$ rpki-client -vvf rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/A3C1A64E020811EF900CC60CC4F9AE02.roa File: A3C1A64E020811EF900CC60CC4F9AE02.roa (raw, json) Hash identifier: D7GG+9V9VetFTo3WS2746v47jcVH9mGxmAznj65oILQ= Subject key identifier: AB:29:44:26:67:EF:4C:1C:1F:03:23:F9:DF:AF:6B:F6:19:E7:9E:FB Certificate issuer: /CN=A9163998/serialNumber=7425AAE16DDB464A3E2B479C7A40C99023836BA0 Certificate serial: 02C7 Authority key identifier: 74:25:AA:E1:6D:DB:46:4A:3E:2B:47:9C:7A:40:C9:90:23:83:6B:A0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dCWq4W3bRko-K0ecekDJkCODa6A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/A3C1A64E020811EF900CC60CC4F9AE02.roa Signing time: Thu 19 Jun 2025 01:57:44 +0000 ROA not before: Thu 19 Jun 2025 01:57:44 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 198949 IP address blocks: 147.136.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.crl rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dCWq4W3bRko-K0ecekDJkCODa6A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:25:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 711 (0x2c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163998, serialNumber=7425AAE16DDB464A3E2B479C7A40C99023836BA0 Validity Not Before: Jun 19 01:57:44 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=68536e98-8749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:3e:76:77:3f:68:75:14:27:06:4c:cd:7d:ce: b7:49:ff:76:40:37:97:3b:6d:62:03:c4:71:27:f8: 82:96:64:2d:7a:0b:37:98:67:57:9d:35:05:c9:3b: c2:29:44:28:23:7a:e5:d6:0b:ba:72:35:e6:73:ab: 3a:b4:2d:60:a3:76:1e:04:e4:05:1d:46:14:71:9b: 41:ba:2f:d0:37:2f:1f:48:39:7b:0b:97:89:4a:a4: c8:37:46:2d:8c:d1:31:d0:9f:e7:68:e5:01:bd:84: a3:51:20:31:8b:99:7b:f5:07:6d:1f:dd:82:70:d8: 7b:d7:81:ca:87:2d:ff:10:af:11:84:42:44:5d:4b: aa:16:8c:e9:b7:64:06:8c:51:77:c3:8a:af:a8:97: ca:dc:96:a5:14:41:73:ef:28:66:91:33:80:15:3e: 83:6a:54:81:84:da:12:f1:2a:d4:8a:65:1e:79:75: 39:8b:eb:ab:fc:a8:a7:b8:28:2b:49:64:f0:7b:c8: a9:ef:05:1c:05:01:ee:54:d0:4f:47:d9:33:77:7a: 00:4e:f0:02:2c:96:85:d7:13:47:3b:8c:5e:7b:03: 18:8c:37:b6:1f:4a:ef:45:e6:74:5f:22:78:aa:39: bc:76:41:b4:7d:cc:3e:ae:81:86:88:b8:cb:c0:fe: 69:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:29:44:26:67:EF:4C:1C:1F:03:23:F9:DF:AF:6B:F6:19:E7:9E:FB X509v3 Authority Key Identifier: keyid:74:25:AA:E1:6D:DB:46:4A:3E:2B:47:9C:7A:40:C9:90:23:83:6B:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dCWq4W3bRko-K0ecekDJkCODa6A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/A3C1A64E020811EF900CC60CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 