$ rpki-client -vvf rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/EF2F0372C9F211E986C3B486C4F9AE02.roa File: EF2F0372C9F211E986C3B486C4F9AE02.roa (raw, json) Hash identifier: BOcTF/v1Iy0DiJnxrZO8Yz9Fl7UTM9AhzmrK/G2Rmxo= Subject key identifier: 4C:4E:DC:3B:19:A8:82:23:A3:08:86:09:07:DD:EA:05:4B:0F:D0:28 Certificate issuer: /CN=A9134AD7/serialNumber=9C039CE49B5779FDB84DE3B698F676E844236679 Certificate serial: 1E05 Authority key identifier: 9C:03:9C:E4:9B:57:79:FD:B8:4D:E3:B6:98:F6:76:E8:44:23:66:79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/EF2F0372C9F211E986C3B486C4F9AE02.roa Signing time: Fri 20 Jun 2025 16:56:01 +0000 ROA not before: Fri 20 Jun 2025 16:56:01 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 63989 IP address blocks: 103.58.148.0/24 maxlen: 24 103.58.149.0/24 maxlen: 24 103.58.150.0/24 maxlen: 24 103.58.151.0/24 maxlen: 24 202.9.89.0/24 maxlen: 24 202.9.90.0/24 maxlen: 24 202.94.166.0/24 maxlen: 24 2402:6880:1000::/48 maxlen: 48 2402:6880:2000::/48 maxlen: 48 2402:6880:3000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.crl rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 16:13:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7685 (0x1e05) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134AD7, serialNumber=9C039CE49B5779FDB84DE3B698F676E844236679 Validity Not Before: Jun 20 16:56:01 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=685592a1-6bc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e1:85:6d:c5:75:22:a7:b3:a2:99:d9:f6:d7: 86:9e:36:8e:85:c7:2d:47:4b:b6:ad:04:fd:b4:14: 3c:d5:8b:e7:86:1a:97:dd:1e:bb:65:3d:a0:7f:b3: d2:dd:21:5b:56:14:cb:b4:25:ab:b4:27:ed:f8:20: 27:46:96:0f:84:7d:8e:7c:1e:7a:5e:aa:1c:fb:2e: 21:58:49:de:9d:c8:d2:df:58:92:e7:7b:7c:14:3a: 8d:9a:1c:30:d6:4b:74:17:ce:ce:2e:96:e2:06:a6: 63:bb:f5:e7:aa:ac:2c:4d:81:ed:f8:27:5b:93:1d: 73:52:1e:63:06:a8:be:38:de:d2:17:3c:72:86:c5: fe:bd:eb:87:92:c3:d4:53:85:a3:7b:37:c8:b6:20: 34:8f:87:8d:17:be:c5:91:2a:0f:26:bd:7a:2d:7e: aa:92:e7:9b:8b:cc:8a:40:84:54:b7:99:75:67:6c: 6b:3d:cb:8c:5e:39:91:12:c8:57:15:58:a3:4c:b4: e3:69:4b:17:83:b8:94:0d:04:49:34:21:a5:9a:66: 86:0f:56:77:61:3d:8f:4d:31:2e:87:b0:15:f8:cf: 4d:89:0e:b3:0e:6b:96:39:94:2e:3f:65:d5:b5:a7: e8:d6:fc:85:51:d8:78:f1:f3:df:9e:5f:a6:99:95: c8:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:4E:DC:3B:19:A8:82:23:A3:08:86:09:07:DD:EA:05:4B:0F:D0:28 X509v3 Authority Key Identifier: keyid:9C:03:9C:E4:9B:57:79:FD:B8:4D:E3:B6:98:F6:76:E8:44:23:66:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/nAOc5JtXef24TeO2mPZ26EQjZnk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAOc5JtXef24TeO2mPZ26EQjZnk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134AD7/E37EC8E68F4E11E68EE7CE6EC4F9AE02/EF2F0372C9F211E986C3B486C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.58.148.0/22 