$ rpki-client -vvf rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/EB61BF32FDCD11EEB0EABC0CC4F9AE02.roa File: EB61BF32FDCD11EEB0EABC0CC4F9AE02.roa (raw, json) Hash identifier: nvDXFuMbASKQcxa2tU3FunOBPS4uwAfHeJjVkN0kFQk= Subject key identifier: 15:B5:5B:B0:73:08:5C:3B:8D:55:CF:A6:D1:B5:69:28:0D:F5:BC:5C Certificate issuer: /CN=A9146AD7/serialNumber=BAF5ADA32CA0D34CF3CCF53ABDF86DE6F8ED9005 Certificate serial: 19BF Authority key identifier: BA:F5:AD:A3:2C:A0:D3:4C:F3:CC:F5:3A:BD:F8:6D:E6:F8:ED:90:05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvWtoyyg00zzzPU6vfht5vjtkAU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/EB61BF32FDCD11EEB0EABC0CC4F9AE02.roa Signing time: Sat 12 Apr 2025 16:24:57 +0000 ROA not before: Sat 12 Apr 2025 16:24:57 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 17808 IP address blocks: 121.73.16.0/22 maxlen: 22 121.73.28.0/22 maxlen: 22 218.101.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.crl rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvWtoyyg00zzzPU6vfht5vjtkAU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 16:43:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6591 (0x19bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146AD7, serialNumber=BAF5ADA32CA0D34CF3CCF53ABDF86DE6F8ED9005 Validity Not Before: Apr 12 16:24:57 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=67fa93d9-528f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:cd:41:57:ed:64:c3:68:6f:a2:2c:27:04:64: 9e:8e:5b:74:e7:29:82:66:c3:66:67:3d:b0:0b:ae: a3:df:95:9d:3a:f7:96:aa:b4:36:76:e2:09:c4:37: 69:98:19:9a:ec:26:74:25:f1:c8:a6:54:ea:27:c1: da:e2:d4:9f:bb:7a:32:20:75:e9:4c:c5:89:98:95: 4d:0c:fd:43:2e:ed:24:20:d6:f0:d9:55:46:c6:21: 16:14:eb:34:e4:7b:d4:26:37:48:3c:48:b4:1b:16: 0a:e0:6d:c8:f7:6b:6e:34:c7:39:d1:06:8a:22:05: bf:46:9a:a6:1f:43:9c:b7:27:75:da:2d:fb:34:03: 49:d1:25:bf:f2:19:72:66:82:00:0a:fe:a4:44:b8: db:5f:9a:ac:46:aa:f8:bb:1b:92:5f:43:01:a9:71: ee:06:dc:8a:07:60:f7:c0:2f:70:07:4c:a6:2f:31: 1b:8c:f0:c0:28:e3:3c:b6:2b:f0:78:a2:21:2a:ed: 76:f5:9f:be:d4:c2:04:14:a0:39:f0:83:4e:f8:2a: 89:21:14:db:37:44:f0:54:79:f8:69:9a:98:a0:ee: 05:f2:cf:30:51:14:74:c9:da:ea:e8:89:59:17:7b: 80:54:3c:6d:65:7a:6a:da:75:4b:65:d7:f6:84:07: cb:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:B5:5B:B0:73:08:5C:3B:8D:55:CF:A6:D1:B5:69:28:0D:F5:BC:5C X509v3 Authority Key Identifier: keyid:BA:F5:AD:A3:2C:A0:D3:4C:F3:CC:F5:3A:BD:F8:6D:E6:F8:ED:90:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvWtoyyg00zzzPU6vfht5vjtkAU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/EB61BF32FDCD11EEB0EABC0CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 