$ rpki-client -vvf rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/9427EF0A7CA411F09AE49B57C4F9AE02.roa File: 9427EF0A7CA411F09AE49B57C4F9AE02.roa (raw, json) Hash identifier: aouKDvCEBWeanCsawlBT9lWakaxS2ZXwGK+L0tskXDM= Subject key identifier: 56:09:A9:04:46:32:A2:F7:C3:66:75:A3:22:7D:77:CE:56:B9:91:C9 Certificate issuer: /CN=A914781A/serialNumber=4D723955243AE88D552439AF8E4E0A09C8F6590D Certificate serial: 3539 Authority key identifier: 4D:72:39:55:24:3A:E8:8D:55:24:39:AF:8E:4E:0A:09:C8:F6:59:0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/9427EF0A7CA411F09AE49B57C4F9AE02.roa Signing time: Tue 19 Aug 2025 02:31:15 +0000 ROA not before: Tue 19 Aug 2025 02:31:15 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 7616 IP address blocks: 203.130.128.0/19 maxlen: 20 203.130.146.0/24 maxlen: 24 203.147.16.0/20 maxlen: 21 203.147.31.0/24 maxlen: 24 203.147.32.0/20 maxlen: 21 203.147.42.0/24 maxlen: 24 203.147.48.0/20 maxlen: 20 203.147.54.0/24 maxlen: 24 203.156.18.0/24 maxlen: 24 203.156.48.0/20 maxlen: 20 203.156.64.0/20 maxlen: 20 203.156.80.0/20 maxlen: 20 203.156.95.0/24 maxlen: 24 203.156.128.0/18 maxlen: 20 203.156.146.0/24 maxlen: 24 203.156.147.0/24 maxlen: 24 203.156.148.0/24 maxlen: 24 203.156.149.0/24 maxlen: 24 203.156.150.0/24 maxlen: 24 203.156.152.0/21 maxlen: 21 203.156.152.0/24 maxlen: 24 2403:bf00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:59:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13625 (0x3539) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914781A, serialNumber=4D723955243AE88D552439AF8E4E0A09C8F6590D Validity Not Before: Aug 19 02:31:15 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=68a3e1f3-cf0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c1:93:67:d9:d5:21:79:74:d4:96:87:2c:79: fa:d3:16:49:7b:c6:c8:55:f7:13:09:59:50:af:75: 1c:a5:2f:c9:98:72:01:94:71:41:0e:16:d2:99:99: c0:2d:3f:39:27:5f:5a:60:a4:4b:ee:05:0b:31:e6: ed:7d:4b:8d:32:dc:34:d4:f8:6e:ad:a7:5a:c7:d8: 0e:d0:9c:ba:d1:43:b7:2e:49:74:0f:1f:05:fb:d9: 26:b0:f9:94:84:e7:d6:0b:bd:94:95:2a:36:b8:c5: d4:dc:e5:6d:be:a9:d4:ef:f7:77:8a:18:05:db:1c: 6c:ff:57:c4:25:a1:91:31:15:0e:b3:ca:be:0d:f5: 0c:7e:e6:5c:ce:5d:bd:3f:30:72:22:89:e5:86:44: 5e:ba:89:3a:26:42:34:00:97:38:4d:73:48:9b:a2: a2:03:60:e2:03:96:a0:9f:86:dd:8b:77:dd:69:c7: ab:05:d4:5e:cc:f4:19:89:86:a4:14:ca:91:32:96: 36:02:1b:d4:7b:73:30:47:7f:46:53:f9:e0:63:fa: 71:33:bd:92:e9:11:da:e1:d9:9d:30:a9:8a:cc:b8: 3c:b5:60:90:26:dd:4b:38:be:5f:0a:63:39:d7:9b: 2b:3b:24:c8:75:e8:60:86:de:cc:1b:fc:78:21:1b: e6:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:09:A9:04:46:32:A2:F7:C3:66:75:A3:22:7D:77:CE:56:B9:91:C9 X509v3 Authority Key Identifier: keyid:4D:72:39:55:24:3A:E8:8D:55:24:39:AF:8E:4E:0A:09:C8:F6:59:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/9427EF0A7CA411F09AE49B57C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.130.128.0/19 