$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/3EF600FC1E0111E9A590C837C4F9AE02.roa File: 3EF600FC1E0111E9A590C837C4F9AE02.roa (raw, json) Hash identifier: iETlhjpGHZbzzHnB+pJnMCWppG7Jxr90z9kw/0K93rE= Subject key identifier: 1B:94:87:7F:B3:7C:A0:C7:8C:14:48:AD:75:70:F8:6D:F8:C9:74:B3 Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Certificate serial: 39E0 Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/3EF600FC1E0111E9A590C837C4F9AE02.roa Signing time: Mon 14 Jul 2025 14:50:50 +0000 ROA not before: Mon 14 Jul 2025 14:50:50 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 18197 IP address blocks: 58.97.37.0/24 maxlen: 24 110.170.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14816 (0x39e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Validity Not Before: Jul 14 14:50:50 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=6875194a-4efc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:87:45:fb:cb:3a:6a:f0:5d:35:c2:24:58:15: e8:76:0a:1f:8c:b7:3a:c5:47:fb:82:bc:a6:3d:b4: c7:cb:d3:01:4c:90:af:12:40:09:b7:f5:96:bf:25: be:56:98:13:04:4d:5f:cf:b3:8f:32:59:c5:4a:fe: 44:19:8c:eb:d2:7e:84:a5:77:b4:9f:85:66:c1:c0: 8d:25:8b:b6:1c:70:3a:49:7b:a8:58:76:ce:96:37: ce:3f:09:e8:9f:1b:58:75:57:a4:2b:44:5e:4a:9c: 40:d4:0d:eb:10:ae:02:63:a5:3a:83:1d:a6:bd:b0: 21:55:aa:b3:eb:4c:0e:b8:85:00:14:76:32:e1:ff: a2:38:b7:fe:69:ee:f6:f5:58:51:21:fe:2c:be:9c: cf:5b:3b:48:66:bc:f3:ba:a3:b8:ae:d9:70:9f:f5: 3d:c4:63:24:4d:fa:07:53:d1:7f:96:9a:c3:6b:36: 25:30:79:c9:c5:86:aa:d6:22:3d:72:4f:d0:ec:78: 65:ee:1e:e2:fa:f2:8b:92:06:96:3e:84:6e:36:42: bc:75:13:2c:43:95:21:20:d8:18:2d:43:5f:28:c4: a9:57:86:fb:af:33:f5:46:8d:38:d8:3f:7c:6d:be: d5:8e:b0:b3:9c:90:f0:a2:96:58:a8:ac:72:93:bf: 77:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:94:87:7F:B3:7C:A0:C7:8C:14:48:AD:75:70:F8:6D:F8:C9:74:B3 X509v3 Authority Key Identifier: keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/3EF600FC1E0111E9A590C837C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 58.97.37.0/24 110.170.149.0/24 Signature Algorithm: sha256WithRSAEncryption 45:50:c9:06:4d:30:29:23:ac:81:81:73:b2:32:cc:73:fd:9a: 1c:ea:30:e0:f5:be:ff:98:6f:ae:86:07:a2:38:13:25:92:97: 78:45:c2:e1:8d:4d:12:80:fc:b3:b4:d8:61:ba:2d:d6:54:4d: b5:36:16:c0:82:64:0c:06:b1:fa:4b:72:36:7d:cf:6b:3f:f7: 9c:5b:fd:cd:46:be:f1:c8:5b:6f:b5:23:18:b4:94:12:dc:e4: fc:03:26:21:79:ef:fb:98:a8:7b:45:5c:f4:05:44:ba:a7:7e: 4d:f5:1c:9f:08:54:19:c1:fa:a6:5c:61:98:5a:58:1d:e2:da: 9a:a3:fb:05:2c:66:89:04:6a:07:06:f6:f5:2a:a4:0e:2c:78: 41:64:1a:b7:d8:db:b4:42:e3:cc:04:e1:b9:aa:80:f6:3f:82: c6:55:29:2f:80:69:5f:b5:16:e6:6d:94:68:6f:a2:4c:28:13: 6e:34:58:f8:f3:bb:47:10:ec:99:a6:4e:b1:d9:8d:c1:43:a3: 99:ba:58:1e:89:a9:a2:47:49:f6:f1:e6:b0:d6:93:80:a3:37: b5:9f:2d:10:0d:12:02:f4:a9:15:d0:93:ca:01:14:86:ba:b1: 2b:98:10:a9:bc:57:af:28:50:8a:a6:7a:ba:f8:2c:fa:5d:d0: 84:60:4c:2b -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICOeAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB NDM3QUYwMkMwHhcNMjUwNzE0MTQ1MDUwWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODc1MTk0YS00ZWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3odF+8s6avBdNcIkWBXodgofjLc6xUf7grymPbTHy9MBTJCvEkAJt/WWvyW+ VpgTBE1fz7OPMlnFSv5EGYzr0n6EpXe0n4VmwcCNJYu2HHA6SXuoWHbOljfOPwno nxtYdVekK0ReSpxA1A3rEK4CY6U6gx2mvbAhVaqz60wOuIUAFHYy4f+iOLf+ae72 9VhRIf4svpzPWztIZrzzuqO4rtlwn/U9xGMkTfoHU9F/lprDazYlMHnJxYaq1iI9 ck/Q7Hhl7h7i+vKLkgaWPoRuNkK8dRMsQ5UhINgYLUNfKMSpV4b7rzP1Ro042D98 bb7VjrCznJDwopZYqKxyk793DwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFBuUh3+z fKDHjBRIrXVw+G34yXSzMB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4 Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvM0VGNjAwRkMx RTAxMTFFOUE1OTBDODM3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAA6YSUDBABuqpUwDQYJKoZIhvcNAQELBQADggEBAEVQyQZN MCkjrIGBc7IyzHP9mhzqMOD1vv+Yb66GB6I4EyWSl3hFwuGNTRKA/LO02GG6LdZU TbU2FsCCZAwGsfpLcjZ9z2s/95xb/c1GvvHIW2+1Ixi0lBLc5PwDJiF57/uYqHtF XPQFRLqnfk31HJ8IVBnB+qZcYZhaWB3i2pqj+wUsZokEagcG9vUqpA4seEFkGrfY 27RC48wE4bmqgPY/gsZVKS+AaV+1FuZtlGhvokwoE240WPjzu0cQ7JmmTrHZjcFD o5m6WB6JqaJHSfbx5rDWk4CjN7WfLRANEgL0qRXQk8oBFIa6sSuYEKm8V68oUIqm err4LPpd0IRgTCs= -----END CERTIFICATE-----Generated at Sat Aug 9 03:02:04 2025 by rpki-client