$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/BA007060162D11EEB79F703CC4F9AE02.roa File: BA007060162D11EEB79F703CC4F9AE02.roa (raw, json) Hash identifier: e+8uiRyglTJ61jp+NHN/xhpvUYkVwouUN/cZkA6eEOU= Subject key identifier: 03:0E:5E:F8:A2:0B:75:46:09:17:60:C9:DD:8B:76:B1:34:A9:EE:70 Certificate issuer: /CN=A9146207/serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B Certificate serial: 2563 Authority key identifier: 9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/BA007060162D11EEB79F703CC4F9AE02.roa Signing time: Mon 04 Aug 2025 16:24:12 +0000 ROA not before: Mon 04 Aug 2025 16:24:12 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 142424 IP address blocks: 120.28.32.0/24 maxlen: 24 222.127.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9571 (0x2563) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146207, serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B Validity Not Before: Aug 4 16:24:12 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=6890deac-7fd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e0:a2:a5:ed:07:9a:79:0c:5e:01:07:32:10: cd:17:d3:e0:84:6e:7c:61:01:49:d5:a2:cb:78:fa: c7:40:1a:f9:f7:fa:af:e1:5a:ba:a9:d7:5d:61:5a: da:f5:23:76:8d:01:4a:12:4b:b5:a4:44:31:37:58: a6:c5:6b:0b:6f:28:e3:be:b0:1c:02:46:06:d8:b1: 2f:8c:71:1d:41:6b:81:2c:32:e6:4c:c4:16:47:e2: a5:43:93:5c:52:31:5d:0f:7d:5f:18:69:a9:38:0d: b9:58:37:2a:54:b7:b7:77:22:cc:6a:4d:36:e0:f3: cf:8e:12:97:ad:1e:cb:1a:ab:d9:78:83:a1:85:52: 1e:07:b9:8e:03:f0:b1:57:40:d8:29:99:1d:cc:33: 46:ac:01:5a:c7:72:57:04:63:37:19:ad:d5:21:15: 0e:a1:31:5c:18:51:58:4c:0e:52:78:11:4c:f7:13: 95:56:39:f1:f6:a7:d2:8c:1d:3f:8b:19:3f:0c:b5: 69:48:71:2c:29:13:35:bd:0e:bd:3f:a7:d8:20:b0: 34:25:36:30:1b:2c:c3:d2:76:95:6b:21:a5:4a:7e: f8:9c:ca:e4:be:ec:ab:28:c2:89:80:d3:8b:16:9a: 05:8f:1a:cc:e4:b6:f0:2b:b5:6b:83:56:5e:2f:65: 0a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:0E:5E:F8:A2:0B:75:46:09:17:60:C9:DD:8B:76:B1:34:A9:EE:70 X509v3 Authority Key Identifier: keyid:9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/BA007060162D11EEB79F703CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 120.28.32.0/24 222.127.99.0/24 Signature Algorithm: sha256WithRSAEncryption 29:37:c6:98:ed:b4:72:ff:aa:58:48:91:5e:22:46:e1:77:18: 8f:b2:11:a5:73:96:eb:03:73:f1:8e:f3:ac:7b:70:42:75:92: f4:3c:47:ca:24:c5:31:07:8b:a7:d2:6d:30:9d:43:ed:00:de: bb:39:bd:b2:aa:e8:5c:ef:48:c6:13:c3:9d:6e:14:37:7f:1a: 7c:a9:e4:18:10:9a:91:bd:41:23:8b:c1:e2:6a:1c:ed:d9:22: fa:83:01:0e:03:8f:0d:e4:63:ec:ed:59:cf:12:0d:d1:17:1c: c6:b5:10:f4:67:4d:91:75:55:38:d6:82:53:6b:32:0c:cf:a1: 81:5e:c1:74:50:5d:40:e4:24:3e:93:9f:64:18:e4:62:29:23: 08:f5:09:5a:68:64:e2:3d:23:1d:d8:73:1c:e4:2a:fc:f6:ca: 95:b6:ef:6e:f9:d2:20:06:ab:2e:dc:d8:84:e2:34:ee:15:39: 10:cd:31:ff:f8:4b:24:52:05:9e:d0:94:8f:4e:05:2b:83:47: c1:49:50:01:61:f5:a0:77:13:40:9e:88:11:14:1e:f8:84:18: b8:f0:bb:69:7e:ab:31:0f:f7:6e:0b:41:2c:92:4e:18:36:5a: 58:fc:e5:02:d7:7c:c5:1c:e8:35:13:13:da:5f:04:4b:f5:24: 13:f7:fa:f7 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICJWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYyMDcxMTAvBgNVBAUTKDlFNjY4RTZFNjdCQUQwQUNGOTQwQTIyOEM0QkMwOTNC OEIyNDAwMkIwHhcNMjUwODA0MTYyNDEyWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODkwZGVhYy03ZmQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2uCipe0HmnkMXgEHMhDNF9PghG58YQFJ1aLLePrHQBr59/qv4Vq6qdddYVra 9SN2jQFKEku1pEQxN1imxWsLbyjjvrAcAkYG2LEvjHEdQWuBLDLmTMQWR+KlQ5Nc UjFdD31fGGmpOA25WDcqVLe3dyLMak024PPPjhKXrR7LGqvZeIOhhVIeB7mOA/Cx V0DYKZkdzDNGrAFax3JXBGM3Ga3VIRUOoTFcGFFYTA5SeBFM9xOVVjnx9qfSjB0/ ixk/DLVpSHEsKRM1vQ69P6fYILA0JTYwGyzD0naVayGlSn74nMrkvuyrKMKJgNOL FpoFjxrM5LbwK7Vrg1ZeL2UK0QIDAQABo4ICmzCCApcwHQYDVR0OBBYEFAMOXvii C3VGCRdgyd2LdrE0qe5wMB8GA1UdIwQYMBaAFJ5mjm5nutCs+UCiKMS8CTuLJAAr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjIwNy9GRTc1NjM0MDAy Q0IxMUU2ODY1QjhGM0JDNEY5QUUwMi9ubWFPYm1lNjBLejVRS0lveEx3Sk80c2tB Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25tYU9ibWU2MEt6NVFLSW94THdKTzRza0FDcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDYyMDcvRkU3NTYzNDAwMkNCMTFFNjg2NUI4RjNCQzRGOUFFMDIvQkEwMDcwNjAx NjJEMTFFRUI3OUY3MDNDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAB4HCADBADef2MwDQYJKoZIhvcNAQELBQADggEBACk3xpjt tHL/qlhIkV4iRuF3GI+yEaVzlusDc/GO86x7cEJ1kvQ8R8okxTEHi6fSbTCdQ+0A 3rs5vbKq6FzvSMYTw51uFDd/Gnyp5BgQmpG9QSOLweJqHO3ZIvqDAQ4Djw3kY+zt Wc8SDdEXHMa1EPRnTZF1VTjWglNrMgzPoYFewXRQXUDkJD6Tn2QY5GIpIwj1CVpo ZOI9Ix3YcxzkKvz2ypW272750iAGqy7c2ITiNO4VORDNMf/4SyRSBZ7QlI9OBSuD R8FJUAFh9aB3E0CeiBEUHviEGLjwu2l+qzEP924LQSySThg2Wlj85QLXfMUc6DUT E9pfBEv1JBP3+vc= -----END CERTIFICATE-----Generated at Mon Aug 11 05:57:08 2025 by rpki-client