$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/3EE7D5645A5D11EB9B234479C4F9AE02.roa File: 3EE7D5645A5D11EB9B234479C4F9AE02.roa (raw, json) Hash identifier: iUbkWB3ZN0lnpKNMgdT1J4ZZnEJigU0DNhEq2b5r5M0= Subject key identifier: B7:B6:41:B3:D0:0D:A9:D8:BE:E3:DD:34:D4:2B:F1:DD:38:9F:36:8B Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Certificate serial: 39B3 Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/3EE7D5645A5D11EB9B234479C4F9AE02.roa Signing time: Mon 14 Jul 2025 14:50:13 +0000 ROA not before: Mon 14 Jul 2025 14:50:13 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 131460 IP address blocks: 61.90.227.0/24 maxlen: 24 119.46.128.0/24 maxlen: 24 119.46.129.0/24 maxlen: 24 119.46.199.0/24 maxlen: 24 119.46.249.0/24 maxlen: 24 203.144.132.0/24 maxlen: 24 203.144.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 14:20:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14771 (0x39b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Validity Not Before: Jul 14 14:50:13 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68751925-f0ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:97:e9:e6:db:fa:fe:6c:4d:0d:6b:34:b8:ea: 5b:ce:50:e7:2e:02:e8:10:82:fc:0f:fd:c8:a8:cf: c4:29:50:65:77:62:76:13:ae:11:16:d8:db:49:fb: e0:cf:88:ff:41:d2:1c:9c:c8:e9:6b:92:5a:2d:b5: 34:77:b4:53:dc:b4:8f:b3:4e:2e:f3:ea:80:94:fe: e3:dd:b9:f4:39:02:44:55:06:e0:ca:da:ed:ba:16: 88:07:48:70:18:42:75:73:48:fa:42:d8:55:cc:c4: a2:cd:37:f1:14:de:7d:98:7a:e8:e0:2e:9e:a9:5f: e5:31:f9:2c:f0:a2:b4:5e:25:a0:01:3d:3c:17:82: 4f:4c:42:ee:1a:67:93:45:dd:37:66:e3:94:4f:2a: b1:a0:bd:5c:b9:73:fe:17:46:7d:00:01:19:58:22: d5:04:54:2b:d8:04:6a:44:d5:90:2a:6f:a6:40:a7: 40:a0:23:c8:3a:d9:84:41:62:5d:b3:20:f8:51:ed: 84:59:ed:31:7d:45:26:cb:c1:9f:e4:cf:9e:0f:ab: 2a:0b:6a:d1:95:5b:67:37:1e:93:31:74:2b:67:80: f5:8d:ea:19:a7:83:44:1f:37:c3:74:ea:63:7a:a7: 29:ee:1f:69:57:79:a7:e6:f1:49:d4:71:ad:65:0b: cd:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:B6:41:B3:D0:0D:A9:D8:BE:E3:DD:34:D4:2B:F1:DD:38:9F:36:8B X509v3 Authority Key Identifier: keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/3EE7D5645A5D11EB9B234479C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.90.227.0/24 119.46.128.0/23 119.46.199.0/24 119.46.249.0/24 203.144.132.0/24 203.144.213.0/24 Signature Algorithm: sha256WithRSAEncryption 32:45:c8:fa:b7:b2:3d:bf:99:a6:ae:6d:36:d5:3b:53:4f:b9: cf:95:79:e7:af:5b:fd:88:e9:e8:ab:e2:03:0a:31:ff:d8:08: 2b:31:61:c3:9f:7a:32:bb:73:ab:87:85:89:54:ff:b1:e1:ae: b9:22:ac:24:38:fe:b6:67:6a:92:9c:7d:54:84:da:4b:20:c6: 44:6c:b1:f7:19:2f:4e:8c:0f:d3:b6:63:0e:de:55:3f:88:c3: 8f:4b:77:f0:32:d1:5c:34:46:a7:8b:53:3f:93:59:be:94:21: 27:06:0d:5c:9e:05:64:07:08:89:c6:a4:08:2a:f1:8b:fe:c4: f2:2f:e8:78:8a:38:b7:0c:d3:39:c9:6f:bd:51:e4:fe:21:fa: ab:e0:2e:38:36:ff:29:46:57:98:8d:d9:5c:6f:79:1b:34:f5: 47:89:71:41:52:17:98:66:c6:c3:16:53:9d:a8:0d:b2:f8:81: 3e:25:e1:d6:b4:5a:66:e9:48:08:21:35:d7:85:a2:7d:e9:e7: 5b:b3:c6:56:5a:99:1c:20:f1:ac:5f:aa:e5:ca:f3:c7:a4:7b: b9:52:4f:c0:3b:4f:a0:a8:13:e6:44:98:c5:07:c1:af:d2:25: 4a:c8:d6:cc:02:35:ac:32:d8:54:8d:82:b2:ff:9d:dc:07:81: 89:1d:e3:48 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgICObMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB NDM3QUYwMkMwHhcNMjUwNzE0MTQ1MDEzWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODc1MTkyNS1mMGFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmpfp5tv6/mxNDWs0uOpbzlDnLgLoEIL8D/3IqM/EKVBld2J2E64RFtjbSfvg z4j/QdIcnMjpa5JaLbU0d7RT3LSPs04u8+qAlP7j3bn0OQJEVQbgytrtuhaIB0hw GEJ1c0j6QthVzMSizTfxFN59mHro4C6eqV/lMfks8KK0XiWgAT08F4JPTELuGmeT Rd03ZuOUTyqxoL1cuXP+F0Z9AAEZWCLVBFQr2ARqRNWQKm+mQKdAoCPIOtmEQWJd syD4Ue2EWe0xfUUmy8Gf5M+eD6sqC2rRlVtnNx6TMXQrZ4D1jeoZp4NEHzfDdOpj eqcp7h9pV3mn5vFJ1HGtZQvNIwIDAQABo4ICszCCAq8wHQYDVR0OBBYEFLe2QbPQ DanYvuPdNNQr8d04nzaLMB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4 Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvM0VFN0Q1NjQ1 QTVEMTFFQjlCMjM0NDc5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPQYIKwYBBQUHAQcBAf8E LjAsMCoEAgABMCQDBAA9WuMDBAF3LoADBAB3LscDBAB3LvkDBADLkIQDBADLkNUw DQYJKoZIhvcNAQELBQADggEBADJFyPq3sj2/maaubTbVO1NPuc+VeeevW/2I6eir 4gMKMf/YCCsxYcOfejK7c6uHhYlU/7HhrrkirCQ4/rZnapKcfVSE2ksgxkRssfcZ L06MD9O2Yw7eVT+Iw49Ld/Ay0Vw0RqeLUz+TWb6UIScGDVyeBWQHCInGpAgq8Yv+ xPIv6HiKOLcM0znJb71R5P4h+qvgLjg2/ylGV5iN2VxveRs09UeJcUFSF5hmxsMW U52oDbL4gT4l4da0WmbpSAghNdeFon3p51uzxlZamRwg8axfquXK88eke7lST8A7 T6CoE+ZEmMUHwa/SJUrI1swCNawy2FSNgrL/ndwHgYkd40g= -----END CERTIFICATE-----Generated at Fri Oct 24 07:03:34 2025 by rpki-client