$ rpki-client -vvf rpki.apnic.net/member_repository/A9155A44/0EC8E42A088711ED891EE644C4F9AE02/ED947C26088911EDA7D9A84AC4F9AE02.roa File: ED947C26088911EDA7D9A84AC4F9AE02.roa (raw, json) Hash identifier: m5tkDr99ueIyPYAtBqolFfiSgG7uue2Tp2ShsOm2nZQ= Subject key identifier: 70:BB:D0:F9:A6:54:A0:85:EE:23:8A:2F:AD:A5:AC:4A:C7:E0:CC:1D Certificate issuer: /CN=A9155A44/serialNumber=6C9E0C2BFE9F7D1B1DE1D6EF628253AA70892A25 Certificate serial: 0292 Authority key identifier: 6C:9E:0C:2B:FE:9F:7D:1B:1D:E1:D6:EF:62:82:53:AA:70:89:2A:25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155A44/0EC8E42A088711ED891EE644C4F9AE02/ED947C26088911EDA7D9A84AC4F9AE02.roa Signing time: Sat 21 Jun 2025 01:19:47 +0000 ROA not before: Sat 21 Jun 2025 01:19:47 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 18255 IP address blocks: 202.86.32.0/24 maxlen: 24 202.86.33.0/24 maxlen: 24 202.86.34.0/24 maxlen: 24 202.86.36.0/24 maxlen: 24 203.56.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155A44/0EC8E42A088711ED891EE644C4F9AE02/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.crl rsync://rpki.apnic.net/member_repository/A9155A44/0EC8E42A088711ED891EE644C4F9AE02/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 01:57:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 658 (0x292) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155A44, serialNumber=6C9E0C2BFE9F7D1B1DE1D6EF628253AA70892A25 Validity Not Before: Jun 21 01:19:47 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=685608b3-9315 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:54:d7:00:98:a9:b7:4e:6e:4c:c3:ab:cb:d2: e6:22:3f:3d:a3:5e:88:e1:d0:f1:08:c1:59:2d:1f: 98:7e:04:47:d7:b0:8e:f8:0a:d4:19:f2:b2:1e:36: 06:da:f4:ea:d4:ab:b2:2a:bd:18:a8:7e:c1:d1:a7: 22:ae:8c:e6:7e:36:a4:f5:f3:67:42:c4:51:7a:d2: 4d:52:ad:df:c6:03:be:b9:bd:e7:b9:b5:6b:73:66: 58:af:73:5f:ff:f9:3b:0b:3c:1f:3c:60:ad:ef:bc: ac:36:52:16:8c:4c:33:52:79:c0:39:d6:ac:a4:af: 62:03:b7:48:88:df:05:b0:b6:15:32:a6:aa:c5:a3: eb:2f:95:94:f4:15:59:56:94:7c:b0:ac:f8:7b:d2: e2:f2:c6:8b:44:c9:83:5d:48:d3:b8:d7:96:f9:fa: e7:07:c1:5a:ea:18:ce:fa:5a:9c:2f:dc:09:fb:35: 67:69:4c:4e:6c:c4:e7:62:bb:b4:14:71:2f:29:9b: 68:b0:09:dd:f9:21:a5:5c:2f:9f:dd:ef:93:3b:39: 93:8d:65:81:8c:d6:03:37:db:59:22:53:a8:b1:5d: 20:ac:55:23:69:fc:38:94:4b:8c:73:f9:77:bd:f3: ab:50:e3:6f:a9:2f:c6:a2:b6:bb:6f:4d:98:b5:46: 22:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:BB:D0:F9:A6:54:A0:85:EE:23:8A:2F:AD:A5:AC:4A:C7:E0:CC:1D X509v3 Authority Key Identifier: keyid:6C:9E:0C:2B:FE:9F:7D:1B:1D:E1:D6:EF:62:82:53:AA:70:89:2A:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155A44/0EC8E42A088711ED891EE644C4F9AE02/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155A44/0EC8E42A088711ED891EE644C4F9AE02/ED947C26088911EDA7D9A84AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.86.32.0-202.86.34.255 202.86.36.0/24 203.56.233.