$ rpki-client -vvf rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/9AF37E96D71B11EA9532F30CC4F9AE02.roa File: 9AF37E96D71B11EA9532F30CC4F9AE02.roa (raw, json) Hash identifier: UB9M+LLNN3sS8I2EFsp8N9BHGeanS2Z+lbFEvYsOTeM= Subject key identifier: 7C:95:BB:D6:7E:53:4A:63:F0:7B:8C:49:2A:58:2D:A8:BE:62:8B:08 Certificate issuer: /CN=A91964B3/serialNumber=B39866A99D1CD9F4E7E8F53C88AD14DA89A18625 Certificate serial: 3659 Authority key identifier: B3:98:66:A9:9D:1C:D9:F4:E7:E8:F5:3C:88:AD:14:DA:89:A1:86:25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/9AF37E96D71B11EA9532F30CC4F9AE02.roa Signing time: Thu 29 May 2025 05:57:10 +0000 ROA not before: Thu 29 May 2025 05:57:10 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 9730 IP address blocks: 59.144.97.0/24 maxlen: 24 59.145.72.0/23 maxlen: 24 61.246.50.0/24 maxlen: 24 122.185.26.0/24 maxlen: 24 125.20.15.0/24 maxlen: 24 125.22.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.crl rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 14:25:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13913 (0x3659) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91964B3, serialNumber=B39866A99D1CD9F4E7E8F53C88AD14DA89A18625 Validity Not Before: May 29 05:57:10 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=6837f735-f10d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:67:ed:27:15:84:a4:d5:de:e3:58:56:e7:8f: 1c:1d:f6:b9:9f:6c:25:e7:87:27:9a:e6:98:e2:4a: 84:e8:c6:e9:8a:02:27:a7:a9:ec:33:6f:bf:c4:b6: 44:b6:ca:f4:71:5a:e0:f2:37:ef:af:76:10:13:ce: 50:f0:3d:32:35:a7:0d:74:23:55:93:c8:b3:de:73: 24:87:00:0e:cc:e7:4c:72:01:44:53:f6:85:1b:3f: 80:1b:67:ce:00:7c:39:f9:ee:c7:f8:16:e8:d5:a5: 7b:ce:d1:af:e4:f5:49:10:e2:dd:a3:f4:9a:40:84: 70:1a:c7:67:08:71:ae:4a:48:6f:a0:b8:78:7e:e7: ca:f7:1c:90:80:22:1a:3e:1a:f3:8a:51:96:15:9c: f6:77:ab:00:cf:99:dd:a2:d3:99:c1:a5:c1:ec:5f: ea:c0:0e:e5:00:ff:73:ac:2b:fa:59:91:fa:e4:49: e5:59:e7:4f:59:1b:b9:19:9f:ae:0d:11:ac:8c:f9: 1e:73:a3:69:fd:f6:5b:f7:b2:19:fc:2a:34:93:e8: 47:16:8a:62:ab:1a:6e:68:a0:51:07:97:e8:f1:eb: ef:69:01:0b:b9:7e:0f:72:36:39:e1:a8:3c:fa:29: 8d:db:c6:a1:89:85:54:e0:b9:ef:7d:d5:5f:0e:d0: fd:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:95:BB:D6:7E:53:4A:63:F0:7B:8C:49:2A:58:2D:A8:BE:62:8B:08 X509v3 Authority Key Identifier: keyid:B3:98:66:A9:9D:1C:D9:F4:E7:E8:F5:3C:88:AD:14:DA:89:A1:86:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/9AF37E96D71B11EA9532F30CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 59.144.97.0/24 59.145.72.0/23 61.246.50.0/24 122.185.26.0/24 125.20.15.0/24 125.22.113.0/24 