$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/27E277D891AA11EF9DBFF265C4F9AE02.roa File: 27E277D891AA11EF9DBFF265C4F9AE02.roa (raw, json) Hash identifier: mg1teoBc7Boh3ZoLd+5gvaGJaFd/PWcUnxH/SupEHww= Subject key identifier: 61:6C:1D:31:19:3D:16:EC:C2:3E:2B:FB:B5:DD:69:58:02:BD:01:DD Certificate issuer: /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B Certificate serial: 390F Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/27E277D891AA11EF9DBFF265C4F9AE02.roa Signing time: Fri 04 Jul 2025 14:50:27 +0000 ROA not before: Fri 04 Jul 2025 14:50:27 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 133952 IP address blocks: 112.196.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 14:22:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14607 (0x390f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B Validity Not Before: Jul 4 14:50:27 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=6867ea33-8144 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a8:66:fc:69:87:74:a2:94:d7:15:4a:ac:eb: d4:c0:91:78:59:25:9d:c4:93:14:32:1f:d7:67:ef: 63:ec:ea:b9:e1:30:c3:d7:ee:37:c9:5a:3a:5a:51: 93:7e:fe:b4:72:c8:54:f1:d7:28:d9:48:35:81:c1: 0e:66:bd:36:64:af:ea:a0:94:20:0e:b2:23:69:57: 5d:5f:28:a9:2d:35:51:22:05:52:8e:b4:e7:0b:b1: 38:18:b7:5b:02:e0:09:4f:9d:d0:00:1e:48:b6:11: 00:77:6a:e6:00:b7:ed:c5:f3:b5:bc:93:f9:8f:59: d2:fa:71:41:da:64:81:fc:05:4e:93:3a:f5:32:0c: 0a:23:d2:d8:80:c1:66:b7:2e:59:22:3b:cf:96:68: c7:82:f1:82:e0:77:b3:71:30:d4:6f:0f:72:3e:d1: 91:26:4e:d8:1a:c7:72:90:00:a9:c0:84:c4:7f:48: 3d:c3:67:d4:e7:a6:f6:1d:4d:83:d1:ec:c7:e3:15: 48:5b:bb:9e:50:32:29:91:49:48:58:4f:87:41:2a: 1e:a3:28:fd:60:7b:75:22:7a:60:c4:6f:ad:62:0a: 11:5b:f8:57:9d:62:74:49:ee:b6:7d:a0:24:f2:ac: ac:d7:7c:d7:96:da:cd:86:78:fc:72:46:dd:4e:3e: 92:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:6C:1D:31:19:3D:16:EC:C2:3E:2B:FB:B5:DD:69:58:02:BD:01:DD X509v3 Authority Key Identifier: keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/27E277D891AA11EF9DBFF265C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 112.196.208.0/24 Signature Algorithm: sha256WithRSAEncryption bf:cb:e1:89:f1:d8:4c:54:56:79:93:97:a4:27:52:57:c2:07: dc:e5:ed:44:11:90:5e:0e:56:3d:08:15:62:01:77:77:bb:87: 5f:1e:12:d3:7f:c4:74:3f:a0:57:c6:92:4c:a5:99:48:ee:01: 16:cc:f6:26:8e:10:aa:ed:76:50:b6:6c:8a:a1:ee:bb:24:ec: 8a:60:71:78:38:4e:cc:88:be:8c:20:3a:29:1a:ab:98:01:19: 3c:fb:9d:5a:ba:8e:58:05:ab:69:86:c5:3d:a4:b2:7d:7e:3b: 41:66:22:4f:4c:ca:a4:29:f7:f5:be:62:f0:10:a1:77:fc:8a: ed:99:61:49:72:64:ce:ac:1d:9c:76:5a:99:76:c7:5a:7f:43: 27:11:b8:b0:e8:8f:e2:ae:ab:41:8a:ca:15:58:4b:67:dd:8a: 39:bb:18:ce:b1:d8:ff:36:a3:15:8f:f1:cd:96:88:e9:9b:64: c3:5f:ad:af:21:54:e9:2d:22:ca:53:57:49:3b:60:02:e9:07: 93:2b:06:b2:8f:bd:f9:b3:a5:3e:da:06:b0:6c:f0:6c:dd:ec: b2:71:37:a3:22:46:d3:0d:a9:be:b5:2d:6c:1c:41:de:c7:13: 62:5f:58:a7:0f:e0:ac:5c:d8:c4:44:17:a5:d9:bf:c4:9d:cb: b0:3c:d9:2d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICOQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGM0UxMTAvBgNVBAUTKEVCMzg5RkIzMzlCMzkwOEQ1NDlBNjUzOTBDOTJFMTVG OURGN0M1NEIwHhcNMjUwNzA0MTQ1MDI3WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODY3ZWEzMy04MTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvKhm/GmHdKKU1xVKrOvUwJF4WSWdxJMUMh/XZ+9j7Oq54TDD1+43yVo6WlGT fv60cshU8dco2Ug1gcEOZr02ZK/qoJQgDrIjaVddXyipLTVRIgVSjrTnC7E4GLdb AuAJT53QAB5IthEAd2rmALftxfO1vJP5j1nS+nFB2mSB/AVOkzr1MgwKI9LYgMFm ty5ZIjvPlmjHgvGC4HezcTDUbw9yPtGRJk7YGsdykACpwITEf0g9w2fU56b2HU2D 0ezH4xVIW7ueUDIpkUlIWE+HQSoeoyj9YHt1InpgxG+tYgoRW/hXnWJ0Se62faAk 8qys13zXltrNhnj8ckbdTj6SdQIDAQABo4IClTCCApEwHQYDVR0OBBYEFGFsHTEZ PRbswj4r+7XdaVgCvQHdMB8GA1UdIwQYMBaAFOs4n7M5s5CNVJplOQyS4V+d98VL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS9BQzUyQjc0ODFE ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi82emlmc3ptemtJMVVtbVU1REpMaFg1MzN4 VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ6aWZzem16a0kxVW1tVTVESkxoWDUzM3hVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDlGM0UvQUM1MkI3NDgxRDgyMTFFMkJDNjQxN0Q3MDhCMDJDRDIvMjdFMjc3RDg5 MUFBMTFFRjlEQkZGMjY1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABwxNAwDQYJKoZIhvcNAQELBQADggEBAL/L4Ynx2ExUVnmT l6QnUlfCB9zl7UQRkF4OVj0IFWIBd3e7h18eEtN/xHQ/oFfGkkylmUjuARbM9iaO EKrtdlC2bIqh7rsk7IpgcXg4TsyIvowgOikaq5gBGTz7nVq6jlgFq2mGxT2ksn1+ O0FmIk9MyqQp9/W+YvAQoXf8iu2ZYUlyZM6sHZx2Wpl2x1p/QycRuLDoj+Kuq0GK yhVYS2fdijm7GM6x2P82oxWP8c2WiOmbZMNfra8hVOktIspTV0k7YALpB5MrBrKP vfmzpT7aBrBs8Gzd7LJxN6MiRtMNqb61LWwcQd7HE2JfWKcP4Kxc2MREF6XZv8Sd y7A82S0= -----END CERTIFICATE-----Generated at Wed Jul 23 02:11:09 2025 by rpki-client