$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/8D0B94E6729F11EC85AE6D45C4F9AE02.roa File: 8D0B94E6729F11EC85AE6D45C4F9AE02.roa (raw, json) Hash identifier: rR4XSfinSG1f/2SeV1UtfcFtDBJ1QtfsC8T7jw+JB5E= Subject key identifier: B0:B4:80:63:AA:32:F4:5A:AB:A5:2A:79:4C:74:66:A0:EA:37:E3:46 Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Certificate serial: 3A15 Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/8D0B94E6729F11EC85AE6D45C4F9AE02.roa Signing time: Mon 14 Jul 2025 14:51:36 +0000 ROA not before: Mon 14 Jul 2025 14:51:36 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 58692 IP address blocks: 119.46.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 14:20:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14869 (0x3a15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Validity Not Before: Jul 14 14:51:36 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68751978-d998 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0e:b1:b1:d6:31:b2:e4:ac:b3:78:da:16:ad: 50:ec:87:af:62:81:83:78:11:e2:5a:b9:e3:c8:50: d0:d4:d8:26:78:7c:61:ad:3d:46:0c:97:fa:f6:76: e6:11:bf:1f:20:b8:e3:67:7b:26:e1:3f:3e:65:8d: ba:33:c0:a2:0e:2a:4f:ed:4c:68:63:eb:62:60:fa: b0:b9:1a:ee:b8:e1:48:27:67:b5:0e:aa:ad:7c:38: 93:bc:e4:9d:ff:4e:89:93:d8:90:7a:fb:d9:c0:9a: 36:b3:fc:bf:b8:d3:ec:e9:8b:71:06:c6:63:98:36: b6:22:12:f2:32:53:1d:15:9b:80:ff:01:55:10:a7: 8b:b9:1a:0c:61:c3:10:3a:f8:4b:a7:4e:1e:1b:d1: 70:e3:8a:65:42:22:36:5d:65:81:e3:88:85:fb:39: 54:dd:98:07:42:d4:2b:97:42:c6:92:a8:fd:cc:95: d9:a4:3a:b6:e8:9b:b1:73:c7:75:3d:51:2c:8c:c7: e2:33:c2:26:1a:d1:e8:1b:54:55:1e:3f:0c:1a:3c: 0d:59:ce:13:09:43:37:86:c3:b1:0b:60:31:36:08: ad:bf:75:ae:37:3b:a9:b6:a8:91:95:6b:07:11:89: d6:0e:b8:02:6e:e5:5e:d9:c7:a4:a3:1f:d4:f5:b3: f6:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:B4:80:63:AA:32:F4:5A:AB:A5:2A:79:4C:74:66:A0:EA:37:E3:46 X509v3 Authority Key Identifier: keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/8D0B94E6729F11EC85AE6D45C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 119.46.126.0/24 Signature Algorithm: sha256WithRSAEncryption 32:de:b3:ab:16:83:89:cb:76:7e:02:32:07:b6:26:e6:79:4d: b0:13:95:4a:94:8b:8a:e4:40:55:f5:f8:ab:6f:f4:9e:4f:32: 00:5a:15:57:f0:ae:87:db:e2:45:43:8b:0a:8b:b7:8e:69:95: c5:d3:a1:fd:17:93:f0:fd:00:10:32:cf:bc:8d:7c:69:c4:e4: 74:52:bb:fd:0b:d0:77:80:57:89:66:62:0e:4b:cc:bf:7d:55: f9:09:e8:ed:d7:24:23:d8:7e:6c:f1:6d:a3:bc:74:5d:93:74: 24:60:f1:c0:74:5d:9d:7e:eb:64:4c:d6:6b:63:52:1f:95:43: 33:d3:be:0e:46:93:dd:00:a6:41:0e:61:86:f3:3a:84:83:91: 2d:22:ef:02:01:2c:4f:b8:34:bc:a6:25:c6:d4:aa:e1:7e:ab: e1:57:27:1e:89:c9:ad:a3:e8:3d:cb:0a:95:fe:53:b0:f6:50: fd:98:e6:fb:c2:41:04:47:aa:3c:22:af:b3:f6:c7:cc:ca:5d: ce:98:85:fb:cd:21:b5:70:27:ad:f4:a6:f5:3e:58:bd:d6:10: cf:d1:ba:ba:08:33:7d:f8:ff:63:72:71:2f:69:c8:2a:80:50: 86:86:e8:f6:03:37:49:4d:8d:e5:ee:83:f9:d9:9f:4f:a1:d4: 31:69:6d:5d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICOhUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB NDM3QUYwMkMwHhcNMjUwNzE0MTQ1MTM2WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODc1MTk3OC1kOTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtw6xsdYxsuSss3jaFq1Q7IevYoGDeBHiWrnjyFDQ1NgmeHxhrT1GDJf69nbm Eb8fILjjZ3sm4T8+ZY26M8CiDipP7UxoY+tiYPqwuRruuOFIJ2e1DqqtfDiTvOSd /06Jk9iQevvZwJo2s/y/uNPs6YtxBsZjmDa2IhLyMlMdFZuA/wFVEKeLuRoMYcMQ OvhLp04eG9Fw44plQiI2XWWB44iF+zlU3ZgHQtQrl0LGkqj9zJXZpDq26Juxc8d1 PVEsjMfiM8ImGtHoG1RVHj8MGjwNWc4TCUM3hsOxC2AxNgitv3WuNzuptqiRlWsH EYnWDrgCbuVe2cekox/U9bP29wIDAQABo4IClTCCApEwHQYDVR0OBBYEFLC0gGOq MvRaq6UqeUx0ZqDqN+NGMB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4 Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvOEQwQjk0RTY3 MjlGMTFFQzg1QUU2RDQ1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAB3Ln4wDQYJKoZIhvcNAQELBQADggEBADLes6sWg4nLdn4C Mge2JuZ5TbATlUqUi4rkQFX1+Ktv9J5PMgBaFVfwrofb4kVDiwqLt45plcXTof0X k/D9ABAyz7yNfGnE5HRSu/0L0HeAV4lmYg5LzL99VfkJ6O3XJCPYfmzxbaO8dF2T dCRg8cB0XZ1+62RM1mtjUh+VQzPTvg5Gk90ApkEOYYbzOoSDkS0i7wIBLE+4NLym JcbUquF+q+FXJx6Jya2j6D3LCpX+U7D2UP2Y5vvCQQRHqjwir7P2x8zKXc6YhfvN IbVwJ630pvU+WL3WEM/RuroIM334/2NycS9pyCqAUIaG6PYDN0lNjeXug/nZn0+h 1DFpbV0= -----END CERTIFICATE-----Generated at Sun Jul 20 18:46:46 2025 by rpki-client