$ rpki-client -vvf rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/F66F50628A9C11EB9B2E044BC4F9AE02.roa File: F66F50628A9C11EB9B2E044BC4F9AE02.roa (raw, json) Hash identifier: hWP/crnjmiKRkQxu0624FvYvc5uF2iF9vYd33TXrr/0= Subject key identifier: A3:62:DB:39:F0:68:EC:9B:4B:6A:09:33:4A:77:23:FB:FF:42:19:FA Certificate issuer: /CN=A9125225/serialNumber=85D6F18493D8A08CC72B1B091D4AF54F8F0A28B3 Certificate serial: 066D Authority key identifier: 85:D6:F1:84:93:D8:A0:8C:C7:2B:1B:09:1D:4A:F5:4F:8F:0A:28:B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hdbxhJPYoIzHKxsJHUr1T48KKLM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/F66F50628A9C11EB9B2E044BC4F9AE02.roa Signing time: Tue 24 Jun 2025 22:41:50 +0000 ROA not before: Tue 24 Jun 2025 22:41:50 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 141470 IP address blocks: 124.108.24.0/21 maxlen: 21 124.108.24.0/23 maxlen: 23 124.108.26.0/23 maxlen: 23 124.108.27.0/24 maxlen: 24 124.108.28.0/23 maxlen: 23 124.108.30.0/23 maxlen: 23 124.108.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/hdbxhJPYoIzHKxsJHUr1T48KKLM.crl rsync://rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/hdbxhJPYoIzHKxsJHUr1T48KKLM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hdbxhJPYoIzHKxsJHUr1T48KKLM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:24:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1645 (0x66d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125225, serialNumber=85D6F18493D8A08CC72B1B091D4AF54F8F0A28B3 Validity Not Before: Jun 24 22:41:50 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=685b29ad-0d75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b7:e5:26:cf:cf:86:89:c9:b0:92:0b:81:35: 3c:6c:04:33:bc:8a:19:e0:32:f5:51:09:da:08:72: 2a:a5:41:f3:6d:c8:d1:9c:8c:13:5a:c8:52:47:19: f0:85:0b:ea:aa:18:40:82:84:6b:f6:b9:71:05:91: cd:26:ed:55:81:3f:1a:8e:93:a4:33:ec:22:28:2e: c7:6e:8b:f1:b6:1c:71:87:50:28:19:7f:3f:e2:ec: 9f:48:bb:b8:ec:39:f1:4a:97:14:3b:f8:ad:6b:4b: 9e:de:a0:40:7a:84:44:b2:c8:37:62:34:66:18:a5: 8b:c8:e5:91:ad:ac:8a:7d:78:a5:be:38:79:e8:80: bb:d6:3f:9b:f2:f7:15:90:1b:0b:d7:ab:36:41:ac: d3:e9:83:6c:ef:e6:32:d1:9e:a6:53:a3:8a:47:a3: 9c:85:77:a5:89:dd:2f:a1:a8:ff:1d:76:e2:1d:c5: e0:43:9a:12:78:3a:a0:0a:1c:af:af:ca:54:02:62: a8:23:b8:44:87:35:b5:bd:f2:a5:ce:2b:3e:28:d7: ab:d5:39:ca:fb:28:2f:0a:3b:fb:5e:6f:87:25:51: 08:0b:06:30:af:b3:e2:81:7f:0f:4b:a3:72:84:a0: 1b:2f:54:9e:7d:81:28:b1:a0:9d:6b:ad:0c:be:6f: c0:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:62:DB:39:F0:68:EC:9B:4B:6A:09:33:4A:77:23:FB:FF:42:19:FA X509v3 Authority Key Identifier: