$ rpki-client -vvf rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/1EA5984A0BE111ED9E3AA135C4F9AE02.roa File: 1EA5984A0BE111ED9E3AA135C4F9AE02.roa (raw, json) Hash identifier: TJ9ECbrNmrbj5mhfI5HTyIvIslW5iwcIqu2ptc1cXhA= Subject key identifier: E4:BD:39:DF:F6:A8:20:6C:E8:A0:F2:C6:07:85:A9:5F:65:2E:12:39 Certificate issuer: /CN=A9163998/serialNumber=7425AAE16DDB464A3E2B479C7A40C99023836BA0 Certificate serial: 02C5 Authority key identifier: 74:25:AA:E1:6D:DB:46:4A:3E:2B:47:9C:7A:40:C9:90:23:83:6B:A0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dCWq4W3bRko-K0ecekDJkCODa6A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/1EA5984A0BE111ED9E3AA135C4F9AE02.roa Signing time: Thu 19 Jun 2025 01:57:42 +0000 ROA not before: Thu 19 Jun 2025 01:57:42 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 137831 IP address blocks: 143.92.64.0/19 maxlen: 19 143.92.71.0/24 maxlen: 24 143.92.92.0/24 maxlen: 24 143.92.93.0/24 maxlen: 24 143.92.96.0/24 maxlen: 24 143.92.97.0/24 maxlen: 24 143.92.98.0/24 maxlen: 24 143.92.100.0/23 maxlen: 23 143.92.108.0/23 maxlen: 23 143.92.108.0/24 maxlen: 24 147.136.132.0/24 maxlen: 24 147.136.134.0/24 maxlen: 24 147.136.135.0/24 maxlen: 24 147.136.184.0/22 maxlen: 22 147.136.184.0/24 maxlen: 24 147.136.185.0/24 maxlen: 24 147.136.186.0/24 maxlen: 24 147.136.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.crl rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dCWq4W3bRko-K0ecekDJkCODa6A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 01:58:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 709 (0x2c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163998, serialNumber=7425AAE16DDB464A3E2B479C7A40C99023836BA0 Validity Not Before: Jun 19 01:57:42 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=68536e96-ba78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fa:d8:18:dd:d9:26:99:b5:b8:d7:2f:b7:6a: ca:de:c6:c4:62:55:45:20:ed:5e:db:91:67:24:83: 7d:86:77:a8:90:90:5a:67:3e:e8:d9:bf:91:08:f0: a0:f7:ee:4a:3e:d5:5b:6e:47:6a:49:59:2e:02:79: 20:e0:0f:30:ac:84:af:f3:e7:bc:dd:37:31:1d:98: 1c:d5:79:2b:30:33:12:6c:3a:44:fc:97:a7:10:16: 75:8f:0f:ed:e1:cc:e6:27:0a:1b:84:c3:c6:c0:50: f4:08:cd:1b:91:37:b1:85:bf:05:f6:ab:4b:50:e6: e1:27:3a:b8:61:d9:40:78:fb:f2:3a:73:2e:92:3c: 1b:7c:2e:7c:62:e5:d7:18:e2:92:c5:e0:1f:6d:ae: 85:4d:2d:95:0a:06:9f:06:61:22:e0:aa:07:80:87: e2:8c:73:ce:ee:dd:45:d8:b6:6f:16:b5:f7:e6:b1: dd:b6:72:e9:cf:82:53:fd:5c:7c:e6:8f:25:ea:9e: f1:9b:13:6e:d1:3e:b4:ee:cf:00:43:85:4e:78:a1: 66:83:31:47:b8:e6:9c:83:da:3d:88:27:d4:b2:b6: d6:d9:b6:d1:27:73:f1:ee:ab:c2:00:ec:97:2d:e1: 83:b0:33:59:15:d5:7f:a5:7c:fc:94:0f:00:69:8e: 77:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:BD:39:DF:F6:A8:20:6C:E8:A0:F2:C6:07:85:A9:5F:65:2E:12:39 X509v3 Authority Key Identifier: keyid:74:25:AA:E1:6D:DB:46:4A:3E:2B:47:9C:7A:40:C9:90:23:83:6B:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dCWq4W3bRko-K0ecekDJkCODa6A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/1EA5984A0BE111ED9E3AA135C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 143.92.64.0-143.92.98.255 143.92.100.0/23 143.92.108.0/23 147.136.132.0/24 147.136.134.0/23 147.136.184.0/22 Signature Algorithm: sha256WithRSAEncryption 00:08:5b:59:7f:9c:24:eb:c6:f1:ce:1e:e2:ed:f4:36:c0:cd: 7a:ea:c1:5d:61:4f:79:85:75:88:73:6d:fe:64:d4:57:b4:f6: 95:df:8e:10:22:4b:ff:e9:2e:32:44:88:f9:c0:43:19:a0:6c: 73:f8:b8:54:19:e2:16:80:e1:ad:ea:6a:e6:83:58:f8:17:1f: 37:5b:f2:3f:e9:cc:d1:2e:53:88:63:c4:82:e1:20:ea:64:ee: e2:38:20:13:4d:77:09:22:da:f5:5d:41:1d:53:1a:58:3c:0c: b3:c3:dc:93:e9:a5:b5:99:a0:77:e9:a8:47:ef:56:77:6c:a7: 66:01:7d:ac:5c:04:47:ff:a0:7a:2c:56:f1:d4:1a:c5:1f:8d: 52:02:6e:b1:06:02:3f:48:f6:ff:56:34:73:fa:d8:d6:e7:a3: a2:5f:a9:c9:37:f9:27:4a:bc:e8:4a:ea:41:fe:c9:c0:93:91: 23:aa:ef:8f:fc:f2:7e:be:12:0d:27:ed:c4:0b:b8:00:55:d4: 5d:ae:d9:23:e7:eb:8e:80:67:c6:9b:b3:8a:f0:3f:b4:97:b1: bf:00:8e:3f:4a:39:02:3b:84:4d:95:8d:8c:81:20:cb:14:b5: e3:88:91:d3:15:8f:d7:d6:9e:7d:23:4c:9f:c6:60:ff:cb:d7: 6a:1f:54:f1 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgICAsUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjM5OTgxMTAvBgNVBAUTKDc0MjVBQUUxNkREQjQ2NEEzRTJCNDc5QzdBNDBDOTkw MjM4MzZCQTAwHhcNMjUwNjE5MDE1NzQyWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODUzNmU5Ni1iYTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwPrYGN3ZJpm1uNcvt2rK3sbEYlVFIO1e25FnJIN9hneokJBaZz7o2b+RCPCg 9+5KPtVbbkdqSVkuAnkg4A8wrISv8+e83TcxHZgc1XkrMDMSbDpE/JenEBZ1jw/t 4czmJwobhMPGwFD0CM0bkTexhb8F9qtLUObhJzq4YdlAePvyOnMukjwbfC58YuXX GOKSxeAfba6FTS2VCgafBmEi4KoHgIfijHPO7t1F2LZvFrX35rHdtnLpz4JT/Vx8 5o8l6p7xmxNu0T607s8AQ4VOeKFmgzFHuOacg9o9iCfUsrbW2bbRJ3Px7qvCAOyX LeGDsDNZFdV/pXz8lA8AaY53tQIDAQABo4ICuzCCArcwHQYDVR0OBBYEFOS9Od/2 qCBs6KDyxgeFqV9lLhI5MB8GA1UdIwQYMBaAFHQlquFt20ZKPitHnHpAyZAjg2ug MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Mzk5OC8zMENDMDg0QTA4 REMxMUVEQkVERTYxMkJDNEY5QUUwMi9kQ1dxNFczYlJrby1LMGVjZWtESmtDT0Rh NkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2RDV3E0VzNiUmtvLUswZWNla0RKa0NPRGE2QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjM5OTgvMzBDQzA4NEEwOERDMTFFREJFREU2MTJCQzRGOUFFMDIvMUVBNTk4NEEw QkUxMTFFRDlFM0FBMTM1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRQYIKwYBBQUHAQcBAf8E NjA0MDIEAgABMCwwDAMEBo9cQAMEAI9cYgMEAY9cZAMEAY9cbAMEAJOIhAMEAZOI hgMEApOIuDANBgkqhkiG9w0BAQsFAAOCAQEAAAhbWX+cJOvG8c4e4u30NsDNeurB XWFPeYV1iHNt/mTUV7T2ld+OECJL/+kuMkSI+cBDGaBsc/i4VBniFoDhrepq5oNY +BcfN1vyP+nM0S5TiGPEguEg6mTu4jggE013CSLa9V1BHVMaWDwMs8Pck+mltZmg d+moR+9Wd2ynZgF9rFwER/+geixW8dQaxR+NUgJusQYCP0j2/1Y0c/rY1uejol+p yTf5J0q86ErqQf7JwJORI6rvj/zyfr4SDSftxAu4AFXUXa7ZI+frjoBnxpuzivA/ tJexvwCOP0o5AjuETZWNjIEgyxS144iR0xWP19aefSNMn8Zg/8vXah9U8Q== -----END CERTIFICATE-----Generated at Fri Jul 4 08:18:41 2025 by rpki-client