$ rpki-client -vvf rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/98ADC3467FBF11ECBBD2EE30C4F9AE02.roa File: 98ADC3467FBF11ECBBD2EE30C4F9AE02.roa (raw, json) Hash identifier: shUyL0T+nIZClfZrL/H8TAF10vSCmqRMW+JFhYiGjJU= Subject key identifier: 9F:5C:9B:22:0B:DA:86:DB:EF:23:1A:32:D2:47:1F:E2:0E:FA:95:09 Certificate issuer: /CN=A9140BD4/serialNumber=F13BCA804F8F198176F99E7BC9AEA98CAFC0B8B1 Certificate serial: 0455 Authority key identifier: F1:3B:CA:80:4F:8F:19:81:76:F9:9E:7B:C9:AE:A9:8C:AF:C0:B8:B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8TvKgE-PGYF2-Z57ya6pjK_AuLE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/98ADC3467FBF11ECBBD2EE30C4F9AE02.roa Signing time: Tue 01 Jul 2025 01:05:52 +0000 ROA not before: Tue 01 Jul 2025 01:05:52 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 4049 IP address blocks: 202.21.130.0/24 maxlen: 24 202.50.192.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.crl rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8TvKgE-PGYF2-Z57ya6pjK_AuLE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 00:37:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1109 (0x455) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140BD4, serialNumber=F13BCA804F8F198176F99E7BC9AEA98CAFC0B8B1 Validity Not Before: Jul 1 01:05:52 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=6863346f-681f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:1f:34:0f:a9:2a:ab:2e:45:09:1c:bf:73:e2: 97:7e:85:5d:ef:7c:5a:60:73:e0:16:b8:a1:74:ef: 55:bd:24:05:45:4c:1b:c0:77:55:69:48:53:3c:e3: a9:b2:c8:7a:2f:38:24:60:2e:27:a9:d7:75:22:fd: b9:4c:29:5f:a1:57:8e:1a:22:6a:9b:96:47:b8:db: 0f:eb:b4:e6:3f:03:a7:e2:2e:2c:fa:42:89:ff:17: 01:b7:11:68:79:47:dc:fc:39:19:6e:a5:ef:7d:a1: d8:4f:e4:50:29:7c:f7:db:4f:64:eb:c0:d0:f0:42: 98:a0:f1:08:2d:7c:06:0e:27:13:de:e1:b9:ad:5a: 20:a0:58:07:91:8c:dd:59:2a:af:9b:75:49:93:ff: 97:50:21:cc:5d:6a:f0:8a:99:20:ae:f7:a4:ff:27: 83:ba:97:e5:de:b6:8a:5b:cd:9c:2b:52:1c:2c:cd: 23:e4:03:65:0a:f4:b4:b9:49:c5:55:56:cd:9c:2e: e1:14:62:9f:f1:55:83:5a:e3:3d:db:aa:bd:85:0a: 41:7a:7d:e9:ad:7d:58:f3:c7:14:de:fc:54:d4:1b: f3:d7:1e:cc:dd:be:62:d1:f8:9e:29:d5:64:7f:ca: 89:c3:82:01:33:84:49:b0:70:fb:0b:46:81:28:6f: a7:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:5C:9B:22:0B:DA:86:DB:EF:23:1A:32:D2:47:1F:E2:0E:FA:95:09 X509v3 Authority Key Identifier: keyid:F1:3B:CA:80:4F:8F:19:81:76:F9:9E:7B:C9:AE:A9:8C:AF:C0:B8:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8TvKgE-PGYF2-Z57ya6pjK_AuLE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/98ADC3467FBF11ECBBD2EE30C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.21.130.0/24 