$ rpki-client -vvf rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/29F5CB12FB5411ED914D5C39C4F9AE02.roa File: 29F5CB12FB5411ED914D5C39C4F9AE02.roa (raw, json) Hash identifier: RrrTkRX+rWyyZhM8KHAHBGKXaTdXrGFwvTaJ7oPHcN4= Subject key identifier: 89:B9:60:15:41:9F:08:99:5B:F2:4A:FD:63:FF:19:6E:EC:DE:75:8E Certificate issuer: /CN=A9111318/serialNumber=806ABFF463594CAA30DE70A311AE2F849189BC64 Certificate serial: 357D Authority key identifier: 80:6A:BF:F4:63:59:4C:AA:30:DE:70:A3:11:AE:2F:84:91:89:BC:64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/29F5CB12FB5411ED914D5C39C4F9AE02.roa Signing time: Sat 14 Jun 2025 14:50:47 +0000 ROA not before: Sat 14 Jun 2025 14:50:47 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 38140 IP address blocks: 163.7.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.crl rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 14:45:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13693 (0x357d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111318, serialNumber=806ABFF463594CAA30DE70A311AE2F849189BC64 Validity Not Before: Jun 14 14:50:47 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=684d8c47-75b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e4:a2:f3:91:e7:4a:d4:25:b8:f6:f7:42:8e: 34:a4:a6:a1:d5:13:08:3c:bd:66:60:89:46:21:62: 7e:e2:11:5e:a5:e6:c3:3f:14:86:1e:27:c0:cb:a3: a0:b8:67:63:fb:d1:8f:8b:87:d1:f0:16:cc:e6:4f: 58:be:85:cf:74:fa:ee:bc:a9:dc:f6:78:6c:f6:b2: 0f:21:23:57:19:c3:71:96:fa:73:4e:f6:58:af:8a: 30:91:db:a6:30:d3:99:f4:3f:e4:ae:7a:7b:2b:6f: 45:f6:bf:73:fa:9d:aa:f5:a5:22:14:4f:16:98:95: 0d:a2:37:75:d5:a4:4d:ba:22:64:45:61:d3:cd:ca: 90:27:af:41:21:a8:64:c2:30:c1:13:6b:d0:cb:d3: 0a:0b:fb:86:a4:57:ab:db:79:7b:0f:4f:15:a1:e9: 74:45:b1:bd:09:87:ba:39:3d:a5:3c:e9:90:54:89: a6:05:dc:15:1f:27:24:e6:7c:60:20:91:33:6c:cf: aa:ba:92:29:31:77:b8:9e:97:fd:50:11:0b:a4:fc: e8:df:98:c2:50:a1:e4:35:1d:84:ad:50:df:98:bd: 75:a1:cd:60:1d:2d:10:76:21:81:92:44:65:b2:65: 9f:38:cf:e0:83:c1:f3:a7:94:25:8c:af:64:37:e7: f5:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:B9:60:15:41:9F:08:99:5B:F2:4A:FD:63:FF:19:6E:EC:DE:75:8E X509v3 Authority Key Identifier: keyid:80:6A:BF:F4:63:59:4C:AA:30:DE:70:A3:11:AE:2F:84:91:89:BC:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/29F5CB12FB5411ED914D5C39C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 163.7.136.