$ rpki-client -vvf rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/1EEE3E0AC35111EE9D744F36C4F9AE02.roa File: 1EEE3E0AC35111EE9D744F36C4F9AE02.roa (raw, json) Hash identifier: 5YdHJezTTAq6NbRIi4l4/6Fihe+icCcCreH0PZW2XgQ= Subject key identifier: DF:88:49:66:29:E7:AE:95:6B:2F:61:B1:B6:C3:22:B9:B2:00:0C:D8 Certificate issuer: /CN=A911C5B0/serialNumber=7A961769549E0AAD0A9BF9925683BAEF733A2F1A Certificate serial: 350A Authority key identifier: 7A:96:17:69:54:9E:0A:AD:0A:9B:F9:92:56:83:BA:EF:73:3A:2F:1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epYXaVSeCq0Km_mSVoO673M6Lxo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/1EEE3E0AC35111EE9D744F36C4F9AE02.roa Signing time: Wed 30 Jul 2025 14:50:17 +0000 ROA not before: Wed 30 Jul 2025 14:50:17 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 17901 IP address blocks: 210.246.156.0/23 maxlen: 24 210.246.194.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.crl rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epYXaVSeCq0Km_mSVoO673M6Lxo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13578 (0x350a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C5B0, serialNumber=7A961769549E0AAD0A9BF9925683BAEF733A2F1A Validity Not Before: Jul 30 14:50:17 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=688a3129-ce31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:fe:b6:c4:9e:e6:4d:17:5d:88:73:76:98:84: f9:47:97:12:38:ea:8b:87:78:ec:14:99:d4:9e:74: f0:73:93:bd:58:e7:b0:be:25:e0:1f:cb:57:c6:65: de:05:42:13:05:e8:dc:e7:11:2d:53:97:ff:22:b6: c0:c6:e7:b2:85:73:16:0b:3e:02:55:a7:59:d1:45: 9f:a1:b7:26:69:f0:4a:36:c2:e4:b3:2e:b0:32:43: 87:c6:c5:93:a5:56:61:ec:09:7f:d7:dd:53:09:b5: f2:91:a4:90:4f:84:bc:13:8d:32:bc:1a:db:f4:92: b3:cf:ac:2a:e6:36:0a:f2:e0:27:11:1a:39:bf:23: 39:88:06:a4:53:e5:aa:0e:3c:50:4a:4a:14:f0:87: ff:02:ee:b8:df:cd:7c:cd:3f:af:9a:b2:ec:95:02: 03:bc:a9:b0:8f:0e:81:b9:5f:ea:56:ce:c6:5c:83: 36:32:67:d5:5c:78:c5:e8:98:a1:ea:c3:1f:35:2d: 16:61:3d:80:c4:2d:df:f4:b6:b4:62:da:b5:81:06: ce:9a:76:5b:f4:8e:9a:5d:58:6f:c1:74:1b:e4:21: cb:b2:7f:62:5c:04:8c:43:9f:6d:da:5d:f1:c4:13: 11:90:41:62:67:48:89:31:ae:0d:c2:54:26:22:53: 7d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:88:49:66:29:E7:AE:95:6B:2F:61:B1:B6:C3:22:B9:B2:00:0C:D8 X509v3 Authority Key Identifier: keyid:7A:96:17:69:54:9E:0A:AD:0A:9B:F9:92:56:83:BA:EF:73:3A:2F:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epYXaVSeCq0Km_mSVoO673M6Lxo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/1EEE3E0AC35111EE9D744F36C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.246.156.0/23 