$ rpki-client -vvf rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/BE76C8186C6811F0B3FF7E69C4F9AE02.roa File: BE76C8186C6811F0B3FF7E69C4F9AE02.roa (raw, json) Hash identifier: nVi2F1h98I6eFhDtm7NoIpz9Is13r6Zxvgjimh4KJP0= Subject key identifier: 1A:0E:4F:3B:24:C2:E5:02:99:E9:96:D3:BB:E9:6F:CE:1B:78:E0:F0 Certificate issuer: /CN=A917DEA4/serialNumber=B4D6FFD5DFF9EAC413AB4408E09637B09494DBC8 Certificate serial: 0754 Authority key identifier: B4:D6:FF:D5:DF:F9:EA:C4:13:AB:44:08:E0:96:37:B0:94:94:DB:C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/BE76C8186C6811F0B3FF7E69C4F9AE02.roa Signing time: Sat 30 Aug 2025 23:15:27 +0000 ROA not before: Sat 30 Aug 2025 23:15:27 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 137076 IP address blocks: 14.96.24.0/21 maxlen: 24 14.96.32.0/21 maxlen: 24 14.96.40.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.crl rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 19:50:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1876 (0x754) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DEA4, serialNumber=B4D6FFD5DFF9EAC413AB4408E09637B09494DBC8 Validity Not Before: Aug 30 23:15:27 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68b3860f-0163 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:63:8a:a3:51:a7:0d:45:62:92:30:f8:ab:a9: 40:dc:f6:b3:2c:a6:34:23:73:93:31:ac:28:13:e9: db:6e:a2:3e:44:6f:bf:0a:be:21:19:b2:c0:2f:05: f7:bd:b0:d6:13:d6:a3:92:48:1c:11:ef:7d:98:05: 2a:6a:0b:a3:2c:01:e8:33:bf:2c:76:73:ff:06:94: 79:32:37:50:94:02:75:e6:0c:29:75:f9:56:4d:98: 30:56:7f:4a:e1:3f:2f:36:f1:14:3c:e0:7e:94:e7: c3:32:fd:fb:29:aa:7e:0e:e6:c5:c4:c6:ec:5a:dd: 7e:93:19:41:94:1e:6b:98:84:90:3c:7e:81:6e:02: f8:c7:b9:2b:7e:4b:95:24:54:85:6c:ac:04:81:03: c7:1c:77:bd:04:d5:5b:73:9c:14:89:81:03:ba:59: f0:4b:af:a9:7e:f8:2a:e6:c6:fc:3a:0a:cf:ef:a8: 99:d1:e0:34:24:96:d4:c4:47:96:91:37:5e:95:32: 5b:18:2b:36:3c:92:c9:27:68:7b:c9:b9:a6:90:10: dc:ba:d2:46:cf:a6:10:26:ec:13:e8:a0:5c:a4:f9: ad:d1:97:91:eb:8a:e0:7e:6c:6d:e8:f2:c6:fd:cd: d8:c9:d5:4d:47:bf:be:7d:b5:7a:40:d7:72:41:87: af:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:0E:4F:3B:24:C2:E5:02:99:E9:96:D3:BB:E9:6F:CE:1B:78:E0:F0 X509v3 Authority Key Identifier: keyid:B4:D6:FF:D5:DF:F9:EA:C4:13:AB:44:08:E0:96:37:B0:94:94:DB:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/BE76C8186C6811F0B3FF7E69C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 14.96.24.0-14.96.47.255 Signature Algorithm: sha256WithRSAEncryption 