$ rpki-client -vvf rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/187F92966F0911ED8A7BD268C4F9AE02.roa File: 187F92966F0911ED8A7BD268C4F9AE02.roa (raw, json) Hash identifier: d/7DMtiXfQBwX+8qOXb96W9MkSduRe+bpauiOZ+JfzU= Subject key identifier: E3:05:BA:02:6E:47:00:5C:A9:5C:20:3E:3B:06:9F:A0:06:60:BB:E2 Certificate issuer: /CN=A917FFB0/serialNumber=1324043021BB45D7FF66F20AFC6839343130C3F2 Certificate serial: 353C Authority key identifier: 13:24:04:30:21:BB:45:D7:FF:66:F2:0A:FC:68:39:34:31:30:C3:F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/187F92966F0911ED8A7BD268C4F9AE02.roa Signing time: Tue 02 Sep 2025 15:00:53 +0000 ROA not before: Tue 02 Sep 2025 15:00:53 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 139879 IP address blocks: 110.38.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.crl rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 14:45:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13628 (0x353c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917FFB0, serialNumber=1324043021BB45D7FF66F20AFC6839343130C3F2 Validity Not Before: Sep 2 15:00:53 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68b706a5-d931 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:3e:34:33:47:e2:b5:54:07:b9:8d:72:62:d9: 00:a6:39:c6:b4:82:7e:f2:3d:c8:34:66:9e:bb:13: 33:76:11:6e:63:8e:5e:e1:86:ff:05:ce:87:a8:ab: 03:02:54:b5:90:92:8e:87:a4:23:46:98:25:8a:7a: b5:c3:20:5e:84:fb:a6:e0:60:cf:fe:2e:d4:9a:25: 69:8b:83:83:4d:36:83:c1:ec:e7:6e:ed:e7:04:a9: 2a:42:d6:59:4d:44:83:8f:1a:07:31:de:0c:ad:d4: d6:86:5a:3b:b4:c2:ed:bc:a6:bd:de:6f:b9:7c:d4: 8b:54:04:fb:28:b9:48:09:c0:35:0e:9a:de:95:b2: d1:8f:40:53:94:9a:93:a5:21:53:9d:f2:e4:c5:a8: c1:74:98:b3:86:54:71:64:94:1c:7c:da:7d:fa:bb: 00:56:22:86:a1:a8:04:d7:a6:f0:f6:cd:21:d8:27: 1d:81:15:9e:fe:e2:07:2c:fe:a0:23:bd:3f:f7:84: 26:aa:a5:b0:79:3b:cc:4d:74:00:b1:03:36:43:54: 16:96:45:31:27:7f:64:7b:81:75:54:74:da:c5:53: 90:3d:93:14:df:f5:53:bc:6d:2f:f7:ee:0b:be:8d: be:3c:79:a8:9c:a1:af:9a:59:2a:7a:f3:68:a2:fa: 92:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:05:BA:02:6E:47:00:5C:A9:5C:20:3E:3B:06:9F:A0:06:60:BB:E2 X509v3 Authority Key Identifier: keyid:13:24:04:30:21:BB:45:D7:FF:66:F2:0A:FC:68:39:34:31:30:C3:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/187F92966F0911ED8A7BD268C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.38.240.0/20 Signature Algorithm: sha256WithRSAEncryption 