$ rpki-client -vvf rpki.apnic.net/member_repository/A9191E19/10C7F0AA140F11EF8A4A7016C4F9AE02/680CA022140F11EF99D47F17C4F9AE02.roa File: 680CA022140F11EF99D47F17C4F9AE02.roa (raw, json) Hash identifier: D5rGbzNBp0qpzKteB7pJY43rBzORSmVBVYcN6zCKrOk= Subject key identifier: 06:B9:40:7E:97:9C:96:CC:12:9C:39:26:02:CE:B3:13:B0:16:11:C0 Certificate issuer: /CN=A9191E19/serialNumber=372081F7DBE2EF11A4411BD4E6AF86F32698CAFA Certificate serial: D4 Authority key identifier: 37:20:81:F7:DB:E2:EF:11:A4:41:1B:D4:E6:AF:86:F3:26:98:CA:FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NyCB99vi7xGkQRvU5q-G8yaYyvo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191E19/10C7F0AA140F11EF8A4A7016C4F9AE02/680CA022140F11EF99D47F17C4F9AE02.roa Signing time: Fri 27 Jun 2025 05:45:21 +0000 ROA not before: Fri 27 Jun 2025 05:45:21 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 18390 IP address blocks: 203.4.136.0/24 maxlen: 24 203.4.137.0/24 maxlen: 24 203.4.138.0/24 maxlen: 24 203.4.139.0/24 maxlen: 24 203.4.140.0/24 maxlen: 24 203.4.141.0/24 maxlen: 24 203.4.142.0/24 maxlen: 24 203.4.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191E19/10C7F0AA140F11EF8A4A7016C4F9AE02/NyCB99vi7xGkQRvU5q-G8yaYyvo.crl rsync://rpki.apnic.net/member_repository/A9191E19/10C7F0AA140F11EF8A4A7016C4F9AE02/NyCB99vi7xGkQRvU5q-G8yaYyvo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NyCB99vi7xGkQRvU5q-G8yaYyvo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 212 (0xd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191E19, serialNumber=372081F7DBE2EF11A4411BD4E6AF86F32698CAFA Validity Not Before: Jun 27 05:45:21 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=685e2ff1-ac3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:87:fc:1e:4d:26:03:ed:b8:d9:23:e0:b7:a4: 9c:9a:a4:02:80:ef:40:b3:3e:df:70:a9:c4:55:f0: a5:91:50:a2:47:06:2e:f2:fb:31:e5:7d:85:61:90: 29:4d:8e:a7:18:b6:9a:d3:7c:11:00:cd:34:e7:6b: 9b:4a:f2:00:b6:ef:35:1f:64:ab:8b:93:3f:36:0c: 15:a6:38:02:89:9b:1a:5d:b0:69:9d:98:b5:60:fc: 65:0f:92:b8:67:39:2f:b5:f5:31:8c:46:87:5b:ce: ac:37:5f:f6:ac:72:df:a9:64:bd:8d:e1:78:b6:a2: 65:46:4b:1b:9d:b6:3c:d1:ea:b2:64:6c:85:ba:39: 7f:dc:3f:8c:09:4a:09:fd:8b:ac:5a:78:7b:e6:7e: fb:99:90:b1:f2:d4:02:e5:5a:c7:bf:54:42:43:02: 68:1f:0c:71:ee:f7:e6:d8:c0:e4:61:6a:4a:e9:2a: 8c:32:f8:be:a0:d9:d3:0c:61:25:42:8c:a8:dc:ed: bb:9c:68:95:c3:61:58:07:6c:97:52:95:de:e4:f3: 37:ac:f4:6a:a0:7c:fd:98:d3:ea:1b:cc:66:ce:2d: 53:76:63:93:21:35:80:86:22:6e:6a:45:3f:0d:c9: fa:13:f3:db:e7:d9:d9:0a:33:2b:98:15:a2:52:f4: e1:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:B9:40:7E:97:9C:96:CC:12:9C:39:26:02:CE:B3:13:B0:16:11:C0 X509v3 Authority Key Identifier: