$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/DFBA3AD2555611E7A82D327CC4F9AE02.roa File: DFBA3AD2555611E7A82D327CC4F9AE02.roa (raw, json) Hash identifier: nJOgKpKVASxgnXQj3ba2FE3qRrXdPvsCxLHQPYaRz00= Subject key identifier: 8B:A2:74:12:0B:41:8B:54:A0:9A:AC:AE:7F:81:90:0D:15:0E:C8:96 Certificate issuer: /CN=A9146207/serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B Certificate serial: 256B Authority key identifier: 9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/DFBA3AD2555611E7A82D327CC4F9AE02.roa Signing time: Mon 04 Aug 2025 16:24:19 +0000 ROA not before: Mon 04 Aug 2025 16:24:19 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 23689 IP address blocks: 120.28.28.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9579 (0x256b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146207, serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B Validity Not Before: Aug 4 16:24:19 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=6890deb3-ba4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:04:d5:2c:87:98:b5:ea:1c:6e:2d:83:f2:c7: 80:53:db:6a:d3:7c:2d:57:0d:d3:f5:e5:b9:a7:27: 3f:57:43:1b:59:9b:ab:b2:03:3a:7a:05:76:1f:09: ab:78:24:11:b8:db:aa:da:c5:da:0f:09:dd:89:53: 3f:48:a5:d0:03:e1:5f:46:d0:63:9c:e7:a4:e1:6c: f6:c7:89:4a:53:95:93:ca:a6:77:fd:84:bf:e8:4e: e2:69:a0:ac:32:49:61:20:43:e5:61:f6:d9:ee:1f: f5:05:67:59:5e:8b:9f:df:75:c5:62:8c:48:d5:f1: 7e:cf:6c:93:36:b9:bb:ea:fd:37:60:75:db:1c:34: 75:96:ed:c0:2f:09:eb:e2:89:b3:93:28:43:4e:d2: ad:ed:ae:19:c5:c3:b7:f7:2b:8c:61:b8:ca:03:3f: eb:9c:ec:f4:5e:e9:fa:8a:0f:d1:1f:39:6c:0f:6d: d2:be:4c:76:fa:1d:10:06:9b:fb:01:cc:84:2f:2f: 53:d1:f8:6e:05:3b:77:cd:97:0a:fe:98:f6:6e:16: 07:72:47:e2:23:ee:6d:d4:88:9e:36:bc:97:93:87: d2:94:4b:97:ca:2e:68:9f:5a:6f:48:c7:4d:0c:f3: af:03:b1:63:89:cc:60:0c:ed:80:e7:5c:df:1d:e9: 8a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:A2:74:12:0B:41:8B:54:A0:9A:AC:AE:7F:81:90:0D:15:0E:C8:96 X509v3 Authority Key Identifier: keyid:9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/DFBA3AD2555611E7A82D327CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 120.28.28.0/23 Signature Algorithm: sha256WithRSAEncryption da:35:d9:f4:23:d9:54:ed:0c:d5:1e:06:65:5a:60:d8:a5:17: 0a:52:a9:b9:7a:15:a5:ad:16:5a:42:e3:b9:36:22:71:83:b5: bc:9a:25:95:e8:7e:3e:58:9f:b3:fc:45:3d:9a:46:af:88:ac: 6b:65:0a:5b:9b:72:fa:e0:76:fc:a3:9c:1e:21:18:31:54:56: 83:b4:f1:25:ef:e3:e8:39:9b:d1:e1:e2:97:0e:b5:5a:4a:07: 97:0d:a6:5d:7a:74:f7:26:c6:fc:ea:c6:ac:39:b2:00:ab:de: ac:07:48:0d:1f:fb:a8:02:68:60:1e:e9:ed:95:c4:e5:74:a3: 1b:42:60:7b:c5:32:97:44:56:81:22:69:ef:16:80:a3:f4:67: 1f:3d:85:bc:46:ab:d8:e8:23:b3:e1:9d:66:ac:50:fb:48:55: 87:04:3d:83:23:a0:90:81:b8:68:54:cb:53:c8:af:2d:6a:d1: a0:b4:b7:dc:40:a5:37:b0:59:b6:b6:43:49:a9:ab:b8:8d:d2: 07:01:46:c4:c8:67:15:54:7e:71:e7:37:a1:98:22:40:56:83: 7c:5f:ed:19:69:62:19:08:2c:e2:b2:d8:77:cf:6f:d3:6b:7e: d5:52:24:dd:fc:6d:2e:84:0b:82:cd:18:63:b6:8d:b0:09:63: a1:9e:ab:a1 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICJWswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYyMDcxMTAvBgNVBAUTKDlFNjY4RTZFNjdCQUQwQUNGOTQwQTIyOEM0QkMwOTNC OEIyNDAwMkIwHhcNMjUwODA0MTYyNDE5WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODkwZGViMy1iYTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzwTVLIeYteocbi2D8seAU9tq03wtVw3T9eW5pyc/V0MbWZursgM6egV2Hwmr eCQRuNuq2sXaDwndiVM/SKXQA+FfRtBjnOek4Wz2x4lKU5WTyqZ3/YS/6E7iaaCs MklhIEPlYfbZ7h/1BWdZXouf33XFYoxI1fF+z2yTNrm76v03YHXbHDR1lu3ALwnr 4omzkyhDTtKt7a4ZxcO39yuMYbjKAz/rnOz0Xun6ig/RHzlsD23Svkx2+h0QBpv7 AcyELy9T0fhuBTt3zZcK/pj2bhYHckfiI+5t1IieNryXk4fSlEuXyi5on1pvSMdN DPOvA7FjicxgDO2A51zfHemKVQIDAQABo4IClTCCApEwHQYDVR0OBBYEFIuidBIL QYtUoJqsrn+BkA0VDsiWMB8GA1UdIwQYMBaAFJ5mjm5nutCs+UCiKMS8CTuLJAAr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjIwNy9GRTc1NjM0MDAy Q0IxMUU2ODY1QjhGM0JDNEY5QUUwMi9ubWFPYm1lNjBLejVRS0lveEx3Sk80c2tB Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25tYU9ibWU2MEt6NVFLSW94THdKTzRza0FDcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDYyMDcvRkU3NTYzNDAwMkNCMTFFNjg2NUI4RjNCQzRGOUFFMDIvREZCQTNBRDI1 NTU2MTFFN0E4MkQzMjdDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAF4HBwwDQYJKoZIhvcNAQELBQADggEBANo12fQj2VTtDNUe BmVaYNilFwpSqbl6FaWtFlpC47k2InGDtbyaJZXofj5Yn7P8RT2aRq+IrGtlClub cvrgdvyjnB4hGDFUVoO08SXv4+g5m9Hh4pcOtVpKB5cNpl16dPcmxvzqxqw5sgCr 3qwHSA0f+6gCaGAe6e2VxOV0oxtCYHvFMpdEVoEiae8WgKP0Zx89hbxGq9joI7Ph nWasUPtIVYcEPYMjoJCBuGhUy1PIry1q0aC0t9xApTewWba2Q0mpq7iN0gcBRsTI ZxVUfnHnN6GYIkBWg3xf7RlpYhkILOKy2HfPb9NrftVSJN38bS6EC4LNGGO2jbAJ Y6Geq6E= -----END CERTIFICATE-----Generated at Mon Aug 11 05:54:24 2025 by rpki-client