202.50.192.0/22 Signature Algorithm: sha256WithRSAEncryption b9:e1:ba:3e:d1:a6:62:ae:c4:3b:37:48:17:b6:d7:8f:92:d8: d5:1e:16:8a:d4:06:c3:eb:72:fa:db:eb:3d:f0:c1:6d:c0:f2: f0:30:41:2a:50:e7:4f:6e:d8:7a:af:25:89:51:1b:14:f6:0d: 75:54:ac:03:76:04:d0:b8:a0:02:9d:25:0e:a8:4b:de:86:d1: a0:08:bd:cf:4b:28:77:1f:71:47:f3:b1:9a:f8:20:cf:d4:ce: e2:d3:c0:4a:ba:3e:7c:95:9b:31:5e:94:86:ce:12:57:f7:87: 75:d2:d4:0d:0f:2c:82:1a:be:08:c5:a3:61:3d:bd:2c:7e:d0: 8c:59:10:c1:94:1e:e9:57:59:36:a5:aa:ab:f3:9e:12:76:03: 8d:9a:4d:58:71:93:4f:23:f4:0a:13:d9:ca:4a:e1:6d:17:1d: df:9b:e8:84:98:82:3a:de:3a:e0:e0:31:b3:98:29:65:ac:98: 42:ac:a9:3c:9b:b6:6a:c3:58:83:c0:99:5f:1f:a0:ea:f6:d2: 6e:ac:d6:61:67:10:28:99:9f:6c:a2:5a:28:57:bd:a7:aa:dd: 7b:53:09:19:63:a6:23:3c:03:15:e6:30:a2:17:8c:2a:a8:c8: 94:b7:e3:6e:e4:b0:c4:31:64:ac:ea:22:7e:a3:89:2e:cd:14: 10:56:71:57 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBFUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBCRDQxMTAvBgNVBAUTKEYxM0JDQTgwNEY4RjE5ODE3NkY5OUU3QkM5QUVBOThD QUZDMEI4QjEwHhcNMjUwNzAxMDEwNTUyWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODYzMzQ2Zi02ODFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzB80D6kqqy5FCRy/c+KXfoVd73xaYHPgFrihdO9VvSQFRUwbwHdVaUhTPOOp ssh6LzgkYC4nqdd1Iv25TClfoVeOGiJqm5ZHuNsP67TmPwOn4i4s+kKJ/xcBtxFo eUfc/DkZbqXvfaHYT+RQKXz3209k68DQ8EKYoPEILXwGDicT3uG5rVogoFgHkYzd WSqvm3VJk/+XUCHMXWrwipkgrvek/yeDupfl3raKW82cK1IcLM0j5ANlCvS0uUnF VVbNnC7hFGKf8VWDWuM926q9hQpBen3prX1Y88cU3vxU1Bvz1x7M3b5i0fieKdVk f8qJw4IBM4RJsHD7C0aBKG+nqwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFJ9cmyIL 2obb7yMaMtJHH+IO+pUJMB8GA1UdIwQYMBaAFPE7yoBPjxmBdvmee8muqYyvwLix MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEJENC80ODY1QkQ0ODYx MTExMUVDOTg0RTNFN0ZDNEY5QUUwMi84VHZLZ0UtUEdZRjItWjU3eWE2cGpLX0F1 TEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhUdktnRS1QR1lGMi1aNTd5YTZwaktfQXVMRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDBCRDQvNDg2NUJENDg2MTExMTFFQzk4NEUzRTdGQzRGOUFFMDIvOThBREMzNDY3 RkJGMTFFQ0JCRDJFRTMwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBADKFYIDBALKMsAwDQYJKoZIhvcNAQELBQADggEBALnhuj7R pmKuxDs3SBe214+S2NUeForUBsPrcvrb6z3wwW3A8vAwQSpQ509u2HqvJYlRGxT2 DXVUrAN2BNC4oAKdJQ6oS96G0aAIvc9LKHcfcUfzsZr4IM/UzuLTwEq6PnyVmzFe lIbOElf3h3XS1A0PLIIavgjFo2E9vSx+0IxZEMGUHulXWTalqqvznhJ2A42aTVhx k08j9AoT2cpK4W0XHd+b6ISYgjreOuDgMbOYKWWsmEKsqTybtmrDWIPAmV8foOr2 0m6s1mFnECiZn2yiWihXvaeq3XtTCRljpiM8AxXmMKIXjCqoyJS3427ksMQxZKzq In6jiS7NFBBWcVc= -----END CERTIFICATE-----Generated at Thu Jul 3 13:18:35 2025 by rpki-client