keyid:37:20:81:F7:DB:E2:EF:11:A4:41:1B:D4:E6:AF:86:F3:26:98:CA:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191E19/10C7F0AA140F11EF8A4A7016C4F9AE02/NyCB99vi7xGkQRvU5q-G8yaYyvo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NyCB99vi7xGkQRvU5q-G8yaYyvo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191E19/10C7F0AA140F11EF8A4A7016C4F9AE02/680CA022140F11EF99D47F17C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.4.136.0/21 Signature Algorithm: sha256WithRSAEncryption 24:84:10:7f:18:4d:c5:59:2d:ad:bf:ca:09:b0:1e:ec:d9:6e: 65:6b:91:b6:86:25:23:b5:ee:f4:46:e0:85:a6:34:0a:7a:69: e1:f4:30:17:46:a1:5c:6b:15:98:82:f8:d6:48:24:99:e5:2c: 84:8e:5f:c9:57:4f:42:a0:81:74:f6:ae:9f:28:ad:63:8c:65: 2d:66:02:1f:77:b0:6d:f3:9f:3b:33:31:ee:83:13:ca:22:cc: 02:2e:90:ff:98:04:33:46:4b:2a:bc:c2:f9:00:71:52:71:cc: 1f:05:b3:21:a3:8e:e2:ad:a3:e1:00:30:be:5b:be:6a:79:aa: a9:92:40:1e:44:48:ef:af:a8:3b:81:1d:04:0d:4b:1d:47:26: 63:e2:f2:75:97:38:97:87:1e:69:7f:9d:a4:09:be:9c:51:00: 12:e6:98:36:82:95:85:41:21:c0:8f:fb:90:1e:3a:ba:72:7b: b8:9d:63:f1:e5:be:07:16:b9:ea:fa:f4:40:38:8f:95:77:1a: 42:ce:a7:f9:ca:93:f9:a3:7f:13:e6:e5:2e:59:4f:83:d5:8d: aa:0f:81:57:6d:bd:20:a0:6d:80:40:77:59:2b:f8:bb:6c:ba: 69:0c:65:0b:52:2c:b4:e8:46:21:7d:d5:ea:8b:c2:92:7f:3e: a0:dd:61:a9 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICANQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFFMTkxMTAvBgNVBAUTKDM3MjA4MUY3REJFMkVGMTFBNDQxMUJENEU2QUY4NkYz MjY5OENBRkEwHhcNMjUwNjI3MDU0NTIxWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODVlMmZmMS1hYzNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6of8Hk0mA+242SPgt6ScmqQCgO9Asz7fcKnEVfClkVCiRwYu8vsx5X2FYZAp TY6nGLaa03wRAM0052ubSvIAtu81H2Sri5M/NgwVpjgCiZsaXbBpnZi1YPxlD5K4 ZzkvtfUxjEaHW86sN1/2rHLfqWS9jeF4tqJlRksbnbY80eqyZGyFujl/3D+MCUoJ /YusWnh75n77mZCx8tQC5VrHv1RCQwJoHwxx7vfm2MDkYWpK6SqMMvi+oNnTDGEl Qoyo3O27nGiVw2FYB2yXUpXe5PM3rPRqoHz9mNPqG8xmzi1TdmOTITWAhiJuakU/ Dcn6E/Pb59nZCjMrmBWiUvThuwIDAQABo4IClTCCApEwHQYDVR0OBBYEFAa5QH6X nJbMEpw5JgLOsxOwFhHAMB8GA1UdIwQYMBaAFDcggffb4u8RpEEb1OavhvMmmMr6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUUxOS8xMEM3RjBBQTE0 MEYxMUVGOEE0QTcwMTZDNEY5QUUwMi9OeUNCOTl2aTd4R2tRUnZVNXEtRzh5YVl5 dm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL055Q0I5OXZpN3hHa1FSdlU1cS1HOHlhWXl2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTFFMTkvMTBDN0YwQUExNDBGMTFFRjhBNEE3MDE2QzRGOUFFMDIvNjgwQ0EwMjIx NDBGMTFFRjk5RDQ3RjE3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAPLBIgwDQYJKoZIhvcNAQELBQADggEBACSEEH8YTcVZLa2/ ygmwHuzZbmVrkbaGJSO17vRG4IWmNAp6aeH0MBdGoVxrFZiC+NZIJJnlLISOX8lX T0KggXT2rp8orWOMZS1mAh93sG3znzszMe6DE8oizAIukP+YBDNGSyq8wvkAcVJx zB8FsyGjjuKto+EAML5bvmp5qqmSQB5ESO+vqDuBHQQNSx1HJmPi8nWXOJeHHml/ naQJvpxRABLmmDaClYVBIcCP+5AeOrpye7idY/HlvgcWuer69EA4j5V3GkLOp/nK k/mjfxPm5S5ZT4PVjaoPgVdtvSCgbYBAd1kr+LtsumkMZQtSLLToRiF91eqLwpJ/ PqDdYak= -----END CERTIFICATE-----Generated at Thu Jul 3 09:53:24 2025 by rpki-client