$ rpki-client -vvf rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/85BB7A4E2AB311EE98EA0315C4F9AE02.roa File: 85BB7A4E2AB311EE98EA0315C4F9AE02.roa (raw, json) Hash identifier: DgdiiCMEKe93Jsgcn1AG1optizE0ES0MbtD24A2hP+4= Subject key identifier: DD:79:F2:65:0D:F8:33:A2:BF:84:FA:5C:72:56:66:81:3F:B6:4D:B2 Certificate issuer: /CN=A9141BED/serialNumber=27689043C43FE61B3CE3C4EBE6B6C15FBCCD2D07 Certificate serial: 01CE Authority key identifier: 27:68:90:43:C4:3F:E6:1B:3C:E3:C4:EB:E6:B6:C1:5F:BC:CD:2D:07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/85BB7A4E2AB311EE98EA0315C4F9AE02.roa Signing time: Fri 11 Jul 2025 03:39:19 +0000 ROA not before: Fri 11 Jul 2025 03:39:19 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 37900 IP address blocks: 202.2.88.0/22 maxlen: 24 202.4.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.crl rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 03:10:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 462 (0x1ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141BED, serialNumber=27689043C43FE61B3CE3C4EBE6B6C15FBCCD2D07 Validity Not Before: Jul 11 03:39:19 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68708767-c62c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:3c:a8:36:d5:28:49:3d:a6:a7:93:ca:87:36: 1f:20:05:4d:8f:73:dc:77:ad:fe:67:17:0e:f9:5b: 8b:67:f6:c3:0e:81:d2:5f:8b:0e:96:30:f8:6e:54: b5:2f:85:2c:71:06:9d:5d:c7:6b:16:9e:1e:ce:0f: 2a:43:d8:d3:77:97:f4:d0:e5:95:66:a7:90:bd:71: 82:d9:fa:6e:6b:d6:ad:25:13:4e:c6:cc:3e:5d:42: dc:86:9c:b6:7d:d4:bc:3a:8d:97:dd:ca:92:a2:f2: ce:2a:6f:44:f7:a2:04:e9:37:8b:7f:e3:f2:41:98: 5f:14:ae:7e:a3:d9:ef:51:ef:2b:71:01:c6:95:b3: 9d:a9:42:02:3d:17:83:44:90:7e:98:cb:a9:7b:0b: 2e:bf:07:99:ab:b3:4b:7d:d4:7e:bb:18:cb:54:24: 57:4f:fc:d9:0a:5d:d4:c1:7f:61:fa:32:57:20:50: b1:15:0e:af:91:ab:e7:1c:a1:f8:0f:63:82:a1:81: d3:cf:4b:56:be:8b:b3:a9:47:a8:fe:6c:ad:b8:31: 6e:a7:db:63:3a:bb:f1:a7:c8:e7:19:94:e6:25:9a: 67:69:0c:03:8e:c9:bb:52:62:f9:85:2c:3f:52:92: fb:8c:c8:16:91:21:e1:01:0f:c1:fb:30:2d:5c:e2: 26:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:79:F2:65:0D:F8:33:A2:BF:84:FA:5C:72:56:66:81:3F:B6:4D:B2 X509v3 Authority Key Identifier: keyid:27:68:90:43:C4:3F:E6:1B:3C:E3:C4:EB:E6:B6:C1:5F:BC:CD:2D:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/85BB7A4E2AB311EE98EA0315C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.2.88.0/22 202.4.244.0/22 Signature Algorithm: sha256WithRSAEncryption 