keyid:85:D6:F1:84:93:D8:A0:8C:C7:2B:1B:09:1D:4A:F5:4F:8F:0A:28:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/hdbxhJPYoIzHKxsJHUr1T48KKLM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hdbxhJPYoIzHKxsJHUr1T48KKLM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/F66F50628A9C11EB9B2E044BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 124.108.24.0/21 Signature Algorithm: sha256WithRSAEncryption 7d:94:38:0d:d6:3a:75:dc:4f:d9:3c:36:68:10:8e:69:6f:9d: 4a:cc:01:42:de:ef:be:df:d1:d1:72:6a:1d:ba:81:a7:89:b4: 58:17:0d:ca:01:96:96:0e:49:a2:e5:b7:20:f9:dd:c7:6e:13: 65:bf:d5:4d:cb:62:dc:78:8f:dc:57:4b:28:04:f4:2f:44:ba: ef:e1:8a:9e:d5:ec:ee:2f:c7:8f:df:fd:e1:d3:a2:f3:d1:af: 35:51:74:f2:9b:a9:01:3f:58:30:03:ce:ef:6a:f9:39:96:ba: c7:04:d3:c4:82:d1:a8:04:aa:71:24:db:39:65:5a:68:fa:a5: c3:7d:e6:30:0d:45:f8:2c:d5:d0:4a:66:63:96:2b:73:f0:d4: e8:84:fc:4f:17:6d:81:69:29:de:8f:95:42:94:d7:75:25:13: d8:f6:1c:72:c4:07:05:a9:0e:8e:5a:0c:84:3d:95:4f:bd:fc: 2f:9f:7e:d8:24:72:6a:cc:1e:ff:8a:3f:1d:de:e8:07:4a:0e: e7:ff:00:db:2a:11:6f:d4:0d:1e:42:be:2f:4b:26:85:40:1f: ad:02:79:5f:16:d9:32:ab:56:fa:7d:ef:40:11:bf:8c:a3:66: 24:11:19:e7:4f:f9:d3:c4:15:14:64:34:66:ab:93:67:dc:17: e0:e9:9e:6f -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBm0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjUyMjUxMTAvBgNVBAUTKDg1RDZGMTg0OTNEOEEwOENDNzJCMUIwOTFENEFGNTRG OEYwQTI4QjMwHhcNMjUwNjI0MjI0MTUwWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODViMjlhZC0wZDc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAurflJs/PhonJsJILgTU8bAQzvIoZ4DL1UQnaCHIqpUHzbcjRnIwTWshSRxnw hQvqqhhAgoRr9rlxBZHNJu1VgT8ajpOkM+wiKC7Hbovxthxxh1AoGX8/4uyfSLu4 7DnxSpcUO/ita0ue3qBAeoREssg3YjRmGKWLyOWRrayKfXilvjh56IC71j+b8vcV kBsL16s2QazT6YNs7+Yy0Z6mU6OKR6OchXelid0voaj/HXbiHcXgQ5oSeDqgChyv r8pUAmKoI7hEhzW1vfKlzis+KNer1TnK+ygvCjv7Xm+HJVEICwYwr7PigX8PS6Ny hKAbL1SefYEosaCda60Mvm/AlQIDAQABo4IClTCCApEwHQYDVR0OBBYEFKNi2znw aOybS2oJM0p3I/v/Qhn6MB8GA1UdIwQYMBaAFIXW8YST2KCMxysbCR1K9U+PCiiz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTIyNS9DQTY5MDQ0MjhB OUExMUVCODBDM0VENDdDNEY5QUUwMi9oZGJ4aEpQWW9JekhLeHNKSFVyMVQ0OEtL TE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hkYnhoSlBZb0l6SEt4c0pIVXIxVDQ4S0tMTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjUyMjUvQ0E2OTA0NDI4QTlBMTFFQjgwQzNFRDQ3QzRGOUFFMDIvRjY2RjUwNjI4 QTlDMTFFQjlCMkUwNDRCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAN8bBgwDQYJKoZIhvcNAQELBQADggEBAH2UOA3WOnXcT9k8 NmgQjmlvnUrMAULe777f0dFyah26gaeJtFgXDcoBlpYOSaLltyD53cduE2W/1U3L Ytx4j9xXSygE9C9Euu/hip7V7O4vx4/f/eHTovPRrzVRdPKbqQE/WDADzu9q+TmW uscE08SC0agEqnEk2zllWmj6pcN95jANRfgs1dBKZmOWK3Pw1OiE/E8XbYFpKd6P lUKU13UlE9j2HHLEBwWpDo5aDIQ9lU+9/C+fftgkcmrMHv+KPx3e6AdKDuf/ANsq EW/UDR5Cvi9LJoVAH60CeV8W2TKrVvp970ARv4yjZiQRGedP+dPEFRRkNGark2fc F+Dpnm8= -----END CERTIFICATE-----Generated at Thu Nov 6 00:06:52 2025 by rpki-client