$ rpki-client -vvf rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/3FDD68D466B111F096217E0AC4F9AE02.roa File: 3FDD68D466B111F096217E0AC4F9AE02.roa (raw, json) Hash identifier: OFsUhK9JC7w3rXtdxjhvb6l56OfeOTaDKO1jO9fchKs= Subject key identifier: 1F:43:2D:B8:F3:7E:D9:67:C9:FD:7A:90:DD:FF:B5:33:1D:FC:FC:39 Certificate issuer: /CN=A9159B6F/serialNumber=15839330A81ED8992073A23804C9F590538FB9D2 Certificate serial: 010F Authority key identifier: 15:83:93:30:A8:1E:D8:99:20:73:A2:38:04:C9:F5:90:53:8F:B9:D2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYOTMKge2Jkgc6I4BMn1kFOPudI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/3FDD68D466B111F096217E0AC4F9AE02.roa Signing time: Tue 22 Jul 2025 04:06:31 +0000 ROA not before: Tue 22 Jul 2025 04:06:31 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 138032 IP address blocks: 157.20.74.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/FYOTMKge2Jkgc6I4BMn1kFOPudI.crl rsync://rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/FYOTMKge2Jkgc6I4BMn1kFOPudI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYOTMKge2Jkgc6I4BMn1kFOPudI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 05:04:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 271 (0x10f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159B6F, serialNumber=15839330A81ED8992073A23804C9F590538FB9D2 Validity Not Before: Jul 22 04:06:31 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=687f0e47-9bc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:86:08:6e:c5:2b:3a:0f:33:c3:e2:5a:e8:4f: e0:bb:25:e0:85:1e:70:b5:48:f0:fe:66:a4:88:ad: 36:18:16:d5:c0:35:cc:bf:a9:ba:85:e8:bb:df:44: 34:37:a2:53:9e:5b:66:0d:9b:18:51:6e:6c:93:3f: a5:38:ef:ba:16:47:46:8d:f6:b5:ba:68:46:ba:ce: 54:47:0d:1b:4b:33:13:61:25:1c:3d:b9:c2:4f:6d: ef:6a:ac:12:82:30:9f:fc:5d:22:d8:69:c7:48:41: f7:03:c4:58:47:44:59:d9:4e:ac:71:de:60:a2:6d: fd:d7:ac:b4:69:18:a0:e9:f7:56:b5:89:18:f5:92: 71:13:ed:fc:cb:51:54:ae:2f:e4:cc:b0:de:4b:35: 77:b8:77:70:8a:36:b2:4a:5b:b0:ef:83:b6:9d:c8: 87:93:fe:51:2c:7b:c9:d6:c9:44:16:c3:dd:05:16: 5a:2c:e8:ba:e7:d5:7b:66:e2:10:2f:78:12:73:34: 5f:d5:e3:4f:84:4b:02:7d:eb:a9:62:92:d7:12:3e: aa:c9:a1:8b:63:a0:90:cd:53:a2:26:a8:e0:86:dd: ed:e7:04:2d:b4:48:62:a6:54:a3:90:81:dc:ca:b0: 9b:c7:cc:59:3b:74:4e:31:4e:77:38:b5:3d:ca:d7: 7e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:43:2D:B8:F3:7E:D9:67:C9:FD:7A:90:DD:FF:B5:33:1D:FC:FC:39 X509v3 Authority Key Identifier: keyid:15:83:93:30:A8:1E:D8:99:20:73:A2:38:04:C9:F5:90:53:8F:B9:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/FYOTMKge2Jkgc6I4BMn1kFOPudI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYOTMKge2Jkgc6I4BMn1kFOPudI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/3FDD68D466B111F096217E0AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.20.74.0/23 Signature Algorithm: sha256WithRSAEncryption 29:e4:15:81:a7:e9:c6:44:ab:d8:4d:a2:2b:f7:69:f8:00:ee: 0d:da:d8:83:81:c2:c3:c3:40:c7:af:e0:62:b0:05:a3:29:b9: 39:e8:01:94:c4:6f:aa:89:68:89:cf:29:13:c4:4d:72:3c:29: 80:c5:3f:0e:8b:e3:0c:de:81:21:56:d4:2f:6f:ad:e0:8e:1d: ab:d4:1c:76:52:28:c8:b5:bc:01:2b:31:14:86:61:8f:a8:77: 3b:07:df:df:64:23:be:f8:12:f1:f9:70:04:3d:7c:7e:0b:c5: 42:09:a8:16:dc:ab:cd:5c:d2:f4:fb:3d:d7:1b:08:c1:fc:9c: 22:5e:a8:4f:4d:b1:6c:8d:9e:49:fb:df:8d:d0:6d:7c:0d:d2: 68:4a:c4:41:25:c3:e3:c5:9f:9c:ec:17:b4:39:96:10:20:8f: 1b:64:14:a9:7a:45:05:1f:99:70:30:12:55:99:9b:cd:2e:79: 93:58:8c:7c:d9:a2:2a:db:6a:f8:fb:98:c9:4a:4c:40:3b:d7: 42:27:d1:41:26:1d:9a:ce:3d:7c:13:5a:9f:08:9a:5c:e7:a0: 66:45:7a:91:6e:20:53:12:e2:fb:53:63:ba:71:5d:65:78:79: d2:a8:68:94:ea:c5:3d:1c:37:c8:96:27:c4:5e:19:6d:81:0a: b2:44:bd:3a -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTlCNkYxMTAvBgNVBAUTKDE1ODM5MzMwQTgxRUQ4OTkyMDczQTIzODA0QzlGNTkw NTM4RkI5RDIwHhcNMjUwNzIyMDQwNjMxWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02ODdmMGU0Ny05YmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsYYIbsUrOg8zw+Ja6E/guyXghR5wtUjw/makiK02GBbVwDXMv6m6hei730Q0 N6JTnltmDZsYUW5skz+lOO+6FkdGjfa1umhGus5URw0bSzMTYSUcPbnCT23vaqwS gjCf/F0i2GnHSEH3A8RYR0RZ2U6scd5gom3916y0aRig6fdWtYkY9ZJxE+38y1FU ri/kzLDeSzV3uHdwijaySluw74O2nciHk/5RLHvJ1slEFsPdBRZaLOi659V7ZuIQ L3gSczRf1eNPhEsCfeupYpLXEj6qyaGLY6CQzVOiJqjght3t5wQttEhiplSjkIHc yrCbx8xZO3ROMU53OLU9ytd+NQIDAQABo4IClTCCApEwHQYDVR0OBBYEFB9DLbjz ftlnyf16kN3/tTMd/Pw5MB8GA1UdIwQYMBaAFBWDkzCoHtiZIHOiOATJ9ZBTj7nS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OUI2Ri8yQUQ1RjZEOEQw OUMxMUVFODBBQjhEN0VDNEY5QUUwMi9GWU9UTUtnZTJKa2djNkk0Qk1uMWtGT1B1 ZEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0ZZT1RNS2dlMkprZ2M2STRCTW4xa0ZPUHVkSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTlCNkYvMkFENUY2RDhEMDlDMTFFRTgwQUI4RDdFQzRGOUFFMDIvM0ZERDY4RDQ2 NkIxMTFGMDk2MjE3RTBBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGdFEowDQYJKoZIhvcNAQELBQADggEBACnkFYGn6cZEq9hN oiv3afgA7g3a2IOBwsPDQMev4GKwBaMpuTnoAZTEb6qJaInPKRPETXI8KYDFPw6L 4wzegSFW1C9vreCOHavUHHZSKMi1vAErMRSGYY+odzsH399kI774EvH5cAQ9fH4L xUIJqBbcq81c0vT7PdcbCMH8nCJeqE9NsWyNnkn7343QbXwN0mhKxEElw+PFn5zs F7Q5lhAgjxtkFKl6RQUfmXAwElWZm80ueZNYjHzZoirbavj7mMlKTEA710In0UEm HZrOPXwTWp8ImlznoGZFepFuIFMS4vtTY7pxXWV4edKoaJTqxT0cN8iWJ8ReGW2B CrJEvTo= -----END CERTIFICATE-----Generated at Wed Aug 13 02:12:17 2025 by rpki-client