9c:eb:ab:9b:d7:0e:c9:e1:5f:43:14:f6:76:3e:dc:dc:68:9c: 02:96:04:c5:09:d5:35:c9:0e:11:6a:ce:0b:77:ee:16:e1:9e: af:48:c0:65:26:b7:35:90:72:5f:90:f9:49:e1:f8:e3:03:25: ff:24:52:89:f0:53:a7:e1:30:68:85:14:bb:5b:67:4e:e0:7e: 57:b9:10:58:04:27:2f:0d:94:dc:36:13:c0:f4:a0:fd:4f:96: 96:1d:34:37:77:90:1e:a4:78:75:0b:9f:19:7d:19:3b:3a:6d: 56:31:d7:c6:6e:80:51:b4:b4:d1:42:63:6d:7f:62:95:74:c9: 8b:30:4e:1c:32:c3:fd:7e:ad:e8:68:1d:25:98:83:f5:1d:b0: e9:1f:8a:23:9a:9d:f8:de:70:15:b7:c9:1c:fe:58:e4:92:6d: 10:4b:2e:9f:ad:7e:e2:34:e6:b1:04:a4:fd:e1:23:9a:c6:d2: f8:10:37:ac:07:6d:f4:bd:cb:a4:23:9b:cc:75:10:6c:f3:26: e4:cb:c6:e9:27:f0:e1:db:dd:e5:a8:e0:4e:0e:3e:9a:d6:63: 2a:25:15:a2:44:c5:45:7d:37:7c:a2:c4:39:9c:54:db:bb:ec: f4:69:9a:fb:7f:ee:38:a3:48:cb:33:7e:dc:d8:0e:88:d2:2f: fa:d6:87:05 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNTwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0ZGQjAxMTAvBgNVBAUTKDEzMjQwNDMwMjFCQjQ1RDdGRjY2RjIwQUZDNjgzOTM0 MzEzMEMzRjIwHhcNMjUwOTAyMTUwMDUzWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGI3MDZhNS1kOTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3D40M0fitVQHuY1yYtkApjnGtIJ+8j3INGaeuxMzdhFuY45e4Yb/Bc6HqKsD AlS1kJKOh6QjRpglinq1wyBehPum4GDP/i7UmiVpi4ODTTaDweznbu3nBKkqQtZZ TUSDjxoHMd4MrdTWhlo7tMLtvKa93m+5fNSLVAT7KLlICcA1DprelbLRj0BTlJqT pSFTnfLkxajBdJizhlRxZJQcfNp9+rsAViKGoagE16bw9s0h2CcdgRWe/uIHLP6g I70/94QmqqWweTvMTXQAsQM2Q1QWlkUxJ39ke4F1VHTaxVOQPZMU3/VTvG0v9+4L vo2+PHmonKGvmlkqevNoovqSoQIDAQABo4IClTCCApEwHQYDVR0OBBYEFOMFugJu RwBcqVwgPjsGn6AGYLviMB8GA1UdIwQYMBaAFBMkBDAhu0XX/2byCvxoOTQxMMPy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RkZCMC9FNTU3QzAwMDFE OTIxMUUyOTMzQTIxRjYwOEIwMkNEMi9FeVFFTUNHN1JkZl9adklLX0dnNU5ERXd3 X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0V5UUVNQ0c3UmRmX1p2SUtfR2c1TkRFd3dfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0ZGQjAvRTU1N0MwMDAxRDkyMTFFMjkzM0EyMUY2MDhCMDJDRDIvMTg3RjkyOTY2 RjA5MTFFRDhBN0JEMjY4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBARuJvAwDQYJKoZIhvcNAQELBQADggEBAJzrq5vXDsnhX0MU 9nY+3NxonAKWBMUJ1TXJDhFqzgt37hbhnq9IwGUmtzWQcl+Q+Unh+OMDJf8kUonw U6fhMGiFFLtbZ07gfle5EFgEJy8NlNw2E8D0oP1PlpYdNDd3kB6keHULnxl9GTs6 bVYx18ZugFG0tNFCY21/YpV0yYswThwyw/1+rehoHSWYg/UdsOkfiiOanfjecBW3 yRz+WOSSbRBLLp+tfuI05rEEpP3hI5rG0vgQN6wHbfS9y6Qjm8x1EGzzJuTLxukn 8OHb3eWo4E4OPprWYyolFaJExUV9N3yixDmcVNu77PRpmvt/7jijSMszftzYDojS L/rWhwU= -----END CERTIFICATE-----Generated at Mon Sep 8 06:17:37 2025 by rpki-client