$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/E614D0A2CD5011EF863CDE64C4F9AE02.roa File: E614D0A2CD5011EF863CDE64C4F9AE02.roa (raw, json) Hash identifier: l8Dw0ddBvCAgKUHsutMECKNj1UHJE2k/V9PmgyyUJds= Subject key identifier: 46:9B:E3:54:D7:BE:D3:18:16:BC:1A:96:BE:85:39:6C:45:47:69:E3 Certificate issuer: /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B Certificate serial: 3929 Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/E614D0A2CD5011EF863CDE64C4F9AE02.roa Signing time: Fri 04 Jul 2025 14:50:49 +0000 ROA not before: Fri 04 Jul 2025 14:50:49 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 9695 IP address blocks: 210.110.199.0/24 maxlen: 24 210.110.200.0/24 maxlen: 24 210.110.201.0/24 maxlen: 24 210.110.202.0/24 maxlen: 24 210.110.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 14:22:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14633 (0x3929) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B Validity Not Before: Jul 4 14:50:49 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=6867ea49-4128 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:37:f6:68:70:36:bd:6a:e8:5c:ee:08:6d:8d: 92:d6:e8:79:fd:54:f7:65:d2:e6:45:84:03:f7:f7: 9e:71:a0:d7:9e:2e:eb:2a:7c:69:af:cc:cd:11:2a: b4:c1:d0:26:4b:e7:3f:41:5d:7c:92:25:3f:4e:79: bc:b5:75:7e:2a:6d:95:9d:9e:0e:cb:3c:5d:2e:66: 54:e7:e7:d4:ba:7d:1d:6d:40:e8:35:f7:17:7d:1b: a8:12:92:da:75:81:3c:3a:67:e4:43:db:33:69:68: 24:20:70:f2:42:99:fe:88:c7:09:7b:e7:46:07:ba: b1:a3:a9:93:c3:20:5c:79:81:52:35:bc:57:5b:87: 92:5a:34:3e:38:b4:13:79:38:3a:dc:d8:80:ee:a1: 53:fc:c6:05:5e:4f:6b:13:e6:5d:88:86:c0:bf:50: dd:6d:e1:55:2d:3b:8a:4d:2d:2f:df:db:63:af:f1: c8:70:4e:c5:f7:5d:65:a3:eb:60:22:b0:25:f6:95: a4:9a:a3:c8:3f:be:b7:c7:2d:c9:eb:a0:36:97:6b: 7e:99:c3:03:36:4c:c0:58:4b:57:23:40:1a:c2:22: a1:b2:f9:26:fb:7d:64:03:e0:f2:d6:7e:c2:4d:25: 8f:91:ed:50:ee:3e:40:9b:76:e4:16:cb:db:12:a1: 17:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:9B:E3:54:D7:BE:D3:18:16:BC:1A:96:BE:85:39:6C:45:47:69:E3 X509v3 Authority Key Identifier: keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/E614D0A2CD5011EF863CDE64C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.110.199.0-210.110.203.255 Signature Algorithm: sha256WithRSAEncryption dd:65:13:97:62:d1:aa:67:9a:23:39:07:be:dc:2e:da:a8:35: 65:21:a8:aa:d0:33:71:a1:dd:c1:e7:15:dc:9e:7d:12:04:e4: 91:53:79:74:ad:34:35:9f:cb:1d:08:b9:e3:5a:83:bb:59:1a: db:e3:da:bc:34:f8:29:5e:ca:e2:f5:8f:70:d1:fe:17:85:a5: 00:7a:54:1a:f8:e5:e1:bb:b1:d0:f0:92:b4:2c:32:4c:c7:38: f8:e7:89:01:9d:3a:fe:00:50:28:dd:7f:c4:a1:27:2a:02:46: 8a:84:11:4b:d6:6b:ba:56:de:71:65:ad:9d:30:b1:56:fe:20: 02:9d:f7:23:c9:78:9a:ae:b6:9f:5d:51:0f:cd:ea:e7:c4:f4: 23:9a:ed:6b:ea:33:58:a0:33:60:7b:9c:21:54:e9:d8:72:c3: 34:1f:3c:5a:a5:c2:d9:2f:24:b9:63:b9:dd:c4:34:58:24:00: 6f:35:a6:0e:db:df:91:4f:af:74:ea:90:eb:22:58:fc:b3:bc: e4:49:2b:f4:32:01:9f:c8:68:ad:67:09:3b:65:06:62:e2:69: 21:3f:0b:ce:f2:37:46:15:bc:62:7d:85:f2:e7:4d:07:b7:2b: 00:6c:14:80:04:dd:46:8d:eb:33:48:24:00:69:10:9a:38:e0: e6:8d:f9:c0 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgICOSkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGM0UxMTAvBgNVBAUTKEVCMzg5RkIzMzlCMzkwOEQ1NDlBNjUzOTBDOTJFMTVG OURGN0M1NEIwHhcNMjUwNzA0MTQ1MDQ5WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODY3ZWE0OS00MTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzzf2aHA2vWroXO4IbY2S1uh5/VT3ZdLmRYQD9/eecaDXni7rKnxpr8zNESq0 wdAmS+c/QV18kiU/Tnm8tXV+Km2VnZ4OyzxdLmZU5+fUun0dbUDoNfcXfRuoEpLa dYE8OmfkQ9szaWgkIHDyQpn+iMcJe+dGB7qxo6mTwyBceYFSNbxXW4eSWjQ+OLQT eTg63NiA7qFT/MYFXk9rE+ZdiIbAv1DdbeFVLTuKTS0v39tjr/HIcE7F911lo+tg IrAl9pWkmqPIP763xy3J66A2l2t+mcMDNkzAWEtXI0AawiKhsvkm+31kA+Dy1n7C TSWPke1Q7j5Am3bkFsvbEqEXuQIDAQABo4ICnTCCApkwHQYDVR0OBBYEFEab41TX vtMYFrwalr6FOWxFR2njMB8GA1UdIwQYMBaAFOs4n7M5s5CNVJplOQyS4V+d98VL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS9BQzUyQjc0ODFE ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi82emlmc3ptemtJMVVtbVU1REpMaFg1MzN4 VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ6aWZzem16a0kxVW1tVTVESkxoWDUzM3hVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDlGM0UvQUM1MkI3NDgxRDgyMTFFMkJDNjQxN0Q3MDhCMDJDRDIvRTYxNEQwQTJD RDUwMTFFRjg2M0NERTY0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E GDAWMBQEAgABMA4wDAMEANJuxwMEAtJuyDANBgkqhkiG9w0BAQsFAAOCAQEA3WUT l2LRqmeaIzkHvtwu2qg1ZSGoqtAzcaHdwecV3J59EgTkkVN5dK00NZ/LHQi541qD u1ka2+PavDT4KV7K4vWPcNH+F4WlAHpUGvjl4bux0PCStCwyTMc4+OeJAZ06/gBQ KN1/xKEnKgJGioQRS9ZrulbecWWtnTCxVv4gAp33I8l4mq62n11RD83q58T0I5rt a+ozWKAzYHucIVTp2HLDNB88WqXC2S8kuWO53cQ0WCQAbzWmDtvfkU+vdOqQ6yJY /LO85Ekr9DIBn8horWcJO2UGYuJpIT8LzvI3RhW8Yn2F8udNB7crAGwUgATdRo3r M0gkAGkQmjjg5o35wA== -----END CERTIFICATE-----Generated at Tue Jul 22 11:53:43 2025 by rpki-client