$ rpki-client -vvf rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/B07E339A257C11E79EE15E3CC4F9AE02.roa File: B07E339A257C11E79EE15E3CC4F9AE02.roa (raw, json) Hash identifier: 2qn9NXSOf21uSxk9HsnL18AqcQ0bhCjIV+9nqDhn33Y= Subject key identifier: CD:57:C2:20:2E:7D:79:F0:44:B7:58:58:98:4E:DC:89:C7:7B:F7:68 Certificate issuer: /CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA Certificate serial: 1F6C Authority key identifier: AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/B07E339A257C11E79EE15E3CC4F9AE02.roa Signing time: Sat 30 Aug 2025 16:35:30 +0000 ROA not before: Sat 30 Aug 2025 16:35:30 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 17672 IP address blocks: 123.183.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 16:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8044 (0x1f6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE4, serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA Validity Not Before: Aug 30 16:35:30 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68b32852-5120 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:3e:6a:0b:65:8b:c2:f7:f9:47:07:3c:b6:48: 66:d1:81:e7:e3:25:06:78:51:32:c0:5c:44:4a:01: 80:4c:b3:f0:96:47:92:f0:2d:71:77:aa:4e:c4:16: bc:ed:79:fa:60:ee:7a:e9:95:6a:b2:8b:7b:bf:a9: dd:01:29:93:26:c5:b8:fd:61:3c:dd:57:33:75:08: cc:a1:80:28:2a:31:92:eb:ec:64:27:a3:6e:85:28: 04:bc:76:aa:a2:33:d0:02:df:bd:20:73:f0:da:a0: ae:5b:04:cd:a7:9c:57:c4:e4:68:6d:d8:75:0a:18: 66:16:3a:2c:73:63:ad:40:ad:da:52:0c:ef:bf:d0: 00:98:ca:c1:b3:a2:63:cf:00:80:20:69:17:08:a8: 68:dc:0a:50:5b:fb:5d:de:3a:43:87:b4:52:68:13: 49:aa:76:5d:fd:cf:ac:5f:09:35:3d:19:74:62:eb: a1:97:a3:1e:f7:6e:3b:b4:fc:06:7f:8d:a7:1c:48: f2:3a:ee:55:48:86:39:4d:30:df:ce:44:c7:0d:7a: 41:63:cf:75:70:e7:bb:8d:25:76:ba:89:6e:9d:74: 3f:ac:75:e0:f2:b0:74:54:17:7f:0d:c5:9c:58:61: c9:7d:7e:31:94:01:7f:47:54:f5:29:6b:b7:13:5a: 91:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:57:C2:20:2E:7D:79:F0:44:B7:58:58:98:4E:DC:89:C7:7B:F7:68 X509v3 Authority Key Identifier: keyid:AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/B07E339A257C11E79EE15E3CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 123.183.192.0/18 Signature Algorithm: sha256WithRSAEncryption 2a:07:3c:29:1a:6a:77:5e:cf:98:f1:f1:9b:26:ba:ad:5b:44: fd:a5:3b:30:c8:16:4b:03:a0:8c:f2:a3:ee:34:86:49:da:a3: 77:ca:67:8c:d5:d6:c9:5c:7f:36:e7:64:0c:42:bd:4d:e5:5f: 04:f8:2b:4c:44:e1:3b:88:95:b8:b1:c0:6e:ba:7a:b2:92:c8: 2b:2a:95:5b:6c:8e:2e:56:da:ba:e7:8c:ad:1d:8b:9f:57:11: 43:3d:a3:61:6c:7e:9e:11:d9:14:69:a6:e2:41:d7:03:d1:b5: d4:ec:0e:be:3f:9a:a4:86:20:8f:ef:d9:3d:16:1c:dc:ed:ee: d8:f1:d8:88:18:70:33:5e:8e:2d:ea:77:8b:b4:63:e3:36:69: 24:93:23:52:0d:44:9c:3c:09:a1:fa:1a:1b:eb:33:4c:92:6e: a9:b0:37:7c:35:62:82:81:3d:3f:76:15:ff:e1:96:a9:d7:e0: 9a:14:7f:d8:aa:45:df:f0:05:5d:eb:39:2e:b9:85:34:2e:18: 67:c1:95:be:ea:da:bf:d7:66:a6:5a:de:91:88:6b:84:83:a0: b7:81:58:bd:37:e4:41:aa:f1:22:9f:c2:0c:39:94:65:8b:bc: f4:42:f9:be:fd:cb:7c:19:f6:f9:68:ac:c4:81:b8:b1:7a:53: b0:a4:44:c1 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICH2wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVBRTQxMTAvBgNVBAUTKEFENTZCNjcxODdBOThCQTMxNDA4NDQwNTc5N0JEOTY1 NkU4QUM4QkEwHhcNMjUwODMwMTYzNTMwWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGIzMjg1Mi01MTIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxj5qC2WLwvf5Rwc8tkhm0YHn4yUGeFEywFxESgGATLPwlkeS8C1xd6pOxBa8 7Xn6YO566ZVqsot7v6ndASmTJsW4/WE83VczdQjMoYAoKjGS6+xkJ6NuhSgEvHaq ojPQAt+9IHPw2qCuWwTNp5xXxORobdh1ChhmFjosc2OtQK3aUgzvv9AAmMrBs6Jj zwCAIGkXCKho3ApQW/td3jpDh7RSaBNJqnZd/c+sXwk1PRl0Yuuhl6Me9247tPwG f42nHEjyOu5VSIY5TTDfzkTHDXpBY891cOe7jSV2uolunXQ/rHXg8rB0VBd/DcWc WGHJfX4xlAF/R1T1KWu3E1qRPQIDAQABo4IClTCCApEwHQYDVR0OBBYEFM1XwiAu fXnwRLdYWJhO3InHe/doMB8GA1UdIwQYMBaAFK1WtnGHqYujFAhEBXl72WVuisi6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUFFNC82NzUzQjhBRTI1 NzUxMUU3QUMwRDE3MkFDNEY5QUUwMi9yVmEyY1llcGk2TVVDRVFGZVh2WlpXNkt5 TG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JWYTJjWWVwaTZNVUNFUUZlWHZaWlc2S3lMby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEVBRTQvNjc1M0I4QUUyNTc1MTFFN0FDMEQxNzJBQzRGOUFFMDIvQjA3RTMzOUEy NTdDMTFFNzlFRTE1RTNDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAZ7t8AwDQYJKoZIhvcNAQELBQADggEBACoHPCkaandez5jx 8Zsmuq1bRP2lOzDIFksDoIzyo+40hknao3fKZ4zV1slcfzbnZAxCvU3lXwT4K0xE 4TuIlbixwG66erKSyCsqlVtsji5W2rrnjK0di59XEUM9o2Fsfp4R2RRppuJB1wPR tdTsDr4/mqSGII/v2T0WHNzt7tjx2IgYcDNeji3qd4u0Y+M2aSSTI1INRJw8CaH6 GhvrM0ySbqmwN3w1YoKBPT92Ff/hlqnX4JoUf9iqRd/wBV3rOS65hTQuGGfBlb7q 2r/XZqZa3pGIa4SDoLeBWL035EGq8SKfwgw5lGWLvPRC+b79y3wZ9vlorMSBuLF6 U7CkRME= -----END CERTIFICATE-----Generated at Sat Sep 6 20:22:02 2025 by rpki-client