$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/CD70D3940A7811EEA489D07BC4F9AE02.roa File: CD70D3940A7811EEA489D07BC4F9AE02.roa (raw, json) Hash identifier: 7nW4B9tgYZxJlUM/jyWz4ppQFx5pTU5qJulzmizVwPY= Subject key identifier: FA:0E:17:0A:D7:D1:27:42:43:52:0B:5B:94:F6:2F:DE:CF:54:DA:B8 Certificate issuer: /CN=A9146207/serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B Certificate serial: 2570 Authority key identifier: 9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/CD70D3940A7811EEA489D07BC4F9AE02.roa Signing time: Mon 04 Aug 2025 16:24:24 +0000 ROA not before: Mon 04 Aug 2025 16:24:24 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 26344 IP address blocks: 120.28.20.0/24 maxlen: 24 222.127.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:02:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9584 (0x2570) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146207, serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B Validity Not Before: Aug 4 16:24:24 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=6890deb7-b42c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:08:d4:b0:75:f4:ea:63:1c:6f:89:32:19:4b: 43:d6:2c:b8:34:95:47:93:73:08:c5:b9:d7:69:70: ba:d8:94:f6:d7:0d:c8:06:e8:44:77:b5:cc:fa:2b: 03:33:c0:df:6b:7e:c1:23:0d:08:cb:94:36:cd:2e: 1f:05:69:08:cd:45:f1:b3:d2:27:b2:ab:cd:9e:e5: a7:71:41:81:74:94:08:af:c4:02:ad:65:eb:d3:9a: 1f:2a:99:65:a8:ca:00:8b:bd:1a:15:20:40:82:30: 73:9e:11:d7:bd:55:54:a4:ba:52:31:25:57:0f:f2: d4:a2:13:8e:de:7a:71:7e:8f:a9:b5:1a:3e:72:c7: 5d:c8:11:58:60:86:fb:ae:65:88:09:a9:d8:45:25: 44:2c:6c:aa:45:05:5f:7c:bb:eb:e3:bc:0f:4c:92: 4b:45:81:bf:92:91:a1:2a:e4:82:aa:e8:0a:8c:bf: 7f:34:7f:3b:89:51:70:2e:fb:db:00:4e:f6:5e:52: 5d:d7:f1:b9:2d:47:ba:7c:71:b1:01:5e:d6:96:9d: de:28:b1:7e:de:87:d3:6c:1d:c3:ab:b5:ca:ea:c0: 41:e9:65:7d:a6:1a:7d:c8:86:27:fa:6c:97:3f:78: f4:7c:7e:11:12:d8:f2:bf:69:23:d0:fb:2e:7c:4d: c2:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:0E:17:0A:D7:D1:27:42:43:52:0B:5B:94:F6:2F:DE:CF:54:DA:B8 X509v3 Authority Key Identifier: keyid:9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/CD70D3940A7811EEA489D07BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 120.28.20.0/24 222.127.19.0/24 Signature Algorithm: sha256WithRSAEncryption cd:81:21:23:c7:e8:d2:e3:6a:2f:0e:d9:ce:52:7b:18:f7:bc: 52:b6:f9:d1:96:46:c5:25:bd:2d:ba:49:67:7e:e1:fa:06:76: 2f:95:af:bd:00:0c:db:02:ca:e7:69:50:4b:b3:2c:d4:a0:74: 7d:d2:66:d8:2f:ef:7d:e3:b5:6e:3a:92:b3:19:ae:8c:24:85: a5:14:6d:91:41:a4:a6:14:8d:88:1f:ef:bd:46:e3:69:90:3f: c6:8f:8f:53:5e:21:cb:a2:1d:55:72:09:55:dd:1a:80:4e:82: 5b:27:bb:9b:96:d7:b0:fe:a2:fb:15:97:2b:a2:92:40:8c:76: 67:27:85:89:0d:cf:07:db:e3:87:03:77:e8:06:26:92:90:5a: b0:e5:5e:44:22:f4:a5:30:13:b4:f9:83:8d:92:50:81:1a:a1: 8a:78:3a:7a:2d:80:15:0b:91:56:1e:ce:39:01:35:f1:50:8d: 55:0d:32:1b:32:04:60:96:b6:e2:5c:4d:84:18:67:d4:47:77: 8c:1d:ae:5e:86:86:4a:6f:8e:e4:41:a1:7e:52:96:e7:70:91: f7:ed:04:50:90:dd:44:5c:67:0d:43:44:ce:04:2b:2d:68:50: 88:ab:5c:a9:14:0d:9a:18:8d:f8:d3:0d:96:1c:a7:de:4d:fe: 23:7e:b4:aa -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICJXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYyMDcxMTAvBgNVBAUTKDlFNjY4RTZFNjdCQUQwQUNGOTQwQTIyOEM0QkMwOTNC OEIyNDAwMkIwHhcNMjUwODA0MTYyNDI0WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODkwZGViNy1iNDJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsgjUsHX06mMcb4kyGUtD1iy4NJVHk3MIxbnXaXC62JT21w3IBuhEd7XM+isD M8Dfa37BIw0Iy5Q2zS4fBWkIzUXxs9InsqvNnuWncUGBdJQIr8QCrWXr05ofKpll qMoAi70aFSBAgjBznhHXvVVUpLpSMSVXD/LUohOO3npxfo+ptRo+csddyBFYYIb7 rmWICanYRSVELGyqRQVffLvr47wPTJJLRYG/kpGhKuSCqugKjL9/NH87iVFwLvvb AE72XlJd1/G5LUe6fHGxAV7Wlp3eKLF+3ofTbB3Dq7XK6sBB6WV9php9yIYn+myX P3j0fH4REtjyv2kj0PsufE3C7QIDAQABo4ICmzCCApcwHQYDVR0OBBYEFPoOFwrX 0SdCQ1ILW5T2L97PVNq4MB8GA1UdIwQYMBaAFJ5mjm5nutCs+UCiKMS8CTuLJAAr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjIwNy9GRTc1NjM0MDAy Q0IxMUU2ODY1QjhGM0JDNEY5QUUwMi9ubWFPYm1lNjBLejVRS0lveEx3Sk80c2tB Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25tYU9ibWU2MEt6NVFLSW94THdKTzRza0FDcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDYyMDcvRkU3NTYzNDAwMkNCMTFFNjg2NUI4RjNCQzRGOUFFMDIvQ0Q3MEQzOTQw QTc4MTFFRUE0ODlEMDdCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAB4HBQDBADefxMwDQYJKoZIhvcNAQELBQADggEBAM2BISPH 6NLjai8O2c5Sexj3vFK2+dGWRsUlvS26SWd+4foGdi+Vr70ADNsCyudpUEuzLNSg dH3SZtgv733jtW46krMZrowkhaUUbZFBpKYUjYgf771G42mQP8aPj1NeIcuiHVVy CVXdGoBOglsnu5uW17D+ovsVlyuikkCMdmcnhYkNzwfb44cDd+gGJpKQWrDlXkQi 9KUwE7T5g42SUIEaoYp4OnotgBULkVYezjkBNfFQjVUNMhsyBGCWtuJcTYQYZ9RH d4wdrl6GhkpvjuRBoX5SludwkfftBFCQ3URcZw1DRM4EKy1oUIirXKkUDZoYjfjT DZYcp95N/iN+tKo= -----END CERTIFICATE-----Generated at Wed Nov 5 16:27:01 2025 by rpki-client