$ rpki-client -vvf rpki.apnic.net/member_repository/A914BBEF/F90302601FAE11EA9360FF0EC4F9AE02/9E48E9821FB011EAAD480012C4F9AE02.roa File: 9E48E9821FB011EAAD480012C4F9AE02.roa (raw, json) Hash identifier: +qrgEBTBD6O+YCDXfGBARZb1S4AOeFFb2M6qsvbOdkk= Subject key identifier: 64:1D:CD:23:B0:97:3A:76:F6:46:B2:05:79:6E:14:DA:00:96:D0:C0 Certificate issuer: /CN=A914BBEF/serialNumber=33A3B2A5303B5117B32E7E4586ACA94408918742 Certificate serial: 0BF6 Authority key identifier: 33:A3:B2:A5:30:3B:51:17:B3:2E:7E:45:86:AC:A9:44:08:91:87:42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6OypTA7URezLn5FhqypRAiRh0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914BBEF/F90302601FAE11EA9360FF0EC4F9AE02/9E48E9821FB011EAAD480012C4F9AE02.roa Signing time: Tue 02 Sep 2025 19:09:05 +0000 ROA not before: Tue 02 Sep 2025 19:09:05 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 45938 IP address blocks: 180.222.128.0/21 maxlen: 21 180.222.128.0/24 maxlen: 24 180.222.129.0/24 maxlen: 24 180.222.130.0/24 maxlen: 24 180.222.131.0/24 maxlen: 24 180.222.132.0/24 maxlen: 24 180.222.133.0/24 maxlen: 24 180.222.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914BBEF/F90302601FAE11EA9360FF0EC4F9AE02/M6OypTA7URezLn5FhqypRAiRh0I.crl rsync://rpki.apnic.net/member_repository/A914BBEF/F90302601FAE11EA9360FF0EC4F9AE02/M6OypTA7URezLn5FhqypRAiRh0I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6OypTA7URezLn5FhqypRAiRh0I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 19:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3062 (0xbf6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914BBEF, serialNumber=33A3B2A5303B5117B32E7E4586ACA94408918742 Validity Not Before: Sep 2 19:09:05 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68b740d1-af98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:38:51:ff:16:db:5c:30:66:ab:4b:c9:18:59: 5b:4d:90:e0:21:cc:24:2d:dd:53:0e:8e:80:de:60: 74:92:cc:c3:e8:aa:b5:f8:e4:a8:8d:f0:bd:d5:55: 4a:23:21:8e:e9:cc:d8:19:fa:a0:c7:48:a9:7d:15: c8:a1:79:00:e8:90:6f:95:ed:fc:f3:e1:8f:18:fe: 9a:65:75:cb:32:b5:8b:8c:02:f2:be:4e:6a:5f:e7: 14:6b:89:6c:04:34:89:96:31:b8:49:ef:59:90:96: 8b:d8:82:e1:9a:e6:18:04:06:43:19:a7:8b:be:c3: 5a:d8:ec:8e:b8:1f:da:83:72:33:0c:7c:bf:e1:88: f9:da:a1:89:97:d8:26:6a:4f:ac:82:eb:b7:e6:31: 68:7f:ac:1e:d7:81:9f:3f:69:dc:db:71:98:4d:48: 29:78:4e:f8:88:64:6b:0c:69:a6:f5:2f:5c:95:2e: ec:48:eb:18:1f:17:33:7c:5e:1e:06:65:7e:16:22: f5:11:e6:8b:0b:62:98:4e:38:31:84:3e:93:31:30: cd:68:9c:ff:77:43:60:43:fa:08:56:86:7c:26:82: 5a:48:35:42:75:77:07:51:f8:79:1c:66:50:1a:ae: d1:b1:22:d5:5a:01:4e:1c:97:bb:ec:c9:56:9a:24: 96:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:1D:CD:23:B0:97:3A:76:F6:46:B2:05:79:6E:14:DA:00:96:D0:C0 X509v3 Authority Key Identifier: