$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/6D541B1863D611ED863A4C1EC4F9AE02.roa File: 6D541B1863D611ED863A4C1EC4F9AE02.roa (raw, json) Hash identifier: jPrrDKeR0dgD5bMc2V5G7besGHSC2jg/kUA9unHAvvM= Subject key identifier: 4F:33:D7:F3:3B:5A:90:A1:B0:35:63:03:72:C7:C3:27:7F:DC:20:A2 Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Certificate serial: 3A4D Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/6D541B1863D611ED863A4C1EC4F9AE02.roa Signing time: Tue 02 Sep 2025 03:50:11 +0000 ROA not before: Tue 02 Sep 2025 03:50:11 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 38543 IP address blocks: 58.97.62.0/24 maxlen: 24 61.90.164.0/24 maxlen: 24 203.144.208.0/24 maxlen: 24 2001:fb0:10d0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 14:21:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14925 (0x3a4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Validity Not Before: Sep 2 03:50:11 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68b66972-5821 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:3f:9d:af:c4:ff:7a:13:1c:01:85:a2:d0:3f: c9:74:87:b6:f2:3c:86:d2:7c:8a:7d:c8:23:d7:15: a4:08:79:55:6d:05:8e:af:d3:1d:49:50:92:0a:7e: c9:33:f1:ff:0f:a6:53:59:70:1e:16:fc:2e:8e:b1: d3:03:11:4d:35:28:e2:b1:bf:b8:84:9d:2f:15:97: 45:8a:45:90:bd:53:0d:d1:8f:81:79:d4:f5:81:99: a8:04:2c:6a:fb:5c:09:32:eb:a3:39:8b:ab:a4:16: 2d:1e:b3:be:27:3c:e7:55:c7:6c:85:7a:f4:ad:0f: 4c:3b:ee:4a:7c:e6:1e:6e:5c:10:87:0b:a5:de:7d: b9:83:70:ed:7f:1c:fe:da:7e:44:2d:d1:03:a3:a2: 65:bc:01:cf:8a:6d:dd:64:a2:07:70:4c:2c:a8:d2: 14:16:65:fa:c2:36:a7:e7:69:5a:08:d1:d1:22:48: ac:c0:a8:ac:95:f5:45:9b:c1:9a:e9:fe:4b:a9:51: a6:8b:72:26:e4:e0:ee:12:ff:07:48:8f:77:77:81: 66:a5:3e:8d:a6:3b:7c:0d:ec:30:03:5a:7d:ba:74: 3c:90:d9:41:59:b0:f9:14:28:d3:25:aa:7e:38:fe: 84:73:cf:1f:a9:e3:c3:45:fd:ac:a6:3c:6e:15:5a: 14:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:33:D7:F3:3B:5A:90:A1:B0:35:63:03:72:C7:C3:27:7F:DC:20:A2 X509v3 Authority Key Identifier: keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/6D541B1863D611ED863A4C1EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 58.97.62.0/24 61.90.164.0/24 203.144.208.0/24 IPv6: 2001:fb0:10d0::/48 Signature Algorithm: sha256WithRSAEncryption 1b:ce:cd:59:dc:c7:ce:1b:2d:4a:e8:27:3a:33:ea:ff:de:a4: 74:6d:a9:62:11:12:41:ba:68:8a:af:f5:0b:45:2d:93:da:22: 1e:84:b2:c1:ca:11:89:8f:b2:32:40:d0:e7:3d:65:db:b7:7c: c3:0d:90:ee:f4:5c:18:d5:ad:e5:e0:24:6a:37:9a:7d:99:a5: e0:b7:bf:9d:1a:40:13:b4:f9:30:20:91:91:55:ba:02:93:6a: 5b:8e:1f:98:04:18:f8:e2:82:8c:7b:5d:6a:d4:70:25:14:45: 5c:78:95:77:79:1c:18:c2:6e:64:d5:a0:e9:8a:1a:76:82:0e: 1c:1d:70:d2:05:e7:c3:1c:22:28:1c:76:4d:6e:14:05:1b:6d: 01:c8:d5:6e:46:d6:2a:06:d0:56:7c:24:4c:43:0c:6b:63:b0: e4:bb:ce:79:1b:e3:02:46:17:70:a2:bb:13:74:d9:e0:89:99: 3b:0c:1e:2c:e2:40:cf:99:7c:b4:7d:cc:a3:64:76:dd:33:64: 82:8f:f9:7a:08:ec:0d:7e:b3:e5:64:58:54:a6:d0:1c:52:fc: 5e:4b:de:9c:02:24:75:43:a0:eb:f4:dd:f8:97:47:d7:e6:67: ab:10:38:e8:7d:2e:1b:d1:98:c0:a7:4d:0e:b6:31:aa:be:bf: 88:12:ba:85 -----BEGIN CERTIFICATE----- MIIFjjCCBHagAwIBAgICOk0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB NDM3QUYwMkMwHhcNMjUwOTAyMDM1MDExWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGI2Njk3Mi01ODIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1z+dr8T/ehMcAYWi0D/JdIe28jyG0nyKfcgj1xWkCHlVbQWOr9MdSVCSCn7J M/H/D6ZTWXAeFvwujrHTAxFNNSjisb+4hJ0vFZdFikWQvVMN0Y+BedT1gZmoBCxq +1wJMuujOYurpBYtHrO+JzznVcdshXr0rQ9MO+5KfOYeblwQhwul3n25g3Dtfxz+ 2n5ELdEDo6JlvAHPim3dZKIHcEwsqNIUFmX6wjan52laCNHRIkiswKislfVFm8Ga 6f5LqVGmi3Im5ODuEv8HSI93d4FmpT6Npjt8DewwA1p9unQ8kNlBWbD5FCjTJap+ OP6Ec88fqePDRf2spjxuFVoU7wIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFE8z1/M7 WpChsDVjA3LHwyd/3CCiMB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4 Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvNkQ1NDFCMTg2 M0Q2MTFFRDg2M0E0QzFFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPAYIKwYBBQUHAQcBAf8E LTArMBgEAgABMBIDBAA6YT4DBAA9WqQDBADLkNAwDwQCAAIwCQMHACABD7AQ0DAN BgkqhkiG9w0BAQsFAAOCAQEAG87NWdzHzhstSugnOjPq/96kdG2pYhESQbpoiq/1 C0Utk9oiHoSywcoRiY+yMkDQ5z1l27d8ww2Q7vRcGNWt5eAkajeafZml4Le/nRpA E7T5MCCRkVW6ApNqW44fmAQY+OKCjHtdatRwJRRFXHiVd3kcGMJuZNWg6YoadoIO HB1w0gXnwxwiKBx2TW4UBRttAcjVbkbWKgbQVnwkTEMMa2Ow5LvOeRvjAkYXcKK7 E3TZ4ImZOwweLOJAz5l8tH3Mo2R23TNkgo/5egjsDX6z5WRYVKbQHFL8XkvenAIk dUOg6/Td+JdH1+ZnqxA46H0uG9GYwKdNDrYxqr6/iBK6hQ== -----END CERTIFICATE-----Generated at Mon Oct 20 08:49:21 2025 by rpki-client