$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/FC968EB81E0311E991EB9A44C4F9AE02.roa File: FC968EB81E0311E991EB9A44C4F9AE02.roa (raw, json) Hash identifier: ZESPC/vqBp8MgwmYqyV0WF3pWq0azFTR6TKXxngKazI= Subject key identifier: 98:35:C0:B9:77:73:4B:41:CD:4F:3A:89:2A:3C:99:65:ED:41:FA:4B Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Certificate serial: 3A18 Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/FC968EB81E0311E991EB9A44C4F9AE02.roa Signing time: Mon 14 Jul 2025 14:51:39 +0000 ROA not before: Mon 14 Jul 2025 14:51:39 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 7630 IP address blocks: 110.170.223.0/24 maxlen: 24 210.86.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 14:20:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14872 (0x3a18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Validity Not Before: Jul 14 14:51:39 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=6875197b-c53c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c1:49:dd:08:ed:e2:94:13:1d:dd:c5:0e:d3: e7:29:3e:8d:ad:92:7e:f6:9c:67:26:2d:91:2d:59: 4b:77:1e:41:48:db:ce:e1:77:69:27:df:f9:75:07: 33:96:c7:39:83:4e:f7:9b:07:68:80:8d:ad:8b:4e: 85:09:17:24:9f:f7:43:4b:39:5f:95:d9:fe:93:39: c5:6f:01:fd:92:d3:cb:ea:8c:bd:8b:80:76:ca:78: c5:d7:43:50:83:ee:71:9d:ea:91:91:2e:37:a5:e0: 26:a1:8a:4d:f1:04:ac:02:68:3b:54:ab:3e:82:d2: 34:c4:e5:6d:46:dc:78:40:8b:7b:c7:2b:b6:5d:17: 60:2e:cd:07:c7:cb:da:01:08:40:53:b2:62:d3:ca: ca:1c:0e:bd:89:9c:43:91:41:c8:de:52:43:f2:fa: 44:92:6f:7e:58:f0:06:52:af:75:29:f3:35:fc:52: 1b:1f:48:52:b9:92:1f:cb:90:1b:a4:3f:f1:f8:7f: 53:7c:fa:a4:c5:a9:7a:83:b6:b7:a8:a7:b6:50:3b: 57:cf:9a:60:bd:86:6f:8f:77:17:06:2a:49:c1:f0: 39:d8:2d:21:ef:8c:2f:0e:28:0c:33:80:10:52:55: 74:ec:08:e0:5c:5f:37:b7:c9:20:d0:72:82:a5:d1: 56:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:35:C0:B9:77:73:4B:41:CD:4F:3A:89:2A:3C:99:65:ED:41:FA:4B X509v3 Authority Key Identifier: keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/FC968EB81E0311E991EB9A44C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.170.223.0/24 210.86.192.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:4c:53:aa:3d:b4:23:bb:39:8f:6e:a7:a3:9e:37:52:e7:6d: cd:91:36:b5:b1:78:88:ea:9a:a1:91:44:f3:13:5c:bd:00:aa: 56:9a:c7:41:3a:be:06:e5:76:9d:7e:39:69:76:59:8c:92:48: 09:24:b9:eb:31:42:ff:4f:a8:64:5c:58:e2:af:f6:d6:a3:9b: b2:4b:c0:af:7c:80:0a:db:c0:ee:84:d5:70:a7:62:85:cf:d4: e5:94:c2:44:f8:86:82:87:70:5f:c6:91:63:88:6f:b4:ae:be: 10:04:5e:ab:6f:01:ec:d9:99:84:b2:59:85:8f:ce:15:8e:ea: c6:93:4a:da:62:b4:e1:22:0c:2a:56:64:4a:b0:a2:de:c7:99: ff:b4:09:1d:bf:34:01:82:c3:49:36:b0:bd:fa:2e:47:10:f2: d0:8a:72:20:27:76:0b:5c:94:db:ab:09:8b:b2:ee:e4:d8:53: ef:c7:d1:c7:03:e8:af:d2:4c:82:4f:26:39:3d:85:4d:0f:f6: 47:c7:2a:5f:f7:90:32:b0:1b:52:64:79:82:84:64:e9:33:e2: ff:0c:e6:47:3e:5b:0b:bd:74:d6:76:0e:74:00:73:0e:6f:53: eb:43:fa:dd:53:4c:4c:27:f0:11:57:8c:f8:c7:2b:9b:f5:6b: ac:b3:5a:14 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICOhgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB NDM3QUYwMkMwHhcNMjUwNzE0MTQ1MTM5WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODc1MTk3Yi1jNTNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAssFJ3Qjt4pQTHd3FDtPnKT6NrZJ+9pxnJi2RLVlLdx5BSNvO4XdpJ9/5dQcz lsc5g073mwdogI2ti06FCRckn/dDSzlfldn+kznFbwH9ktPL6oy9i4B2ynjF10NQ g+5xneqRkS43peAmoYpN8QSsAmg7VKs+gtI0xOVtRtx4QIt7xyu2XRdgLs0Hx8va AQhAU7Ji08rKHA69iZxDkUHI3lJD8vpEkm9+WPAGUq91KfM1/FIbH0hSuZIfy5Ab pD/x+H9TfPqkxal6g7a3qKe2UDtXz5pgvYZvj3cXBipJwfA52C0h74wvDigMM4AQ UlV07AjgXF83t8kg0HKCpdFWRQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFJg1wLl3 c0tBzU86iSo8mWXtQfpLMB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4 Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvRkM5NjhFQjgx RTAzMTFFOTkxRUI5QTQ0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBABuqt8DBADSVsAwDQYJKoZIhvcNAQELBQADggEBAJxMU6o9 tCO7OY9up6OeN1Lnbc2RNrWxeIjqmqGRRPMTXL0Aqlaax0E6vgbldp1+OWl2WYyS SAkkuesxQv9PqGRcWOKv9tajm7JLwK98gArbwO6E1XCnYoXP1OWUwkT4hoKHcF/G kWOIb7SuvhAEXqtvAezZmYSyWYWPzhWO6saTStpitOEiDCpWZEqwot7Hmf+0CR2/ NAGCw0k2sL36LkcQ8tCKciAndgtclNurCYuy7uTYU+/H0ccD6K/STIJPJjk9hU0P 9kfHKl/3kDKwG1JkeYKEZOkz4v8M5kc+Wwu9dNZ2DnQAcw5vU+tD+t1TTEwn8BFX jPjHK5v1a6yzWhQ= -----END CERTIFICATE-----Generated at Sun Jul 20 18:27:20 2025 by rpki-client