$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9EAB14825BB411EF849D0F44C4F9AE02.roa File: 9EAB14825BB411EF849D0F44C4F9AE02.roa (raw, json) Hash identifier: uoLzyL12GpEGy40/BT4+I+VmGfmEafW9AUu/4XRBmnI= Subject key identifier: D8:64:51:16:A9:34:B2:72:E4:7D:8B:9D:EE:8E:61:D3:BA:E8:0D:22 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: C3FB Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9EAB14825BB411EF849D0F44C4F9AE02.roa Signing time: Wed 03 Sep 2025 06:18:19 +0000 ROA not before: Wed 03 Sep 2025 06:18:19 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 136715 IP address blocks: 163.61.139.0/24 maxlen: 24 2001:df6:b500::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 15:24:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50171 (0xc3fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Sep 3 06:18:19 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=68b7ddab-3a6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:4d:78:05:ed:16:c8:66:58:87:34:9c:68:1d: db:d2:35:1e:c4:9a:19:79:fa:1f:f1:91:00:a2:2a: c1:d0:0b:53:c9:8d:ee:04:85:8d:d4:fd:9c:ec:7c: da:0a:fc:38:ad:0d:b0:ec:03:df:aa:67:70:d0:67: c9:01:f2:87:d7:47:d4:9f:74:66:6f:99:1d:a8:d0: ab:99:42:c9:86:73:d9:3d:51:35:c0:68:fa:e3:e2: 8f:d6:17:09:28:6a:8d:68:24:3c:1b:c4:65:65:d1: 2d:7b:d7:2a:33:e1:d1:02:cd:59:83:92:94:ff:49: 3e:7b:0a:5e:a9:da:f5:ad:d8:e5:72:73:14:02:5f: 68:3b:37:02:b4:f4:3f:f3:6b:1c:20:43:01:d1:b8: 40:0f:d9:0d:3a:16:b2:bb:fd:a0:df:6c:3d:10:1b: dd:6a:8f:ec:e6:6d:fd:83:1a:98:46:42:28:e2:1c: 4e:aa:63:2c:39:df:76:76:c2:7f:8d:85:49:5e:cb: 57:f2:d3:a7:de:b1:60:e3:ca:fe:c0:cd:12:2e:d5: ac:6a:4b:e1:6e:97:43:26:b4:d0:81:b1:a4:bc:cc: 73:22:64:2a:61:1d:20:2d:c1:18:f6:fd:7c:a9:a4: 73:f3:a0:17:42:57:21:ea:2e:1e:37:11:8f:f8:57: 9c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:64:51:16:A9:34:B2:72:E4:7D:8B:9D:EE:8E:61:D3:BA:E8:0D:22 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9EAB14825BB411EF849D0F44C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 163.61.139.0/24 IPv6: 2001:df6:b500::/48 Signature Algorithm: sha256WithRSAEncryption 9b:ea:ca:33:54:f1:7c:26:26:b2:59:fe:bd:23:44:b3:02:40: 03:dc:1f:ff:78:16:ea:96:cd:3d:f0:9e:75:e3:12:dd:63:46: af:7e:09:d1:e5:a1:49:3f:15:af:00:a0:ce:bb:bd:db:87:e0: 79:ec:a6:cb:0f:9e:66:df:3d:87:6b:ee:1d:61:d1:92:e9:54: 30:4f:f8:25:67:a3:0d:bb:8a:b6:08:6d:0b:83:c1:3f:31:ea: 3e:4a:77:e6:23:aa:07:15:42:6d:41:db:22:0a:ba:ea:d5:16: 1a:3e:16:2b:d7:c2:f6:e7:b0:e1:85:83:c7:b5:23:84:28:bd: 9a:90:8a:a0:78:f5:47:21:68:8d:94:3a:9b:80:d3:a6:63:b7: f7:c3:18:21:76:8c:11:3f:e2:ac:3c:b3:5a:27:79:a0:ca:cf: 0f:2a:47:39:81:be:71:ec:64:e5:e2:5c:ba:5c:44:25:10:c5: e9:26:3b:25:f7:5a:6d:60:ed:3e:32:40:f1:f6:9c:08:ee:b0: c2:4d:d6:b1:e4:c6:6a:0f:f6:57:5c:6e:cb:a4:52:97:9b:ab: b9:ca:e8:f9:48:23:3b:b3:b5:4b:a1:85:2b:fe:82:f9:0a:bd: 28:bc:03:37:79:cc:bb:ba:f9:91:4c:83:fe:db:90:5f:48:6c: 95:18:c6:54 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIDAMP7MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDkwMzA2MTgxOVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjhiN2RkYWItM2E2ZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM1NeAXtFshmWIc0nGgd29I1HsSaGXn6H/GRAKIqwdALU8mN7gSFjdT9nOx8 2gr8OK0NsOwD36pncNBnyQHyh9dH1J90Zm+ZHajQq5lCyYZz2T1RNcBo+uPij9YX CShqjWgkPBvEZWXRLXvXKjPh0QLNWYOSlP9JPnsKXqna9a3Y5XJzFAJfaDs3ArT0 P/NrHCBDAdG4QA/ZDToWsrv9oN9sPRAb3WqP7OZt/YMamEZCKOIcTqpjLDnfdnbC f42FSV7LV/LTp96xYOPK/sDNEi7VrGpL4W6XQya00IGxpLzMcyJkKmEdIC3BGPb9 fKmkc/OgF0JXIeouHjcRj/hXnD0CAwEAAaOCAqYwggKiMB0GA1UdDgQWBBTYZFEW qTSycuR9i53ujmHTuugNIjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzlFQUIxNDgy NUJCNDExRUY4NDlEMEY0NEM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDAGCCsGAQUFBwEHAQH/ BCEwHzAMBAIAATAGAwQAoz2LMA8EAgACMAkDBwAgAQ32tQAwDQYJKoZIhvcNAQEL BQADggEBAJvqyjNU8XwmJrJZ/r0jRLMCQAPcH/94FuqWzT3wnnXjEt1jRq9+CdHl oUk/Fa8AoM67vduH4HnspssPnmbfPYdr7h1h0ZLpVDBP+CVnow27irYIbQuDwT8x 6j5Kd+YjqgcVQm1B2yIKuurVFho+FivXwvbnsOGFg8e1I4QovZqQiqB49UchaI2U OpuA06Zjt/fDGCF2jBE/4qw8s1oneaDKzw8qRzmBvnHsZOXiXLpcRCUQxekmOyX3 Wm1g7T4yQPH2nAjusMJN1rHkxmoP9ldcbsukUpebq7nK6PlIIzuztUuhhSv+gvkK vSi8Azd5zLu6+ZFMg/7bkF9IbJUYxlQ= -----END CERTIFICATE-----Generated at Sun Sep 7 16:34:23 2025 by rpki-client