$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/A1FFA2C41E0211E9862ECE3FC4F9AE02.roa File: A1FFA2C41E0211E9862ECE3FC4F9AE02.roa (raw, json) Hash identifier: 5Qsv1mlKLG5nmi52pm8MIsKM2u4QQ7rEmWh/qqYxpOQ= Subject key identifier: 80:F2:EE:DB:8B:F4:DF:4C:51:12:6E:80:46:D4:F3:80:67:56:DB:82 Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Certificate serial: 39C1 Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/A1FFA2C41E0211E9862ECE3FC4F9AE02.roa Signing time: Mon 14 Jul 2025 14:50:24 +0000 ROA not before: Mon 14 Jul 2025 14:50:24 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 133761 IP address blocks: 110.170.148.0/24 maxlen: 24 2001:fb0:1071::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 14:20:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14785 (0x39c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Validity Not Before: Jul 14 14:50:24 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68751930-81dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:8a:d2:83:f4:fe:26:69:46:1e:22:e5:d0:49: 69:1f:a3:1f:2e:bc:2b:14:e0:39:41:e3:bc:5d:8c: e6:a0:aa:d9:d7:2d:6f:19:49:9a:2c:66:8f:94:d3: e4:b0:20:84:2b:e3:48:d6:97:4b:89:68:e3:3b:e2: f2:f4:f0:c7:b3:a8:6f:d4:d2:55:63:66:64:a8:9d: df:77:18:d5:95:af:2a:78:2e:c2:53:97:22:63:59: 36:e9:bb:9d:c8:5d:a2:55:65:fa:73:6a:38:19:52: b7:ad:bf:0d:67:49:fa:aa:46:fe:d3:87:24:ff:c1: a9:26:f0:32:07:78:d1:b5:cb:b5:2f:bc:b9:88:74: df:7b:93:7a:4d:9f:e4:d1:b8:98:63:75:ae:5c:e2: 4b:39:7c:5e:41:9f:b4:51:31:e7:2c:10:fc:65:23: 9c:eb:51:47:99:4b:cf:dd:d1:70:d5:39:ea:10:d2: c6:54:1a:b6:8c:04:06:c4:2b:a8:ab:1d:89:25:54: c3:6e:c9:e9:e2:d8:ce:4a:77:5c:06:62:bf:db:9c: 59:c3:ba:0e:f4:36:72:12:68:26:35:63:b8:37:db: 98:23:da:2b:d5:7b:68:52:6e:22:91:ab:49:11:cc: 8b:eb:0b:b5:8e:6f:e9:72:87:62:59:4f:75:21:4b: ea:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:F2:EE:DB:8B:F4:DF:4C:51:12:6E:80:46:D4:F3:80:67:56:DB:82 X509v3 Authority Key Identifier: keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/A1FFA2C41E0211E9862ECE3FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.170.148.0/24 IPv6: 2001:fb0:1071::/48 Signature Algorithm: sha256WithRSAEncryption 7a:a2:00:bb:03:31:4e:09:17:49:ec:08:c1:cc:37:3a:b1:a1: 6b:0e:12:a8:52:75:62:43:10:55:c2:2b:4b:50:20:51:61:d4: 8c:20:d8:f8:67:19:e5:7f:8a:74:7a:0b:a3:5d:be:fc:5b:b2: 91:30:56:95:5d:a8:c4:0d:55:da:6a:15:66:91:1e:77:72:e1: 83:b0:f5:ce:95:6d:58:8d:96:ca:c1:82:83:55:e4:a4:4f:f4: 98:e9:91:70:f1:50:75:0f:6c:62:c0:b7:c2:63:39:35:5f:28: fb:8e:63:a2:cf:0f:43:dc:3d:95:f8:f9:97:37:f7:f5:d0:d1: 0c:d9:cc:97:e7:51:27:82:b9:35:73:e5:88:6b:40:90:46:6e: 44:7b:f5:a8:3d:34:53:7b:88:5f:47:31:c9:73:ad:b8:8e:fb: 9b:1e:d5:a6:11:c6:ac:13:7e:71:1c:89:89:a4:84:ab:b1:15: f5:43:58:f6:3c:b5:77:49:68:83:be:fb:a9:55:41:29:c6:f6: 06:a6:b8:c9:dc:c0:e6:f1:f4:f0:6a:90:26:d5:0c:22:bc:47: 5f:24:d7:dd:96:d4:4d:5a:3f:ff:e6:37:85:f0:07:4c:7c:d3: 2a:8e:76:78:b7:7f:80:75:da:c8:ae:cc:95:01:82:d2:1f:e3: 6b:6c:ed:46 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICOcEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB NDM3QUYwMkMwHhcNMjUwNzE0MTQ1MDI0WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODc1MTkzMC04MWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2IrSg/T+JmlGHiLl0ElpH6MfLrwrFOA5QeO8XYzmoKrZ1y1vGUmaLGaPlNPk sCCEK+NI1pdLiWjjO+Ly9PDHs6hv1NJVY2ZkqJ3fdxjVla8qeC7CU5ciY1k26bud yF2iVWX6c2o4GVK3rb8NZ0n6qkb+04ck/8GpJvAyB3jRtcu1L7y5iHTfe5N6TZ/k 0biYY3WuXOJLOXxeQZ+0UTHnLBD8ZSOc61FHmUvP3dFw1TnqENLGVBq2jAQGxCuo qx2JJVTDbsnp4tjOSndcBmK/25xZw7oO9DZyEmgmNWO4N9uYI9or1XtoUm4ikatJ EcyL6wu1jm/pcodiWU91IUvq3wIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFIDy7tuL 9N9MURJugEbU84BnVtuCMB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4 Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvQTFGRkEyQzQx RTAyMTFFOTg2MkVDRTNGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABuqpQwDwQCAAIwCQMHACABD7AQcTANBgkqhkiG9w0BAQsF AAOCAQEAeqIAuwMxTgkXSewIwcw3OrGhaw4SqFJ1YkMQVcIrS1AgUWHUjCDY+GcZ 5X+KdHoLo12+/FuykTBWlV2oxA1V2moVZpEed3Lhg7D1zpVtWI2WysGCg1XkpE/0 mOmRcPFQdQ9sYsC3wmM5NV8o+45jos8PQ9w9lfj5lzf39dDRDNnMl+dRJ4K5NXPl iGtAkEZuRHv1qD00U3uIX0cxyXOtuI77mx7VphHGrBN+cRyJiaSEq7EV9UNY9jy1 d0log777qVVBKcb2Bqa4ydzA5vH08GqQJtUMIrxHXyTX3ZbUTVo//+Y3hfAHTHzT Ko52eLd/gHXayK7MlQGC0h/ja2ztRg== -----END CERTIFICATE-----Generated at Sun Jul 20 18:24:27 2025 by rpki-client