$ rpki-client -vvf rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/1A9D81EE6C4C11F090EC8B16C4F9AE02.roa File: 1A9D81EE6C4C11F090EC8B16C4F9AE02.roa (raw, json) Hash identifier: nDBN8ofBQzSuZlFacB02+d4KlQaWiR4DsWaWORqlM1w= Subject key identifier: 3C:0C:A1:86:AB:DF:CC:27:1F:D8:CA:B2:B9:CC:46:40:D1:84:AF:CE Certificate issuer: /CN=A9146A69/serialNumber=3AA5D74A49FEDE081766CDAC3BF7DDD036BBF901 Certificate serial: 07 Authority key identifier: 3A:A5:D7:4A:49:FE:DE:08:17:66:CD:AC:3B:F7:DD:D0:36:BB:F9:01 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqXXSkn-3ggXZs2sO_fd0Da7-QE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/1A9D81EE6C4C11F090EC8B16C4F9AE02.roa Signing time: Tue 29 Jul 2025 07:21:09 +0000 ROA not before: Tue 29 Jul 2025 07:21:09 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 202736 IP address blocks: 163.227.202.0/24 maxlen: 24 163.227.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.crl rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqXXSkn-3ggXZs2sO_fd0Da7-QE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146A69, serialNumber=3AA5D74A49FEDE081766CDAC3BF7DDD036BBF901 Validity Not Before: Jul 29 07:21:09 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=68887664-bcf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:78:eb:32:1f:ec:83:7d:c8:58:42:a1:47:4c: ec:a6:0b:15:87:fc:3b:78:30:33:be:b1:ca:cc:64: 38:20:8b:e1:1c:0d:18:43:b0:61:4c:37:8f:be:7d: db:8a:af:88:1e:df:3e:b8:6a:84:49:de:5c:30:8e: 59:47:4b:43:cf:08:8b:61:94:a3:3d:ee:dc:27:ef: 01:4d:e3:02:e3:65:b4:65:22:83:89:a3:39:a5:47: 20:71:dd:8b:db:c9:c2:c3:39:a3:a6:cd:82:db:03: 90:8a:d9:cd:57:46:ca:32:9a:af:2c:f8:42:55:a9: bd:64:54:10:18:df:dd:58:e4:35:0c:ea:df:88:16: a1:90:f7:07:26:92:83:60:0d:d1:7d:35:36:f0:cf: c9:e3:50:c9:6a:97:b3:6e:2f:5c:5a:e9:59:15:e6: 8a:bb:a9:36:37:bf:32:ba:af:d2:f1:92:66:c8:31: 82:5b:8c:bc:c3:49:94:84:9c:02:3f:28:25:5f:f4: 61:4d:4e:30:41:ed:2c:27:7d:bd:a3:5d:40:70:24: f3:e5:a0:29:28:69:c2:d4:fd:ea:61:e0:15:eb:2d: 01:f5:98:67:d9:6b:5c:72:d7:d8:bf:d4:9d:4d:e1: 20:a7:77:a2:c6:48:67:73:37:9c:eb:6b:03:d5:cd: f8:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:0C:A1:86:AB:DF:CC:27:1F:D8:CA:B2:B9:CC:46:40:D1:84:AF:CE X509v3 Authority Key Identifier: keyid:3A:A5:D7:4A:49:FE:DE:08:17:66:CD:AC:3B:F7:DD:D0:36:BB:F9:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqXXSkn-3ggXZs2sO_fd0Da7-QE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/1A9D81EE6C4C11F090EC8B16C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 