202.9.89.0-202.9.90.255 202.94.166.0/24 IPv6: 2402:6880:1000::/48 2402:6880:2000::/48 2402:6880:3000::/48 Signature Algorithm: sha256WithRSAEncryption 80:45:1d:de:07:70:24:9a:4e:33:73:c0:63:53:14:f8:14:78: 65:21:76:31:be:d0:52:a0:c0:9c:db:a9:4b:74:65:29:eb:e0: 1a:11:21:df:56:55:76:c5:95:af:1f:8c:03:d8:e1:84:71:85: 5a:62:7d:8f:d5:fc:f3:19:e4:59:66:03:79:a5:d5:05:95:73: 38:21:97:da:d0:48:4c:34:47:61:8c:0d:93:0c:e9:e3:0b:08: fa:80:ad:c3:20:a0:2d:de:98:ab:c2:7d:10:0e:4b:76:0f:e1: 64:64:39:cb:51:4f:cd:27:9c:81:42:c7:3f:05:93:cb:d5:b9: 66:ba:7b:14:99:1f:b3:75:23:51:a6:f8:23:5d:e7:27:0d:0e: e6:97:4b:f4:3e:af:86:8b:b5:f6:57:09:de:52:f6:8e:27:ed: 09:fb:65:06:29:72:41:76:f6:bc:ea:50:26:83:87:05:d8:e1: 27:0f:c7:3d:da:93:c9:09:c5:c5:2d:55:26:02:58:07:4e:e4: 29:3e:4d:84:bf:6e:71:49:31:48:9f:a4:87:f1:72:5f:10:0e: b6:53:f3:59:27:5b:a5:d1:50:fa:03:9f:83:37:07:f7:71:bf: 45:a3:41:af:bd:39:36:0f:c8:d3:9d:5d:46:52:7b:8e:63:65: 7f:db:93:4d -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgICHgUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzRBRDcxMTAvBgNVBAUTKDlDMDM5Q0U0OUI1Nzc5RkRCODRERTNCNjk4RjY3NkU4 NDQyMzY2NzkwHhcNMjUwNjIwMTY1NjAxWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODU1OTJhMS02YmMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqOGFbcV1IqezopnZ9teGnjaOhcctR0u2rQT9tBQ81YvnhhqX3R67ZT2gf7PS 3SFbVhTLtCWrtCft+CAnRpYPhH2OfB56Xqoc+y4hWEnencjS31iS53t8FDqNmhww 1kt0F87OLpbiBqZju/XnqqwsTYHt+Cdbkx1zUh5jBqi+ON7SFzxyhsX+veuHksPU U4WjezfItiA0j4eNF77FkSoPJr16LX6qkuebi8yKQIRUt5l1Z2xrPcuMXjmREshX FVijTLTjaUsXg7iUDQRJNCGlmmaGD1Z3YT2PTTEuh7AV+M9NiQ6zDmuWOZQuP2XV tafo1vyFUdh48fPfnl+mmZXIIQIDAQABo4ICzDCCAsgwHQYDVR0OBBYEFExO3DsZ qIIjowiGCQfd6gVLD9AoMB8GA1UdIwQYMBaAFJwDnOSbV3n9uE3jtpj2duhEI2Z5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNEFENy9FMzdFQzhFNjhG NEUxMUU2OEVFN0NFNkVDNEY5QUUwMi9uQU9jNUp0WGVmMjRUZU8ybVBaMjZFUWpa bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25BT2M1SnRYZWYyNFRlTzJtUFoyNkVRalpuay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzRBRDcvRTM3RUM4RTY4RjRFMTFFNjhFRTdDRTZFQzRGOUFFMDIvRUYyRjAzNzJD OUYyMTFFOTg2QzNCNDg2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwVgYIKwYBBQUHAQcBAf8E RzBFMCAEAgABMBoDBAJnOpQwDAMEAMoJWQMEAMoJWgMEAMpepjAhBAIAAjAbAwcA JAJogBAAAwcAJAJogCAAAwcAJAJogDAAMA0GCSqGSIb3DQEBCwUAA4IBAQCARR3e B3Akmk4zc8BjUxT4FHhlIXYxvtBSoMCc26lLdGUp6+AaESHfVlV2xZWvH4wD2OGE cYVaYn2P1fzzGeRZZgN5pdUFlXM4IZfa0EhMNEdhjA2TDOnjCwj6gK3DIKAt3pir wn0QDkt2D+FkZDnLUU/NJ5yBQsc/BZPL1blmunsUmR+zdSNRpvgjXecnDQ7ml0v0 Pq+Gi7X2VwneUvaOJ+0J+2UGKXJBdva86lAmg4cF2OEnD8c92pPJCcXFLVUmAlgH TuQpPk2Ev25xSTFIn6SH8XJfEA62U/NZJ1ul0VD6A5+DNwf3cb9Fo0GvvTk2D8jT nV1GUnuOY2V/25NN -----END CERTIFICATE-----Generated at Thu Jul 3 01:00:31 2025 by rpki-client