$ rpki-client -vvf rpki.apnic.net/member_repository/A9168946/C4006A88B8C211EEB5F72B6DC4F9AE02/B36E0BFAB8C511EE9C927072C4F9AE02.roa File: B36E0BFAB8C511EE9C927072C4F9AE02.roa (raw, json) Hash identifier: Qm+OTW2NbpHhD1GfCowGRntOHCUaUo/6QfBRl6hKqIc= Subject key identifier: 63:C3:B9:03:E1:43:55:ED:5A:B7:8C:45:F3:7B:E3:CB:34:D0:FB:1D Certificate issuer: /CN=A9168946/serialNumber=918CB67A0262238DEF78FF288A45D9281F95D2EB Certificate serial: 0117 Authority key identifier: 91:8C:B6:7A:02:62:23:8D:EF:78:FF:28:8A:45:D9:28:1F:95:D2:EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kYy2egJiI43veP8oikXZKB-V0us.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168946/C4006A88B8C211EEB5F72B6DC4F9AE02/B36E0BFAB8C511EE9C927072C4F9AE02.roa Signing time: Fri 11 Jul 2025 05:41:44 +0000 ROA not before: Fri 11 Jul 2025 05:41:44 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 131239 IP address blocks: 202.14.82.0/23 maxlen: 24 202.14.84.0/24 maxlen: 24 202.27.72.0/22 maxlen: 24 202.36.197.0/24 maxlen: 24 202.36.246.0/24 maxlen: 24 202.36.248.0/22 maxlen: 24 202.36.252.0/23 maxlen: 24 202.36.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168946/C4006A88B8C211EEB5F72B6DC4F9AE02/kYy2egJiI43veP8oikXZKB-V0us.crl rsync://rpki.apnic.net/member_repository/A9168946/C4006A88B8C211EEB5F72B6DC4F9AE02/kYy2egJiI43veP8oikXZKB-V0us.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kYy2egJiI43veP8oikXZKB-V0us.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 279 (0x117) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168946, serialNumber=918CB67A0262238DEF78FF288A45D9281F95D2EB Validity Not Before: Jul 11 05:41:44 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=6870a418-8968 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:83:fb:1f:ef:89:06:52:47:2a:af:82:20:4a: 84:ef:67:25:62:c3:43:3d:b5:de:2a:4f:7c:66:82: 6e:30:c6:b1:6a:b8:93:9a:11:fc:50:aa:ef:ce:3f: 7a:6d:f3:8f:0f:87:17:e9:1b:9f:e8:de:5a:ec:9a: 84:32:4b:74:0f:d5:14:a9:b7:05:3f:c2:ee:31:66: e4:c3:e5:98:2f:fe:94:2e:fe:f1:96:cc:fd:47:a2: 05:b0:80:c2:cd:75:53:01:be:e2:72:2f:c0:4a:63: 4f:08:78:29:64:f5:90:bb:d7:88:4e:55:0d:0b:13: 59:1d:c9:6f:ff:19:fe:56:4f:9d:00:49:80:28:38: 63:e7:4d:16:5a:ea:4a:22:da:d0:56:58:fe:8a:99: cc:27:b4:2d:f7:31:71:8a:bd:91:85:64:7b:a9:71: fc:25:75:44:42:e9:86:eb:a3:9b:95:81:92:9c:b5: 51:ad:98:7f:b8:b4:cc:8f:e4:bf:48:df:5e:4a:5b: 8f:e7:08:56:57:4a:42:b3:fe:2b:44:7d:d9:a9:00: 5e:70:01:0c:5b:04:25:3f:0f:6f:5c:e3:2b:7e:47: 65:b9:c4:71:59:05:09:0d:f2:7a:09:2c:de:55:08: b7:da:6c:4c:7b:d6:07:ae:41:69:21:9a:f7:3f:d4: 10:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:C3:B9:03:E1:43:55:ED:5A:B7:8C:45:F3:7B:E3:CB:34:D0:FB:1D X509v3 Authority Key Identifier: keyid:91:8C:B6:7A:02:62:23:8D:EF:78:FF:28:8A:45:D9:28:1F:95:D2:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168946/C4006A88B8C211EEB5F72B6DC4F9AE02/kYy2egJiI43veP8oikXZKB-V0us.