163.227.202.0/23 Signature Algorithm: sha256WithRSAEncryption 4b:40:e6:d6:3f:15:d5:e5:d0:2c:69:0d:84:ea:80:7c:0b:fd: c7:7e:51:3b:9f:89:a5:6f:d5:de:2c:9a:71:ad:b0:74:a7:e8: cc:52:45:cd:a3:46:98:3d:52:3a:f1:88:01:72:6b:b3:f3:12: 8c:3b:fa:84:7b:33:ec:c5:59:4a:b6:d9:b1:21:ff:77:ee:d6: 84:86:ec:9b:ce:00:63:c8:32:a7:56:ac:ce:f1:a2:b3:b7:12: df:1f:89:56:ff:c1:58:70:d8:fa:55:72:40:9b:22:42:e8:41: 1d:aa:a3:c6:87:e3:4e:5b:1a:79:6f:e0:4f:e7:99:dc:14:39: ac:35:7b:63:9b:7f:14:26:5e:02:7a:6b:17:11:f2:8d:e9:28: 94:15:56:b4:f7:fb:ec:34:f6:75:15:72:46:4e:2a:a8:9d:8b: 99:49:82:f1:72:9b:38:24:7e:fe:f2:f5:27:29:01:81:05:f7: ae:be:fd:b8:f9:0c:64:fa:73:02:87:97:e7:4b:78:80:a5:c4: bc:1f:2d:a8:52:eb:f3:9d:9c:48:4a:60:bf:e1:9e:c9:8e:96: 9d:ca:4b:1f:62:9e:78:34:1d:02:46:18:f2:c2:b6:40:66:d4: 86:6b:7a:b5:7d:9b:cd:68:fe:c2:63:f3:11:95:47:0d:0a:52: e0:06:23:c3 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NkE2OTExMC8GA1UEBRMoM0FBNUQ3NEE0OUZFREUwODE3NjZDREFDM0JGN0RERDAz NkJCRjkwMTAeFw0yNTA3MjkwNzIxMDlaFw0yNjA3MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY4ODg3NjY0LWJjZjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8eOsyH+yDfchYQqFHTOymCxWH/Dt4MDO+scrMZDggi+EcDRhDsGFMN4++fduK r4ge3z64aoRJ3lwwjllHS0PPCIthlKM97twn7wFN4wLjZbRlIoOJozmlRyBx3Yvb ycLDOaOmzYLbA5CK2c1XRsoymq8s+EJVqb1kVBAY391Y5DUM6t+IFqGQ9wcmkoNg DdF9NTbwz8njUMlql7NuL1xa6VkV5oq7qTY3vzK6r9LxkmbIMYJbjLzDSZSEnAI/ KCVf9GFNTjBB7Swnfb2jXUBwJPPloCkoacLU/eph4BXrLQH1mGfZa1xy19i/1J1N 4SCnd6LGSGdzN5zrawPVzfgHAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUPAyhhqvf zCcf2MqyucxGQNGEr84wHwYDVR0jBBgwFoAUOqXXSkn+3ggXZs2sO/fd0Da7+QEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2QTY5L0NCMUNGRTg0NkM0 QTExRjA5ODczMUQxM0M0RjlBRTAyL09xWFhTa24tM2dnWFpzMnNPX2ZkMERhNy1R RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvT3FYWFNrbi0zZ2dYWnMyc09fZmQwRGE3LVFFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkE2OS9DQjFDRkU4NDZDNEExMUYwOTg3MzFEMTNDNEY5QUUwMi8xQTlEODFFRTZD NEMxMUYwOTBFQzhCMTZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaPjyjANBgkqhkiG9w0BAQsFAAOCAQEAS0Dm1j8V1eXQLGkN hOqAfAv9x35RO5+JpW/V3iyaca2wdKfozFJFzaNGmD1SOvGIAXJrs/MSjDv6hHsz 7MVZSrbZsSH/d+7WhIbsm84AY8gyp1aszvGis7cS3x+JVv/BWHDY+lVyQJsiQuhB HaqjxofjTlsaeW/gT+eZ3BQ5rDV7Y5t/FCZeAnprFxHyjekolBVWtPf77DT2dRVy Rk4qqJ2LmUmC8XKbOCR+/vL1JykBgQX3rr79uPkMZPpzAoeX50t4gKXEvB8tqFLr 852cSEpgv+GeyY6WncpLH2KeeDQdAkYY8sK2QGbUhmt6tX2bzWj+wmPzEZVHDQpS 4AYjww== -----END CERTIFICATE-----Generated at Sun Aug 10 21:07:06 2025 by rpki-client