keyid:33:A3:B2:A5:30:3B:51:17:B3:2E:7E:45:86:AC:A9:44:08:91:87:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914BBEF/F90302601FAE11EA9360FF0EC4F9AE02/M6OypTA7URezLn5FhqypRAiRh0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6OypTA7URezLn5FhqypRAiRh0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BBEF/F90302601FAE11EA9360FF0EC4F9AE02/9E48E9821FB011EAAD480012C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 180.222.128.0/21 Signature Algorithm: sha256WithRSAEncryption 38:a6:37:6d:0e:e8:f5:fd:e2:cb:e9:0b:ad:d1:e6:ae:3f:e9: 15:28:d6:8e:16:0b:30:27:42:82:a8:2d:76:e5:6c:bf:a5:a8: 93:a6:99:45:3f:ec:98:bc:eb:83:65:b6:0c:44:b8:a5:09:28: 51:2a:77:39:f5:1b:6a:5c:3f:d5:48:0d:ac:de:d3:52:42:51: 5b:16:55:cf:61:50:67:82:47:ba:04:6f:a3:01:50:2c:0f:08: fa:e1:5d:a6:9e:71:e6:4d:ea:bf:fd:79:30:d0:64:0c:a8:f8: 8f:5b:0d:90:1f:8d:2b:2b:06:64:bc:7c:0f:d9:97:f8:d0:4f: 34:ba:12:22:85:3b:cf:b1:0a:d8:1d:9e:7d:1e:b2:65:08:93: 51:c1:2d:96:99:43:89:bc:12:14:ed:61:06:ff:25:00:56:01: 73:91:22:4c:06:4d:93:09:3f:8d:f7:dc:7b:5e:a0:37:82:69: f8:cd:8f:5a:5d:2d:67:6f:a4:6a:8d:da:61:87:a9:4a:c2:20: df:a3:fa:3e:e6:fa:a8:22:23:b8:95:fb:b8:3b:a1:46:51:e9: 2f:7c:05:0c:32:a3:f3:18:0e:02:5f:47:6c:01:dd:d6:7a:88: f7:3a:78:ce:ce:77:a9:74:f7:ec:6b:3d:91:b0:82:de:2e:52: d0:40:b0:cc -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICC/YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEJCRUYxMTAvBgNVBAUTKDMzQTNCMkE1MzAzQjUxMTdCMzJFN0U0NTg2QUNBOTQ0 MDg5MTg3NDIwHhcNMjUwOTAyMTkwOTA1WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGI3NDBkMS1hZjk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvjhR/xbbXDBmq0vJGFlbTZDgIcwkLd1TDo6A3mB0kszD6Kq1+OSojfC91VVK IyGO6czYGfqgx0ipfRXIoXkA6JBvle388+GPGP6aZXXLMrWLjALyvk5qX+cUa4ls BDSJljG4Se9ZkJaL2ILhmuYYBAZDGaeLvsNa2OyOuB/ag3IzDHy/4Yj52qGJl9gm ak+sguu35jFof6we14GfP2nc23GYTUgpeE74iGRrDGmm9S9clS7sSOsYHxczfF4e BmV+FiL1EeaLC2KYTjgxhD6TMTDNaJz/d0NgQ/oIVoZ8JoJaSDVCdXcHUfh5HGZQ Gq7RsSLVWgFOHJe77MlWmiSWIwIDAQABo4IClTCCApEwHQYDVR0OBBYEFGQdzSOw lzp29kayBXluFNoAltDAMB8GA1UdIwQYMBaAFDOjsqUwO1EXsy5+RYasqUQIkYdC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkJFRi9GOTAzMDI2MDFG QUUxMUVBOTM2MEZGMEVDNEY5QUUwMi9NNk95cFRBN1VSZXpMbjVGaHF5cFJBaVJo MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL002T3lwVEE3VVJlekxuNUZocXlwUkFpUmgwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEJCRUYvRjkwMzAyNjAxRkFFMTFFQTkzNjBGRjBFQzRGOUFFMDIvOUU0OEU5ODIx RkIwMTFFQUFENDgwMDEyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAO03oAwDQYJKoZIhvcNAQELBQADggEBADimN20O6PX94svp C63R5q4/6RUo1o4WCzAnQoKoLXblbL+lqJOmmUU/7Ji864NltgxEuKUJKFEqdzn1 G2pcP9VIDaze01JCUVsWVc9hUGeCR7oEb6MBUCwPCPrhXaaeceZN6r/9eTDQZAyo +I9bDZAfjSsrBmS8fA/Zl/jQTzS6EiKFO8+xCtgdnn0esmUIk1HBLZaZQ4m8EhTt YQb/JQBWAXORIkwGTZMJP4333HteoDeCafjNj1pdLWdvpGqN2mGHqUrCIN+j+j7m +qgiI7iV+7g7oUZR6S98BQwyo/MYDgJfR2wB3dZ6iPc6eM7Od6l09+xrPZGwgt4u UtBAsMw= -----END CERTIFICATE-----Generated at Fri Sep 19 07:15:29 2025 by rpki-client