$ rpki-client -vvf rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/24108E38125C11EFA53AA21EC4F9AE02.roa File: 24108E38125C11EFA53AA21EC4F9AE02.roa (raw, json) Hash identifier: s101UD1+GGZxOE2yXi7lVR2XIPtVbKsE3uJK6JYC/EE= Subject key identifier: BA:9B:B1:DA:2F:77:01:DF:42:4C:74:7C:88:A5:B1:47:FF:A5:96:A0 Certificate issuer: /CN=A9111318/serialNumber=806ABFF463594CAA30DE70A311AE2F849189BC64 Certificate serial: 357C Authority key identifier: 80:6A:BF:F4:63:59:4C:AA:30:DE:70:A3:11:AE:2F:84:91:89:BC:64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/24108E38125C11EFA53AA21EC4F9AE02.roa Signing time: Sat 14 Jun 2025 14:50:46 +0000 ROA not before: Sat 14 Jun 2025 14:50:46 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 38022 IP address blocks: 163.7.128.0/19 maxlen: 19 163.7.128.0/24 maxlen: 24 163.7.137.0/24 maxlen: 24 163.7.144.0/21 maxlen: 21 210.7.32.0/20 maxlen: 20 2404:138::/32 maxlen: 32 2404:138:204::/48 maxlen: 48 2404:138:205::/48 maxlen: 48 2404:138:206::/48 maxlen: 48 2404:138:207::/48 maxlen: 48 2404:138:1305::/48 maxlen: 48 2404:138:1306::/48 maxlen: 48 2404:139::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.crl rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 14:41:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13692 (0x357c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111318, serialNumber=806ABFF463594CAA30DE70A311AE2F849189BC64 Validity Not Before: Jun 14 14:50:46 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=684d8c46-7a18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4d:8b:95:41:f5:e3:4a:7e:ea:31:d0:c5:5a: 4e:b4:3f:69:57:8c:fc:7c:f8:f1:0e:5f:cc:6e:f8: 98:ba:80:92:71:99:cc:95:84:bf:97:0c:d4:0a:42: e8:27:5a:a9:48:a9:cb:5e:c4:e9:b5:67:2d:f0:ab: d0:35:ae:61:bd:9c:3b:87:4e:71:21:22:2c:9e:99: 90:2d:c3:cb:46:db:d0:2a:19:ee:51:f2:72:74:f9: cc:b1:9e:fd:c0:f4:57:00:a6:19:df:ac:22:73:36: d3:7e:78:46:aa:66:3c:ad:5b:b3:65:57:e6:6d:b0: 26:2d:be:de:7c:a6:b6:2a:cf:c5:00:47:33:6e:36: 54:34:9b:2d:70:2a:cf:3e:a5:89:ba:e9:ff:8a:9c: 44:5b:e4:3e:67:ba:a0:1f:c5:ea:2f:90:19:ff:09: 2e:40:d4:73:68:1d:99:29:cd:2f:dc:3e:64:9e:67: 5d:64:2d:b8:a5:22:aa:9d:00:08:3a:4d:25:ee:aa: 68:db:1d:d1:e4:4b:29:65:77:64:c3:37:d6:a2:c2: b3:ff:7b:b5:95:de:05:9d:ea:fd:39:3e:20:db:92: 1c:9f:00:06:64:01:91:50:90:91:53:3a:95:ec:cf: d8:04:97:35:47:cd:70:c1:76:c3:56:ea:92:92:32: 31:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:9B:B1:DA:2F:77:01:DF:42:4C:74:7C:88:A5:B1:47:FF:A5:96:A0 X509v3 Authority Key Identifier: keyid:80:6A:BF:F4:63:59:4C:AA:30:DE:70:A3:11:AE:2F:84:91:89:BC:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/24108E38125C11EFA53AA21EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 