$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/2C7A8F5C8CE511EF96182462C4F9AE02.roa File: 2C7A8F5C8CE511EF96182462C4F9AE02.roa (raw, json) Hash identifier: rg3haPXHYJzVP/BOmn/4uovgv1xLieMfVge/2QjecaQ= Subject key identifier: E4:FE:08:6A:F5:36:7A:EA:24:83:92:6A:07:61:58:FE:84:C1:3E:39 Certificate issuer: /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B Certificate serial: 3A27 Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/2C7A8F5C8CE511EF96182462C4F9AE02.roa Signing time: Tue 09 Sep 2025 00:14:56 +0000 ROA not before: Tue 09 Sep 2025 00:14:56 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 4766 IP address blocks: 61.251.188.0/24 maxlen: 24 182.237.41.0/24 maxlen: 24 203.210.25.0/24 maxlen: 24 203.210.28.0/24 maxlen: 24 203.210.29.0/24 maxlen: 24 203.210.30.0/24 maxlen: 24 210.87.192.0/24 maxlen: 24 210.87.194.0/24 maxlen: 24 210.87.203.0/24 maxlen: 24 210.87.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 14:23:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14887 (0x3a27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B Validity Not Before: Sep 9 00:14:56 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=68bf7180-7e30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a6:ed:81:e7:79:56:10:d3:37:c1:e6:36:eb: c6:6e:ca:5c:41:1a:d4:91:7f:d9:db:d7:72:89:8b: e7:ab:8d:c2:ac:de:76:1f:4d:e7:86:ab:12:bc:32: 20:06:c5:0e:be:22:4b:1c:23:e5:6a:13:5a:ce:3d: af:e8:3e:fc:38:eb:f0:92:3d:10:59:5d:10:b7:b9: 97:d8:d7:29:3a:6e:28:6b:10:13:34:e4:f8:9f:34: 83:5e:51:db:96:6d:2c:d3:6b:c3:13:de:f8:13:58: 75:22:57:87:dc:30:39:c1:17:8a:4e:ce:23:eb:59: 82:b1:f5:fb:cf:5a:88:d1:f3:f7:d1:f8:d1:e2:d7: 72:2d:b2:d5:5a:50:5f:38:56:ab:6e:29:9d:85:33: 29:4f:8f:88:a9:7d:00:74:ba:3d:fe:95:6f:3f:f8: 23:b5:3d:b5:5b:9f:6b:7c:ac:7e:db:0d:6a:40:04: f2:9a:e1:a5:b6:17:98:ae:40:a7:06:8b:d7:20:c8: 64:b0:be:0b:67:79:ef:0f:7f:f0:2e:25:1d:58:61: 6d:37:58:56:c1:64:af:c9:c0:ad:be:5c:4a:0f:06: 34:54:a1:26:56:90:ba:9d:3a:6b:88:f4:46:0f:92: ce:09:0c:39:84:90:f6:11:81:fa:cb:b6:a6:ab:ea: cb:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:FE:08:6A:F5:36:7A:EA:24:83:92:6A:07:61:58:FE:84:C1:3E:39 X509v3 Authority Key Identifier: keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/2C7A8F5C8CE511EF96182462C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.251.188.0/24 182.237.41.0/24 203.210.25.0/24 203.210.28.0-203.210.30.255 210.87.192.0/24 210.87.194.0/24 210.87.203.0/24 210.87.223.0/24 Signature Algorithm: sha256WithRSAEncryption 54:b1:e2:16:d2:e3:8d:84:eb:1e:3a:67:d6:13:93:a0:6a:88: