$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/D8B7D3B6634611EEA3C2FA0BC4F9AE02.roa File: D8B7D3B6634611EEA3C2FA0BC4F9AE02.roa (raw, json) Hash identifier: JNPf7OMZEXS9BmwaKv4DvmuGLYCxb1hs416vl+bHUgE= Subject key identifier: 3A:DF:3C:4D:44:CE:1B:2C:43:A2:A7:06:BF:AE:84:08:07:11:EE:B8 Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Certificate serial: 39D8 Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/D8B7D3B6634611EEA3C2FA0BC4F9AE02.roa Signing time: Mon 14 Jul 2025 14:50:44 +0000 ROA not before: Mon 14 Jul 2025 14:50:44 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 151808 IP address blocks: 110.170.140.0/24 maxlen: 24 2001:fb0:10ba::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 14:20:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14808 (0x39d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Validity Not Before: Jul 14 14:50:44 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68751944-5941 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:60:4c:00:18:e7:f8:8d:0a:09:a5:67:e9:9c: d3:99:d2:4f:fa:3f:f1:bc:61:95:d5:10:83:28:92: 7b:65:6d:d9:45:21:48:4e:eb:b7:fd:2d:42:4f:a0: c5:7d:bf:4c:bc:26:65:87:6e:24:af:52:79:a4:5d: 14:aa:83:78:31:a5:c0:01:34:7a:25:1a:64:52:69: 61:2e:9c:de:04:9a:25:e4:53:43:a3:c1:ad:9e:a9: 38:14:b2:37:f9:29:56:f2:36:a7:13:d9:e3:29:d1: 16:0e:cd:e1:a1:5e:8e:b4:19:3f:2a:a9:63:e1:d2: 65:e2:4d:86:5e:83:b9:f0:59:78:04:ec:ff:f7:58: 6f:e8:30:15:11:1d:fe:7b:32:f0:92:ca:79:dd:b6: 11:53:d9:f4:80:72:35:89:a9:e9:65:74:9e:69:34: 1e:33:dc:53:a4:25:5d:5b:5c:30:0a:c2:d5:46:df: fe:98:dc:bf:6a:68:b5:40:d0:77:9d:f8:79:de:39: 22:ad:55:27:d1:a5:50:88:71:1e:30:52:87:9d:c2: 43:1c:d6:8f:cc:79:06:00:4b:5a:de:35:b5:88:7b: 70:13:89:1a:ce:19:02:71:20:c4:46:d6:fe:94:11: 1c:e9:5b:5d:26:25:73:33:02:e4:40:f9:f2:b6:0b: ca:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:DF:3C:4D:44:CE:1B:2C:43:A2:A7:06:BF:AE:84:08:07:11:EE:B8 X509v3 Authority Key Identifier: keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/D8B7D3B6634611EEA3C2FA0BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.170.140.0/24 IPv6: 2001:fb0:10ba::/48 Signature Algorithm: sha256WithRSAEncryption a3:99:a7:72:c5:c3:c0:40:14:4a:9d:94:12:cd:e9:b9:a0:42: ba:7f:a6:67:da:4c:a2:84:8f:c2:51:b8:89:25:f5:33:c6:1f: 14:06:d7:a2:6f:ae:ab:2c:c9:55:3d:f1:c2:c8:71:63:6c:92: 10:de:0e:ca:df:5c:83:9d:5d:5c:09:89:42:57:27:4c:27:4e: f0:8f:e7:08:8a:e3:5e:1b:6e:84:0d:4c:31:c1:5e:64:61:af: 99:dd:7c:f9:09:71:6d:89:5a:c0:33:4e:66:63:18:de:a1:d5: aa:41:43:b0:7e:84:ef:75:2d:51:f8:5f:af:da:81:bc:4e:57: b9:32:06:2e:6a:81:79:53:59:ea:27:70:f8:37:32:f3:35:98: 48:11:16:05:c5:26:37:90:ae:a8:f8:0f:d1:60:7e:2a:66:c7: ef:38:b3:6e:18:7e:bd:5e:c2:c4:be:2d:1c:08:fd:a8:13:db: 61:82:85:6a:0a:76:06:0b:79:b1:34:6f:bf:06:92:97:f3:44: 0c:8c:80:14:51:c0:8f:ea:c5:4c:78:ab:1f:7d:d3:02:0a:c3: b1:14:0c:26:b6:ac:3c:95:cb:8b:e9:5a:ef:01:19:86:f3:56: 1e:6c:9f:6f:bf:58:1b:08:c3:3f:38:87:7f:99:ca:59:94:d7: 64:87:0a:36 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICOdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB NDM3QUYwMkMwHhcNMjUwNzE0MTQ1MDQ0WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODc1MTk0NC01OTQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnWBMABjn+I0KCaVn6ZzTmdJP+j/xvGGV1RCDKJJ7ZW3ZRSFITuu3/S1CT6DF fb9MvCZlh24kr1J5pF0UqoN4MaXAATR6JRpkUmlhLpzeBJol5FNDo8Gtnqk4FLI3 +SlW8janE9njKdEWDs3hoV6OtBk/Kqlj4dJl4k2GXoO58Fl4BOz/91hv6DAVER3+ ezLwksp53bYRU9n0gHI1ianpZXSeaTQeM9xTpCVdW1wwCsLVRt/+mNy/ami1QNB3 nfh53jkirVUn0aVQiHEeMFKHncJDHNaPzHkGAEta3jW1iHtwE4kazhkCcSDERtb+ lBEc6VtdJiVzMwLkQPnytgvKwwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFDrfPE1E zhssQ6KnBr+uhAgHEe64MB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4 Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvRDhCN0QzQjY2 MzQ2MTFFRUEzQzJGQTBCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABuqowwDwQCAAIwCQMHACABD7AQujANBgkqhkiG9w0BAQsF AAOCAQEAo5mncsXDwEAUSp2UEs3puaBCun+mZ9pMooSPwlG4iSX1M8YfFAbXom+u qyzJVT3xwshxY2ySEN4Oyt9cg51dXAmJQlcnTCdO8I/nCIrjXhtuhA1MMcFeZGGv md18+QlxbYlawDNOZmMY3qHVqkFDsH6E73UtUfhfr9qBvE5XuTIGLmqBeVNZ6idw +Dcy8zWYSBEWBcUmN5CuqPgP0WB+KmbH7zizbhh+vV7CxL4tHAj9qBPbYYKFagp2 Bgt5sTRvvwaSl/NEDIyAFFHAj+rFTHirH33TAgrDsRQMJrasPJXLi+la7wEZhvNW Hmyfb79YGwjDPziHf5nKWZTXZIcKNg== -----END CERTIFICATE-----Generated at Sun Jul 20 14:26:35 2025 by rpki-client