$ rpki-client -vvf rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/493CABD04FEE11F0B866DF81C4F9AE02.roa File: 493CABD04FEE11F0B866DF81C4F9AE02.roa (raw, json) Hash identifier: hVI5f3OngSrJ6IFISwTQMQm8YsnsRDaEoKxA88qPW7o= Subject key identifier: F9:45:F3:1F:7B:A4:CE:7D:C3:0A:53:FD:40:50:BB:E8:9E:CF:A6:08 Certificate issuer: /CN=A918C661/serialNumber=8BF7E2930CFC6EEB916E7390F893E0100BA93B32 Certificate serial: 0A15 Authority key identifier: 8B:F7:E2:93:0C:FC:6E:EB:91:6E:73:90:F8:93:E0:10:0B:A9:3B:32 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/493CABD04FEE11F0B866DF81C4F9AE02.roa Signing time: Wed 25 Jun 2025 06:07:41 +0000 ROA not before: Wed 25 Jun 2025 06:07:41 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 4907 IP address blocks: 137.220.136.0/24 maxlen: 24 137.220.139.0/24 maxlen: 24 137.220.140.0/24 maxlen: 24 137.220.150.0/24 maxlen: 24 137.220.151.0/24 maxlen: 24 137.220.152.0/24 maxlen: 24 137.220.153.0/24 maxlen: 24 137.220.154.0/24 maxlen: 24 137.220.155.0/24 maxlen: 24 137.220.156.0/24 maxlen: 24 137.220.157.0/24 maxlen: 24 137.220.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.crl rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:11:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2581 (0xa15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C661, serialNumber=8BF7E2930CFC6EEB916E7390F893E0100BA93B32 Validity Not Before: Jun 25 06:07:41 2025 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=685b922d-eb96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:0f:3f:bd:f9:80:61:ed:15:ea:42:9b:1b:25: 3b:f9:fb:67:5b:38:46:df:71:a1:9d:10:1b:74:67: d5:83:3f:8e:aa:fd:a4:2c:d3:64:4e:4a:05:01:53: cc:6d:75:ee:bc:7d:ba:5d:3b:0a:0d:8c:3e:b8:2e: 27:bf:05:2f:7e:23:6d:97:24:92:b8:24:b5:03:84: c8:81:5a:46:c9:fc:29:41:4e:56:21:49:ca:05:fa: 74:72:e1:d3:69:a0:79:7e:1d:27:53:06:fc:e9:64: 70:d6:99:ed:c8:11:d9:4c:29:e6:5d:42:4c:b0:a3: cb:49:80:a2:29:88:92:48:fa:8d:01:45:62:81:d2: 10:2b:45:0b:e6:91:c4:3f:5a:79:cf:59:b4:de:8f: 61:dd:35:12:38:18:81:f9:a3:48:5c:21:15:e6:6e: cf:e2:76:29:c9:9c:66:a8:90:40:48:e7:92:0d:97: 48:60:f7:82:2e:ce:9e:5a:29:2f:8a:cb:4b:10:6f: 03:36:66:96:5e:fa:ba:31:2d:08:db:c5:06:e3:72: 7c:2a:9d:9a:25:c4:86:17:5f:e6:c1:a0:3f:96:48: 48:82:aa:44:1a:01:0a:71:1f:87:3c:b0:61:76:a3: 49:57:ca:d7:98:cb:a1:bc:b8:ea:44:d7:4f:30:c2: 76:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:45:F3:1F:7B:A4:CE:7D:C3:0A:53:FD:40:50:BB:E8:9E:CF:A6:08 X509v3 Authority Key Identifier: keyid:8B:F7:E2:93:0C:FC:6E:EB:91:6E:73:90:F8:93:E0:10:0B:A9:3B:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/493CABD04FEE11F0B866DF81C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 