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:02:b4:ed:9e:df:1e:b4:c8:f1:7f:e5:2b:0d:44:02:04:60: 4f:ba:2c:74:5d:7a:da:6b:8a:e5:3f:9a:90:98:c7:90:3d:ea: 1a:a1:94:a9:c9:8c:3c:26:4b:47:a2:97:b3:58:1a:ec:f3:4c: bf:23:94:bb:09:1b:93:73:a0:37:c4:e3:b7:7a:f5:60:17:03: 84:29:44:1f:e0:d7:c5:7c:4f:19:41:ba:49:93:70:6d:18:5c: b3:30:b1:cb:1d:f6:23:b8:6d:d7:80:5c:18:12:e5:9b:85:48: bb:29:60:46:f0:73:53:3f:01:df:27:e4:0f:35:8d:dc:42:a9: d2:94:c5:db:f8:75:88:c4:c3:8e:5a:b1:0c:4d:88:d2:be:e6: d1:cc:a8:b1:80:b3:9d:a8:28:b2:44:79:55:f7:35:0c:b1:f1: 4c:70:94:f2:eb:df:0c:79:88:2a:5b:52:95:37:be:81:19:b2: 6b:20:01:38:13:57:dd:b1:e4:2b:0a:1c:83:07:c4:f8:72:dd: c2:08:c5:cb:ec:75:4a:9f:9f:66:0b:26:67:2b:7c:17:f3:e3: a2:78:6a:a4:4b:3b:10:6d:dc:0b:66:11:77:b3:1d:57:89:c7: c7:1b:28:02:48:fe:14:36:77:49:5f:0e:4a:30:63:8e:a4:b7: b1:b5:17:9d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNX0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTEzMTgxMTAvBgNVBAUTKDgwNkFCRkY0NjM1OTRDQUEzMERFNzBBMzExQUUyRjg0 OTE4OUJDNjQwHhcNMjUwNjE0MTQ1MDQ3WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODRkOGM0Ny03NWI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAueSi85HnStQluPb3Qo40pKah1RMIPL1mYIlGIWJ+4hFepebDPxSGHifAy6Og uGdj+9GPi4fR8BbM5k9YvoXPdPruvKnc9nhs9rIPISNXGcNxlvpzTvZYr4owkdum MNOZ9D/krnp7K29F9r9z+p2q9aUiFE8WmJUNojd11aRNuiJkRWHTzcqQJ69BIahk wjDBE2vQy9MKC/uGpFer23l7D08Voel0RbG9CYe6OT2lPOmQVImmBdwVHyck5nxg IJEzbM+qupIpMXe4npf9UBELpPzo35jCUKHkNR2ErVDfmL11oc1gHS0QdiGBkkRl smWfOM/gg8Hzp5QljK9kN+f11wIDAQABo4IClTCCApEwHQYDVR0OBBYEFIm5YBVB nwiZW/JK/WP/GW7s3nWOMB8GA1UdIwQYMBaAFIBqv/RjWUyqMN5woxGuL4SRibxk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTMxOC9EQzc0NTFGMjFE OTExMUUyOThFNzQ2RjQwOEIwMkNEMi9nR3FfOUdOWlRLb3czbkNqRWE0dmhKR0p2 R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dHcV85R05aVEtvdzNuQ2pFYTR2aEpHSnZHUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTEzMTgvREM3NDUxRjIxRDkxMTFFMjk4RTc0NkY0MDhCMDJDRDIvMjlGNUNCMTJG QjU0MTFFRDkxNEQ1QzM5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBACjB4gwDQYJKoZIhvcNAQELBQADggEBAC0CtO2e3x60yPF/ 5SsNRAIEYE+6LHRdetpriuU/mpCYx5A96hqhlKnJjDwmS0eil7NYGuzzTL8jlLsJ G5NzoDfE47d69WAXA4QpRB/g18V8TxlBukmTcG0YXLMwscsd9iO4bdeAXBgS5ZuF SLspYEbwc1M/Ad8n5A81jdxCqdKUxdv4dYjEw45asQxNiNK+5tHMqLGAs52oKLJE eVX3NQyx8UxwlPLr3wx5iCpbUpU3voEZsmsgATgTV92x5CsKHIMHxPhy3cIIxcvs dUqfn2YLJmcrfBfz46J4aqRLOxBt3AtmEXezHVeJx8cbKAJI/hQ2d0lfDkowY46k t7G1F50= -----END CERTIFICATE-----Generated at Fri Jul 4 07:24:05 2025 by rpki-client