$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/3BCB61DA01D411EFB260D83DC4F9AE02.roa File: 3BCB61DA01D411EFB260D83DC4F9AE02.roa (raw, json) Hash identifier: MdnVi1OIFkoo0dm/yCy+3NB6G2QdHBGCAwYC8bNp0Zg= Subject key identifier: 23:3B:FE:A8:56:4C:CF:40:F7:2B:36:A3:86:99:5E:1B:D5:C7:46:C7 Certificate issuer: /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B Certificate serial: 3923 Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/3BCB61DA01D411EFB260D83DC4F9AE02.roa Signing time: Fri 04 Jul 2025 14:50:44 +0000 ROA not before: Fri 04 Jul 2025 14:50:44 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 41717 IP address blocks: 49.128.221.0/24 maxlen: 24 49.128.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 14:22:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14627 (0x3923) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B Validity Not Before: Jul 4 14:50:44 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=6867ea43-5d45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:a4:e1:22:75:2d:36:28:25:1c:8d:1e:3e:b3: bc:fe:65:4a:cb:d3:f7:d3:a0:90:b2:02:3a:d7:06: 6e:fd:ea:6c:43:9e:b2:3a:47:c6:4e:68:3a:4f:86: 42:9a:ed:8b:03:8d:87:c8:c0:42:29:97:cd:dc:33: 1e:84:bf:9a:e6:c1:8b:e7:ba:35:7b:f0:ec:c5:da: f0:7d:04:60:be:8b:dc:94:57:c8:4f:5a:b1:bb:fd: 7e:e7:3e:bb:36:78:e2:55:22:35:94:53:18:e9:69: e2:21:3a:98:90:01:f2:c4:c8:5b:23:95:94:6c:79: 2a:43:84:32:03:84:3d:fc:6f:93:c5:57:c0:3a:ba: 3c:05:17:fd:35:f3:b4:4b:f1:3b:a4:98:f9:2b:de: e7:d5:6e:61:92:f8:3a:02:64:ab:ef:5d:fc:7c:0d: 8b:dd:dc:d9:a2:be:30:d2:39:f1:9b:5a:98:50:8d: 34:29:96:84:8b:89:e5:0e:a5:3d:9f:9a:40:4d:f6: ca:e6:27:5c:b4:60:0b:20:d8:61:eb:ae:5c:38:c6: 33:e4:cd:eb:35:79:9a:3e:c0:03:cc:b7:35:62:ad: 07:8c:5d:ea:81:2b:79:cc:41:a8:65:be:db:0b:f1: 86:9e:eb:e8:65:ce:30:6a:c1:6b:38:63:63:39:7e: da:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:3B:FE:A8:56:4C:CF:40:F7:2B:36:A3:86:99:5E:1B:D5:C7:46:C7 X509v3 Authority Key Identifier: keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/3BCB61DA01D411EFB260D83DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.128.221.0-49.128.222.255 Signature Algorithm: sha256WithRSAEncryption 5b:67:9b:e4:c5:fe:d6:22:66:13:b6:9a:ef:75:dd:4b:3c:07: 58:c1:b9:7a:36:72:87:b1:42:f4:57:68:e0:6a:a3:2f:e1:a1: 7c:16:2a:89:20:d8:78:22:58:66:52:12:f2:4c:9e:4c:ba:05: 16:26:e1:50:21:2e:67:30:0d:2c:fb:f2:d3:8e:e0:90:44:58: a8:6e:a4:93:45:8a:19:cf:16:43:28:ed:02:dd:d6:70:1a:d3: 2f:bd:cf:d2:6e:ce:65:3f:73:b0:ba:0c:a7:32:de:d6:04:fc: a8:c6:32:75:66:91:2d:11:44:be:49:f1:c1:86:a5:7c:03:fe: 51:cc:23:28:17:28:36:c9:e7:04:f3:3c:14:0f:db:8b:22:5d: 87:ef:df:e4:ab:40:09:94:6b:b7:44:59:22:43:fd:08:4e:6c: 24:bd:69:90:69:2c:ef:63:34:fe:09:24:fe:81:03:13:a3:03: 79:d7:8a:85:21:30:5b:49:ee:f8:6b:18:65:03:6b:bb:31:88: 93:b9:29:44:8d:03:2d:10:7f:2c:77:19:55:c8:a0:d6:8f:8d: 69:8b:ac:9d:66:b9:78:a8:fe:31:e4:c6:3a:6e:ba:ab:16:5f: d0:80:5e:9c:55:a8:95:33:b3:b0:e1:30:26:91:2e:cb:27:7a: 6a:58:6e:eb -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgICOSMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGM0UxMTAvBgNVBAUTKEVCMzg5RkIzMzlCMzkwOEQ1NDlBNjUzOTBDOTJFMTVG OURGN0M1NEIwHhcNMjUwNzA0MTQ1MDQ0WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODY3ZWE0My01ZDQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkqThInUtNiglHI0ePrO8/mVKy9P306CQsgI61wZu/epsQ56yOkfGTmg6T4ZC mu2LA42HyMBCKZfN3DMehL+a5sGL57o1e/DsxdrwfQRgvovclFfIT1qxu/1+5z67 NnjiVSI1lFMY6WniITqYkAHyxMhbI5WUbHkqQ4QyA4Q9/G+TxVfAOro8BRf9NfO0 S/E7pJj5K97n1W5hkvg6AmSr7138fA2L3dzZor4w0jnxm1qYUI00KZaEi4nlDqU9 n5pATfbK5idctGALINhh665cOMYz5M3rNXmaPsADzLc1Yq0HjF3qgSt5zEGoZb7b C/GGnuvoZc4wasFrOGNjOX7aUQIDAQABo4ICnTCCApkwHQYDVR0OBBYEFCM7/qhW TM9A9ys2o4aZXhvVx0bHMB8GA1UdIwQYMBaAFOs4n7M5s5CNVJplOQyS4V+d98VL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS9BQzUyQjc0ODFE ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi82emlmc3ptemtJMVVtbVU1REpMaFg1MzN4 VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ6aWZzem16a0kxVW1tVTVESkxoWDUzM3hVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDlGM0UvQUM1MkI3NDgxRDgyMTFFMkJDNjQxN0Q3MDhCMDJDRDIvM0JDQjYxREEw MUQ0MTFFRkIyNjBEODNEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E GDAWMBQEAgABMA4wDAMEADGA3QMEADGA3jANBgkqhkiG9w0BAQsFAAOCAQEAW2eb 5MX+1iJmE7aa73XdSzwHWMG5ejZyh7FC9Fdo4GqjL+GhfBYqiSDYeCJYZlIS8kye TLoFFibhUCEuZzANLPvy047gkERYqG6kk0WKGc8WQyjtAt3WcBrTL73P0m7OZT9z sLoMpzLe1gT8qMYydWaRLRFEvknxwYalfAP+UcwjKBcoNsnnBPM8FA/biyJdh+/f 5KtACZRrt0RZIkP9CE5sJL1pkGks72M0/gkk/oEDE6MDedeKhSEwW0nu+GsYZQNr uzGIk7kpRI0DLRB/LHcZVcig1o+NaYusnWa5eKj+MeTGOm66qxZf0IBenFWolTOz sOEwJpEuyyd6alhu6w== -----END CERTIFICATE-----Generated at Sun Jul 20 14:19:08 2025 by rpki-client