$ rpki-client -vvf rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/80D77ED8D8A811EB85D5E456C4F9AE02.roa File: 80D77ED8D8A811EB85D5E456C4F9AE02.roa (raw, json) Hash identifier: OIkPyY1gexI0QB7Mc75F4AkfEDtSi4kbvtIlfRRk1O0= Subject key identifier: 63:51:CB:31:C3:E6:EB:76:A3:97:FB:48:66:B3:73:D0:1C:16:4B:AE Certificate issuer: /CN=A9186684/serialNumber=34A1232EA718469EADB7ADBC4CD9E00DF6A85206 Certificate serial: 05C0 Authority key identifier: 34:A1:23:2E:A7:18:46:9E:AD:B7:AD:BC:4C:D9:E0:0D:F6:A8:52:06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKEjLqcYRp6tt628TNngDfaoUgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/80D77ED8D8A811EB85D5E456C4F9AE02.roa Signing time: Mon 18 Aug 2025 23:35:31 +0000 ROA not before: Mon 18 Aug 2025 23:35:31 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 24110 IP address blocks: 202.41.14.0/23 maxlen: 24 202.124.206.0/23 maxlen: 24 203.55.35.0/24 maxlen: 24 203.55.36.0/24 maxlen: 24 203.57.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.crl rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKEjLqcYRp6tt628TNngDfaoUgY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:17:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1472 (0x5c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186684, serialNumber=34A1232EA718469EADB7ADBC4CD9E00DF6A85206 Validity Not Before: Aug 18 23:35:31 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68a3b8c3-2cbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b8:b1:75:9b:36:27:eb:17:c0:bb:69:f9:af: a6:6b:14:b8:f9:03:f5:d3:8d:89:be:58:87:4d:98: 78:79:43:48:52:86:d8:ad:18:b2:b0:bd:7b:df:b7: 6b:35:d7:fb:df:de:4f:67:73:71:a5:02:00:0d:6a: e6:20:d4:3b:12:fd:aa:ab:95:b1:7b:42:8a:b0:48: d6:b6:f2:3a:3b:99:93:4f:fe:b9:1b:21:1f:6b:40: f4:70:ae:8b:70:37:1d:c1:17:ea:22:3a:d5:7b:02: db:a9:b3:ee:fd:2c:c5:d6:2e:86:17:92:1b:c8:8a: d5:cb:b1:09:55:ec:d7:60:b8:c3:47:63:29:f4:44: ff:b8:48:9e:fb:09:44:32:6f:94:f2:77:cc:b4:bd: b1:14:6e:e5:4b:34:8a:0b:4c:af:8b:4d:11:54:27: 4d:6b:39:d2:b5:03:9b:7c:48:b4:bb:c1:40:b1:8a: f3:76:61:b3:c0:34:f4:44:82:63:ce:4f:96:b8:35: bf:e7:1e:c3:5d:15:3b:51:ea:66:4f:99:fd:ab:51: d4:e8:3b:d3:b5:f8:c3:89:b0:11:b1:d4:69:60:81: d2:5d:ee:7c:4a:83:ad:6f:0a:45:14:e7:1f:d0:b5: 71:bc:3f:b8:1c:d4:72:21:76:ce:2a:43:43:53:a0: c3:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:51:CB:31:C3:E6:EB:76:A3:97:FB:48:66:B3:73:D0:1C:16:4B:AE X509v3 Authority Key Identifier: keyid:34:A1:23:2E:A7:18:46:9E:AD:B7:AD:BC:4C:D9:E0:0D:F6:A8:52:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKEjLqcYRp6tt628TNngDfaoUgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/80D77ED8D8A811EB85D5E456C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.41.14.0/23 