$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/14BC2D3ACCAA11EA9E95D81BC4F9AE02.roa File: 14BC2D3ACCAA11EA9E95D81BC4F9AE02.roa (raw, json) Hash identifier: mTrnMVZI3oc2hbgBbqTPzvSY22GeIaQ6Sv1aw5zibZo= Subject key identifier: 31:4A:DF:CE:01:E5:65:8D:6F:E2:8A:3E:56:25:37:7D:C9:D5:51:BE Certificate issuer: /CN=A9146207/serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B Certificate serial: 2569 Authority key identifier: 9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/14BC2D3ACCAA11EA9E95D81BC4F9AE02.roa Signing time: Mon 04 Aug 2025 16:24:17 +0000 ROA not before: Mon 04 Aug 2025 16:24:17 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 18190 IP address blocks: 120.28.15.0/24 maxlen: 24 120.28.56.0/24 maxlen: 24 124.6.146.0/24 maxlen: 24 222.127.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9577 (0x2569) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146207, serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B Validity Not Before: Aug 4 16:24:17 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=6890deb1-c056 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:03:91:88:59:c2:ed:b7:ee:2b:09:ff:54:c6: a8:9a:01:64:8a:5b:25:4d:3e:74:06:e5:a9:01:48: fd:68:6f:64:9f:a9:b1:20:60:a8:fd:2c:5b:6e:d3: 51:89:d0:53:3d:1b:f3:af:4c:01:d5:39:30:b3:2e: 9e:19:44:47:59:f3:d5:5f:cd:40:46:2c:45:fd:7f: ad:44:ae:ec:5f:34:41:d4:22:08:14:06:39:31:46: a0:d2:51:35:bd:7f:f1:af:3b:d7:aa:ad:16:b0:30: 64:c1:c8:ff:e0:51:74:75:e1:2f:0b:62:c1:35:3a: 8c:f0:f0:77:b8:33:55:a3:95:a2:10:fb:b2:bd:3d: 46:3f:22:cf:ad:c2:07:85:50:ab:48:fd:09:1e:5b: a7:58:ec:72:af:31:08:50:a9:ec:e9:a2:3d:34:0b: d9:b3:05:27:de:2b:59:38:3e:2b:9a:e7:6e:2b:0b: 9b:b6:3b:20:b6:2b:e2:af:11:95:37:b0:bf:7f:ce: 9b:92:16:2b:fa:b2:b8:c2:41:5f:35:a0:f1:1f:01: 08:73:f3:72:6d:eb:cc:e7:a8:27:9c:4c:8c:85:bc: 21:b3:1a:32:94:7f:40:a7:66:4c:bb:32:44:fe:b5: 0d:f1:d9:4a:f5:92:4e:bf:b4:3e:00:e3:24:19:4a: 8c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:4A:DF:CE:01:E5:65:8D:6F:E2:8A:3E:56:25:37:7D:C9:D5:51:BE X509v3 Authority Key Identifier: keyid:9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/14BC2D3ACCAA11EA9E95D81BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 120.28.15.0/24 120.28.56.0/24 124.6.146.0/24 222.127.129.0/24 Signature Algorithm: sha256WithRSAEncryption a3:f9:b3:37:0e:59:87:e9:3d:3e:6a:c1:42:ce:79:f6:95:9d: f5:6a:40:9a:b9:52:4e:f4:f3:65:98:33:94:34:75:8a:0f:bd: c3:4a:bb:8d:d8:28:18:f0:ac:77:32:94:7d:e9:9a:9a:5e:47: 49:bf:b0:b3:76:4c:39:72:8f:a0:35:8a:28:c4:50:21:53:0a: 69:74:64:ac:a4:d9:2d:f6:90:58:3f:52:22:1f:55:44:aa:f4: 2d:78:f1:69:14:34:c9:d2:c6:40:8e:84:69:4c:42:51:e2:ca: fd:e4:59:f9:8d:1b:63:00:ff:18:3a:aa:8e:5f:28:cb:f2:59: 78:e0:f4:c5:6c:b1:95:a1:6f:91:e3:41:18:8e:b2:44:9a:76: d0:56:bb:55:bf:e8:0c:ed:62:18:78:23:49:b4:df:18:fb:33: 0a:81:10:43:43:8e:5d:c5:9b:7a:ce:39:6e:e3:e9:5c:35:ca: 73:9c:76:80:ea:0e:01:f2:67:f4:3b:ac:28:a1:76:97:8d:e6: 34:e1:6f:5b:05:0b:41:8e:f8:93:17:2f:3b:ad:1e:4c:c8:ca: 56:ee:ac:3b:05:05:f1:a0:2a:fa:ac:35:c2:8f:9c:6f:2f:23: 96:12:72:b3:cc:27:d6:b9:6a:d6:10:4e:63:4c:a4:ee:82:b6: 75:88:e0:98 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICJWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYyMDcxMTAvBgNVBAUTKDlFNjY4RTZFNjdCQUQwQUNGOTQwQTIyOEM0QkMwOTNC OEIyNDAwMkIwHhcNMjUwODA0MTYyNDE3WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODkwZGViMS1jMDU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzQORiFnC7bfuKwn/VMaomgFkilslTT50BuWpAUj9aG9kn6mxIGCo/SxbbtNR idBTPRvzr0wB1Tkwsy6eGURHWfPVX81ARixF/X+tRK7sXzRB1CIIFAY5MUag0lE1 vX/xrzvXqq0WsDBkwcj/4FF0deEvC2LBNTqM8PB3uDNVo5WiEPuyvT1GPyLPrcIH hVCrSP0JHlunWOxyrzEIUKns6aI9NAvZswUn3itZOD4rmuduKwubtjsgtivirxGV N7C/f86bkhYr+rK4wkFfNaDxHwEIc/NybevM56gnnEyMhbwhsxoylH9Ap2ZMuzJE /rUN8dlK9ZJOv7Q+AOMkGUqMpwIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFDFK384B 5WWNb+KKPlYlN33J1VG+MB8GA1UdIwQYMBaAFJ5mjm5nutCs+UCiKMS8CTuLJAAr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjIwNy9GRTc1NjM0MDAy Q0IxMUU2ODY1QjhGM0JDNEY5QUUwMi9ubWFPYm1lNjBLejVRS0lveEx3Sk80c2tB Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25tYU9ibWU2MEt6NVFLSW94THdKTzRza0FDcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDYyMDcvRkU3NTYzNDAwMkNCMTFFNjg2NUI4RjNCQzRGOUFFMDIvMTRCQzJEM0FD Q0FBMTFFQTlFOTVEODFCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBAB4HA8DBAB4HDgDBAB8BpIDBADef4EwDQYJKoZIhvcNAQEL BQADggEBAKP5szcOWYfpPT5qwULOefaVnfVqQJq5Uk7082WYM5Q0dYoPvcNKu43Y KBjwrHcylH3pmppeR0m/sLN2TDlyj6A1iijEUCFTCml0ZKyk2S32kFg/UiIfVUSq 9C148WkUNMnSxkCOhGlMQlHiyv3kWfmNG2MA/xg6qo5fKMvyWXjg9MVssZWhb5Hj QRiOskSadtBWu1W/6AztYhh4I0m03xj7MwqBEENDjl3Fm3rOOW7j6Vw1ynOcdoDq DgHyZ/Q7rCihdpeN5jThb1sFC0GO+JMXLzutHkzIylburDsFBfGgKvqsNcKPnG8v I5YScrPMJ9a5atYQTmNMpO6CtnWI4Jg= -----END CERTIFICATE-----Generated at Mon Aug 11 05:56:08 2025 by rpki-client