$ rpki-client -vvf rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/8533D57A4D7611F0A8533A0BC4F9AE02.roa File: 8533D57A4D7611F0A8533A0BC4F9AE02.roa (raw, json) Hash identifier: yX8riS/3PGxEo4B+e2WGjOqGhdh/NjGMzCuQRa5oFVg= Subject key identifier: FA:D6:D7:9F:3B:78:A6:E1:45:91:66:DD:78:D7:9F:51:84:74:7A:10 Certificate issuer: /CN=A9134172/serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7 Certificate serial: 0A7A Authority key identifier: F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/8533D57A4D7611F0A8533A0BC4F9AE02.roa Signing time: Fri 20 Jun 2025 01:34:22 +0000 ROA not before: Fri 20 Jun 2025 01:34:22 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 9908 IP address blocks: 61.10.0.0/16 maxlen: 16 61.10.0.0/17 maxlen: 17 61.10.0.0/18 maxlen: 20 61.10.64.0/18 maxlen: 18 61.10.64.0/19 maxlen: 20 61.10.96.0/19 maxlen: 20 61.10.128.0/17 maxlen: 20 61.15.0.0/19 maxlen: 20 61.15.64.0/18 maxlen: 20 61.15.128.0/17 maxlen: 20 61.18.0.0/16 maxlen: 20 125.59.0.0/16 maxlen: 20 203.83.64.0/18 maxlen: 18 203.168.222.0/23 maxlen: 24 218.252.0.0/16 maxlen: 16 218.252.0.0/17 maxlen: 20 218.252.128.0/17 maxlen: 20 218.253.0.0/18 maxlen: 20 222.166.0.0/16 maxlen: 20 222.167.0.0/19 maxlen: 20 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:27:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2682 (0xa7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134172, serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7 Validity Not Before: Jun 20 01:34:22 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=6854ba9e-bcc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:aa:3f:b7:68:a1:ed:1a:68:f7:e9:04:78:fc: 7f:d8:f6:a2:e0:32:69:c2:53:c9:fb:5d:8b:52:5b: 16:c1:6d:48:36:ed:b0:fb:d4:7c:ad:15:b7:f7:d7: 95:1f:52:29:73:ba:84:48:d2:d0:86:80:fb:ed:ac: 13:8c:80:79:33:27:49:70:72:ab:3c:ed:ff:87:86: 2d:05:19:b4:9e:5b:1a:1a:17:a5:6a:f4:10:14:30: 42:83:f1:d0:b8:26:e0:cd:96:f0:d6:f9:04:28:7d: 9d:7c:14:16:d4:37:89:7c:bf:af:45:44:26:68:56: 55:07:29:89:bd:11:c9:ca:55:b0:c3:cf:ae:ca:70: 60:2d:2e:81:fd:12:ba:85:7c:c0:e5:04:35:03:fb: 96:01:b2:30:7f:0f:56:45:0f:b0:26:31:5a:4b:ba: 60:53:50:d1:f4:1e:33:49:d9:a9:94:4e:dc:4e:88: 0d:a4:19:24:a6:4b:85:a3:54:27:37:90:53:a7:b3: 8c:e7:36:19:1d:ac:72:a8:d1:81:a4:eb:68:97:0e: 27:3c:a0:4a:ac:eb:1f:de:13:42:30:75:44:d8:42: e9:95:cf:dc:8a:17:a1:41:e8:9f:a5:94:e0:7b:e0: 2c:a7:76:be:dc:e6:3f:dc:26:0f:e6:f4:9f:5d:b3: 3f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:D6:D7:9F:3B:78:A6:E1:45:91:66:DD:78:D7:9F:51:84:74:7A:10 X509v3 Authority Key Identifier: keyid:F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/8533D57A4D7611F0A8533A0BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.10.0.0/16 61.15.0.0/19 61.15.64.0-61.15.255.255 61.18.0.0/16 