$ rpki-client -vvf rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/438C7C387D6F11ECBCDC721DC4F9AE02.roa File: 438C7C387D6F11ECBCDC721DC4F9AE02.roa (raw, json) Hash identifier: RYTGTaJo9tgeLfdLTz9lnkOel+5ud5H41Dw2zm5x3dM= Subject key identifier: 3E:BD:7B:D1:8D:70:3D:BF:6A:7B:E6:38:20:74:92:10:4A:34:C2:32 Certificate issuer: /CN=A9157E9C/serialNumber=E99FF0448B0BDA3771CDC4A96C59F7C9F9C87944 Certificate serial: 0402 Authority key identifier: E9:9F:F0:44:8B:0B:DA:37:71:CD:C4:A9:6C:59:F7:C9:F9:C8:79:44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/438C7C387D6F11ECBCDC721DC4F9AE02.roa Signing time: Wed 25 Jun 2025 00:45:20 +0000 ROA not before: Wed 25 Jun 2025 00:45:20 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 149305 IP address blocks: 203.22.214.0/24 maxlen: 24 2401:2fc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.crl rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 00:56:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1026 (0x402) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157E9C, serialNumber=E99FF0448B0BDA3771CDC4A96C59F7C9F9C87944 Validity Not Before: Jun 25 00:45:20 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=685b46a0-2ca9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:6e:3f:21:0d:16:0f:8b:52:c9:5d:cc:91:86: f4:7a:bf:ee:68:1c:ab:12:52:9e:11:d6:3a:b3:47: bc:a6:06:b5:37:80:68:a2:3e:85:de:fd:38:35:1f: 34:45:91:14:f0:82:cb:41:58:a2:43:4d:eb:6a:7a: c7:b7:f8:7e:87:14:20:bd:99:a8:f4:ab:a6:f6:7f: 55:49:79:8a:c6:47:11:8d:cb:57:26:34:6c:2c:c0: f0:f8:7e:fd:86:d4:a7:1a:19:47:6e:c3:4a:4a:4b: c3:5b:8b:9e:e7:db:72:64:f2:0d:49:24:4d:25:24: 79:c3:3b:e0:49:10:59:bd:0e:da:3c:08:f0:fd:cd: 59:d1:ed:4c:aa:95:99:1e:18:04:0c:ef:b0:76:2a: 0b:be:11:ba:70:74:a5:3a:c6:2e:72:a5:f8:b8:a9: a0:07:9d:04:c2:f0:07:2e:cc:1e:09:46:4f:f0:7d: d3:fb:cf:1a:a8:01:0e:70:17:7d:99:16:5c:9f:32: 3f:c4:27:6a:d2:a5:8c:4b:37:eb:75:6a:89:e0:7f: 9d:72:1d:76:8e:68:b0:35:cf:72:19:9e:c0:13:06: 60:b0:41:4d:db:06:ba:fb:f4:e6:e0:71:01:b9:d7: f1:27:4f:b4:4f:ba:f7:7f:80:d1:e6:43:74:fe:c0: 64:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:BD:7B:D1:8D:70:3D:BF:6A:7B:E6:38:20:74:92:10:4A:34:C2:32 X509v3 Authority Key Identifier: keyid:E9:9F:F0:44:8B:0B:DA:37:71:CD:C4:A9:6C:59:F7:C9:F9:C8:79:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/438C7C387D6F11ECBCDC721DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.22.214.0/24 IPv6: 2401:2fc0::/32 Signature Algorithm: sha256WithRSAEncryption 