$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/437E7DA21E0111E9A590C837C4F9AE02.roa File: 437E7DA21E0111E9A590C837C4F9AE02.roa (raw, json) Hash identifier: xBOASBTyc5BAP/rTKEERD/wkc6z8BL43h84GSCcuNPE= Subject key identifier: 78:C5:C2:6F:DF:53:C3:8C:F7:5B:F5:BA:F8:89:18:02:E4:EE:24:66 Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Certificate serial: 39E7 Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/437E7DA21E0111E9A590C837C4F9AE02.roa Signing time: Mon 14 Jul 2025 14:50:57 +0000 ROA not before: Mon 14 Jul 2025 14:50:57 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 24042 IP address blocks: 119.46.74.0/24 maxlen: 24 203.144.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 14:20:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14823 (0x39e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Validity Not Before: Jul 14 14:50:57 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68751950-446b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:3f:af:f8:dd:9d:13:b9:53:3b:31:f0:f2:9b: e0:1a:d6:ee:72:a0:d9:5a:ec:23:66:d2:9a:c4:07: 1b:92:88:77:78:af:24:08:e5:b4:46:c6:20:42:84: 57:6a:69:70:11:ad:c7:c6:4f:69:36:65:d8:85:d4: 1f:c6:cf:16:cb:28:04:0f:4f:30:4d:c1:16:93:9c: 6d:44:75:63:13:d7:9b:9a:9b:fe:28:ce:8d:ba:13: 60:ff:8b:ba:cf:c8:f0:29:79:f8:85:2b:82:35:2d: 9c:f4:10:23:14:e5:a0:4f:ba:99:3b:45:a8:9e:1c: 70:b1:7f:ab:b5:46:82:5c:f9:d0:03:99:33:ac:3d: e1:80:d2:40:15:b5:85:e2:f7:07:91:ab:a4:db:ad: 81:59:4c:ee:e6:32:c2:1d:b6:65:98:f1:69:46:4a: 71:60:2a:f9:69:33:95:38:0d:2a:df:64:e2:12:62: 50:ba:2a:ee:96:31:53:71:fd:6e:0c:87:68:a9:c6: 66:11:9b:96:aa:c8:2f:55:32:c5:78:1f:ec:64:50: ee:73:41:13:4c:5e:c1:e5:e0:02:85:2e:91:23:fb: b6:51:8d:06:84:29:e2:0a:28:de:f6:27:16:2c:b7: e9:7c:a0:9e:72:ab:b6:64:bc:b4:da:a1:89:05:bc: 0d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:C5:C2:6F:DF:53:C3:8C:F7:5B:F5:BA:F8:89:18:02:E4:EE:24:66 X509v3 Authority Key Identifier: keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/437E7DA21E0111E9A590C837C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 119.46.74.0/24 203.144.147.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:e2:e5:41:f5:fa:49:b0:fc:07:93:a9:d2:61:f5:2a:04:b7: 5e:c5:13:fb:6b:6e:46:a1:cf:82:18:19:5e:09:04:ef:6b:8a: 6a:e8:c3:3b:7d:80:e9:13:44:fa:b6:3a:34:bc:b5:fb:4f:89: d1:51:bd:fd:fc:c7:a6:19:fe:26:62:5d:68:45:b3:c4:ec:a7: ab:f5:0d:cc:20:01:a2:05:fc:4b:2e:dd:a7:b2:75:e8:47:1d: 5e:42:83:c4:77:43:ba:76:12:33:4d:e6:3d:2c:92:15:aa:1e: 78:4a:14:17:7e:91:fc:11:5f:85:8f:be:f2:86:f4:02:54:79: 36:34:04:13:95:0b:00:a9:75:3e:e6:8b:9a:bb:f8:4f:0f:d9: 8d:9d:9d:35:d3:71:e7:ec:8e:aa:f2:8a:f4:b5:02:6d:50:f7: bb:4c:58:80:ae:46:31:c9:5d:a4:ad:b7:3b:1a:97:d9:c3:48: 4e:b3:71:0a:fc:d4:87:98:3a:d1:d5:26:95:7d:4c:d1:36:6e: 85:8b:2c:f9:0e:68:98:6a:24:f5:1b:ec:78:60:99:ea:1f:77: a6:dc:1c:70:37:07:27:0a:5e:8f:3a:a6:bd:16:ac:89:a5:16: 8d:b0:e7:65:72:28:7e:87:4a:8f:00:d4:f5:39:bc:c5:7d:a7: 83:d5:52:5c -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICOecwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB NDM3QUYwMkMwHhcNMjUwNzE0MTQ1MDU3WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODc1MTk1MC00NDZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3D+v+N2dE7lTOzHw8pvgGtbucqDZWuwjZtKaxAcbkoh3eK8kCOW0RsYgQoRX amlwEa3Hxk9pNmXYhdQfxs8WyygED08wTcEWk5xtRHVjE9ebmpv+KM6NuhNg/4u6 z8jwKXn4hSuCNS2c9BAjFOWgT7qZO0WonhxwsX+rtUaCXPnQA5kzrD3hgNJAFbWF 4vcHkauk262BWUzu5jLCHbZlmPFpRkpxYCr5aTOVOA0q32TiEmJQuiruljFTcf1u DIdoqcZmEZuWqsgvVTLFeB/sZFDuc0ETTF7B5eAChS6RI/u2UY0GhCniCije9icW LLfpfKCecqu2ZLy02qGJBbwN0wIDAQABo4ICmzCCApcwHQYDVR0OBBYEFHjFwm/f U8OM91v1uviJGALk7iRmMB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4 Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvNDM3RTdEQTIx RTAxMTFFOUE1OTBDODM3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAB3LkoDBADLkJMwDQYJKoZIhvcNAQELBQADggEBAB3i5UH1 +kmw/AeTqdJh9SoEt17FE/trbkahz4IYGV4JBO9rimrowzt9gOkTRPq2OjS8tftP idFRvf38x6YZ/iZiXWhFs8Tsp6v1DcwgAaIF/Esu3aeydehHHV5Cg8R3Q7p2EjNN 5j0skhWqHnhKFBd+kfwRX4WPvvKG9AJUeTY0BBOVCwCpdT7mi5q7+E8P2Y2dnTXT cefsjqryivS1Am1Q97tMWICuRjHJXaSttzsal9nDSE6zcQr81IeYOtHVJpV9TNE2 boWLLPkOaJhqJPUb7Hhgmeofd6bcHHA3BycKXo86pr0WrImlFo2w52VyKH6HSo8A 1PU5vMV9p4PVUlw= -----END CERTIFICATE-----Generated at Sun Jul 20 14:28:49 2025 by rpki-client