e4:08:e5:04:80:80:eb:68:dc:d1:8b:90:81:4d:32:75:e9:a1: a1:32:6c:a6:5e:29:bf:42:d4:db:cb:a7:be:a8:dd:0d:82:30: df:af:b4:7c:a5:ed:6e:a6:88:0a:c7:09:16:36:3a:9a:0d:3f: ad:8b:6d:d6:4b:02:82:9b:f2:ff:dc:c7:d5:71:04:a8:20:06: 68:77:4c:5e:e3:2d:ba:68:4e:30:08:a2:94:32:76:3c:d7:8c: aa:6a:c1:41:14:fd:d9:2e:29:41:68:a6:52:17:7e:39:c4:d6: 06:18:08:1a:c0:3b:33:f8:74:b1:fe:ea:fa:8f:92:26:d6:db: 33:2b:e6:04:9d:f2:e6:14:df:25:c7:65:28:f5:ae:aa:c0:10: f4:ac:82:bd:fd:8c:7f:6e:35:ea:72:d5:13:4f:18:1a:9d:3c: e0:b8:43:92:a8:08:a0:12:c5:25:f1:4a:fe:f7:b5:ce:b7:49: e8:40:94:b9:63:7c:97:6c:2f:d4:99:5e:4d:53:07:9a:6d:dc: b8:d9:79:b1:f7:3d:2c:91:b1:e1:5a:30:67:c2:fa:72:53:ac: 57:4e:b3:30:25:34:ec:f7:35:72:1e:f0:ea:07:c0:e6:e2:ab: c6:37:09:10 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgICOicwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGM0UxMTAvBgNVBAUTKEVCMzg5RkIzMzlCMzkwOEQ1NDlBNjUzOTBDOTJFMTVG OURGN0M1NEIwHhcNMjUwOTA5MDAxNDU2WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGJmNzE4MC03ZTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Kbtged5VhDTN8HmNuvGbspcQRrUkX/Z29dyiYvnq43CrN52H03nhqsSvDIg BsUOviJLHCPlahNazj2v6D78OOvwkj0QWV0Qt7mX2NcpOm4oaxATNOT4nzSDXlHb lm0s02vDE974E1h1IleH3DA5wReKTs4j61mCsfX7z1qI0fP30fjR4tdyLbLVWlBf OFarbimdhTMpT4+IqX0AdLo9/pVvP/gjtT21W59rfKx+2w1qQATymuGltheYrkCn BovXIMhksL4LZ3nvD3/wLiUdWGFtN1hWwWSvycCtvlxKDwY0VKEmVpC6nTpriPRG D5LOCQw5hJD2EYH6y7amq+rLnQIDAQABo4ICxzCCAsMwHQYDVR0OBBYEFOT+CGr1 NnrqJIOSagdhWP6EwT45MB8GA1UdIwQYMBaAFOs4n7M5s5CNVJplOQyS4V+d98VL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS9BQzUyQjc0ODFE ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi82emlmc3ptemtJMVVtbVU1REpMaFg1MzN4 VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ6aWZzem16a0kxVW1tVTVESkxoWDUzM3hVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDlGM0UvQUM1MkI3NDgxRDgyMTFFMkJDNjQxN0Q3MDhCMDJDRDIvMkM3QThGNUM4 Q0U1MTFFRjk2MTgyNDYyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwUQYIKwYBBQUHAQcBAf8E QjBAMD4EAgABMDgDBAA9+7wDBAC27SkDBADL0hkwDAMEAsvSHAMEAMvSHgMEANJX wAMEANJXwgMEANJXywMEANJX3zANBgkqhkiG9w0BAQsFAAOCAQEAVLHiFtLjjYTr Hjpn1hOToGqI5AjlBICA62jc0YuQgU0ydemhoTJspl4pv0LU28unvqjdDYIw36+0 fKXtbqaICscJFjY6mg0/rYtt1ksCgpvy/9zH1XEEqCAGaHdMXuMtumhOMAiilDJ2 PNeMqmrBQRT92S4pQWimUhd+OcTWBhgIGsA7M/h0sf7q+o+SJtbbMyvmBJ3y5hTf JcdlKPWuqsAQ9KyCvf2Mf2416nLVE08YGp084LhDkqgIoBLFJfFK/ve1zrdJ6ECU uWN8l2wv1JleTVMHmm3cuNl5sfc9LJGx4VowZ8L6clOsV06zMCU07Pc1ch7w6gfA 5uKrxjcJEA== -----END CERTIFICATE-----Generated at Sun Oct 19 23:42:00 2025 by rpki-client