3c:da:e5:c6:0d:26:65:be:c6:16:10:51:a7:87:e7:bd:13:69: 86:d2:fb:3e:b3:5e:2a:98:d4:57:57:66:5c:01:4c:3d:c1:0a: 77:54:cc:c2:9f:58:a7:6e:6e:83:93:4d:a5:b1:04:35:03:ad: 8b:8a:ad:7b:3d:68:0a:c3:ad:6b:43:1d:fd:91:d1:61:7e:e5: 50:2b:a5:a8:f8:2a:ad:59:0e:71:ce:e9:09:d7:54:68:33:b6: d4:e7:0c:dd:5a:30:45:9a:c1:4f:eb:0d:03:5b:5b:62:79:b6: ca:7a:21:65:e1:e7:74:b6:64:b4:4e:cc:ab:12:7b:08:d5:64: be:7b:b3:9a:71:3d:ad:f7:61:a2:69:15:ec:2e:7d:a3:ad:78: 87:3d:f3:8d:f8:fb:25:64:e2:16:56:b0:51:61:8c:92:6c:c9: 6c:7c:ac:52:db:77:e3:5a:42:8c:5c:e7:fc:69:90:8a:1d:49: 90:96:4d:94:3a:80:9c:f8:85:ac:9d:cf:ee:1b:34:48:6b:70: b2:50:0c:f9:47:03:04:27:f6:aa:ff:67:26:27:27:18:a5:9f: 0e:5f:b7:07:71:7b:59:5d:69:50:7d:de:22:72:4b:4c:87:e9: 09:7a:47:e3:fa:70:62:06:70:9f:07:85:7a:2c:aa:4b:d1:7f: ba:06:b2:2d -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICBAIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdFOUMxMTAvBgNVBAUTKEU5OUZGMDQ0OEIwQkRBMzc3MUNEQzRBOTZDNTlGN0M5 RjlDODc5NDQwHhcNMjUwNjI1MDA0NTIwWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODViNDZhMC0yY2E5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxG4/IQ0WD4tSyV3MkYb0er/uaByrElKeEdY6s0e8pga1N4Booj6F3v04NR80 RZEU8ILLQViiQ03ranrHt/h+hxQgvZmo9Kum9n9VSXmKxkcRjctXJjRsLMDw+H79 htSnGhlHbsNKSkvDW4ue59tyZPINSSRNJSR5wzvgSRBZvQ7aPAjw/c1Z0e1MqpWZ HhgEDO+wdioLvhG6cHSlOsYucqX4uKmgB50EwvAHLsweCUZP8H3T+88aqAEOcBd9 mRZcnzI/xCdq0qWMSzfrdWqJ4H+dch12jmiwNc9yGZ7AEwZgsEFN2wa6+/Tm4HEB udfxJ0+0T7r3f4DR5kN0/sBkHwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFD69e9GN cD2/anvmOCB0khBKNMIyMB8GA1UdIwQYMBaAFOmf8ESLC9o3cc3EqWxZ98n5yHlE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0U5Qy81MEM5OTNDRTdE NjMxMUVDQUM1QzdGMUVDNEY5QUUwMi82Wl93UklzTDJqZHh6Y1NwYkZuM3lmbkll VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZaX3dSSXNMMmpkeHpjU3BiRm4zeWZuSWVVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTdFOUMvNTBDOTkzQ0U3RDYzMTFFQ0FDNUM3RjFFQzRGOUFFMDIvNDM4QzdDMzg3 RDZGMTFFQ0JDREM3MjFEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBADLFtYwDQQCAAIwBwMFACQBL8AwDQYJKoZIhvcNAQELBQAD ggEBADza5cYNJmW+xhYQUaeH570TaYbS+z6zXiqY1FdXZlwBTD3BCndUzMKfWKdu boOTTaWxBDUDrYuKrXs9aArDrWtDHf2R0WF+5VArpaj4Kq1ZDnHO6QnXVGgzttTn DN1aMEWawU/rDQNbW2J5tsp6IWXh53S2ZLROzKsSewjVZL57s5pxPa33YaJpFewu faOteIc98434+yVk4hZWsFFhjJJsyWx8rFLbd+NaQoxc5/xpkIodSZCWTZQ6gJz4 haydz+4bNEhrcLJQDPlHAwQn9qr/ZyYnJxilnw5ftwdxe1ldaVB93iJyS0yH6Ql6 R+P6cGIGcJ8HhXosqkvRf7oGsi0= -----END CERTIFICATE-----Generated at Fri Aug 8 20:53:45 2025 by rpki-client