203.147.16.0-203.147.63.255 203.156.18.0/24 203.156.48.0-203.156.95.255 203.156.128.0/18 IPv6: 2403:bf00::/32 Signature Algorithm: sha256WithRSAEncryption 97:b3:14:24:17:d7:d4:08:d7:97:65:d0:68:4d:3e:e3:74:e0: 01:9a:da:43:67:b7:a5:b9:83:86:f9:f8:92:65:f0:ec:ca:dd: 72:df:33:72:df:a4:c5:9a:76:44:cc:27:bb:88:cf:d7:77:f1: ee:f9:43:8d:c6:02:c9:3f:c7:d5:93:a2:9d:da:97:4c:2e:ee: 06:d5:07:27:a6:4f:dd:27:aa:00:e5:d0:18:4b:3f:d1:82:37: f9:dc:ba:49:8e:64:88:1e:c3:3d:9c:b9:00:bb:5a:47:0c:d5: e7:22:d4:4b:bd:bd:9c:c5:56:3d:1a:15:d3:73:fb:1a:01:ac: eb:2e:6d:40:08:5d:1f:02:eb:4e:ce:cd:43:f8:f1:78:f2:60: ba:4e:f3:fd:7a:93:fb:fc:1c:33:b9:3c:dc:60:a6:23:18:ee: 20:a2:dc:be:e1:b3:c0:44:22:b5:d7:8b:95:03:28:0c:fb:fc: 1c:bf:26:34:7d:5f:f5:5f:0b:4f:a7:f2:93:5e:a1:a7:d6:cb: 29:27:ea:bb:9a:cb:78:54:f0:7c:8c:16:c6:3a:8c:2d:2b:6c: 3b:96:ef:6f:5f:d6:92:cc:93:8a:96:f5:e6:10:4f:9a:2d:80: 4e:0b:5d:34:3e:d6:39:9d:31:2d:b7:db:6a:54:91:15:cc:d1: f7:3c:48:b1 -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgICNTkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc4MUExMTAvBgNVBAUTKDRENzIzOTU1MjQzQUU4OEQ1NTI0MzlBRjhFNEUwQTA5 QzhGNjU5MEQwHhcNMjUwODE5MDIzMTE1WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGEzZTFmMy1jZjBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx8GTZ9nVIXl01JaHLHn60xZJe8bIVfcTCVlQr3UcpS/JmHIBlHFBDhbSmZnA LT85J19aYKRL7gULMebtfUuNMtw01Phuradax9gO0Jy60UO3Lkl0Dx8F+9kmsPmU hOfWC72UlSo2uMXU3OVtvqnU7/d3ihgF2xxs/1fEJaGRMRUOs8q+DfUMfuZczl29 PzByIonlhkReuok6JkI0AJc4TXNIm6KiA2DiA5agn4bdi3fdacerBdRezPQZiYak FMqRMpY2AhvUe3MwR39GU/ngY/pxM72S6RHa4dmdMKmKzLg8tWCQJt1LOL5fCmM5 15srOyTIdehght7MG/x4IRvmUQIDAQABo4ICzDCCAsgwHQYDVR0OBBYEFFYJqQRG MqL3w2Z1oyJ9d85WuZHJMB8GA1UdIwQYMBaAFE1yOVUkOuiNVSQ5r45OCgnI9lkN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzgxQS9ENTIxNDI3MDFE OUIxMUUyQjgyMUZEODkwOEIwMkNEMi9UWEk1VlNRNjZJMVZKRG12ams0S0NjajJX UTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RYSTVWU1E2NkkxVkpEbXZqazRLQ2NqMldRMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDc4MUEvRDUyMTQyNzAxRDlCMTFFMkI4MjFGRDg5MDhCMDJDRDIvOTQyN0VGMEE3 Q0E0MTFGMDlBRTQ5QjU3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwVgYIKwYBBQUHAQcBAf8E RzBFMDQEAgABMC4DBAXLgoAwDAMEBMuTEAMEBsuTAAMEAMucEjAMAwQEy5wwAwQF y5xAAwQGy5yAMA0EAgACMAcDBQAkA78AMA0GCSqGSIb3DQEBCwUAA4IBAQCXsxQk F9fUCNeXZdBoTT7jdOABmtpDZ7eluYOG+fiSZfDsyt1y3zNy36TFmnZEzCe7iM/X d/Hu+UONxgLJP8fVk6Kd2pdMLu4G1Qcnpk/dJ6oA5dAYSz/Rgjf53LpJjmSIHsM9 nLkAu1pHDNXnItRLvb2cxVY9GhXTc/saAazrLm1ACF0fAutOzs1D+PF48mC6TvP9 epP7/BwzuTzcYKYjGO4goty+4bPARCK114uVAygM+/wcvyY0fV/1XwtPp/KTXqGn 1sspJ+q7mst4VPB8jBbGOowtK2w7lu9vX9aSzJOKlvXmEE+aLYBOC100PtY5nTEt t9tqVJEVzNH3PEix -----END CERTIFICATE-----Generated at Sun Aug 24 07:14:52 2025 by rpki-client