$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0A8/A059AF8A640D11EAB6395571C4F9AE02/F90F9A403ACB11EC9FEBB367C4F9AE02.roa File: F90F9A403ACB11EC9FEBB367C4F9AE02.roa (raw, json) Hash identifier: uKI22TwxIQY9iFbcuULN7d8S3JosFyv3WIhvtX7yzyk= Subject key identifier: 79:7B:FF:59:76:1E:EB:56:31:87:33:B8:00:B2:F8:E2:E9:1A:E0:91 Certificate issuer: /CN=A917E0A8/serialNumber=7ACE6DA35FB6A4A9F6F9970C18BCAF5B2748119F Certificate serial: 0A90 Authority key identifier: 7A:CE:6D:A3:5F:B6:A4:A9:F6:F9:97:0C:18:BC:AF:5B:27:48:11:9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/es5to1-2pKn2-ZcMGLyvWydIEZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E0A8/A059AF8A640D11EAB6395571C4F9AE02/F90F9A403ACB11EC9FEBB367C4F9AE02.roa Signing time: Wed 30 Apr 2025 19:29:36 +0000 ROA not before: Wed 30 Apr 2025 19:29:36 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 133752 IP address blocks: 203.9.150.0/24 maxlen: 24 203.20.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E0A8/A059AF8A640D11EAB6395571C4F9AE02/es5to1-2pKn2-ZcMGLyvWydIEZ8.crl rsync://rpki.apnic.net/member_repository/A917E0A8/A059AF8A640D11EAB6395571C4F9AE02/es5to1-2pKn2-ZcMGLyvWydIEZ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/es5to1-2pKn2-ZcMGLyvWydIEZ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:28:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2704 (0xa90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E0A8, serialNumber=7ACE6DA35FB6A4A9F6F9970C18BCAF5B2748119F Validity Not Before: Apr 30 19:29:36 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=68127a20-92ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:6c:94:86:19:d5:c6:f3:03:02:5e:cd:e5:ee: 22:91:21:2f:43:e1:99:ec:fa:ed:02:2b:c4:56:69: 25:31:6f:10:96:cf:3c:18:04:b2:05:6f:56:5a:43: 01:a8:43:b1:fd:8f:49:a2:22:49:5a:2a:e2:5e:05: 21:90:a0:0e:22:a2:c3:65:3c:35:2c:57:f8:d1:b4: b2:be:cf:6c:99:00:f5:47:31:46:d5:61:8c:c3:6d: cd:81:6d:1c:70:46:0b:2c:b9:9b:ae:35:51:b9:1e: 54:6f:a2:4e:c3:c2:37:bd:54:13:03:f9:f3:6c:cd: c7:62:36:5b:24:6a:4c:66:8b:df:03:1e:26:b5:ea: 9f:59:53:ff:71:ea:62:18:af:c9:73:d1:6c:03:66: 4f:ea:7a:32:70:f0:ce:e7:5a:ec:38:9a:60:f5:5a: e7:6f:8c:50:57:e7:68:cd:4a:53:f2:a2:1b:5c:66: 0e:43:c5:a8:fc:24:fa:56:93:7f:19:3b:6a:c3:c9: be:48:7f:40:71:3d:ce:3c:8a:19:ed:a4:42:2c:58: 16:7d:cd:ee:56:9a:fe:45:00:da:3c:e2:2e:4b:9d: 69:9d:b9:e3:92:97:3f:c3:67:b5:a9:bb:a8:93:0e: e3:cb:6d:8b:6b:56:0e:61:af:45:67:f5:83:a4:1c: e2:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:7B:FF:59:76:1E:EB:56:31:87:33:B8:00:B2:F8:E2:E9:1A:E0:91 X509v3 Authority Key Identifier: keyid:7A:CE:6D:A3:5F:B6:A4:A9:F6:F9:97:0C:18:BC:AF:5B:27:48:11:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E0A8/A059AF8A640D11EAB6395571C4F9AE02/es5to1-2pKn2-ZcMGLyvWydIEZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/es5to1-2pKn2-ZcMGLyvWydIEZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0A8/A059AF8A640D11EAB6395571C4F9AE02/F90F9A403ACB11EC9FEBB367C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.9.150.0/24 203.20.113.