$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/4EDB7B1E1E0111E9A590C837C4F9AE02.roa File: 4EDB7B1E1E0111E9A590C837C4F9AE02.roa (raw, json) Hash identifier: BjMWMsKcUpgXR1YDGT4yZQ86mHk5fW/dAttwlXPvLSw= Subject key identifier: 13:B3:9F:FF:BC:4A:F7:85:71:39:E4:2D:8D:75:8A:C4:0C:22:89:6A Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Certificate serial: 39FF Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/4EDB7B1E1E0111E9A590C837C4F9AE02.roa Signing time: Mon 14 Jul 2025 14:51:17 +0000 ROA not before: Mon 14 Jul 2025 14:51:17 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 45806 IP address blocks: 61.90.177.0/24 maxlen: 24 61.90.248.0/24 maxlen: 24 119.46.87.0/24 maxlen: 24 119.46.89.0/24 maxlen: 24 171.102.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 14:20:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14847 (0x39ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Validity Not Before: Jul 14 14:51:17 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68751965-8303 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:35:cf:02:57:de:68:af:35:25:e4:ea:c0:1b: e6:f6:9b:d8:18:15:20:f0:64:7c:b5:91:91:25:93: f0:59:90:74:7e:d4:ac:3a:c9:5b:70:51:05:93:43: 62:99:89:97:80:c7:f2:d6:1e:33:3e:31:47:34:bc: 8b:37:03:3c:e9:fa:da:e9:af:8a:b3:2b:8e:ad:4c: e9:21:c9:3b:ac:8f:c0:f6:74:bc:2d:fb:a9:c6:e1: a6:96:67:fc:78:1b:c6:27:96:19:77:2a:6b:ab:71: 5f:28:b9:46:83:7e:d7:bb:ef:5d:65:62:ff:46:74: 53:30:fe:29:5f:fe:9a:ec:2a:f2:ae:68:d7:ba:a0: 30:5e:84:21:7a:27:39:cc:9e:28:02:f0:29:f1:a8: d9:b7:9d:d6:88:c3:62:59:dd:1a:6c:ba:1e:17:17: 31:fb:41:f4:89:07:88:97:4a:c9:cc:bc:57:51:43: a7:47:67:a4:ab:e6:56:95:be:0f:11:c2:e7:6c:5e: 42:92:bf:64:df:4d:ec:dc:c8:6a:dc:20:3b:ae:16: 4c:fc:46:cf:f3:01:55:ee:05:09:7b:a4:dc:4a:5c: 2b:28:82:10:db:12:a2:3c:d8:87:5d:d5:69:66:aa: d2:25:4c:4d:64:a3:24:05:9b:ca:d6:53:57:fd:08: c3:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:B3:9F:FF:BC:4A:F7:85:71:39:E4:2D:8D:75:8A:C4:0C:22:89:6A X509v3 Authority Key Identifier: keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/4EDB7B1E1E0111E9A590C837C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.90.177.0/24 61.90.248.0/24 119.46.87.0/24 119.46.89.0/24 171.102.56.0/24 Signature Algorithm: sha256WithRSAEncryption af:94:ad:58:0a:f9:fe:8d:90:a2:e3:04:09:d5:90:64:a2:fe: a7:46:aa:03:86:bc:a3:28:d4:10:bf:82:84:80:07:1a:3d:4e: 63:14:e3:0b:e1:50:6b:3d:b6:8c:1d:6e:0b:8d:c2:1a:48:e5: d5:3d:02:e2:01:24:0b:73:14:eb:05:be:3b:09:96:31:f6:18: ae:c7:bd:63:9e:46:9e:e8:0c:ce:b1:09:a1:68:c0:07:da:4a: 24:5d:b9:2a:07:c4:76:bb:3b:9f:59:0f:cc:c0:b9:1f:bd:f5: 78:c8:f9:2b:a4:b6:44:63:2d:42:63:f7:bd:a3:7c:37:81:fb: b3:52:f7:c3:47:71:db:64:28:36:aa:d5:af:bd:f9:78:40:ce: b9:31:86:f7:72:bd:b1:7c:41:f7:17:20:b9:cc:49:a8:c1:41: 56:24:24:13:a9:44:9d:f0:c3:0b:f6:64:b7:92:67:d0:b8:10: ee:9d:bd:e6:89:68:a2:f9:49:fa:93:15:59:72:bd:64:5f:05: 6f:10:95:da:88:7e:8c:a6:9e:a2:fd:9a:c4:fc:a7:31:96:0f: e7:db:ff:79:e3:d3:69:91:c6:fa:83:a1:c2:0c:ff:cd:2d:b7: 7a:87:d3:12:dd:b0:39:a8:3b:07:ac:c5:d6:98:5c:3d:5b:ff: 46:d0:10:46 -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgICOf8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB NDM3QUYwMkMwHhcNMjUwNzE0MTQ1MTE3WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODc1MTk2NS04MzAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5jXPAlfeaK81JeTqwBvm9pvYGBUg8GR8tZGRJZPwWZB0ftSsOslbcFEFk0Ni mYmXgMfy1h4zPjFHNLyLNwM86fra6a+KsyuOrUzpIck7rI/A9nS8LfupxuGmlmf8 eBvGJ5YZdyprq3FfKLlGg37Xu+9dZWL/RnRTMP4pX/6a7CryrmjXuqAwXoQheic5 zJ4oAvAp8ajZt53WiMNiWd0abLoeFxcx+0H0iQeIl0rJzLxXUUOnR2ekq+ZWlb4P EcLnbF5Ckr9k303s3Mhq3CA7rhZM/EbP8wFV7gUJe6TcSlwrKIIQ2xKiPNiHXdVp ZqrSJUxNZKMkBZvK1lNX/QjDEwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFBOzn/+8 SveFcTnkLY11isQMIolqMB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4 Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvNEVEQjdCMUUx RTAxMTFFOUE1OTBDODM3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNwYIKwYBBQUHAQcBAf8E KDAmMCQEAgABMB4DBAA9WrEDBAA9WvgDBAB3LlcDBAB3LlkDBACrZjgwDQYJKoZI hvcNAQELBQADggEBAK+UrVgK+f6NkKLjBAnVkGSi/qdGqgOGvKMo1BC/goSABxo9 TmMU4wvhUGs9towdbguNwhpI5dU9AuIBJAtzFOsFvjsJljH2GK7HvWOeRp7oDM6x CaFowAfaSiRduSoHxHa7O59ZD8zAuR+99XjI+SuktkRjLUJj972jfDeB+7NS98NH cdtkKDaq1a+9+XhAzrkxhvdyvbF8QfcXILnMSajBQVYkJBOpRJ3wwwv2ZLeSZ9C4 EO6dveaJaKL5SfqTFVlyvWRfBW8QldqIfoymnqL9msT8pzGWD+fb/3nj02mRxvqD ocIM/80tt3qH0xLdsDmoOwesxdaYXD1b/0bQEEY= -----END CERTIFICATE-----Generated at Fri Oct 24 07:03:34 2025 by rpki-client