$ rpki-client -vvf rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/E7D3D36A406911EC83A0470DC4F9AE02.roa File: E7D3D36A406911EC83A0470DC4F9AE02.roa (raw, json) Hash identifier: GjOaQSD+yOTMszKkoCotay0oJsTwIhHAKh5smJri11o= Subject key identifier: E0:39:70:38:D3:1B:A0:2F:9B:5B:57:78:97:49:24:5F:60:21:0C:8D Certificate issuer: /CN=A9125475/serialNumber=DE9D64016291EA2A16F3B7956A0F4035B709E547 Certificate serial: 257F Authority key identifier: DE:9D:64:01:62:91:EA:2A:16:F3:B7:95:6A:0F:40:35:B7:09:E5:47 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3p1kAWKR6ioW87eVag9ANbcJ5Uc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/E7D3D36A406911EC83A0470DC4F9AE02.roa Signing time: Mon 09 Jun 2025 05:02:15 +0000 ROA not before: Mon 09 Jun 2025 05:02:15 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 135566 IP address blocks: 209.15.96.0/24 maxlen: 24 209.15.97.0/24 maxlen: 24 209.15.98.0/24 maxlen: 24 209.15.99.0/24 maxlen: 24 209.15.100.0/24 maxlen: 24 209.15.101.0/24 maxlen: 24 209.15.102.0/24 maxlen: 24 209.15.103.0/24 maxlen: 24 209.15.104.0/24 maxlen: 24 209.15.105.0/24 maxlen: 24 209.15.106.0/24 maxlen: 24 209.15.107.0/24 maxlen: 24 209.15.108.0/24 maxlen: 24 209.15.109.0/24 maxlen: 24 209.15.110.0/24 maxlen: 24 209.15.111.0/24 maxlen: 24 209.15.112.0/24 maxlen: 24 209.15.113.0/24 maxlen: 24 209.15.114.0/24 maxlen: 24 209.15.115.0/24 maxlen: 24 209.15.116.0/24 maxlen: 24 209.15.117.0/24 maxlen: 24 209.15.118.0/24 maxlen: 24 209.15.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.crl rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3p1kAWKR6ioW87eVag9ANbcJ5Uc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 14:20:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9599 (0x257f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125475, serialNumber=DE9D64016291EA2A16F3B7956A0F4035B709E547 Validity Not Before: Jun 9 05:02:15 2025 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=68466ad6-904b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:0b:2d:89:db:f9:14:46:bd:f9:df:7f:de:0c: fe:90:1c:cd:cb:8f:95:68:0f:49:6a:cb:25:8a:ae: 81:5d:15:e6:83:9d:f5:3f:a0:24:72:90:88:e4:eb: 28:f2:77:2b:1a:5b:9c:03:29:ec:a2:9d:75:73:ca: 6d:55:70:cf:ea:76:a8:80:61:79:ed:07:fa:2c:9d: f9:05:7b:1f:9a:ea:3c:2c:7d:e6:5f:8f:62:6f:53: b1:d1:68:d6:a1:b3:ce:55:07:72:9b:2b:ef:ea:92: 18:0c:20:95:d4:89:16:81:27:01:b5:39:b1:43:93: 41:fe:1f:46:84:d3:7c:71:29:b2:d2:35:a8:3b:33: f3:56:d1:d5:e2:b9:96:ed:c0:1f:8b:7a:68:47:fc: 32:00:e9:3a:54:72:0b:e6:6f:c6:c5:ce:d2:dd:2f: 6a:06:7a:31:42:f6:2c:00:be:e9:f3:37:e3:05:40: 08:d4:c8:7f:1a:dd:05:5e:6c:7c:f6:8e:d8:96:96: 81:5f:5a:20:6d:03:a9:6e:04:9f:1f:9e:26:f9:33: b9:ff:e7:6d:65:7e:56:8a:c0:5a:13:3a:3c:db:5b: b2:96:53:87:75:35:f5:ad:e9:0d:8f:50:52:92:e0: eb:d8:87:c0:00:1b:65:2b:20:7c:67:09:e9:1d:7a: c4:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:39:70:38:D3:1B:A0:2F:9B:5B:57:78:97:49:24:5F:60:21:0C:8D