210.246.194.0/23 Signature Algorithm: sha256WithRSAEncryption 9c:bb:2b:b2:7b:77:6b:eb:63:fd:e9:8f:6b:ec:1c:6b:55:7c: 1a:af:1f:be:54:20:b3:cb:fe:56:33:80:fd:39:a3:87:5f:93: 05:6e:8b:f0:3c:e7:cb:d3:de:16:63:11:45:04:b0:46:c9:13: 2b:98:22:8e:74:30:ba:18:88:40:c9:d5:b9:20:77:7b:04:21: d2:43:4c:30:0e:bd:76:ca:0f:e0:4b:a3:6d:70:a3:0a:95:1d: 5d:44:97:f6:9c:05:ce:fc:f1:97:7d:9e:b7:d2:ce:c2:a9:70: ed:6e:ce:ba:42:b4:b9:5d:8f:c4:16:33:6f:2e:ef:d8:69:56: 12:97:c7:c8:8d:a7:e3:42:a4:55:28:28:c4:bd:fd:b0:5c:4d: f8:e6:bf:00:2a:f1:42:80:4c:76:ec:d9:7a:18:28:68:4f:6f: 80:1c:67:81:ec:d2:18:31:16:bd:58:c6:71:83:67:b6:cc:a6: 00:9d:a0:61:cf:93:b2:83:81:9f:39:7e:63:5e:80:64:78:ac: d3:ca:db:a1:a0:60:b1:a7:35:f8:d7:ae:f4:32:a0:3b:ac:11: 2d:33:53:fb:28:5f:85:7a:82:55:49:dc:bc:f2:24:d2:55:45: 62:5e:87:b7:ff:30:82:9d:c5:c8:71:f0:57:3d:22:af:53:b2: 0e:5c:dc:9c -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICNQowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM1QjAxMTAvBgNVBAUTKDdBOTYxNzY5NTQ5RTBBQUQwQTlCRjk5MjU2ODNCQUVG NzMzQTJGMUEwHhcNMjUwNzMwMTQ1MDE3WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODhhMzEyOS1jZTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtP62xJ7mTRddiHN2mIT5R5cSOOqLh3jsFJnUnnTwc5O9WOewviXgH8tXxmXe BUITBejc5xEtU5f/IrbAxueyhXMWCz4CVadZ0UWfobcmafBKNsLksy6wMkOHxsWT pVZh7Al/191TCbXykaSQT4S8E40yvBrb9JKzz6wq5jYK8uAnERo5vyM5iAakU+Wq DjxQSkoU8If/Au643818zT+vmrLslQIDvKmwjw6BuV/qVs7GXIM2MmfVXHjF6Jih 6sMfNS0WYT2AxC3f9La0Ytq1gQbOmnZb9I6aXVhvwXQb5CHLsn9iXASMQ59t2l3x xBMRkEFiZ0iJMa4NwlQmIlN93wIDAQABo4ICmzCCApcwHQYDVR0OBBYEFN+ISWYp 566Vay9hsbbDIrmyAAzYMB8GA1UdIwQYMBaAFHqWF2lUngqtCpv5klaDuu9zOi8a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzVCMC80MEM4RDVBNjFE ODMxMUUyODIzQTVGRDgwOEIwMkNEMi9lcFlYYVZTZUNxMEttX21TVm9PNjczTTZM eG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VwWVhhVlNlQ3EwS21fbVNWb082NzNNNkx4by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUM1QjAvNDBDOEQ1QTYxRDgzMTFFMjgyM0E1RkQ4MDhCMDJDRDIvMUVFRTNFMEFD MzUxMTFFRTlENzQ0RjM2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAHS9pwDBAHS9sIwDQYJKoZIhvcNAQELBQADggEBAJy7K7J7 d2vrY/3pj2vsHGtVfBqvH75UILPL/lYzgP05o4dfkwVui/A858vT3hZjEUUEsEbJ EyuYIo50MLoYiEDJ1bkgd3sEIdJDTDAOvXbKD+BLo21wowqVHV1El/acBc788Zd9 nrfSzsKpcO1uzrpCtLldj8QWM28u79hpVhKXx8iNp+NCpFUoKMS9/bBcTfjmvwAq 8UKATHbs2XoYKGhPb4AcZ4Hs0hgxFr1YxnGDZ7bMpgCdoGHPk7KDgZ85fmNegGR4 rNPK26GgYLGnNfjXrvQyoDusES0zU/soX4V6glVJ3LzyJNJVRWJeh7f/MIKdxchx 8Fc9Iq9Tsg5c3Jw= -----END CERTIFICATE-----Generated at Fri Aug 8 19:34:49 2025 by rpki-client