137.220.136.0/24 137.220.139.0-137.220.140.255 137.220.150.0-137.220.158.255 Signature Algorithm: sha256WithRSAEncryption 68:48:58:86:75:54:9d:d7:a1:ce:a1:c0:36:54:84:c4:15:e5: c3:04:02:30:20:82:02:08:65:4d:96:5c:d0:af:4e:66:6c:e5: 48:b2:4f:97:b5:36:9e:95:c3:26:ea:96:19:e3:56:c2:de:0b: 6e:84:9d:33:41:f3:ee:e3:a4:75:ca:78:1e:14:d5:31:85:3c: 62:da:89:0f:da:df:89:90:9a:bb:68:99:d5:82:47:a4:d7:c6: b5:be:dc:bf:77:e2:4b:e8:aa:0a:17:75:c7:6c:00:08:b3:78: 7e:a4:39:bc:ed:3b:1d:dd:67:2c:98:06:b3:c5:fc:0b:3f:8c: 4f:05:d5:fa:4e:8b:57:3d:06:cd:76:0c:54:23:00:23:dc:5a: 68:c6:b5:11:9d:c3:df:ff:0f:88:91:c5:45:60:07:33:e2:a8: 26:56:0f:52:b9:f0:4f:1a:10:f2:73:67:88:1b:4f:91:52:66: 73:be:a7:45:b3:99:f1:ff:6d:f5:f1:34:43:a3:6b:a2:d4:56: 3a:f1:81:e1:be:ca:e3:ae:20:fb:b4:72:f0:1a:56:bf:07:5d: 21:18:e2:26:88:ca:67:f8:05:b0:17:59:3d:fe:77:5c:81:0c: ab:5a:ae:7d:2b:c8:13:63:e7:80:13:37:15:f2:dc:da:6a:c3: 1c:83:85:4f -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgICChUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM2NjExMTAvBgNVBAUTKDhCRjdFMjkzMENGQzZFRUI5MTZFNzM5MEY4OTNFMDEw MEJBOTNCMzIwHhcNMjUwNjI1MDYwNzQxWhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODViOTIyZC1lYjk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0w8/vfmAYe0V6kKbGyU7+ftnWzhG33GhnRAbdGfVgz+Oqv2kLNNkTkoFAVPM bXXuvH26XTsKDYw+uC4nvwUvfiNtlySSuCS1A4TIgVpGyfwpQU5WIUnKBfp0cuHT aaB5fh0nUwb86WRw1pntyBHZTCnmXUJMsKPLSYCiKYiSSPqNAUVigdIQK0UL5pHE P1p5z1m03o9h3TUSOBiB+aNIXCEV5m7P4nYpyZxmqJBASOeSDZdIYPeCLs6eWikv istLEG8DNmaWXvq6MS0I28UG43J8Kp2aJcSGF1/mwaA/lkhIgqpEGgEKcR+HPLBh dqNJV8rXmMuhvLjqRNdPMMJ23wIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFPlF8x97 pM59wwpT/UBQu+iez6YIMB8GA1UdIwQYMBaAFIv34pMM/G7rkW5zkPiT4BALqTsy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzY2MS8wNEFBQjI5RTgz NkQxMUVBQjRBMkQ3NkRDNEY5QUUwMi9pX2Zpa3d6OGJ1dVJibk9RLUpQZ0VBdXBP ekkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lfZmlrd3o4YnV1UmJuT1EtSlBnRUF1cE96SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEM2NjEvMDRBQUIyOUU4MzZEMTFFQUI0QTJENzZEQzRGOUFFMDIvNDkzQ0FCRDA0 RkVFMTFGMEI4NjZERjgxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOwYIKwYBBQUHAQcBAf8E LDAqMCgEAgABMCIDBACJ3IgwDAMEAInciwMEAIncjDAMAwQBidyWAwQAidyeMA0G CSqGSIb3DQEBCwUAA4IBAQBoSFiGdVSd16HOocA2VITEFeXDBAIwIIICCGVNllzQ r05mbOVIsk+XtTaelcMm6pYZ41bC3gtuhJ0zQfPu46R1yngeFNUxhTxi2okP2t+J kJq7aJnVgkek18a1vty/d+JL6KoKF3XHbAAIs3h+pDm87Tsd3WcsmAazxfwLP4xP BdX6TotXPQbNdgxUIwAj3FpoxrURncPf/w+IkcVFYAcz4qgmVg9SufBPGhDyc2eI G0+RUmZzvqdFs5nx/2318TRDo2ui1FY68YHhvsrjriD7tHLwGla/B10hGOImiMpn +AWwF1k9/ndcgQyrWq59K8gTY+eAEzcV8tzaasMcg4VP -----END CERTIFICATE-----Generated at Thu Jul 3 10:03:15 2025 by rpki-client