2b:e8:b5:67:d5:86:cf:1c:8f:f4:23:e8:44:54:ff:e1:85:0f: df:22:e5:62:ad:ed:5e:e0:20:8c:a1:d3:ad:50:7f:be:3e:68: 04:68:a1:58:64:53:3c:ae:f2:c4:f1:c1:45:08:1d:17:07:9a: ac:92:15:55:46:ee:94:15:82:9c:55:05:a7:d9:e3:a9:94:58: 25:4e:60:1b:06:da:87:1d:86:f7:f1:17:3a:25:34:63:1b:f1: bc:19:66:06:ca:89:45:9e:18:e0:a2:f6:e3:b7:33:88:38:56: 09:7d:c9:f6:6e:e4:b2:a6:ea:d8:e3:d0:eb:4a:b1:a9:57:c8: 66:a0:5c:78:c9:55:68:75:a8:67:29:5a:2a:1a:02:2d:c5:28: 30:28:db:f8:d6:66:3a:7a:40:d6:0a:e8:52:7b:e1:9f:4c:90: 4d:96:2f:66:ae:72:0e:96:80:79:83:ef:a9:44:02:41:39:40: 15:7d:ea:36:dc:e8:b3:d1:90:12:a5:76:93:fa:fe:0b:13:0a: 99:72:93:bf:42:84:51:63:70:b2:3b:5d:c8:c3:88:45:9a:a9: 6c:53:9a:65:8a:05:86:37:6d:e2:28:5d:f8:41:b1:81:98:ff: 0c:2e:f0:2c:a7:5e:cb:b3:7c:bf:25:25:fa:91:55:8c:22:97: d0:4e:af:56 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgICB1QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0RFQTQxMTAvBgNVBAUTKEI0RDZGRkQ1REZGOUVBQzQxM0FCNDQwOEUwOTYzN0Iw OTQ5NERCQzgwHhcNMjUwODMwMjMxNTI3WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGIzODYwZi0wMTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0WOKo1GnDUVikjD4q6lA3PazLKY0I3OTMawoE+nbbqI+RG+/Cr4hGbLALwX3 vbDWE9ajkkgcEe99mAUqagujLAHoM78sdnP/BpR5MjdQlAJ15gwpdflWTZgwVn9K 4T8vNvEUPOB+lOfDMv37Kap+DubFxMbsWt1+kxlBlB5rmISQPH6BbgL4x7krfkuV JFSFbKwEgQPHHHe9BNVbc5wUiYEDulnwS6+pfvgq5sb8OgrP76iZ0eA0JJbUxEeW kTdelTJbGCs2PJLJJ2h7ybmmkBDcutJGz6YQJuwT6KBcpPmt0ZeR64rgfmxt6PLG /c3YydVNR7++fbV6QNdyQYevrQIDAQABo4ICnTCCApkwHQYDVR0OBBYEFBoOTzsk wuUCmemW07vpb84beODwMB8GA1UdIwQYMBaAFLTW/9Xf+erEE6tECOCWN7CUlNvI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3REVBNC9BMjQyNkI2MDk4 MjkxMUVCQjc4ODIwODFDNEY5QUUwMi90TmJfMWRfNTZzUVRxMFFJNEpZM3NKU1Uy OGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ROYl8xZF81NnNRVHEwUUk0Slkzc0pTVTI4Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0RFQTQvQTI0MjZCNjA5ODI5MTFFQkI3ODgyMDgxQzRGOUFFMDIvQkU3NkM4MTg2 QzY4MTFGMEIzRkY3RTY5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E GDAWMBQEAgABMA4wDAMEAw5gGAMEBA5gIDANBgkqhkiG9w0BAQsFAAOCAQEAK+i1 Z9WGzxyP9CPoRFT/4YUP3yLlYq3tXuAgjKHTrVB/vj5oBGihWGRTPK7yxPHBRQgd FwearJIVVUbulBWCnFUFp9njqZRYJU5gGwbahx2G9/EXOiU0YxvxvBlmBsqJRZ4Y 4KL247cziDhWCX3J9m7ksqbq2OPQ60qxqVfIZqBceMlVaHWoZylaKhoCLcUoMCjb +NZmOnpA1groUnvhn0yQTZYvZq5yDpaAeYPvqUQCQTlAFX3qNtzos9GQEqV2k/r+ CxMKmXKTv0KEUWNwsjtdyMOIRZqpbFOaZYoFhjdt4ihd+EGxgZj/DC7wLKdey7N8 vyUl+pFVjCKX0E6vVg== -----END CERTIFICATE-----Generated at Sun Sep 7 02:52:57 2025 by rpki-client