$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/517080EA1E0111E9A590C837C4F9AE02.roa File: 517080EA1E0111E9A590C837C4F9AE02.roa (raw, json) Hash identifier: NtA+XKXcLAj4opHIFu1Hv6LeDb8c+C4EJdPMo1dOezw= Subject key identifier: C6:3F:18:DE:64:94:A3:55:99:AB:CF:8C:D6:E6:43:DD:F6:20:D1:A6 Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Certificate serial: 3A03 Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/517080EA1E0111E9A590C837C4F9AE02.roa Signing time: Mon 14 Jul 2025 14:51:20 +0000 ROA not before: Mon 14 Jul 2025 14:51:20 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 55451 IP address blocks: 119.46.81.0/24 maxlen: 24 119.46.82.0/24 maxlen: 24 2001:fb0:10a2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 14:20:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14851 (0x3a03) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Validity Not Before: Jul 14 14:51:20 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68751968-ef92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:44:12:f5:17:9e:c4:ef:d6:42:60:73:20:b6: ef:b4:f8:17:b7:ac:8d:1a:ec:1c:a8:b1:da:f7:49: 82:06:73:49:03:9c:d8:e7:e5:68:3f:44:70:9a:26: 23:f2:06:d5:bb:96:6f:1e:4e:52:ab:1b:96:39:85: 56:4f:22:fe:14:56:b4:7d:ea:81:69:ce:46:b5:3b: 0d:de:f3:50:f0:5b:56:cc:da:2f:56:8e:ad:54:54: c1:fc:b5:25:9e:d8:16:01:8b:07:ba:2b:58:1f:76: 06:a4:69:22:8c:1f:d6:fd:a1:c9:b5:06:36:1e:95: c3:7b:dd:45:5f:a6:93:7f:11:5b:7f:32:7a:59:9a: 18:79:08:c2:2f:4d:44:45:0a:71:64:f8:5b:e4:5e: be:f4:a6:99:ca:a3:f5:23:3c:39:6b:3b:41:ff:c7: 4e:50:a8:ec:2c:2f:e8:5e:15:4a:93:fe:05:5c:16: d0:d3:88:10:3e:83:c6:df:96:d0:79:da:20:cc:d5: 3f:c6:d1:b3:dd:01:6b:dd:f3:76:db:11:d1:a2:91: d6:c6:b6:f4:e0:94:82:1a:b8:0f:9f:7b:31:04:85: f2:73:54:90:c4:fb:b0:55:43:f4:59:f6:10:fc:8a: 39:c7:53:83:9f:86:9d:df:19:fd:8f:87:65:e5:15: 92:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:3F:18:DE:64:94:A3:55:99:AB:CF:8C:D6:E6:43:DD:F6:20:D1:A6 X509v3 Authority Key Identifier: keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/517080EA1E0111E9A590C837C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 119.46.81.0-119.46.82.255 IPv6: 2001:fb0:10a2::/48 Signature Algorithm: sha256WithRSAEncryption a7:3f:cc:57:c4:05:71:52:dc:88:fa:f8:d4:cc:60:b7:dd:50: 5b:5c:a8:27:ca:6f:84:c5:98:7a:29:b2:8a:04:5d:01:66:c1: b8:95:61:9b:2e:e4:95:70:05:88:06:bf:40:b2:19:d0:9a:1d: 44:6e:39:52:aa:88:50:13:e2:22:35:ef:ce:b8:a2:5b:c9:67: 11:f5:e9:81:af:47:5e:ce:55:64:74:d4:c3:4b:ff:fd:dc:d0: 59:83:01:f8:5a:f1:f8:65:9e:9f:70:7b:a2:95:6d:d6:ae:2e: ba:a2:ff:89:46:1b:7c:83:9c:2b:9a:be:e9:5a:70:34:8b:31: b5:34:1c:a1:09:e7:5b:21:10:c0:34:e9:76:e2:c7:5f:6d:ae: 1b:31:7e:d9:86:58:cb:f1:10:34:2b:6e:a7:1b:f1:09:d9:6c: 2c:bd:af:c9:06:40:50:db:48:e1:fe:bf:cf:84:af:97:18:34: 7c:fd:75:85:26:91:2c:fa:48:71:8d:26:32:06:ec:d6:c4:04: 32:a2:c4:ae:f7:f4:40:1b:e9:e4:cc:fe:36:83:04:d7:07:64: 95:36:07:c0:c4:a6:b3:31:bd:65:67:2b:77:a9:d7:09:bc:dc: f1:4a:96:c5:d6:13:3c:9f:35:6b:69:c8:86:48:09:f6:52:ed: ba:b1:e3:08 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgICOgMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB NDM3QUYwMkMwHhcNMjUwNzE0MTQ1MTIwWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODc1MTk2OC1lZjkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsUQS9ReexO/WQmBzILbvtPgXt6yNGuwcqLHa90mCBnNJA5zY5+VoP0RwmiYj 8gbVu5ZvHk5SqxuWOYVWTyL+FFa0feqBac5GtTsN3vNQ8FtWzNovVo6tVFTB/LUl ntgWAYsHuitYH3YGpGkijB/W/aHJtQY2HpXDe91FX6aTfxFbfzJ6WZoYeQjCL01E RQpxZPhb5F6+9KaZyqP1Izw5aztB/8dOUKjsLC/oXhVKk/4FXBbQ04gQPoPG35bQ edogzNU/xtGz3QFr3fN22xHRopHWxrb04JSCGrgPn3sxBIXyc1SQxPuwVUP0WfYQ /Io5x1ODn4ad3xn9j4dl5RWS9QIDAQABo4ICrjCCAqowHQYDVR0OBBYEFMY/GN5k lKNVmavPjNbmQ932INGmMB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4 Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvNTE3MDgwRUEx RTAxMTFFOUE1OTBDODM3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOAYIKwYBBQUHAQcBAf8E KTAnMBQEAgABMA4wDAMEAHcuUQMEAHcuUjAPBAIAAjAJAwcAIAEPsBCiMA0GCSqG SIb3DQEBCwUAA4IBAQCnP8xXxAVxUtyI+vjUzGC33VBbXKgnym+ExZh6KbKKBF0B ZsG4lWGbLuSVcAWIBr9AshnQmh1EbjlSqohQE+IiNe/OuKJbyWcR9emBr0dezlVk dNTDS//93NBZgwH4WvH4ZZ6fcHuilW3Wri66ov+JRht8g5wrmr7pWnA0izG1NByh CedbIRDANOl24sdfba4bMX7ZhljL8RA0K26nG/EJ2Wwsva/JBkBQ20jh/r/PhK+X GDR8/XWFJpEs+khxjSYyBuzWxAQyosSu9/RAG+nkzP42gwTXB2SVNgfAxKazMb1l Zyt3qdcJvNzxSpbF1hM8nzVraciGSAn2Uu26seMI -----END CERTIFICATE-----Generated at Sun Jul 20 14:29:49 2025 by rpki-client