$ rpki-client -vvf rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/6911C6C6450C11F0A7A54A80C4F9AE02.roa File: 6911C6C6450C11F0A7A54A80C4F9AE02.roa (raw, json) Hash identifier: XM9Bx/2dvSebxGit5XsfhdOhtq9u4/gFe4PEE8p0hU0= Subject key identifier: 3F:95:84:29:2B:A7:85:2D:96:9C:C0:2A:18:44:C0:29:D7:3E:2E:CF Certificate issuer: /CN=A9136C7C/serialNumber=5D3C16896492BFC870C8A00B668BBFE95945F8DA Certificate serial: 0149 Authority key identifier: 5D:3C:16:89:64:92:BF:C8:70:C8:A0:0B:66:8B:BF:E9:59:45:F8:DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTwWiWSSv8hwyKALZou_6VlF-No.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/6911C6C6450C11F0A7A54A80C4F9AE02.roa Signing time: Mon 09 Jun 2025 08:33:25 +0000 ROA not before: Mon 09 Jun 2025 08:33:25 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 40779 IP address blocks: 103.149.200.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/XTwWiWSSv8hwyKALZou_6VlF-No.crl rsync://rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/XTwWiWSSv8hwyKALZou_6VlF-No.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTwWiWSSv8hwyKALZou_6VlF-No.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 03:48:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 329 (0x149) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136C7C, serialNumber=5D3C16896492BFC870C8A00B668BBFE95945F8DA Validity Not Before: Jun 9 08:33:25 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=68469c55-81b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:4e:15:1a:77:72:2f:fd:6c:86:7b:a0:8f:ba: cd:12:7c:c4:aa:2d:e7:d6:ab:a0:2b:63:3a:f6:4a: 47:8f:29:c7:3e:a6:97:d8:c5:dc:4a:b3:f5:62:34: d9:c4:b9:93:7a:09:8e:25:b1:8f:97:5e:37:fd:ac: f6:48:1a:1e:74:9e:83:fe:17:ee:c0:e8:af:32:2f: ce:15:a0:6b:26:00:63:af:c3:e8:7b:1d:87:ed:23: a1:26:d9:52:cb:3a:a3:0d:bd:c2:66:25:0a:cd:93: 79:19:39:ee:5f:21:1b:d1:75:e4:cf:47:ab:7d:fe: 50:7c:d1:c2:de:6e:e9:2a:65:b2:1b:25:af:6b:69: 2e:25:3d:01:ed:f5:ed:71:e1:47:1d:6e:14:f6:07: f2:1e:b1:83:1c:53:67:5c:02:c5:d6:91:b4:c9:27: a4:30:2a:71:27:5c:62:49:75:cd:28:d3:02:d7:48: e6:d8:84:71:15:a0:d5:80:df:72:27:85:1a:f4:a0: 55:8a:0f:76:90:4d:bf:4b:52:3c:bb:49:09:2c:22: a3:8e:36:77:2e:f0:91:01:79:2c:63:8b:96:22:e5: 75:08:98:39:4b:f9:3b:c0:1e:57:ab:16:44:f9:fe: 91:1a:41:d7:37:67:f0:f1:69:52:b8:6c:04:c2:8b: 8a:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:95:84:29:2B:A7:85:2D:96:9C:C0:2A:18:44:C0:29:D7:3E:2E:CF X509v3 Authority Key Identifier: keyid:5D:3C:16:89:64:92:BF:C8:70:C8:A0:0B:66:8B:BF:E9:59:45:F8:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/XTwWiWSSv8hwyKALZou_6VlF-No.