$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/5218D5921E0111E9A590C837C4F9AE02.roa File: 5218D5921E0111E9A590C837C4F9AE02.roa (raw, json) Hash identifier: lrkFSXybIqxFoEp+StOWIENlTeSpRd7f2cLEnz71VRM= Subject key identifier: D8:DE:F6:10:91:B8:56:AD:FF:97:4D:28:DE:B2:B7:98:D3:6A:3D:24 Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Certificate serial: 3A04 Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/5218D5921E0111E9A590C837C4F9AE02.roa Signing time: Mon 14 Jul 2025 14:51:21 +0000 ROA not before: Mon 14 Jul 2025 14:51:21 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 55476 IP address blocks: 110.170.246.0/24 maxlen: 24 203.144.129.0/24 maxlen: 24 2001:fb0:101c::/48 maxlen: 48 2001:fb0:109e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 14:20:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14852 (0x3a04) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Validity Not Before: Jul 14 14:51:21 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68751969-d8e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:3d:41:ae:45:93:0e:ba:a9:08:fd:a8:82:97: 59:d6:b6:53:5d:55:37:16:ff:0d:14:c7:e0:08:89: e4:29:8d:8e:32:1c:c8:a2:88:0a:f1:47:77:39:69: 87:96:00:9e:68:e9:bc:f8:43:1a:35:d1:44:ab:cf: 2b:33:96:b8:ad:68:2d:33:dc:ee:d5:d4:9a:56:8d: af:f7:14:7f:2d:cf:d1:8c:bc:d3:56:c7:d8:d5:a7: c7:b1:27:23:63:9f:7a:b9:64:a6:6f:04:ee:f1:25: 1d:7d:f4:5a:04:93:c3:2a:32:25:aa:5a:13:09:62: db:1f:1d:f0:41:d1:32:f2:4e:98:66:46:7d:5d:8f: e3:f7:81:c4:7b:26:38:3f:f7:52:9d:59:d6:b6:db: 79:f1:c6:c6:a9:58:8b:15:79:7d:8a:98:e7:59:58: a2:14:c2:b8:ae:95:f7:53:af:75:a0:9b:a7:a3:07: 33:22:6a:fc:a5:f8:d2:6d:aa:2a:30:86:7b:32:53: d6:bc:e9:01:ec:4f:b8:ad:66:a5:b3:cc:1c:29:06: 10:15:fd:94:59:28:b0:44:fb:31:ff:8a:50:0c:15: 41:69:b5:14:e6:79:df:3b:b8:9c:24:2c:52:40:ce: 16:13:9d:13:c8:69:a6:64:fc:38:e3:dc:4c:ca:08: e5:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:DE:F6:10:91:B8:56:AD:FF:97:4D:28:DE:B2:B7:98:D3:6A:3D:24 X509v3 Authority Key Identifier: keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/5218D5921E0111E9A590C837C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.170.246.0/24 203.144.129.0/24 IPv6: 2001:fb0:101c::/48 2001:fb0:109e::/48 Signature Algorithm: sha256WithRSAEncryption 20:56:4a:f1:45:72:94:a9:39:18:d3:a1:1a:42:9a:2c:5c:10: a5:25:d8:56:63:dc:f9:20:1d:3a:40:f9:db:02:11:58:51:91: 1c:3f:36:0d:e8:3d:48:4f:4f:8f:cf:ac:0d:88:f7:55:8b:4c: 21:5e:59:d4:39:e8:d7:75:32:56:8f:18:d5:e2:3c:d8:b7:2c: 0d:47:e7:c4:37:c7:20:75:05:fa:14:b0:6b:8d:72:56:df:25: 65:c8:70:b6:30:eb:3d:72:92:25:68:22:ce:0d:6e:02:1a:85: 68:f0:95:d9:3e:b6:a6:03:56:cc:f6:fe:b8:10:7c:d2:fc:66: 8d:9a:bd:39:76:a6:41:ad:0f:bb:b7:b4:40:26:c8:2e:3f:ba: b8:c5:a9:d0:96:ef:a8:43:58:d5:f5:53:f2:b4:5d:21:4e:b6: 5a:68:03:47:e7:62:51:1a:f1:4a:4c:b2:b0:4d:54:e1:2b:24: 7f:b5:5d:cf:26:5d:ab:a7:7a:d7:72:15:78:db:a8:d8:f0:9f: 0c:bd:ce:3b:d7:56:bb:d9:b9:75:b1:cd:7e:53:b5:aa:73:71: b7:bc:b3:f5:2d:18:ed:63:4a:35:d1:44:8e:db:01:03:ea:cc: 40:dd:74:dd:16:f2:bb:fe:46:1f:9d:25:59:11:51:cb:f6:8c: ef:79:83:da -----BEGIN CERTIFICATE----- MIIFkTCCBHmgAwIBAgICOgQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB NDM3QUYwMkMwHhcNMjUwNzE0MTQ1MTIxWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODc1MTk2OS1kOGU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8T1BrkWTDrqpCP2ogpdZ1rZTXVU3Fv8NFMfgCInkKY2OMhzIoogK8Ud3OWmH lgCeaOm8+EMaNdFEq88rM5a4rWgtM9zu1dSaVo2v9xR/Lc/RjLzTVsfY1afHsScj Y596uWSmbwTu8SUdffRaBJPDKjIlqloTCWLbHx3wQdEy8k6YZkZ9XY/j94HEeyY4 P/dSnVnWttt58cbGqViLFXl9ipjnWViiFMK4rpX3U691oJunowczImr8pfjSbaoq MIZ7MlPWvOkB7E+4rWals8wcKQYQFf2UWSiwRPsx/4pQDBVBabUU5nnfO7icJCxS QM4WE50TyGmmZPw449xMygjlgwIDAQABo4ICtTCCArEwHQYDVR0OBBYEFNje9hCR uFat/5dNKN6yt5jTaj0kMB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4 Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvNTIxOEQ1OTIx RTAxMTFFOUE1OTBDODM3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPwYIKwYBBQUHAQcBAf8E MDAuMBIEAgABMAwDBABuqvYDBADLkIEwGAQCAAIwEgMHACABD7AQHAMHACABD7AQ njANBgkqhkiG9w0BAQsFAAOCAQEAIFZK8UVylKk5GNOhGkKaLFwQpSXYVmPc+SAd OkD52wIRWFGRHD82Deg9SE9Pj8+sDYj3VYtMIV5Z1Dno13UyVo8Y1eI82LcsDUfn xDfHIHUF+hSwa41yVt8lZchwtjDrPXKSJWgizg1uAhqFaPCV2T62pgNWzPb+uBB8 0vxmjZq9OXamQa0Pu7e0QCbILj+6uMWp0JbvqENY1fVT8rRdIU62WmgDR+diURrx SkyysE1U4Sskf7VdzyZdq6d613IVeNuo2PCfDL3OO9dWu9m5dbHNflO1qnNxt7yz 9S0Y7WNKNdFEjtsBA+rMQN103Rbyu/5GH50lWRFRy/aM73mD2g== -----END CERTIFICATE-----Generated at Sun Jul 20 22:47:00 2025 by rpki-client