$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/2C7A8F5C8CE511EF96182462C4F9AE02.roa File: 2C7A8F5C8CE511EF96182462C4F9AE02.roa (raw, json) Hash identifier: C8anzo3wIrPEk1GE8PbP/ejOtinKtiNErIk39oiNvt0= Subject key identifier: 3B:F6:50:0A:67:3C:A0:16:4E:5F:8F:EC:BC:12:18:9C:E7:BC:E2:64 Certificate issuer: /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B Certificate serial: 3925 Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/2C7A8F5C8CE511EF96182462C4F9AE02.roa Signing time: Fri 04 Jul 2025 14:50:45 +0000 ROA not before: Fri 04 Jul 2025 14:50:45 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 4766 IP address blocks: 203.210.25.0/24 maxlen: 24 203.210.28.0/24 maxlen: 24 203.210.29.0/24 maxlen: 24 203.210.30.0/24 maxlen: 24 210.87.192.0/24 maxlen: 24 210.87.194.0/24 maxlen: 24 210.87.203.0/24 maxlen: 24 210.87.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 14:22:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14629 (0x3925) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B Validity Not Before: Jul 4 14:50:45 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=6867ea45-f080 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:3d:9c:74:f0:c4:fd:c3:09:b5:dc:35:70:bf: b4:4c:88:80:ef:44:a9:3e:83:ca:91:06:ba:39:85: 80:ac:ee:2b:b1:e0:9d:c4:83:8f:05:ce:b0:3f:60: de:45:80:6d:f9:57:80:cf:80:6b:4e:87:81:a7:04: 94:03:1f:5c:74:53:09:8c:ed:b2:15:bb:b9:91:c5: a2:77:64:66:d7:ad:e3:1c:8d:b9:74:95:2c:c0:0e: d5:bd:2c:92:a3:b9:19:a3:b7:6f:55:12:79:5e:e1: 6a:60:da:de:16:91:d4:a1:dd:00:74:77:0f:c9:fc: f8:ae:ef:f8:7c:c1:bd:a5:eb:78:c7:51:7d:15:8c: 3c:b8:12:41:46:5f:9c:f6:7c:a2:91:21:9b:77:1a: 7d:a9:5b:f1:5e:a7:6c:c7:e2:a7:81:1b:34:f3:b7: dc:aa:08:1f:5c:81:5a:09:8c:99:0f:7d:30:be:ae: 60:b9:7f:d6:74:41:d4:51:8c:ac:a7:20:25:d7:c8: 73:a4:50:a4:3a:0c:29:18:72:56:99:a4:22:a3:29: 79:4e:9d:8b:5b:f3:2e:cf:3a:03:d8:c5:84:af:89: 53:5a:15:c8:8d:98:b0:73:e4:01:ea:f6:d2:1d:72: 75:e6:92:d1:d9:91:5e:0c:4b:63:3c:30:b6:6e:0e: bd:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:F6:50:0A:67:3C:A0:16:4E:5F:8F:EC:BC:12:18:9C:E7:BC:E2:64 X509v3 Authority Key Identifier: keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/2C7A8F5C8CE511EF96182462C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.210.25.0/24 203.210.28.0-203.210.30.255 210.87.192.0/24 210.87.194.0/24 210.87.203.0/24 210.87.223.0/24 Signature Algorithm: sha256WithRSAEncryption 45:b2:7b:37:58:f3:76:50:08:c4:a6:35:e7:d5:71:cf:e2:46: f8:39:bc:75:78:33:6c:f4:0a:d2:bc:f1:98:7d:cf:5c:b8:dd: 6e:35:88:9b:b0:bb:00:0f:3c:b8:6d:7c:64:43:e9:06:15:32: b6:86:c2:41:0b:47:c2:b3:98:f6:a7:37:62:4b:58:ca:29:82: 5e:da:42:fd:1c:e3:b6:f6:3b:74:66:3c:bf:7e:b8:ad:6d:fa: f2:3e:fe:98:f5:14:3d:df:0c:57:07:6e:8b:51:67:de:b1:f4: 73:ef:dd:93:99:27:5f:d1:c3:96:68:41:fc:af:51:27:ef:93: 0c:44:16:53:a6:d2:0c:ce:88:fe:af:e0:81:98:44:8e:c4:76: ce:3e:dc:3f:fc:bb:ec:48:fe:98:c9:1e:c5:35:f2:96:28:d7: 72:64:d1:9a:18:7a:e9:e9:f7:d6:67:45:96:82:3e:c9:89:22: da:6b:db:e1:4b:9d:b4:3b:d3:b9:3a:5d:3b:c8:6f:2f:89:12: b9:90:e4:9f:d8:63:74:f2:dc:bd:2c:03:a0:06:ff:04:32:35: fb:ce:02:d8:cf:84:68:e5:64:c9:f8:1a:da:ef:16:e8:41:8d: 20:44:c0:0a:5e:a6:e9:5b:b7:f4:ac:06:9b:4c:e6:e0:44:48: b6:01:e0:c6 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgICOSUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGM0UxMTAvBgNVBAUTKEVCMzg5RkIzMzlCMzkwOEQ1NDlBNjUzOTBDOTJFMTVG OURGN0M1NEIwHhcNMjUwNzA0MTQ1MDQ1WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODY3ZWE0NS1mMDgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4T2cdPDE/cMJtdw1cL+0TIiA70SpPoPKkQa6OYWArO4rseCdxIOPBc6wP2De RYBt+VeAz4BrToeBpwSUAx9cdFMJjO2yFbu5kcWid2Rm163jHI25dJUswA7VvSyS o7kZo7dvVRJ5XuFqYNreFpHUod0AdHcPyfz4ru/4fMG9pet4x1F9FYw8uBJBRl+c 9nyikSGbdxp9qVvxXqdsx+KngRs087fcqggfXIFaCYyZD30wvq5guX/WdEHUUYys pyAl18hzpFCkOgwpGHJWmaQioyl5Tp2LW/MuzzoD2MWEr4lTWhXIjZiwc+QB6vbS HXJ15pLR2ZFeDEtjPDC2bg69kQIDAQABo4ICuzCCArcwHQYDVR0OBBYEFDv2UApn PKAWTl+P7LwSGJznvOJkMB8GA1UdIwQYMBaAFOs4n7M5s5CNVJplOQyS4V+d98VL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS9BQzUyQjc0ODFE ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi82emlmc3ptemtJMVVtbVU1REpMaFg1MzN4 VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ6aWZzem16a0kxVW1tVTVESkxoWDUzM3hVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDlGM0UvQUM1MkI3NDgxRDgyMTFFMkJDNjQxN0Q3MDhCMDJDRDIvMkM3QThGNUM4 Q0U1MTFFRjk2MTgyNDYyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRQYIKwYBBQUHAQcBAf8E NjA0MDIEAgABMCwDBADL0hkwDAMEAsvSHAMEAMvSHgMEANJXwAMEANJXwgMEANJX ywMEANJX3zANBgkqhkiG9w0BAQsFAAOCAQEARbJ7N1jzdlAIxKY159Vxz+JG+Dm8 dXgzbPQK0rzxmH3PXLjdbjWIm7C7AA88uG18ZEPpBhUytobCQQtHwrOY9qc3YktY yimCXtpC/RzjtvY7dGY8v364rW368j7+mPUUPd8MVwdui1Fn3rH0c+/dk5knX9HD lmhB/K9RJ++TDEQWU6bSDM6I/q/ggZhEjsR2zj7cP/y77Ej+mMkexTXylijXcmTR mhh66en31mdFloI+yYki2mvb4UudtDvTuTpdO8hvL4kSuZDkn9hjdPLcvSwDoAb/ BDI1+84C2M+EaOVkyfga2u8W6EGNIETACl6m6Vu39KwGm0zm4ERItgHgxg== -----END CERTIFICATE-----Generated at Sun Jul 20 09:26:02 2025 by rpki-client