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:33:f1:c6:c4:f0:2b:a7:cb:22:34:24:42:8d:5a:c2:ba:52: d4:0a:19:d2:77:20:0b:b8:d3:db:0a:fd:82:b9:9a:01:ee:23: f1:51:c8:7d:1f:c0:84:88:ea:07:dd:b8:8c:bd:a2:bf:2c:e7: a3:77:02:9c:60:92:13:53:3f:20:a9:07:df:82:bf:92:86:5f: 4d:96:d1:ee:98:de:1b:0c:81:db:cc:67:a7:26:84:97:e1:cb: 31:f4:86:c1:b6:c7:ec:44:26:a9:5a:06:42:d7:69:d5:f0:4d: 47:d2:b0:56:f6:99:9d:d3:a9:3d:71:a2:97:76:1c:91:50:e1: 9c:ef:92:5b:a1:c8:77:71:3b:a8:0f:d7:9b:c7:30:26:5e:1b: 3c:f1:fe:f8:44:28:24:2a:27:91:fa:32:ab:f7:0a:ea:21:16: 11:9b:86:36:f3:3b:1b:10:13:de:89:fd:13:3f:5d:b5:43:6f: 0b:9b:51:e1:3d:a6:cd:c3:8f:57:43:25:a8:af:a4:e0:a7:c3: 30:44:f7:c4:36:6e:99:53:75:e8:09:03:cf:3e:27:c5:d1:f1: 40:47:aa:c5:f6:af:ce:75:32:f2:6c:8a:0b:0b:17:81:2b:61: 69:7a:54:b0:1b:1a:4a:b2:ca:f6:3d:76:e4:51:32:21:7b:c1: 0b:05:73:32 -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgICApIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTVBNDQxMTAvBgNVBAUTKDZDOUUwQzJCRkU5RjdEMUIxREUxRDZFRjYyODI1M0FB NzA4OTJBMjUwHhcNMjUwNjIxMDExOTQ3WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODU2MDhiMy05MzE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtVTXAJipt05uTMOry9LmIj89o16I4dDxCMFZLR+YfgRH17CO+ArUGfKyHjYG 2vTq1KuyKr0YqH7B0acirozmfjak9fNnQsRRetJNUq3fxgO+ub3nubVrc2ZYr3Nf //k7CzwfPGCt77ysNlIWjEwzUnnAOdaspK9iA7dIiN8FsLYVMqaqxaPrL5WU9BVZ VpR8sKz4e9Li8saLRMmDXUjTuNeW+frnB8Fa6hjO+lqcL9wJ+zVnaUxObMTnYru0 FHEvKZtosAnd+SGlXC+f3e+TOzmTjWWBjNYDN9tZIlOosV0grFUjafw4lEuMc/l3 vfOrUONvqS/Gora7b02YtUYiNQIDAQABo4ICqTCCAqUwHQYDVR0OBBYEFHC70Pmm VKCF7iOKL62lrErH4MwdMB8GA1UdIwQYMBaAFGyeDCv+n30bHeHW72KCU6pwiSol MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NUE0NC8wRUM4RTQyQTA4 ODcxMUVEODkxRUU2NDRDNEY5QUUwMi9iSjRNS182ZmZSc2Q0ZGJ2WW9KVHFuQ0pL aVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JKNE1LXzZmZlJzZDRkYnZZb0pUcW5DSktpVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTVBNDQvMEVDOEU0MkEwODg3MTFFRDg5MUVFNjQ0QzRGOUFFMDIvRUQ5NDdDMjYw ODg5MTFFREE3RDlBODRBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMwYIKwYBBQUHAQcBAf8E JDAiMCAEAgABMBowDAMEBcpWIAMEAMpWIgMEAMpWJAMEAMs46TANBgkqhkiG9w0B AQsFAAOCAQEAezPxxsTwK6fLIjQkQo1awrpS1AoZ0ncgC7jT2wr9grmaAe4j8VHI fR/AhIjqB924jL2ivyzno3cCnGCSE1M/IKkH34K/koZfTZbR7pjeGwyB28xnpyaE l+HLMfSGwbbH7EQmqVoGQtdp1fBNR9KwVvaZndOpPXGil3YckVDhnO+SW6HId3E7 qA/Xm8cwJl4bPPH++EQoJConkfoyq/cK6iEWEZuGNvM7GxAT3on9Ez9dtUNvC5tR 4T2mzcOPV0MlqK+k4KfDMET3xDZumVN16AkDzz4nxdHxQEeqxfavznUy8myKCwsX gSthaXpUsBsaSrLK9j125FEyIXvBCwVzMg== -----END CERTIFICATE-----Generated at Thu Jul 3 14:05:30 2025 by rpki-client