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:09:b9:89:bf:1c:33:5a:4a:25:c5:cd:cb:7f:40:c0:cf:e9: 27:60:7a:1d:5c:f0:a5:ef:18:c2:a4:c7:bc:df:b0:18:21:cd: a4:2b:f0:d1:8f:c2:71:ff:72:49:78:af:d1:6f:fd:f9:9e:49: f2:ab:31:ca:0b:ea:c0:59:f8:46:90:a7:6f:e3:56:72:2e:cc: 95:30:f1:af:9d:43:a2:18:5f:57:88:3d:4f:0c:c4:80:13:b8: 52:3a:50:ae:f6:c2:e1:1d:d5:a7:74:b6:64:df:c1:b4:c6:d5: 60:3d:eb:c3:7e:b6:2d:c9:5e:d3:8c:83:38:3c:a4:02:dc:fe: 07:b0:df:73:12:aa:c3:e9:dc:aa:79:df:73:ba:45:2f:35:ae: b1:ba:88:6e:5a:1f:29:4a:9c:ac:98:d7:0a:a3:b9:92:4b:8e: f5:5c:3f:e1:60:fd:5f:db:cf:4c:c7:d1:c9:04:93:9e:d0:53: 1c:bf:5e:49:ae:55:10:61:d3:58:7f:cd:8c:5d:c3:cb:97:0d: 2a:78:14:f6:02:34:a1:e1:05:30:e2:7f:3f:3f:61:47:51:e5: 02:76:29:9d:2e:85:a5:2a:9c:f1:78:72:d5:9a:3c:9a:26:4c: f6:dc:23:51:ac:23:df:9f:23:0a:9e:34:48:c5:08:ed:aa:03: 1a:5e:f2:10 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICCpAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UwQTgxMTAvBgNVBAUTKDdBQ0U2REEzNUZCNkE0QTlGNkY5OTcwQzE4QkNBRjVC Mjc0ODExOUYwHhcNMjUwNDMwMTkyOTM2WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODEyN2EyMC05MmZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxmyUhhnVxvMDAl7N5e4ikSEvQ+GZ7PrtAivEVmklMW8Qls88GASyBW9WWkMB qEOx/Y9JoiJJWiriXgUhkKAOIqLDZTw1LFf40bSyvs9smQD1RzFG1WGMw23NgW0c cEYLLLmbrjVRuR5Ub6JOw8I3vVQTA/nzbM3HYjZbJGpMZovfAx4mteqfWVP/cepi GK/Jc9FsA2ZP6noycPDO51rsOJpg9Vrnb4xQV+dozUpT8qIbXGYOQ8Wo/CT6VpN/ GTtqw8m+SH9AcT3OPIoZ7aRCLFgWfc3uVpr+RQDaPOIuS51pnbnjkpc/w2e1qbuo kw7jy22La1YOYa9FZ/WDpBzimQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFHl7/1l2 HutWMYczuACy+OLpGuCRMB8GA1UdIwQYMBaAFHrObaNftqSp9vmXDBi8r1snSBGf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTBBOC9BMDU5QUY4QTY0 MEQxMUVBQjYzOTU1NzFDNEY5QUUwMi9lczV0bzEtMnBLbjItWmNNR0x5dld5ZElF WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VzNXRvMS0ycEtuMi1aY01HTHl2V3lkSUVaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0UwQTgvQTA1OUFGOEE2NDBEMTFFQUI2Mzk1NTcxQzRGOUFFMDIvRjkwRjlBNDAz QUNCMTFFQzlGRUJCMzY3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBADLCZYDBADLFHEwDQYJKoZIhvcNAQELBQADggEBAC0JuYm/ HDNaSiXFzct/QMDP6Sdgeh1c8KXvGMKkx7zfsBghzaQr8NGPwnH/ckl4r9Fv/fme SfKrMcoL6sBZ+EaQp2/jVnIuzJUw8a+dQ6IYX1eIPU8MxIATuFI6UK72wuEd1ad0 tmTfwbTG1WA968N+ti3JXtOMgzg8pALc/gew33MSqsPp3Kp533O6RS81rrG6iG5a HylKnKyY1wqjuZJLjvVcP+Fg/V/bz0zH0ckEk57QUxy/XkmuVRBh01h/zYxdw8uX DSp4FPYCNKHhBTDifz8/YUdR5QJ2KZ0uhaUqnPF4ctWaPJomTPbcI1GsI9+fIwqe NEjFCO2qAxpe8hA= -----END CERTIFICATE-----Generated at Tue Nov 4 19:05:56 2025 by rpki-client