$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/94C16496222811EF99153155C4F9AE02.roa File: 94C16496222811EF99153155C4F9AE02.roa (raw, json) Hash identifier: njk+98oMXqEhaQH4K0CdtGJQNcY6Zsh8AbaFjT9X3L8= Subject key identifier: E5:C1:78:E2:4B:6F:EC:44:DE:64:FF:2A:3C:AB:D4:40:08:67:BB:26 Certificate issuer: /CN=A9146207/serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B Certificate serial: 256A Authority key identifier: 9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/94C16496222811EF99153155C4F9AE02.roa Signing time: Mon 04 Aug 2025 16:24:18 +0000 ROA not before: Mon 04 Aug 2025 16:24:18 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 18392 IP address blocks: 45.114.20.0/24 maxlen: 24 45.114.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9578 (0x256a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146207, serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B Validity Not Before: Aug 4 16:24:18 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=6890deb2-7271 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:94:68:46:fd:15:a3:f4:64:1e:44:b4:d0:4d: 72:b3:63:4f:94:0e:16:0f:80:fd:aa:fa:47:a5:6e: f3:08:36:ac:0a:e6:41:b0:4f:04:7c:b0:61:54:a1: b2:85:88:03:36:40:6c:d2:8b:69:78:f6:1d:e7:4d: 8a:19:07:d2:44:80:0e:8e:06:d4:0f:20:89:e9:76: b1:2c:f8:7f:a6:37:30:0f:45:ae:37:b9:87:54:36: 5b:1e:68:38:4a:33:b8:d5:3c:0a:4a:50:c3:bc:d6: 2d:6d:9e:58:1e:53:2f:b6:9d:9b:cc:43:49:a4:83: 92:8d:65:cb:13:7d:0a:13:1f:93:e0:42:fb:78:a8: 24:c2:6f:32:d2:30:b1:47:1c:0b:ff:63:89:58:2e: cb:43:b6:92:78:58:c9:a9:6a:87:97:43:d2:91:d7: 99:66:f5:52:4f:1f:69:2b:7c:d9:40:f6:69:8e:d9: bf:1d:08:c8:82:22:4b:96:33:68:87:6b:c2:b3:f0: 58:fc:85:23:1b:40:e4:e8:65:d1:39:e2:c2:b6:1b: 0d:09:6c:e6:5e:63:60:b0:45:2e:6a:e6:2b:18:b5: 2c:ca:d5:f2:43:84:5f:ad:b9:f4:ce:cc:6c:2e:e6: 20:e5:46:b0:4f:90:a3:73:e0:5f:95:9a:a6:c4:43: ba:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:C1:78:E2:4B:6F:EC:44:DE:64:FF:2A:3C:AB:D4:40:08:67:BB:26 X509v3 Authority Key Identifier: keyid:9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/94C16496222811EF99153155C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.114.20.0/23 Signature Algorithm: sha256WithRSAEncryption 03:dd:39:eb:39:1b:db:66:4e:b5:a7:05:f9:37:fb:05:30:72: 67:7d:20:39:aa:94:34:65:99:d7:f1:ca:d0:71:2d:fc:e5:36: 48:3a:e8:52:7b:82:c5:6e:4a:38:c1:86:fd:f1:dd:31:b9:9d: 43:93:58:78:fe:83:22:36:b0:e7:2c:be:a0:ed:04:d6:46:a8: 0a:37:42:fe:48:cb:8f:8c:b8:cc:23:6e:69:f5:d3:a0:ab:5b: 0f:a4:45:78:15:cc:9d:0a:ff:5a:27:63:88:dc:27:01:7c:8d: 21:0c:0e:25:bf:3a:9d:2c:aa:96:fc:b3:93:cd:e9:dc:0c:41: 30:dc:11:91:9f:2c:fc:98:8d:9e:ba:ad:e4:f2:d3:54:df:d1: 13:a4:42:ae:06:1c:45:1f:34:51:79:31:10:22:59:79:5e:f6: 3c:42:ac:ca:73:55:d4:36:7f:cd:ad:62:08:47:de:fb:9a:34: 92:eb:4c:0c:11:78:34:b9:99:db:f2:79:06:e6:ea:5a:d9:5d: 7f:ee:df:0e:2c:01:c0:1e:bf:fe:f8:0f:61:99:04:76:b3:cb: 25:90:26:5e:b6:95:16:7a:ce:ca:0c:87:50:d6:32:61:9d:8b: 89:aa:fa:82:9c:aa:27:d3:d7:d2:60:73:d6:23:13:44:d8:d4: 75:33:7e:b7 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICJWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYyMDcxMTAvBgNVBAUTKDlFNjY4RTZFNjdCQUQwQUNGOTQwQTIyOEM0QkMwOTNC OEIyNDAwMkIwHhcNMjUwODA0MTYyNDE4WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODkwZGViMi03MjcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAspRoRv0Vo/RkHkS00E1ys2NPlA4WD4D9qvpHpW7zCDasCuZBsE8EfLBhVKGy hYgDNkBs0otpePYd502KGQfSRIAOjgbUDyCJ6XaxLPh/pjcwD0WuN7mHVDZbHmg4 SjO41TwKSlDDvNYtbZ5YHlMvtp2bzENJpIOSjWXLE30KEx+T4EL7eKgkwm8y0jCx RxwL/2OJWC7LQ7aSeFjJqWqHl0PSkdeZZvVSTx9pK3zZQPZpjtm/HQjIgiJLljNo h2vCs/BY/IUjG0Dk6GXROeLCthsNCWzmXmNgsEUuauYrGLUsytXyQ4Rfrbn0zsxs LuYg5UawT5Cjc+BflZqmxEO6VQIDAQABo4IClTCCApEwHQYDVR0OBBYEFOXBeOJL b+xE3mT/Kjyr1EAIZ7smMB8GA1UdIwQYMBaAFJ5mjm5nutCs+UCiKMS8CTuLJAAr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjIwNy9GRTc1NjM0MDAy Q0IxMUU2ODY1QjhGM0JDNEY5QUUwMi9ubWFPYm1lNjBLejVRS0lveEx3Sk80c2tB Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25tYU9ibWU2MEt6NVFLSW94THdKTzRza0FDcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDYyMDcvRkU3NTYzNDAwMkNCMTFFNjg2NUI4RjNCQzRGOUFFMDIvOTRDMTY0OTYy MjI4MTFFRjk5MTUzMTU1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAEtchQwDQYJKoZIhvcNAQELBQADggEBAAPdOes5G9tmTrWn Bfk3+wUwcmd9IDmqlDRlmdfxytBxLfzlNkg66FJ7gsVuSjjBhv3x3TG5nUOTWHj+ gyI2sOcsvqDtBNZGqAo3Qv5Iy4+MuMwjbmn106CrWw+kRXgVzJ0K/1onY4jcJwF8 jSEMDiW/Op0sqpb8s5PN6dwMQTDcEZGfLPyYjZ66reTy01Tf0ROkQq4GHEUfNFF5 MRAiWXle9jxCrMpzVdQ2f82tYghH3vuaNJLrTAwReDS5mdvyeQbm6lrZXX/u3w4s AcAev/74D2GZBHazyyWQJl62lRZ6zsoMh1DWMmGdi4mq+oKcqifT19Jgc9YjE0TY 1HUzfrc= -----END CERTIFICATE-----Generated at Mon Aug 11 06:00:40 2025 by rpki-client