$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/494F7A061E0111E9A590C837C4F9AE02.roa File: 494F7A061E0111E9A590C837C4F9AE02.roa (raw, json) Hash identifier: u7UFs7Bb1bgfEf1JMCPUovqZ13IeIKp/xgwJfZJqDM0= Subject key identifier: D6:17:C8:9B:62:E5:7D:CF:2D:24:15:0B:C0:AB:F7:45:35:A5:22:67 Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Certificate serial: 39F5 Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/494F7A061E0111E9A590C837C4F9AE02.roa Signing time: Mon 14 Jul 2025 14:51:09 +0000 ROA not before: Mon 14 Jul 2025 14:51:09 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 38448 IP address blocks: 61.91.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 14:20:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14837 (0x39f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Validity Not Before: Jul 14 14:51:09 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=6875195d-8a83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:62:f9:2c:96:7f:21:55:46:d2:30:a5:37:4d: 65:01:d0:1b:18:99:16:2e:dc:2e:5f:f7:66:39:01: 64:0c:5f:3a:83:3c:0c:c8:7b:17:7f:52:d0:2e:60: b0:26:49:a4:62:29:31:72:25:26:4e:6f:08:00:b2: 50:2d:ea:e4:d3:08:58:a0:0f:74:e7:b5:7e:9f:24: af:ed:0a:16:b5:8d:f6:80:b3:a0:46:af:4c:a8:9a: b0:29:ec:0d:ee:72:c4:5b:d4:34:0a:fe:19:82:a6: 23:b5:19:67:29:88:8a:77:ab:f5:3b:dd:00:fc:fe: 0b:58:8e:0a:29:c7:25:a2:27:5c:7c:b8:42:77:76: 75:3c:67:9d:b1:ee:cc:a1:7f:ba:bb:1f:59:3b:42: ff:e5:d3:92:34:0b:c7:e3:c1:62:7e:02:c6:a7:02: 35:d0:78:18:a0:e5:d3:d6:41:d5:4c:9c:8d:16:27: bf:82:24:a0:b1:7a:bd:27:db:e2:6f:04:8a:e4:94: fc:bd:ff:42:1d:78:40:02:c2:5b:eb:d2:f6:39:57: 0c:97:11:73:fc:88:4d:d8:5b:c9:50:22:99:04:9f: 43:4c:42:54:14:97:ef:c1:86:6e:ca:5d:b8:22:ec: a1:46:a6:92:12:07:7b:aa:a0:07:1d:e1:82:3b:ca: 4b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:17:C8:9B:62:E5:7D:CF:2D:24:15:0B:C0:AB:F7:45:35:A5:22:67 X509v3 Authority Key Identifier: keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/494F7A061E0111E9A590C837C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.91.91.0/24 Signature Algorithm: sha256WithRSAEncryption 03:bb:48:5a:fb:d6:00:b6:7d:f1:d4:a8:1f:1f:d1:bd:fc:5e: 71:5f:9c:b9:dc:b4:fa:14:ac:ad:75:5a:49:23:d1:13:cf:6a: e9:f7:d4:3e:c2:65:31:d5:29:6e:fa:8f:06:6c:46:e6:8f:9e: 14:11:aa:f0:d2:4a:c1:eb:2a:87:74:52:13:33:43:d4:fa:61: 22:48:8d:6c:2c:7b:39:64:22:0c:1e:a4:4f:f7:3f:29:c9:d7: 4b:6c:05:6c:68:35:c3:30:b0:2d:1f:c4:bc:fd:64:1b:ae:cd: da:ec:6b:31:09:40:b2:a1:2a:c3:d4:cf:f9:2c:ae:01:ca:eb: ed:74:0b:e9:be:48:73:0d:e2:07:51:10:5f:6b:2d:89:ba:25: 63:8e:83:23:7e:ab:e8:87:3b:45:37:0b:29:4d:9f:76:4a:88: 58:22:65:68:56:e5:b2:5e:db:31:d0:29:b8:a6:9b:ff:bd:f8: 6d:af:78:1e:91:c6:b1:84:f8:a2:8e:9d:e4:b8:66:b0:cc:e4: 60:8a:8d:82:58:aa:d8:7f:f0:01:8e:b7:ce:1a:42:2f:a1:63: e5:e3:94:2c:14:1f:b9:8e:34:6d:50:74:6e:23:8e:ad:dd:a4: f2:46:20:2f:25:b1:02:69:b0:51:ec:05:a4:dd:c1:b8:65:68: 8d:e6:ab:69 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICOfUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB NDM3QUYwMkMwHhcNMjUwNzE0MTQ1MTA5WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODc1MTk1ZC04YTgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7GL5LJZ/IVVG0jClN01lAdAbGJkWLtwuX/dmOQFkDF86gzwMyHsXf1LQLmCw JkmkYikxciUmTm8IALJQLerk0whYoA9057V+nySv7QoWtY32gLOgRq9MqJqwKewN 7nLEW9Q0Cv4ZgqYjtRlnKYiKd6v1O90A/P4LWI4KKccloidcfLhCd3Z1PGedse7M oX+6ux9ZO0L/5dOSNAvH48FifgLGpwI10HgYoOXT1kHVTJyNFie/giSgsXq9J9vi bwSK5JT8vf9CHXhAAsJb69L2OVcMlxFz/IhN2FvJUCKZBJ9DTEJUFJfvwYZuyl24 IuyhRqaSEgd7qqAHHeGCO8pLFQIDAQABo4IClTCCApEwHQYDVR0OBBYEFNYXyJti 5X3PLSQVC8Cr90U1pSJnMB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4 Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvNDk0RjdBMDYx RTAxMTFFOUE1OTBDODM3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAA9W1swDQYJKoZIhvcNAQELBQADggEBAAO7SFr71gC2ffHU qB8f0b38XnFfnLnctPoUrK11Wkkj0RPPaun31D7CZTHVKW76jwZsRuaPnhQRqvDS SsHrKod0UhMzQ9T6YSJIjWwsezlkIgwepE/3PynJ10tsBWxoNcMwsC0fxLz9ZBuu zdrsazEJQLKhKsPUz/ksrgHK6+10C+m+SHMN4gdREF9rLYm6JWOOgyN+q+iHO0U3 CylNn3ZKiFgiZWhW5bJe2zHQKbimm/+9+G2veB6RxrGE+KKOneS4ZrDM5GCKjYJY qth/8AGOt84aQi+hY+XjlCwUH7mONG1QdG4jjq3dpPJGIC8lsQJpsFHsBaTdwbhl aI3mq2k= -----END CERTIFICATE-----Generated at Mon Jul 21 12:47:01 2025 by rpki-client