163.7.128.0/19 210.7.32.0/20 IPv6: 2404:138::/31 Signature Algorithm: sha256WithRSAEncryption 39:b9:ba:be:ba:27:75:de:cc:b7:34:a7:1d:b4:82:44:84:46: 08:90:90:96:8a:5b:82:ed:a2:6b:a8:79:b3:30:7d:ae:1b:7f: e5:6f:6b:5f:9f:90:5e:32:1d:91:f9:60:5a:ae:aa:29:ed:f3: 49:51:47:fe:fc:2f:17:14:6a:b5:b9:9b:15:64:9b:ec:7f:17: 8e:ee:9d:8f:b3:4a:1e:0b:68:35:77:65:fa:cc:f3:1c:7f:b3: 64:03:5a:06:5a:a6:2b:1b:7d:05:8c:90:e6:e3:c6:45:05:fe: 72:ce:60:e8:36:5d:7a:c6:6b:ba:e2:b2:b8:e5:92:ba:0c:6d: 3d:d8:30:a1:a7:bb:13:7c:74:74:90:df:c9:8e:81:6b:18:41: 66:f5:1f:9a:e4:e7:15:cb:af:ac:15:c4:da:73:dc:ef:35:1f: 18:fa:a2:28:e4:06:7c:33:9b:57:cc:24:30:4d:f6:2e:e1:e1: d0:67:aa:ca:e6:e7:ee:91:21:b6:1b:7d:09:b0:04:68:23:e5: ea:ec:be:91:e1:d5:5d:f0:12:b1:31:89:e5:1c:10:b9:51:04: db:40:51:6c:53:12:45:21:bc:4d:77:14:4a:8a:99:08:6c:33: 28:69:11:ec:1e:8a:3c:12:9d:c9:e7:0d:ab:0e:6e:4c:35:fc: 79:fa:5f:cf -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICNXwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTEzMTgxMTAvBgNVBAUTKDgwNkFCRkY0NjM1OTRDQUEzMERFNzBBMzExQUUyRjg0 OTE4OUJDNjQwHhcNMjUwNjE0MTQ1MDQ2WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODRkOGM0Ni03YTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvE2LlUH140p+6jHQxVpOtD9pV4z8fPjxDl/MbviYuoCScZnMlYS/lwzUCkLo J1qpSKnLXsTptWct8KvQNa5hvZw7h05xISIsnpmQLcPLRtvQKhnuUfJydPnMsZ79 wPRXAKYZ36wiczbTfnhGqmY8rVuzZVfmbbAmLb7efKa2Ks/FAEczbjZUNJstcCrP PqWJuun/ipxEW+Q+Z7qgH8XqL5AZ/wkuQNRzaB2ZKc0v3D5knmddZC24pSKqnQAI Ok0l7qpo2x3R5EspZXdkwzfWosKz/3u1ld4Fner9OT4g25IcnwAGZAGRUJCRUzqV 7M/YBJc1R81wwXbDVuqSkjIxYQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFLqbsdov dwHfQkx0fIilsUf/pZagMB8GA1UdIwQYMBaAFIBqv/RjWUyqMN5woxGuL4SRibxk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTMxOC9EQzc0NTFGMjFE OTExMUUyOThFNzQ2RjQwOEIwMkNEMi9nR3FfOUdOWlRLb3czbkNqRWE0dmhKR0p2 R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dHcV85R05aVEtvdzNuQ2pFYTR2aEpHSnZHUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTEzMTgvREM3NDUxRjIxRDkxMTFFMjk4RTc0NkY0MDhCMDJDRDIvMjQxMDhFMzgx MjVDMTFFRkE1M0FBMjFFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAWjB4ADBATSByAwDQQCAAIwBwMFASQEATgwDQYJKoZIhvcN AQELBQADggEBADm5ur66J3XezLc0px20gkSERgiQkJaKW4LtomuoebMwfa4bf+Vv a1+fkF4yHZH5YFquqint80lRR/78LxcUarW5mxVkm+x/F47unY+zSh4LaDV3ZfrM 8xx/s2QDWgZapisbfQWMkObjxkUF/nLOYOg2XXrGa7risrjlkroMbT3YMKGnuxN8 dHSQ38mOgWsYQWb1H5rk5xXLr6wVxNpz3O81Hxj6oijkBnwzm1fMJDBN9i7h4dBn qsrm5+6RIbYbfQmwBGgj5ersvpHh1V3wErExieUcELlRBNtAUWxTEkUhvE13FEqK mQhsMyhpEeweijwSncnnDasObkw1/Hn6X88= -----END CERTIFICATE-----Generated at Thu Jun 19 04:55:41 2025 by rpki-client