File: 3B6CD8201E0111E9A590C837C4F9AE02.roa (raw, json) Hash identifier: OFLfwsiD70JEXZOJXMXGmslqoXtNoTfm34DKElykFdY= Subject key identifier: 40:83:37:54:A5:FE:AD:A8:8F:7A:FB:EC:AA:C6:5A:B5:8C:F8:F7:F1 Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Certificate serial: 39CE Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/3B6CD8201E0111E9A590C837C4F9AE02.roa Signing time: Mon 14 Jul 2025 14:50:36 +0000 ROA not before: Mon 14 Jul 2025 14:50:36 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 138344 IP address blocks: 210.86.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 14:20:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14798 (0x39ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Validity Not Before: Jul 14 14:50:36 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=6875193c-3f33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e6:ac:fd:15:e0:dd:43:6a:18:ba:ad:0a:85: 45:53:d0:70:bc:d6:b4:e3:37:77:16:d4:f2:19:bf: aa:12:41:19:a9:ad:ab:45:03:73:a4:69:43:5f:8a: 36:07:a4:ac:de:ec:a5:4e:3a:99:83:0e:e7:c7:22: 25:08:0f:fd:c5:5b:b2:20:ef:e3:27:53:fd:f5:32: cb:71:71:71:5f:d3:e8:26:09:7a:bd:47:04:57:50: 47:ff:3b:9a:ef:72:27:fb:ec:9f:34:2d:d1:e8:95: fe:33:14:f6:6a:20:7e:d0:8b:24:53:64:7c:07:99: 2f:48:b8:ac:8e:42:12:73:38:cd:5e:b6:63:1f:85: a8:a5:78:22:1c:2f:74:21:ea:a9:d7:6f:c6:5a:8a: 08:40:c9:92:54:d8:6f:cf:60:09:10:04:55:b9:3b: 2c:10:f1:89:95:ab:ea:1f:0e:c5:b4:84:4f:43:96: 64:b0:c6:20:3c:ec:28:e2:64:6a:8b:d9:bc:07:e2: b0:5b:94:f4:b8:8c:a3:fe:5d:39:25:21:e2:b5:9b: 0b:b2:eb:44:89:f8:c7:6b:39:35:37:4e:89:4b:69: 10:dc:2c:d3:d1:47:71:67:47:db:a7:8e:03:24:f0: 28:a3:cd:8e:77:d6:bf:b4:bf:93:1d:79:7c:3e:c1: ae:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:83:37:54:A5:FE:AD:A8:8F:7A:FB:EC:AA:C6:5A:B5:8C:F8:F7:F1 X509v3 Authority Key Identifier: keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/3B6CD8201E0111E9A590C837C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.86.216.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:fb:0d:ce:29:fa:ae:f7:db:45:06:28:f5:50:e8:ad:7f:50: 75:1d:b9:3a:7e:9f:6f:6a:82:6b:5a:9f:ac:b7:44:0b:fe:2d: 62:dc:5a:da:e2:0c:0a:ac:88:a1:71:ba:d6:4c:9a:fd:c7:1a: e7:2e:d8:d6:20:4c:bc:59:4b:27:2b:e2:b4:39:8a:4a:09:13: 6a:ae:e7:b5:55:b9:05:b4:fb:06:29:53:3e:09:04:c1:27:2a: 81:fd:21:3a:7a:df:f3:3c:63:a0:95:88:ae:6e:a6:4d:4c:bc: 0f:ea:0f:48:a2:db:b5:e8:9a:a3:bd:f6:28:8a:50:96:8c:8d: c1:aa:13:07:9c:9b:c8:3e:e0:a2:1e:82:f7:c6:55:d7:cc:15: 02:16:90:a7:cb:66:3d:46:3e:f7:00:fa:4c:3f:c2:28:f4:28: 64:fe:27:04:a0:3b:99:29:d2:63:93:06:4d:43:7b:ad:9a:95: cd:4d:d6:c5:62:6a:b1:11:83:7f:ba:cf:c7:4b:69:e4:51:51: db:4a:2b:e4:00:a1:7d:f5:84:d8:46:d6:53:9a:3f:77:9f:89: 2a:85:ad:0e:51:1b:84:3f:ee:46:cd:be:9a:8e:69:15:38:28: 6f:66:6a:c6:81:01:f5:d3:fb:f2:bc:2c:0e:18:27:56:3a:1b: 03:eb:be:fe -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICOc4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB NDM3QUYwMkMwHhcNMjUwNzE0MTQ1MDM2WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODc1MTkzYy0zZjMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvuas/RXg3UNqGLqtCoVFU9BwvNa04zd3FtTyGb+qEkEZqa2rRQNzpGlDX4o2 B6Ss3uylTjqZgw7nxyIlCA/9xVuyIO/jJ1P99TLLcXFxX9PoJgl6vUcEV1BH/zua 73In++yfNC3R6JX+MxT2aiB+0IskU2R8B5kvSLisjkISczjNXrZjH4WopXgiHC90 Ieqp12/GWooIQMmSVNhvz2AJEARVuTssEPGJlavqHw7FtIRPQ5ZksMYgPOwo4mRq i9m8B+KwW5T0uIyj/l05JSHitZsLsutEifjHazk1N06JS2kQ3CzT0UdxZ0fbp44D JPAoo82Od9a/tL+THXl8PsGuXQIDAQABo4IClTCCApEwHQYDVR0OBBYEFECDN1Sl /q2oj3r77KrGWrWM+PfxMB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4 Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvM0I2Q0Q4MjAx RTAxMTFFOUE1OTBDODM3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADSVtgwDQYJKoZIhvcNAQELBQADggEBAHr7Dc4p+q7320UG KPVQ6K1/UHUduTp+n29qgmtan6y3RAv+LWLcWtriDAqsiKFxutZMmv3HGucu2NYg TLxZSycr4rQ5ikoJE2qu57VVuQW0+wYpUz4JBMEnKoH9ITp63/M8Y6CViK5upk1M vA/qD0ii27XomqO99iiKUJaMjcGqEwecm8g+4KIegvfGVdfMFQIWkKfLZj1GPvcA +kw/wij0KGT+JwSgO5kp0mOTBk1De62alc1N1sViarERg3+6z8dLaeRRUdtKK+QA oX31hNhG1lOaP3efiSqFrQ5RG4Q/7kbNvpqOaRU4KG9masaBAfXT+/K8LA4YJ1Y6 GwPrvv4= -----END CERTIFICATE-----Generated at Mon Jul 21 12:34:16 2025 by rpki-client