Signature Algorithm: sha256WithRSAEncryption b1:40:b8:9e:b2:1c:88:4b:83:b3:d0:6a:a9:44:73:66:72:42: 60:93:8d:68:91:22:2f:45:92:0d:56:1d:f8:42:0c:d0:ad:ee: 2f:e9:cf:de:23:6f:c4:58:0a:cf:04:95:e4:69:9d:95:b9:71: ff:1c:7c:56:66:a5:1d:b6:1f:79:b9:3c:23:24:f6:12:5f:b1: e7:87:a8:32:df:e3:c4:01:e0:e4:ea:0a:5d:ca:0f:d1:21:1f: 0c:35:ea:d6:16:ad:f5:b9:2d:ce:9b:52:d2:c9:26:db:72:61: 7d:20:70:3c:4e:eb:fe:74:71:23:69:88:08:37:b3:c1:c9:4d: f6:42:6f:21:a8:89:75:c2:dc:49:fc:4d:06:a3:32:f1:52:38: 78:f2:bc:54:e9:d0:00:5b:0f:80:a1:83:5a:e1:15:56:e9:65: ae:56:24:eb:62:64:c0:ad:a4:f5:f6:b7:02:ed:4e:4f:fb:e9: d6:da:4c:ec:90:7a:6f:aa:89:b6:45:8b:e9:3e:c4:da:8d:85: c7:f4:e9:3b:a6:6f:2a:46:95:37:7d:be:d1:9e:28:6f:14:05: bc:2c:31:11:6f:70:ef:24:c3:28:3f:db:db:6f:41:1c:ee:e9: 95:3b:72:29:9d:d4:4e:a4:34:f7:6e:bf:0c:97:b0:e7:e8:bd: af:a7:07:66 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgICNlkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTY0QjMxMTAvBgNVBAUTKEIzOTg2NkE5OUQxQ0Q5RjRFN0U4RjUzQzg4QUQxNERB ODlBMTg2MjUwHhcNMjUwNTI5MDU1NzEwWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02ODM3ZjczNS1mMTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzmftJxWEpNXe41hW548cHfa5n2wl54cnmuaY4kqE6MbpigInp6nsM2+/xLZE tsr0cVrg8jfvr3YQE85Q8D0yNacNdCNVk8iz3nMkhwAOzOdMcgFEU/aFGz+AG2fO AHw5+e7H+Bbo1aV7ztGv5PVJEOLdo/SaQIRwGsdnCHGuSkhvoLh4fufK9xyQgCIa PhrzilGWFZz2d6sAz5ndotOZwaXB7F/qwA7lAP9zrCv6WZH65EnlWedPWRu5GZ+u DRGsjPkec6Np/fZb97IZ/Co0k+hHFopiqxpuaKBRB5fo8evvaQELuX4PcjY54ag8 +imN28ahiYVU4LnvfdVfDtD98QIDAQABo4ICszCCAq8wHQYDVR0OBBYEFHyVu9Z+ U0pj8HuMSSpYLai+YosIMB8GA1UdIwQYMBaAFLOYZqmdHNn05+j1PIitFNqJoYYl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NjRCMy9FNjU4NTExMjFE ODQxMUUyQTFCQTMwREIwOEIwMkNEMi9zNWhtcVowYzJmVG42UFU4aUswVTJvbWho aVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3M1aG1xWjBjMmZUbjZQVThpSzBVMm9taGhpVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTY0QjMvRTY1ODUxMTIxRDg0MTFFMkExQkEzMERCMDhCMDJDRDIvOUFGMzdFOTZE NzFCMTFFQTk1MzJGMzBDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPQYIKwYBBQUHAQcBAf8E LjAsMCoEAgABMCQDBAA7kGEDBAE7kUgDBAA99jIDBAB6uRoDBAB9FA8DBAB9FnEw DQYJKoZIhvcNAQELBQADggEBALFAuJ6yHIhLg7PQaqlEc2ZyQmCTjWiRIi9Fkg1W HfhCDNCt7i/pz94jb8RYCs8EleRpnZW5cf8cfFZmpR22H3m5PCMk9hJfseeHqDLf 48QB4OTqCl3KD9EhHww16tYWrfW5Lc6bUtLJJttyYX0gcDxO6/50cSNpiAg3s8HJ TfZCbyGoiXXC3En8TQajMvFSOHjyvFTp0ABbD4Chg1rhFVbpZa5WJOtiZMCtpPX2 twLtTk/76dbaTOyQem+qibZFi+k+xNqNhcf06TumbypGlTd9vtGeKG8UBbwsMRFv cO8kwyg/29tvQRzu6ZU7cimd1E6kNPduvwyXsOfova+nB2Y= -----END CERTIFICATE-----Generated at Wed Jun 4 00:04:10 2025 by rpki-client