202.124.206.0/23 203.55.35.0-203.55.36.255 203.57.207.0/24 Signature Algorithm: sha256WithRSAEncryption 32:11:a7:20:f4:15:d9:ef:7f:5e:35:86:3a:82:86:ca:35:52: 15:62:57:ca:85:40:04:e5:50:77:d1:c1:78:93:09:dd:e0:47: 08:92:b5:4d:59:91:ab:7a:f3:64:8b:ff:0e:39:6c:ae:4f:3d: 8f:c2:64:d9:bd:5f:e0:46:6d:6e:ba:be:de:6b:fe:23:0a:6a: e2:c0:12:b6:3f:14:53:c5:e1:98:53:df:2a:11:df:7e:54:82: 76:91:08:76:8a:a1:29:00:d0:67:8a:26:ee:4d:ea:eb:0d:22: 35:88:25:9c:ef:6c:0e:0a:d0:1b:f1:fe:78:4e:e0:83:e8:86: c0:8a:76:fb:fe:49:f0:28:41:41:bf:8f:97:2a:a7:87:12:3c: f1:d2:f6:e9:ac:3e:46:21:27:60:ac:6c:d0:f5:10:4f:7e:06: f7:78:74:97:1f:f5:70:3e:be:86:07:9f:79:a7:6a:ea:5b:ae: a7:9e:ad:77:7b:d2:d3:d8:70:6e:20:d0:32:21:c0:01:2d:28: 13:26:1a:97:0c:5f:77:ac:c4:b5:12:4e:31:87:22:c9:70:74: bb:19:ea:8c:7c:14:d7:47:1b:dd:2e:62:ae:48:e1:d6:c9:c2: 5f:3c:5a:bd:74:bb:67:83:a6:8f:0d:ce:dd:b3:9b:46:d2:6a: 9d:fc:08:ec -----BEGIN CERTIFICATE----- MIIFizCCBHOgAwIBAgICBcAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY2ODQxMTAvBgNVBAUTKDM0QTEyMzJFQTcxODQ2OUVBREI3QURCQzRDRDlFMDBE RjZBODUyMDYwHhcNMjUwODE4MjMzNTMxWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGEzYjhjMy0yY2JiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoLixdZs2J+sXwLtp+a+maxS4+QP1042JvliHTZh4eUNIUobYrRiysL1737dr Ndf7395PZ3NxpQIADWrmINQ7Ev2qq5Wxe0KKsEjWtvI6O5mTT/65GyEfa0D0cK6L cDcdwRfqIjrVewLbqbPu/SzF1i6GF5IbyIrVy7EJVezXYLjDR2Mp9ET/uEie+wlE Mm+U8nfMtL2xFG7lSzSKC0yvi00RVCdNaznStQObfEi0u8FAsYrzdmGzwDT0RIJj zk+WuDW/5x7DXRU7UepmT5n9q1HU6DvTtfjDibARsdRpYIHSXe58SoOtbwpFFOcf 0LVxvD+4HNRyIXbOKkNDU6DDHwIDAQABo4ICrzCCAqswHQYDVR0OBBYEFGNRyzHD 5ut2o5f7SGazc9AcFkuuMB8GA1UdIwQYMBaAFDShIy6nGEaerbetvEzZ4A32qFIG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjY4NC8zNkI4NkFEQ0Q4 OUYxMUVCQUI5OEM1NUFDNEY5QUUwMi9OS0VqTHFjWVJwNnR0NjI4VE5uZ0RmYW9V Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05LRWpMcWNZUnA2dHQ2MjhUTm5nRGZhb1VnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODY2ODQvMzZCODZBRENEODlGMTFFQkFCOThDNTVBQzRGOUFFMDIvODBENzdFRDhE OEE4MTFFQjg1RDVFNDU2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOQYIKwYBBQUHAQcBAf8E KjAoMCYEAgABMCADBAHKKQ4DBAHKfM4wDAMEAMs3IwMEAMs3JAMEAMs5zzANBgkq hkiG9w0BAQsFAAOCAQEAMhGnIPQV2e9/XjWGOoKGyjVSFWJXyoVABOVQd9HBeJMJ 3eBHCJK1TVmRq3rzZIv/Djlsrk89j8Jk2b1f4EZtbrq+3mv+Iwpq4sAStj8UU8Xh mFPfKhHfflSCdpEIdoqhKQDQZ4om7k3q6w0iNYglnO9sDgrQG/H+eE7gg+iGwIp2 +/5J8ChBQb+PlyqnhxI88dL26aw+RiEnYKxs0PUQT34G93h0lx/1cD6+hgefeadq 6luup56td3vS09hwbiDQMiHAAS0oEyYalwxfd6zEtRJOMYciyXB0uxnqjHwU10cb 3S5irkjh1snCXzxavXS7Z4Omjw3O3bObRtJqnfwI7A== -----END CERTIFICATE-----Generated at Sun Aug 24 05:20:07 2025 by rpki-client