125.59.0.0/16 203.83.64.0/18 203.168.222.0/23 218.252.0.0-218.253.63.255 222.166.0.0-222.167.31.255 Signature Algorithm: sha256WithRSAEncryption 79:10:44:fa:2c:e2:a2:7a:46:73:d9:e8:a3:1f:b2:57:c0:e6: 46:ab:f3:80:fe:3e:ec:42:42:f9:36:fd:3d:79:8f:97:2b:fa: 6e:ea:04:2d:1c:31:e6:a1:c6:78:f2:66:c7:cd:b6:98:ac:c4: 68:f9:e5:89:61:a1:20:36:c2:4d:3d:5a:e9:2a:f2:d8:27:31: 92:4f:18:7f:23:34:85:31:3d:db:7a:32:4a:29:53:0b:61:2d: cb:60:13:81:a7:9e:f4:8a:d5:df:d6:91:8a:64:ee:af:11:c1: 9f:48:98:09:a5:8e:c0:e8:84:7b:aa:4d:86:50:96:e2:5b:56: 5b:cc:dd:07:0a:9d:9b:c9:28:56:c8:0c:e3:9c:2a:d3:db:13: 64:5a:df:1f:74:2d:be:4d:df:4a:a4:18:cb:00:58:89:84:08: 5b:d5:4d:e1:f4:67:9b:62:c1:1f:b5:cf:1f:99:6c:00:48:75: ac:05:dc:62:90:93:aa:47:b4:9a:f1:fe:bd:21:04:8c:17:0e: bd:14:c0:0a:ca:ea:ee:10:5f:d2:c9:b5:de:c0:0c:a6:e7:01: 23:d0:ca:05:ea:39:8d:d9:b7:2d:b8:10:48:68:0e:f5:83:b6: 8e:91:72:a8:98:d2:4e:2a:45:96:3e:16:39:f0:42:5d:f6:21: 3a:c2:7f:ef -----BEGIN CERTIFICATE----- MIIFszCCBJugAwIBAgICCnowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQxNzIxMTAvBgNVBAUTKEY0NUMwRjRGNDY3Q0UxNTc2RTVFRTlFNDFFNTU3NkYw MzQ4QzQ2QTcwHhcNMjUwNjIwMDEzNDIyWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02ODU0YmE5ZS1iY2MwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq6o/t2ih7Rpo9+kEePx/2Pai4DJpwlPJ+12LUlsWwW1INu2w+9R8rRW399eV H1Ipc7qESNLQhoD77awTjIB5MydJcHKrPO3/h4YtBRm0nlsaGhelavQQFDBCg/HQ uCbgzZbw1vkEKH2dfBQW1DeJfL+vRUQmaFZVBymJvRHJylWww8+uynBgLS6B/RK6 hXzA5QQ1A/uWAbIwfw9WRQ+wJjFaS7pgU1DR9B4zSdmplE7cTogNpBkkpkuFo1Qn N5BTp7OM5zYZHaxyqNGBpOtolw4nPKBKrOsf3hNCMHVE2ELplc/cihehQeifpZTg e+Asp3a+3OY/3CYP5vSfXbM/BQIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFPrW1587 eKbhRZFm3XjXn1GEdHoQMB8GA1UdIwQYMBaAFPRcD09GfOFXbl7p5B5VdvA0jEan MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDE3Mi81OTc2MTI2NDlF NEQxMUVBOUMyM0FGMUZDNEY5QUUwMi85RndQVDBaODRWZHVYdW5rSGxWMjhEU01S cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlGd1BUMFo4NFZkdVh1bmtIbFYyOERTTVJxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzQxNzIvNTk3NjEyNjQ5RTREMTFFQTlDMjNBRjFGQzRGOUFFMDIvODUzM0Q1N0E0 RDc2MTFGMEE4NTMzQTBCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwYQYIKwYBBQUHAQcBAf8E UjBQME4EAgABMEgDAwA9CgMEBT0PADALAwQGPQ9AAwMEPQADAwA9EgMDAH07AwQG y1NAAwQBy6jeMAsDAwLa/AMEBtr9ADALAwMB3qYDBAXepwAwDQYJKoZIhvcNAQEL BQADggEBAHkQRPos4qJ6RnPZ6KMfslfA5kar84D+PuxCQvk2/T15j5cr+m7qBC0c MeahxnjyZsfNtpisxGj55YlhoSA2wk09Wukq8tgnMZJPGH8jNIUxPdt6MkopUwth LctgE4GnnvSK1d/WkYpk7q8RwZ9ImAmljsDohHuqTYZQluJbVlvM3QcKnZvJKFbI DOOcKtPbE2Ra3x90Lb5N30qkGMsAWImECFvVTeH0Z5tiwR+1zx+ZbABIdawF3GKQ k6pHtJrx/r0hBIwXDr0UwArK6u4QX9LJtd7ADKbnASPQygXqOY3Zty24EEhoDvWD to6RcqiY0k4qRZY+FjnwQl32ITrCf+8= -----END CERTIFICATE-----Generated at Fri Jul 4 18:41:00 2025 by rpki-client