$ rpki-client -vvf rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/9DBB8670790211EC9EE24885C4F9AE02.roa File: 9DBB8670790211EC9EE24885C4F9AE02.roa (raw, json) Hash identifier: HAVp5cljtBnNfexhpbWp3fQD4oxFEGOqIu7ZTxc+Cn0= Subject key identifier: 93:F4:C9:70:AB:F8:67:B0:BC:62:F0:8D:87:C8:B1:7C:90:C4:A8:DB Certificate issuer: /CN=A915EE53/serialNumber=F8AA70916B6CA583C0363EB7A9A5F7F2627D7360 Certificate serial: 2651 Authority key identifier: F8:AA:70:91:6B:6C:A5:83:C0:36:3E:B7:A9:A5:F7:F2:62:7D:73:60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/9DBB8670790211EC9EE24885C4F9AE02.roa Signing time: Fri 04 Jul 2025 16:22:57 +0000 ROA not before: Fri 04 Jul 2025 16:22:57 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 140929 IP address blocks: 58.146.144.0/21 maxlen: 24 222.165.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.crl rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9809 (0x2651) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915EE53, serialNumber=F8AA70916B6CA583C0363EB7A9A5F7F2627D7360 Validity Not Before: Jul 4 16:22:57 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=6867ffe0-b103 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:bb:2c:bb:13:15:02:e0:f2:26:b1:3f:39:59: 51:77:a5:62:68:67:31:cb:9a:f1:48:f2:12:ab:73: a9:bc:41:b2:44:4f:e2:07:50:e1:a3:a9:b5:0b:cb: ba:96:0b:cf:7f:91:33:54:1a:83:04:21:50:10:a7: 34:d6:01:83:cf:07:7c:0f:f9:96:de:8a:97:6a:68: e6:6f:c7:f5:92:70:f8:74:c2:15:0b:17:ad:54:90: 76:a5:86:b5:fa:b4:cc:de:e3:bb:f6:1e:bc:ab:23: ff:de:b2:df:0b:80:16:46:21:9d:e3:55:b4:53:4b: 3f:34:cf:bd:1b:83:5c:f5:ee:01:c8:34:70:32:57: 62:66:3d:59:c6:ee:65:76:3b:31:0b:1a:a4:05:06: 25:cf:9f:32:6c:1a:c5:19:bf:d4:c9:4b:80:4e:ba: ed:39:17:44:8c:d7:b2:ac:33:65:c1:e2:9a:af:3c: 22:e9:02:eb:19:af:a1:aa:5a:7d:03:88:fa:5a:34: 1f:ce:e2:79:ac:db:08:58:5c:9f:8d:2d:f3:32:17: 7d:2d:bc:7b:ce:7b:11:e9:cc:36:6d:08:1e:53:fc: 55:d2:33:de:b8:e9:c4:da:fd:f0:3d:c7:73:c7:2e: ef:94:48:9c:5c:ef:2f:81:07:1e:65:bf:3b:78:a4: 64:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:F4:C9:70:AB:F8:67:B0:BC:62:F0:8D:87:C8:B1:7C:90:C4:A8:DB X509v3 Authority Key Identifier: keyid:F8:AA:70:91:6B:6C:A5:83:C0:36:3E:B7:A9:A5:F7:F2:62:7D:73:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/9DBB8670790211EC9EE24885C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 58.146.144.0/21 222.165.0.0/17 Signature Algorithm: sha256WithRSAEncryption 53:9c:44:8e:cf:cb:0e:92:60:20:b8:1c:eb:8d:e3:28:31:b1: 