147.136.133.0/24 Signature Algorithm: sha256WithRSAEncryption 9d:c7:02:11:fd:cb:40:32:d8:ea:94:fc:9d:5e:b2:30:a0:7a: d9:e2:2b:26:78:61:bb:17:53:3b:ba:a6:dd:ef:13:b6:e0:e3: 4b:71:00:d6:73:9b:ac:3d:83:3e:63:33:e8:12:91:98:3c:04: dd:a3:6d:04:cb:76:15:4e:e6:98:4f:d1:76:37:59:05:77:ea: fa:fc:3c:05:42:2d:dd:e2:df:57:0e:f5:a9:a9:50:a7:e6:a3: 1c:c0:5c:32:ee:49:6b:49:c8:72:de:3b:f2:f5:66:0f:b1:2a: c1:0f:a2:02:63:81:ef:ae:5d:79:cd:62:f7:ff:24:00:36:ba: 5c:cf:cd:bb:4e:e3:88:cb:7a:d1:b5:48:4e:40:dd:d9:d1:d5: 7e:00:ad:48:88:28:de:0e:4c:dd:41:c1:e6:45:74:c6:5d:de: 4f:cb:08:e6:72:2c:44:c6:03:21:d2:4f:42:53:f1:9b:6e:93: 61:b7:2d:ea:f1:50:7d:71:30:d0:c6:7d:da:e4:67:c0:3d:75: 06:e0:49:d3:5b:61:52:ce:58:2b:96:03:ff:26:8f:7a:14:30: 03:fd:75:81:ea:44:32:f6:3b:42:29:c2:36:b9:9e:da:92:3b: 85:bd:a7:26:d7:cb:d3:8f:c1:67:4e:b9:88:9f:2d:01:30:75: 73:c8:cc:db -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAscwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjM5OTgxMTAvBgNVBAUTKDc0MjVBQUUxNkREQjQ2NEEzRTJCNDc5QzdBNDBDOTkw MjM4MzZCQTAwHhcNMjUwNjE5MDE1NzQ0WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODUzNmU5OC04NzQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyz52dz9odRQnBkzNfc63Sf92QDeXO21iA8RxJ/iClmQtegs3mGdXnTUFyTvC KUQoI3rl1gu6cjXmc6s6tC1go3YeBOQFHUYUcZtBui/QNy8fSDl7C5eJSqTIN0Yt jNEx0J/naOUBvYSjUSAxi5l79QdtH92CcNh714HKhy3/EK8RhEJEXUuqFozpt2QG jFF3w4qvqJfK3JalFEFz7yhmkTOAFT6DalSBhNoS8SrUimUeeXU5i+ur/KinuCgr SWTwe8ip7wUcBQHuVNBPR9kzd3oATvACLJaF1xNHO4xeewMYjDe2H0rvReZ0XyJ4 qjm8dkG0fcw+roGGiLjLwP5pdwIDAQABo4IClTCCApEwHQYDVR0OBBYEFKspRCZn 70wcHwMj+d+va/YZ5577MB8GA1UdIwQYMBaAFHQlquFt20ZKPitHnHpAyZAjg2ug MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Mzk5OC8zMENDMDg0QTA4 REMxMUVEQkVERTYxMkJDNEY5QUUwMi9kQ1dxNFczYlJrby1LMGVjZWtESmtDT0Rh NkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2RDV3E0VzNiUmtvLUswZWNla0RKa0NPRGE2QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjM5OTgvMzBDQzA4NEEwOERDMTFFREJFREU2MTJCQzRGOUFFMDIvQTNDMUE2NEUw MjA4MTFFRjkwMENDNjBDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBACTiIUwDQYJKoZIhvcNAQELBQADggEBAJ3HAhH9y0Ay2OqU /J1esjCgetniKyZ4YbsXUzu6pt3vE7bg40txANZzm6w9gz5jM+gSkZg8BN2jbQTL dhVO5phP0XY3WQV36vr8PAVCLd3i31cO9ampUKfmoxzAXDLuSWtJyHLeO/L1Zg+x KsEPogJjge+uXXnNYvf/JAA2ulzPzbtO44jLetG1SE5A3dnR1X4ArUiIKN4OTN1B weZFdMZd3k/LCOZyLETGAyHST0JT8Ztuk2G3LerxUH1xMNDGfdrkZ8A9dQbgSdNb YVLOWCuWA/8mj3oUMAP9dYHqRDL2O0Ipwja5ntqSO4W9pybXy9OPwWdOuYifLQEw dXPIzNs= -----END CERTIFICATE-----Generated at Wed Nov 5 19:34:02 2025 by rpki-client