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTwWiWSSv8hwyKALZou_6VlF-No.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/6911C6C6450C11F0A7A54A80C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.149.200.0/23 Signature Algorithm: sha256WithRSAEncryption 6b:3f:cd:f5:e7:e3:11:cf:f4:8e:e5:59:9d:dd:15:d5:de:00: 25:4e:67:75:97:2e:2d:80:d3:5d:6c:58:49:77:50:68:09:97: 2c:26:4f:e4:7b:7c:da:12:64:d4:ab:07:4f:d2:8e:ec:b3:e1: 9a:56:2b:1d:c2:ad:cf:d4:69:5b:8b:ab:3f:fb:3d:b6:76:1a: 28:11:de:eb:e4:50:33:b7:ef:ea:7a:b8:0a:47:cf:c9:99:b3: 67:27:09:1e:54:d3:4f:a1:41:61:c6:c4:c3:63:f8:d3:c5:e8: 75:e5:20:95:2c:be:f0:be:9b:07:38:cf:3a:06:62:b5:44:94: ef:e8:9b:3d:82:d3:25:c3:02:f8:cc:24:7c:59:81:d0:00:25: 92:41:63:8a:30:81:4d:28:3d:64:e1:ee:77:bf:9a:6d:05:44: ee:77:1a:4b:a8:25:b4:84:22:ea:25:53:60:e6:dc:f8:04:12: de:7c:b6:27:32:30:a3:ae:62:9e:44:df:6b:7d:25:0f:f7:5b: 97:7f:33:00:41:88:c6:b3:64:a6:fd:c3:0b:62:89:49:53:32: da:12:be:46:4c:9f:df:82:47:66:a0:d1:69:44:4b:b5:69:83: 50:8c:a1:96:65:96:77:30:4e:e2:9c:2b:a0:43:52:76:a1:83: 06:7b:16:b7 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZDN0MxMTAvBgNVBAUTKDVEM0MxNjg5NjQ5MkJGQzg3MEM4QTAwQjY2OEJCRkU5 NTk0NUY4REEwHhcNMjUwNjA5MDgzMzI1WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODQ2OWM1NS04MWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmU4VGndyL/1shnugj7rNEnzEqi3n1qugK2M69kpHjynHPqaX2MXcSrP1YjTZ xLmTegmOJbGPl143/az2SBoedJ6D/hfuwOivMi/OFaBrJgBjr8Poex2H7SOhJtlS yzqjDb3CZiUKzZN5GTnuXyEb0XXkz0erff5QfNHC3m7pKmWyGyWva2kuJT0B7fXt ceFHHW4U9gfyHrGDHFNnXALF1pG0ySekMCpxJ1xiSXXNKNMC10jm2IRxFaDVgN9y J4Ua9KBVig92kE2/S1I8u0kJLCKjjjZ3LvCRAXksY4uWIuV1CJg5S/k7wB5XqxZE +f6RGkHXN2fw8WlSuGwEwouKZQIDAQABo4IClTCCApEwHQYDVR0OBBYEFD+VhCkr p4UtlpzAKhhEwCnXPi7PMB8GA1UdIwQYMBaAFF08Folkkr/IcMigC2aLv+lZRfja MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkM3Qy8yQjVDQUFFODY5 RTUxMUVFQkI2NjgyNDZDNEY5QUUwMi9YVHdXaVdTU3Y4aHd5S0FMWm91XzZWbEYt Tm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hUd1dpV1NTdjhod3lLQUxab3VfNlZsRi1Oby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzZDN0MvMkI1Q0FBRTg2OUU1MTFFRUJCNjY4MjQ2QzRGOUFFMDIvNjkxMUM2QzY0 NTBDMTFGMEE3QTU0QTgwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnlcgwDQYJKoZIhvcNAQELBQADggEBAGs/zfXn4xHP9I7l WZ3dFdXeACVOZ3WXLi2A011sWEl3UGgJlywmT+R7fNoSZNSrB0/Sjuyz4ZpWKx3C rc/UaVuLqz/7PbZ2GigR3uvkUDO37+p6uApHz8mZs2cnCR5U00+hQWHGxMNj+NPF 6HXlIJUsvvC+mwc4zzoGYrVElO/omz2C0yXDAvjMJHxZgdAAJZJBY4owgU0oPWTh 7ne/mm0FRO53GkuoJbSEIuolU2Dm3PgEEt58ticyMKOuYp5E32t9JQ/3W5d/MwBB iMazZKb9wwtiiUlTMtoSvkZMn9+CR2ag0WlES7Vpg1CMoZZllncwTuKcK6BDUnah gwZ7Frc= -----END CERTIFICATE-----Generated at Fri Jun 20 09:50:09 2025 by rpki-client