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kYy2egJiI43veP8oikXZKB-V0us.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168946/C4006A88B8C211EEB5F72B6DC4F9AE02/B36E0BFAB8C511EE9C927072C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.14.82.0-202.14.84.255 202.27.72.0/22 202.36.197.0/24 202.36.246.0/24 202.36.248.0-202.36.254.255 Signature Algorithm: sha256WithRSAEncryption 91:ff:d1:fc:16:49:03:0f:76:a3:88:50:4c:f1:ab:0f:51:5b: a8:a2:52:6d:42:88:bd:17:50:9e:11:05:9f:12:18:f0:85:8f: 7a:90:29:93:05:d1:10:17:10:22:f7:f6:80:f3:2b:ca:cc:65: 95:3d:ab:31:4d:1b:d7:b4:1b:0c:e7:1a:04:d9:d3:13:cf:bb: c1:bb:79:d9:a1:dc:01:b1:5d:4f:b1:c3:bd:a0:ff:86:22:aa: 17:36:63:9e:b8:35:66:91:1c:5f:12:b3:f9:f0:a3:82:5c:e4: 74:c4:2d:48:11:b7:21:e1:b3:a5:c3:f4:3d:f4:74:1e:7b:de: 66:62:c7:58:7c:96:5b:aa:7a:19:26:2d:e8:1f:e0:90:ab:6e: 13:2c:56:cb:0a:f8:af:b6:82:5b:c6:f8:48:02:38:1c:ce:1c: 9b:1c:8f:8d:ce:46:41:0f:b0:2d:b9:c3:63:56:f1:28:8b:50: 0e:8d:db:a3:0f:db:57:89:49:fe:bb:85:c2:53:99:ef:4f:6a: e0:3b:76:77:80:04:23:6d:8f:5a:61:76:d7:53:b4:47:16:98: ec:2e:e7:0f:42:bf:03:2d:6f:dd:6f:e2:b9:c1:2b:3b:9d:3a: 89:0b:f9:d1:56:4a:ab:11:b2:af:0b:fb:69:d8:d6:e3:c2:8e: 49:e7:fa:92 -----BEGIN CERTIFICATE----- MIIFmTCCBIGgAwIBAgICARcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg5NDYxMTAvBgNVBAUTKDkxOENCNjdBMDI2MjIzOERFRjc4RkYyODhBNDVEOTI4 MUY5NUQyRUIwHhcNMjUwNzExMDU0MTQ0WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODcwYTQxOC04OTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArYP7H++JBlJHKq+CIEqE72clYsNDPbXeKk98ZoJuMMaxariTmhH8UKrvzj96 bfOPD4cX6Ruf6N5a7JqEMkt0D9UUqbcFP8LuMWbkw+WYL/6ULv7xlsz9R6IFsIDC zXVTAb7ici/ASmNPCHgpZPWQu9eITlUNCxNZHclv/xn+Vk+dAEmAKDhj500WWupK ItrQVlj+ipnMJ7Qt9zFxir2RhWR7qXH8JXVEQumG66OblYGSnLVRrZh/uLTMj+S/ SN9eSluP5whWV0pCs/4rRH3ZqQBecAEMWwQlPw9vXOMrfkdlucRxWQUJDfJ6CSze VQi32mxMe9YHrkFpIZr3P9QQWQIDAQABo4ICvTCCArkwHQYDVR0OBBYEFGPDuQPh Q1XtWreMRfN748s00PsdMB8GA1UdIwQYMBaAFJGMtnoCYiON73j/KIpF2SgfldLr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODk0Ni9DNDAwNkE4OEI4 QzIxMUVFQjVGNzJCNkRDNEY5QUUwMi9rWXkyZWdKaUk0M3ZlUDhvaWtYWktCLVYw dXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tZeTJlZ0ppSTQzdmVQOG9pa1haS0ItVjB1cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Njg5NDYvQzQwMDZBODhCOEMyMTFFRUI1RjcyQjZEQzRGOUFFMDIvQjM2RTBCRkFC OEM1MTFFRTlDOTI3MDcyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRwYIKwYBBQUHAQcBAf8E ODA2MDQEAgABMC4wDAMEAcoOUgMEAMoOVAMEAsobSAMEAMokxQMEAMok9jAMAwQD yiT4AwQAyiT+MA0GCSqGSIb3DQEBCwUAA4IBAQCR/9H8FkkDD3ajiFBM8asPUVuo olJtQoi9F1CeEQWfEhjwhY96kCmTBdEQFxAi9/aA8yvKzGWVPasxTRvXtBsM5xoE 2dMTz7vBu3nZodwBsV1PscO9oP+GIqoXNmOeuDVmkRxfErP58KOCXOR0xC1IEbch 4bOlw/Q99HQee95mYsdYfJZbqnoZJi3oH+CQq24TLFbLCvivtoJbxvhIAjgczhyb HI+NzkZBD7AtucNjVvEoi1AOjdujD9tXiUn+u4XCU5nvT2rgO3Z3gAQjbY9aYXbX U7RHFpjsLucPQr8DLW/db+K5wSs7nTqJC/nRVkqrEbKvC/tp2Nbjwo5J5/qS -----END CERTIFICATE-----Generated at Sat Aug 9 14:30:42 2025 by rpki-client