$ rpki-client -vvf rpki.apnic.net/member_repository/A9128992/FADBC56C87A111E5AEB47F4DC4F9AE02/384962A2709511EFB3C2992DC4F9AE02.roa File: 384962A2709511EFB3C2992DC4F9AE02.roa (raw, json) Hash identifier: YOc7DUo7eZoYnfNRbnOxXmZzWmvcCiQYkGybpqGaTU0= Subject key identifier: C9:69:80:E8:65:1D:A9:94:23:43:E6:28:AA:DF:53:5F:1E:86:0F:00 Certificate issuer: /CN=A9128992/serialNumber=79014A5F07319F0460FCD04FC4AAABCCE09ED344 Certificate serial: 2376 Authority key identifier: 79:01:4A:5F:07:31:9F:04:60:FC:D0:4F:C4:AA:AB:CC:E0:9E:D3:44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eQFKXwcxnwRg_NBPxKqrzOCe00Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128992/FADBC56C87A111E5AEB47F4DC4F9AE02/384962A2709511EFB3C2992DC4F9AE02.roa Signing time: Wed 20 Aug 2025 15:53:05 +0000 ROA not before: Wed 20 Aug 2025 15:53:05 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 45282 IP address blocks: 123.176.56.0/24 maxlen: 24 123.176.57.0/24 maxlen: 24 123.176.59.0/24 maxlen: 24 202.129.192.0/22 maxlen: 22 202.129.192.0/24 maxlen: 24 202.129.193.0/24 maxlen: 24 202.129.194.0/24 maxlen: 24 202.129.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128992/FADBC56C87A111E5AEB47F4DC4F9AE02/eQFKXwcxnwRg_NBPxKqrzOCe00Q.crl rsync://rpki.apnic.net/member_repository/A9128992/FADBC56C87A111E5AEB47F4DC4F9AE02/eQFKXwcxnwRg_NBPxKqrzOCe00Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eQFKXwcxnwRg_NBPxKqrzOCe00Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:52:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9078 (0x2376) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128992, serialNumber=79014A5F07319F0460FCD04FC4AAABCCE09ED344 Validity Not Before: Aug 20 15:53:05 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68a5ef61-bc1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3b:46:a5:91:3a:76:9d:70:0d:4c:0a:be:6e: 88:4f:6c:40:5a:3b:a4:ec:7b:0e:89:22:2e:a0:09: c2:51:51:42:fc:bc:ee:75:eb:f6:0f:f8:08:13:2f: 82:b0:c1:60:80:4a:b6:71:82:a0:b1:13:64:5d:73: 70:cd:c2:7c:5d:f2:71:21:2c:f5:f2:11:6a:3f:08: 54:bf:0b:58:1f:5b:dd:b4:b4:98:65:66:3f:ed:87: 10:27:bc:e1:a6:e1:a7:9f:06:2a:e3:61:32:24:31: 9f:1a:2d:ba:62:b2:69:e0:72:00:cb:32:a3:b2:71: 8d:47:c8:c9:47:8f:2d:12:df:c0:0a:2f:83:c0:e8: 44:7e:64:97:80:4d:1d:6f:10:7f:97:5a:a4:7c:4f: 7e:e3:35:f8:20:11:68:af:65:88:6f:12:9f:b0:fd: af:ff:6b:30:7d:09:90:ad:48:f5:00:c6:02:97:02: 06:36:b8:d9:a6:d2:3e:1a:23:f2:0e:34:5e:ae:f3: 1c:20:03:54:c4:0c:60:d3:be:4a:d6:3b:e9:84:bf: 81:31:c8:14:9b:cc:74:79:5c:4e:81:0c:cb:7f:31: fe:51:c6:0f:81:7d:d3:dd:3d:4e:5f:26:51:dc:48: 26:20:71:06:c3:45:46:d5:b2:df:b2:28:47:3e:bb: 5a:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:69:80:E8:65:1D:A9:94:23:43:E6:28:AA:DF:53:5F:1E:86:0F:00 X509v3 Authority Key Identifier: keyid:79:01:4A:5F:07:31:9F:04:60:FC:D0:4F:C4:AA:AB:CC:E0:9E:D3:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128992/FADBC56C87A111E5AEB47F4DC4F9AE02/eQFKXwcxnwRg_NBPxKqrzOCe00Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eQFKXwcxnwRg_NBPxKqrzOCe00Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128992/FADBC56C87A111E5AEB47F4DC4F9AE02/384962A2709511EFB3C2992DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 123.176.56.0/23 123.176.59.0/24 202.129.192.0/22 Signature Algorithm: sha256WithRSAEncryption 82:a6:f0:fd:d1:6f:e4:a8:0a:45:a3:11:fa:3c:ae:59:c9:30: d9:37:03:48:9b:42:82:af:0e:75:1d:ce:1f:ce:91:3d:ff:9c: 6a:65:a5:8c:e4:e3:06:12:2c:bc:12:e4:0f:97:ba:34:1f:d8: 10:b7:d7:ef:ab:6c:0e:19:fe:da:ba:11:83:4f:8a:8e:7d:ee: b6:6c:8c:f2:09:43:b6:53:80:2e:db:56:7d:a1:16:1d:1a:a3: 76:f7:0e:93:f9:9b:eb:62:d2:e7:1b:46:f7:c4:34:9f:5c:49: b0:21:46:95:74:51:82:5f:25:52:ff:b8:d0:ea:b1:fb:8d:ee: 24:45:07:c8:d1:32:5d:02:06:8f:c4:ee:77:52:22:15:3f:41: ee:b0:11:53:e4:14:f9:d4:8d:c7:43:5e:0e:04:ca:3a:3d:a5: 16:f8:67:cc:06:f4:34:e0:b4:87:2a:a8:2b:7a:c5:3c:7a:00: f5:fb:d5:1d:de:ba:e5:95:c5:0e:c3:41:9b:86:ed:c8:3d:de: 08:f4:e6:a3:95:c4:ef:af:8c:7e:bf:92:d3:43:b7:59:4f:d0: 39:a7:50:af:35:86:df:94:ca:42:0a:b9:4b:92:60:ce:32:b6: e6:bf:60:0f:f0:be:e8:01:d9:0d:f2:3c:6b:ef:61:b7:9a:cc: bd:83:4d:32 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICI3YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg5OTIxMTAvBgNVBAUTKDc5MDE0QTVGMDczMTlGMDQ2MEZDRDA0RkM0QUFBQkND RTA5RUQzNDQwHhcNMjUwODIwMTU1MzA1WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGE1ZWY2MS1iYzFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtztGpZE6dp1wDUwKvm6IT2xAWjuk7HsOiSIuoAnCUVFC/Lzudev2D/gIEy+C sMFggEq2cYKgsRNkXXNwzcJ8XfJxISz18hFqPwhUvwtYH1vdtLSYZWY/7YcQJ7zh puGnnwYq42EyJDGfGi26YrJp4HIAyzKjsnGNR8jJR48tEt/ACi+DwOhEfmSXgE0d bxB/l1qkfE9+4zX4IBFor2WIbxKfsP2v/2swfQmQrUj1AMYClwIGNrjZptI+GiPy DjRervMcIANUxAxg075K1jvphL+BMcgUm8x0eVxOgQzLfzH+UcYPgX3T3T1OXyZR 3EgmIHEGw0VG1bLfsihHPrtaywIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFMlpgOhl HamUI0PmKKrfU18ehg8AMB8GA1UdIwQYMBaAFHkBSl8HMZ8EYPzQT8Sqq8zgntNE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODk5Mi9GQURCQzU2Qzg3 QTExMUU1QUVCNDdGNERDNEY5QUUwMi9lUUZLWHdjeG53UmdfTkJQeEtxcnpPQ2Uw MFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VRRktYd2N4bndSZ19OQlB4S3Fyek9DZTAwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Mjg5OTIvRkFEQkM1NkM4N0ExMTFFNUFFQjQ3RjREQzRGOUFFMDIvMzg0OTYyQTI3 MDk1MTFFRkIzQzI5OTJEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAF7sDgDBAB7sDsDBALKgcAwDQYJKoZIhvcNAQELBQADggEB AIKm8P3Rb+SoCkWjEfo8rlnJMNk3A0ibQoKvDnUdzh/OkT3/nGplpYzk4wYSLLwS 5A+XujQf2BC31++rbA4Z/tq6EYNPio597rZsjPIJQ7ZTgC7bVn2hFh0ao3b3DpP5 m+ti0ucbRvfENJ9cSbAhRpV0UYJfJVL/uNDqsfuN7iRFB8jRMl0CBo/E7ndSIhU/ Qe6wEVPkFPnUjcdDXg4Eyjo9pRb4Z8wG9DTgtIcqqCt6xTx6APX71R3euuWVxQ7D QZuG7cg93gj05qOVxO+vjH6/ktNDt1lP0DmnUK81ht+UykIKuUuSYM4ytua/YA/w vugB2Q3yPGvvYbeazL2DTTI= -----END CERTIFICATE-----Generated at Sun Aug 24 03:33:02 2025 by rpki-client