92:6a:ad:b2:6b:0d:08:4a:75:dc:a2:1a:6e:0a:29:f3:1f:30: c9:e4:9b:7a:7d:5f:8d:a5:27:3f:03:0b:a7:7d:4b:4a:06:85: 9f:a7:30:fb:ab:f7:1a:80:a1:f6:51:d3:6f:99:f0:a7:21:0a: 7e:07:4d:82:36:0b:fe:18:ad:c9:eb:b9:69:4a:3f:b4:4d:4a: 0c:81:98:b2:6c:6d:86:92:4f:a0:ad:01:ed:bc:5e:88:ac:99: 6a:63:49:af:85:6e:16:66:14:ac:30:57:27:71:6b:e6:17:5c: 16:9e:40:9c:2b:61:72:73:54:28:3a:a9:87:b7:92:83:72:4c: 32:14:ff:d0:d5:d0:89:a7:ee:c7:a7:c2:1c:b8:71:44:41:d5: 35:46:e2:32:dd:4e:49:8a:e9:7d:d0:c4:22:e6:4d:82:c2:a7: 6a:7a:0a:f8:72:40:25:17:84:4a:b9:76:4c:a2:06:ac:e9:37: f9:8d:d3:3c:16:ec:26:7c:2b:da:e6:34:68:1b:9d:22:61:0f: 64:da:52:29:df:92:63:1b:ab:d9:ba:0f:83:17:bc:84:20:20: a4:0a:e6:9c:af:76:34:8c:b9:88:a0:28:76:b8:4c:15:92:72: b9:3e:83:2a:b9:58:79:a1:d6:fb:df:a6:86:63:7d:06:4b:83: 3b:40:f0:0c -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAc4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDFCRUQxMTAvBgNVBAUTKDI3Njg5MDQzQzQzRkU2MUIzQ0UzQzRFQkU2QjZDMTVG QkNDRDJEMDcwHhcNMjUwNzExMDMzOTE5WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODcwODc2Ny1jNjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsjyoNtUoST2mp5PKhzYfIAVNj3Pcd63+ZxcO+VuLZ/bDDoHSX4sOljD4blS1 L4UscQadXcdrFp4ezg8qQ9jTd5f00OWVZqeQvXGC2fpua9atJRNOxsw+XULchpy2 fdS8Oo2X3cqSovLOKm9E96IE6TeLf+PyQZhfFK5+o9nvUe8rcQHGlbOdqUICPReD RJB+mMupewsuvweZq7NLfdR+uxjLVCRXT/zZCl3UwX9h+jJXIFCxFQ6vkavnHKH4 D2OCoYHTz0tWvouzqUeo/mytuDFup9tjOrvxp8jnGZTmJZpnaQwDjsm7UmL5hSw/ UpL7jMgWkSHhAQ/B+zAtXOImywIDAQABo4ICmzCCApcwHQYDVR0OBBYEFN158mUN +DOiv4T6XHJWZoE/tk2yMB8GA1UdIwQYMBaAFCdokEPEP+YbPOPE6+a2wV+8zS0H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MUJFRC9GQjJBQThFQ0I3 MkExMUVEODg0QTA5MURDNEY5QUUwMi9KMmlRUThRXzVoczg0OFRyNXJiQlg3ek5M UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0oyaVFROFFfNWhzODQ4VHI1cmJCWDd6TkxRYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDFCRUQvRkIyQUE4RUNCNzJBMTFFRDg4NEEwOTFEQzRGOUFFMDIvODVCQjdBNEUy QUIzMTFFRTk4RUEwMzE1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBALKAlgDBALKBPQwDQYJKoZIhvcNAQELBQADggEBAJJqrbJr DQhKddyiGm4KKfMfMMnkm3p9X42lJz8DC6d9S0oGhZ+nMPur9xqAofZR02+Z8Kch Cn4HTYI2C/4YrcnruWlKP7RNSgyBmLJsbYaST6CtAe28XoismWpjSa+FbhZmFKww Vydxa+YXXBaeQJwrYXJzVCg6qYe3koNyTDIU/9DV0Imn7senwhy4cURB1TVG4jLd TkmK6X3QxCLmTYLCp2p6CvhyQCUXhEq5dkyiBqzpN/mN0zwW7CZ8K9rmNGgbnSJh D2TaUinfkmMbq9m6D4MXvIQgIKQK5pyvdjSMuYigKHa4TBWScrk+gyq5WHmh1vvf poZjfQZLgztA8Aw= -----END CERTIFICATE-----Generated at Sun Jul 20 07:17:55 2025 by rpki-client