121.73.16.0/22 121.73.28.0/22 218.101.16.0/20 Signature Algorithm: sha256WithRSAEncryption 7a:07:b2:9f:d3:2b:41:43:08:5a:33:98:a4:59:a4:3b:63:40: ce:35:af:29:77:b5:68:23:90:10:d4:62:d7:39:b9:af:b2:8f: 47:bd:24:e6:65:58:49:1b:f3:0f:2c:32:e6:7e:68:d0:c5:20: 03:f2:38:33:1d:01:a9:2f:67:db:8c:ce:fd:21:95:f6:28:9a: 9b:50:6f:3e:0f:95:84:78:04:7e:18:ad:13:85:da:70:aa:4e: 56:05:e6:31:b2:d1:9a:40:b0:aa:ab:2d:9f:65:1a:ee:50:9e: 16:92:a6:83:23:80:51:45:02:7f:25:e1:64:34:62:7d:58:66: 87:7b:de:7e:09:58:26:28:d3:ff:79:00:7b:64:63:73:2c:a6: 0c:53:98:4e:59:51:d0:f9:ed:fa:ef:17:10:15:b8:a7:bc:a9: 1d:84:ba:de:e3:bc:db:53:e8:2b:ee:f0:e7:40:4f:e3:83:d7: be:42:23:37:d2:88:07:61:ab:6b:ea:a7:f7:29:4f:06:f6:64: 33:f5:02:93:b4:46:30:0f:33:9f:40:a5:3c:24:6e:4d:7d:e7: 73:65:f6:dd:f9:6e:f2:42:39:09:af:50:1f:18:9f:03:6a:87: 97:cc:14:dd:d7:8e:3c:1c:d9:5a:86:d0:23:84:20:3e:74:ba: 89:3d:59:27 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICGb8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZBRDcxMTAvBgNVBAUTKEJBRjVBREEzMkNBMEQzNENGM0NDRjUzQUJERjg2REU2 RjhFRDkwMDUwHhcNMjUwNDEyMTYyNDU3WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2ZhOTNkOS01MjhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1c1BV+1kw2hvoiwnBGSejlt05ymCZsNmZz2wC66j35WdOveWqrQ2duIJxDdp mBma7CZ0JfHIplTqJ8Ha4tSfu3oyIHXpTMWJmJVNDP1DLu0kINbw2VVGxiEWFOs0 5HvUJjdIPEi0GxYK4G3I92tuNMc50QaKIgW/RpqmH0Octyd12i37NANJ0SW/8hly ZoIACv6kRLjbX5qsRqr4uxuSX0MBqXHuBtyKB2D3wC9wB0ymLzEbjPDAKOM8tivw eKIhKu129Z++1MIEFKA58INO+CqJIRTbN0TwVHn4aZqYoO4F8s8wURR0ydrq6IlZ F3uAVDxtZXpq2nVLZdf2hAfLAQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFBW1W7Bz CFw7jVXPptG1aSgN9bxcMB8GA1UdIwQYMBaAFLr1raMsoNNM88z1Or34beb47ZAF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkFENy9GOEJBQkFDQThC ODkxMUU3OTAxMTVDM0ZDNEY5QUUwMi91dld0b3l5ZzAwenp6UFU2dmZodDV2anRr QVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3V2V3RveXlnMDB6enpQVTZ2Zmh0NXZqdGtBVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDZBRDcvRjhCQUJBQ0E4Qjg5MTFFNzkwMTE1QzNGQzRGOUFFMDIvRUI2MUJGMzJG RENEMTFFRUIwRUFCQzBDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAJ5SRADBAJ5SRwDBATaZRAwDQYJKoZIhvcNAQELBQADggEB AHoHsp/TK0FDCFozmKRZpDtjQM41ryl3tWgjkBDUYtc5ua+yj0e9JOZlWEkb8w8s MuZ+aNDFIAPyODMdAakvZ9uMzv0hlfYomptQbz4PlYR4BH4YrROF2nCqTlYF5jGy 0ZpAsKqrLZ9lGu5QnhaSpoMjgFFFAn8l4WQ0Yn1YZod73n4JWCYo0/95AHtkY3Ms pgxTmE5ZUdD57frvFxAVuKe8qR2Eut7jvNtT6Cvu8OdAT+OD175CIzfSiAdhq2vq p/cpTwb2ZDP1ApO0RjAPM59ApTwkbk1953Nl9t35bvJCOQmvUB8YnwNqh5fMFN3X jjwc2VqG0COEID50uok9WSc= -----END CERTIFICATE-----Generated at Fri Oct 24 13:13:19 2025 by rpki-client