X509v3 Authority Key Identifier: keyid:DE:9D:64:01:62:91:EA:2A:16:F3:B7:95:6A:0F:40:35:B7:09:E5:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3p1kAWKR6ioW87eVag9ANbcJ5Uc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/E7D3D36A406911EC83A0470DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 209.15.96.0-209.15.119.255 Signature Algorithm: sha256WithRSAEncryption 4f:18:d9:e5:c3:3b:df:d3:e3:d8:f1:2b:b6:1e:01:1e:61:cf: a4:06:87:a4:83:45:f4:23:1b:7c:d2:3b:dd:23:a0:b7:f4:1f: 7f:0c:12:0d:89:a7:b9:e2:a1:bf:de:d8:cc:10:ca:60:78:81: c8:b3:da:7d:90:c9:47:3c:23:11:e6:df:84:3c:73:4c:cf:6a: 09:57:cf:5c:45:60:c2:07:27:51:e2:b9:09:07:1b:2d:b1:57: da:60:c6:be:e7:57:15:65:14:3f:6e:8c:2d:f0:fb:1a:6f:b7: ea:bf:f8:55:47:ce:6d:26:66:20:40:e5:17:31:5f:54:a4:6e: 8f:76:05:2a:48:58:29:93:b4:c0:03:d6:80:c7:6d:7e:2f:8a: fd:55:cd:1c:54:3d:e9:d3:2c:42:d7:19:b9:73:52:42:0e:ae: 53:d6:6b:81:d0:e9:81:8f:62:ae:3a:5b:73:09:57:74:19:4a: 6b:bb:b0:83:5a:8b:12:f8:8a:92:f2:8f:01:c2:84:4f:ec:6b: 4e:93:46:bf:d0:34:00:91:51:c4:d7:de:63:d9:52:61:f7:cf: 7e:f6:d9:8d:77:11:f7:25:68:44:07:43:d1:69:19:25:62:6e: 0b:2c:a7:98:dc:2f:2b:5f:cc:61:4b:dc:0d:a4:1b:8f:3a:2f: c1:04:ad:67 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgICJX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjU0NzUxMTAvBgNVBAUTKERFOUQ2NDAxNjI5MUVBMkExNkYzQjc5NTZBMEY0MDM1 QjcwOUU1NDcwHhcNMjUwNjA5MDUwMjE1WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODQ2NmFkNi05MDRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxgstidv5FEa9+d9/3gz+kBzNy4+VaA9Jassliq6BXRXmg531P6AkcpCI5Oso 8ncrGlucAynsop11c8ptVXDP6naogGF57Qf6LJ35BXsfmuo8LH3mX49ib1Ox0WjW obPOVQdymyvv6pIYDCCV1IkWgScBtTmxQ5NB/h9GhNN8cSmy0jWoOzPzVtHV4rmW 7cAfi3poR/wyAOk6VHIL5m/Gxc7S3S9qBnoxQvYsAL7p8zfjBUAI1Mh/Gt0FXmx8 9o7YlpaBX1ogbQOpbgSfH54m+TO5/+dtZX5WisBaEzo821uyllOHdTX1rekNj1BS kuDr2IfAABtlKyB8ZwnpHXrEQwIDAQABo4ICnTCCApkwHQYDVR0OBBYEFOA5cDjT G6Avm1tXeJdJJF9gIQyNMB8GA1UdIwQYMBaAFN6dZAFikeoqFvO3lWoPQDW3CeVH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTQ3NS84RDk0NzFGNjI5 MDYxMUU1OTNCRkM2MjZDNEY5QUUwMi8zcDFrQVdLUjZpb1c4N2VWYWc5QU5iY0o1 VWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzNwMWtBV0tSNmlvVzg3ZVZhZzlBTmJjSjVVYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjU0NzUvOEQ5NDcxRjYyOTA2MTFFNTkzQkZDNjI2QzRGOUFFMDIvRTdEM0QzNkE0 MDY5MTFFQzgzQTA0NzBEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E GDAWMBQEAgABMA4wDAMEBdEPYAMEA9EPcDANBgkqhkiG9w0BAQsFAAOCAQEATxjZ 5cM739Pj2PErth4BHmHPpAaHpINF9CMbfNI73SOgt/QffwwSDYmnueKhv97YzBDK YHiByLPafZDJRzwjEebfhDxzTM9qCVfPXEVgwgcnUeK5CQcbLbFX2mDGvudXFWUU P26MLfD7Gm+36r/4VUfObSZmIEDlFzFfVKRuj3YFKkhYKZO0wAPWgMdtfi+K/VXN HFQ96dMsQtcZuXNSQg6uU9ZrgdDpgY9irjpbcwlXdBlKa7uwg1qLEviKkvKPAcKE T+xrTpNGv9A0AJFRxNfeY9lSYffPfvbZjXcR9yVoRAdD0WkZJWJuCyynmNwvK1/M YUvcDaQbjzovwQStZw== -----END CERTIFICATE-----Generated at Fri Jul 4 07:39:14 2025 by rpki-client