$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/4BFBBF6C1E0111E9A590C837C4F9AE02.roa File: 4BFBBF6C1E0111E9A590C837C4F9AE02.roa (raw, json) Hash identifier: e/bZDwaTYDpzUGLJTkkssJ+tKHqMHdXlxH+0h0OXoZ4= Subject key identifier: 19:94:08:E5:3A:EE:18:6D:4D:AE:D5:2C:86:19:37:7B:63:28:92:8D Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Certificate serial: 39FA Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/4BFBBF6C1E0111E9A590C837C4F9AE02.roa Signing time: Mon 14 Jul 2025 14:51:13 +0000 ROA not before: Mon 14 Jul 2025 14:51:13 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 38815 IP address blocks: 61.90.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 14:20:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14842 (0x39fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Validity Not Before: Jul 14 14:51:13 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68751961-d1b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:12:a1:19:ed:5d:af:33:bd:6f:4a:20:0e:29: c2:7a:01:00:02:f8:e2:44:58:08:bf:29:22:0c:2f: 0a:97:62:06:c4:7d:11:5a:b6:28:b5:00:70:05:fe: bc:03:45:19:7d:75:af:ec:c5:e1:2f:21:74:6a:18: 7a:cd:d4:e9:cf:00:c3:38:c6:6d:68:71:52:82:da: 32:09:8a:34:6f:0c:0d:0e:51:79:95:16:ee:ba:d3: 2e:81:aa:a8:62:14:d2:cd:5b:b1:ff:be:66:26:f5: 5b:b0:22:15:5e:2c:41:1a:e2:0f:7b:1d:45:71:b3: 50:2d:a0:83:e5:55:9c:27:f6:de:bc:c0:28:b1:75: 3f:f4:07:96:b8:f0:ab:dc:9a:68:aa:8b:72:8b:ed: a8:3d:7b:05:a3:7b:d2:99:dd:dc:1d:7c:f7:cd:13: cf:54:c2:b0:99:7e:5e:52:ab:04:c6:c0:66:96:4e: ba:02:c5:b4:a6:29:da:dd:ce:58:3c:2a:b2:ec:c7: 45:0d:85:23:d6:30:3b:07:ed:0c:00:89:52:a8:5d: 84:a2:dc:c3:35:99:3c:f7:3c:9a:b5:4b:a7:db:3a: c3:1a:2a:94:89:ca:9d:58:c0:6a:a1:e5:e1:00:14: 7b:aa:48:bb:3d:76:c1:0a:63:d2:f9:e8:ad:d4:09: 68:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:94:08:E5:3A:EE:18:6D:4D:AE:D5:2C:86:19:37:7B:63:28:92:8D X509v3 Authority Key Identifier: keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/4BFBBF6C1E0111E9A590C837C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.90.157.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:d9:a3:06:fd:6a:24:cd:e4:9d:e8:92:d5:16:32:8a:ea:66: 6e:b0:b3:90:70:a5:57:09:51:41:2e:b3:33:fb:fd:36:b7:67: 66:42:34:c8:55:a4:0f:75:d8:56:15:26:9f:c3:05:a6:67:7a: e2:97:ec:df:fc:05:b5:a5:65:35:16:5c:76:64:c7:a9:29:0c: 85:9c:6a:b1:af:99:74:d6:81:7c:2b:ee:7e:fe:a4:a3:d5:a3: 4f:9e:d1:49:20:cb:cb:20:6f:80:82:3a:10:e5:1d:b4:f8:d6: 6c:2e:49:42:1d:17:b0:74:c5:42:e1:92:6f:4b:a8:23:ca:c4: da:c6:8e:7c:27:9a:11:46:61:2b:20:53:3c:22:3d:cd:8c:3e: 29:53:6b:56:dd:d9:43:e1:bc:f9:67:b5:bd:7f:a0:cf:0f:e9: ed:27:0c:7b:4d:6c:99:5b:3d:1a:16:ac:97:33:2f:b7:4c:f8: 20:b1:2e:bc:ca:4a:f0:dc:e6:f1:eb:78:ab:93:03:b0:3d:a9: 66:4d:4f:5e:d3:3d:ce:28:4a:5c:da:26:d5:55:1e:d9:ce:13: 92:76:b1:b9:b9:e3:c5:7f:60:58:66:33:b8:33:80:db:9d:5a: 65:2f:5c:64:e4:9b:fb:b0:4f:5d:5d:3d:d1:66:96:e0:12:4b: 3a:21:4e:0b -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICOfowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB NDM3QUYwMkMwHhcNMjUwNzE0MTQ1MTEzWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODc1MTk2MS1kMWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxhKhGe1drzO9b0ogDinCegEAAvjiRFgIvykiDC8Kl2IGxH0RWrYotQBwBf68 A0UZfXWv7MXhLyF0ahh6zdTpzwDDOMZtaHFSgtoyCYo0bwwNDlF5lRbuutMugaqo YhTSzVux/75mJvVbsCIVXixBGuIPex1FcbNQLaCD5VWcJ/bevMAosXU/9AeWuPCr 3Jpoqotyi+2oPXsFo3vSmd3cHXz3zRPPVMKwmX5eUqsExsBmlk66AsW0pina3c5Y PCqy7MdFDYUj1jA7B+0MAIlSqF2EotzDNZk89zyatUun2zrDGiqUicqdWMBqoeXh ABR7qki7PXbBCmPS+eit1AloxQIDAQABo4IClTCCApEwHQYDVR0OBBYEFBmUCOU6 7hhtTa7VLIYZN3tjKJKNMB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4 Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvNEJGQkJGNkMx RTAxMTFFOUE1OTBDODM3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAA9Wp0wDQYJKoZIhvcNAQELBQADggEBAErZowb9aiTN5J3o ktUWMorqZm6ws5BwpVcJUUEuszP7/Ta3Z2ZCNMhVpA912FYVJp/DBaZneuKX7N/8 BbWlZTUWXHZkx6kpDIWcarGvmXTWgXwr7n7+pKPVo0+e0Ukgy8sgb4CCOhDlHbT4 1mwuSUIdF7B0xULhkm9LqCPKxNrGjnwnmhFGYSsgUzwiPc2MPilTa1bd2UPhvPln tb1/oM8P6e0nDHtNbJlbPRoWrJczL7dM+CCxLrzKSvDc5vHreKuTA7A9qWZNT17T Pc4oSlzaJtVVHtnOE5J2sbm548V/YFhmM7gzgNudWmUvXGTkm/uwT11dPdFmluAS SzohTgs= -----END CERTIFICATE-----Generated at Wed Jul 23 02:30:47 2025 by rpki-client