5d:6c:7c:83:2f:0b:31:5f:7d:0c:f3:78:f0:5f:36:55:84:25: 70:5e:3e:b6:19:e1:f5:82:34:7e:2a:77:a1:73:45:d1:45:1b: b7:5d:2d:02:e6:7d:36:2a:7d:fc:a8:43:c5:c8:0c:c0:82:e5: 9c:fc:d0:4f:25:4b:06:dc:d3:2b:7f:40:d0:0f:fe:86:69:0f: 3f:c4:9f:5b:a4:d5:56:d3:2e:25:c8:01:55:aa:ef:38:e1:59: 21:00:e5:c6:61:e9:e7:74:94:f2:fc:7f:9b:de:3d:96:ad:8b: 4d:7a:15:f1:e7:7f:35:a1:86:a0:bc:c8:5d:5c:6a:01:3f:93: 40:53:b6:0d:7e:72:94:3f:61:16:38:24:3d:d8:29:d3:f3:5d: 8c:7f:96:4e:b7:35:de:a4:98:2f:e3:41:f0:e0:c2:8b:67:27: de:e9:e7:b1:7e:01:6c:b9:ae:28:41:ec:e2:4e:ac:8e:aa:04: a5:47:df:16:58:b1:bf:c7:ef:09:a8:92:ff:b6:ca:6f:34:c1: 16:67:90:37:c3:9e:a8:ec:1d:88:70:f4:d2:03:c2:52:12:e7: ee:27:ee:c6:8f:14:c1:bb:0c:8e:92:57:21:a0:1f:a0:df:40: 20:aa:de:60 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICJlEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUVFNTMxMTAvBgNVBAUTKEY4QUE3MDkxNkI2Q0E1ODNDMDM2M0VCN0E5QTVGN0Yy NjI3RDczNjAwHhcNMjUwNzA0MTYyMjU3WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODY3ZmZlMC1iMTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4LssuxMVAuDyJrE/OVlRd6ViaGcxy5rxSPISq3OpvEGyRE/iB1Dho6m1C8u6 lgvPf5EzVBqDBCFQEKc01gGDzwd8D/mW3oqXamjmb8f1knD4dMIVCxetVJB2pYa1 +rTM3uO79h68qyP/3rLfC4AWRiGd41W0U0s/NM+9G4Nc9e4ByDRwMldiZj1Zxu5l djsxCxqkBQYlz58ybBrFGb/UyUuATrrtORdEjNeyrDNlweKarzwi6QLrGa+hqlp9 A4j6WjQfzuJ5rNsIWFyfjS3zMhd9Lbx7znsR6cw2bQgeU/xV0jPeuOnE2v3wPcdz xy7vlEicXO8vgQceZb87eKRkKwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFJP0yXCr +GewvGLwjYfIsXyQxKjbMB8GA1UdIwQYMBaAFPiqcJFrbKWDwDY+t6ml9/JifXNg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUU1My8zODUxMTg0MDQ1 ODgxMUU1OUIyRDgzNzFDNEY5QUUwMi8tS3B3a1d0c3BZUEFOajYzcWFYMzhtSjlj MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1LcHdrV3RzcFlQQU5qNjNxYVgzOG1KOWMyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUVFNTMvMzg1MTE4NDA0NTg4MTFFNTlCMkQ4MzcxQzRGOUFFMDIvOURCQjg2NzA3 OTAyMTFFQzlFRTI0ODg1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAM6kpADBAfepQAwDQYJKoZIhvcNAQELBQADggEBAFOcRI7P yw6SYCC4HOuN4ygxsV1sfIMvCzFffQzzePBfNlWEJXBePrYZ4fWCNH4qd6FzRdFF G7ddLQLmfTYqffyoQ8XIDMCC5Zz80E8lSwbc0yt/QNAP/oZpDz/En1uk1VbTLiXI AVWq7zjhWSEA5cZh6ed0lPL8f5vePZati016FfHnfzWhhqC8yF1cagE/k0BTtg1+ cpQ/YRY4JD3YKdPzXYx/lk63Nd6kmC/jQfDgwotnJ97p57F+AWy5rihB7OJOrI6q BKVH3xZYsb/H7wmokv+2ym80wRZnkDfDnqjsHYhw9NIDwlIS5+4n7saPFMG7DI6S VyGgH6DfQCCq3mA= -----END CERTIFICATE-----Generated at Sat Jul 5 08:23:15 2025 by rpki-client