$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/4CDDE8864EB511ED835E9C71C4F9AE02.roa File: 4CDDE8864EB511ED835E9C71C4F9AE02.roa (raw, json) Hash identifier: QhPAdwEfq1VhUnfZB9ujq8oRTtrmJrIbdR+ljDUxixw= Subject key identifier: 1F:7F:7D:0C:96:40:4C:13:03:CB:3F:DA:B6:05:5F:09:A0:2D:57:58 Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Certificate serial: 3A1B Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/4CDDE8864EB511ED835E9C71C4F9AE02.roa Signing time: Mon 14 Jul 2025 14:51:41 +0000 ROA not before: Mon 14 Jul 2025 14:51:41 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 9464 IP address blocks: 171.102.164.0/23 maxlen: 24 2001:fb0:10b8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 14:20:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14875 (0x3a1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Validity Not Before: Jul 14 14:51:41 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=6875197d-6f69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1b:27:ff:8f:05:a6:97:27:16:d9:79:7d:25: 20:68:87:f1:db:7a:8a:61:c6:9a:06:10:0e:48:32: 1a:0f:89:88:ff:88:10:72:c7:49:00:b9:8c:a7:29: 58:32:30:18:a1:07:3c:c4:da:b7:ae:e3:a2:c4:9a: d9:33:b2:8b:31:ea:45:ee:b5:53:a3:8b:46:03:b1: 97:6e:46:4f:8c:9b:c0:c1:a3:c0:6c:6d:d0:cf:20: d8:92:4f:c8:97:cc:3b:44:8d:c0:2f:d3:b0:8c:03: d9:8e:97:0e:d8:0d:9d:d2:7d:cb:dd:f0:ca:9d:ea: 30:a3:f2:fa:11:58:a2:aa:64:cd:b6:70:10:2c:f9: 81:aa:bd:a1:0a:61:94:2e:a8:9b:6d:d3:49:de:be: ee:82:33:fc:da:e6:26:d4:47:af:6c:68:88:b8:a4: bb:a8:34:7d:28:9d:91:35:42:d0:8d:d3:27:4e:ef: 35:04:b0:40:91:de:d5:52:22:0a:60:81:52:0f:e4: 35:8a:6d:52:a5:1e:a2:17:16:f0:59:08:11:6e:99: b2:16:61:bf:3f:8d:bf:6b:15:c8:af:40:a2:60:72: 47:f9:84:8d:33:1a:73:3a:7c:8d:0e:e5:93:d9:fd: c6:e2:65:6b:2f:3b:22:10:ff:ec:60:c8:bf:91:b8: 81:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:7F:7D:0C:96:40:4C:13:03:CB:3F:DA:B6:05:5F:09:A0:2D:57:58 X509v3 Authority Key Identifier: keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/4CDDE8864EB511ED835E9C71C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 171.102.164.0/23 IPv6: 2001:fb0:10b8::/48 Signature Algorithm: sha256WithRSAEncryption 2c:6f:f8:e9:af:6e:92:8e:1a:60:46:4f:e0:01:4a:b8:8f:b6: 3e:5b:ae:51:14:4f:31:07:ca:50:55:95:b0:b3:a0:d0:b0:6f: 09:cd:ee:d1:6a:5b:90:7d:b8:3c:f0:8f:9b:2a:5c:92:41:d3: dc:d5:0f:d0:1d:e4:06:3f:0e:d4:e3:be:4a:60:9b:a5:c3:ac: 3b:41:d2:78:1b:c8:bf:c7:19:38:e3:1b:66:0d:0a:37:84:c3: 61:aa:8d:47:2e:28:61:f7:35:9d:5c:51:14:78:b8:63:1c:f3: 9b:03:10:dd:4e:08:33:d6:fe:01:48:b4:0b:9b:5f:b4:ff:58: fc:6e:fe:fa:44:93:f7:a5:bc:ce:67:a5:c1:ec:49:bb:b1:4d: 78:df:73:84:dd:93:7e:4e:78:6a:24:ab:4c:ec:4f:8b:55:b8: 90:58:7b:40:0c:9f:bb:a7:c5:e2:be:5e:a0:de:97:8d:e9:ee: a1:ff:1f:e4:d9:d8:ae:dd:4c:20:5e:27:7a:85:0c:50:3c:7a: 91:4a:56:01:45:07:61:0c:d4:88:0c:93:8b:54:2a:00:6f:85: 57:e8:0e:d3:c3:29:7a:60:05:b0:cc:0c:82:c6:74:fe:1b:2c: 4e:bc:81:6a:0d:50:56:a1:49:81:42:2b:4c:df:63:76:7e:0b: b3:ed:5b:ea -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICOhswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB NDM3QUYwMkMwHhcNMjUwNzE0MTQ1MTQxWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODc1MTk3ZC02ZjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtxsn/48FppcnFtl5fSUgaIfx23qKYcaaBhAOSDIaD4mI/4gQcsdJALmMpylY MjAYoQc8xNq3ruOixJrZM7KLMepF7rVTo4tGA7GXbkZPjJvAwaPAbG3QzyDYkk/I l8w7RI3AL9OwjAPZjpcO2A2d0n3L3fDKneowo/L6EViiqmTNtnAQLPmBqr2hCmGU LqibbdNJ3r7ugjP82uYm1EevbGiIuKS7qDR9KJ2RNULQjdMnTu81BLBAkd7VUiIK YIFSD+Q1im1SpR6iFxbwWQgRbpmyFmG/P42/axXIr0CiYHJH+YSNMxpzOnyNDuWT 2f3G4mVrLzsiEP/sYMi/kbiBPwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFB9/fQyW QEwTA8s/2rYFXwmgLVdYMB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4 Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvNENEREU4ODY0 RUI1MTFFRDgzNUU5QzcxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAGrZqQwDwQCAAIwCQMHACABD7AQuDANBgkqhkiG9w0BAQsF AAOCAQEALG/46a9uko4aYEZP4AFKuI+2PluuURRPMQfKUFWVsLOg0LBvCc3u0Wpb kH24PPCPmypckkHT3NUP0B3kBj8O1OO+SmCbpcOsO0HSeBvIv8cZOOMbZg0KN4TD YaqNRy4oYfc1nVxRFHi4YxzzmwMQ3U4IM9b+AUi0C5tftP9Y/G7++kST96W8zmel wexJu7FNeN9zhN2Tfk54aiSrTOxPi1W4kFh7QAyfu6fF4r5eoN6Xjenuof8f5NnY rt1MIF4neoUMUDx6kUpWAUUHYQzUiAyTi1QqAG+FV+gO08MpemAFsMwMgsZ0/hss TryBag1QVqFJgUIrTN9jdn4Ls+1b6g== -----END CERTIFICATE-----Generated at Sun Jul 20 14:41:01 2025 by rpki-client