$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/BE6B7B76337911EA8016C03DC4F9AE02.roa File: BE6B7B76337911EA8016C03DC4F9AE02.roa (raw, json) Hash identifier: HUv1v8Gto4uomkF+e6hB6cIThpcg8yuooavYnXItNgo= Subject key identifier: A7:55:EB:AE:D8:3A:74:99:C9:4F:DB:3B:B5:EB:F5:1F:14:78:17:E3 Certificate issuer: /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7 Certificate serial: 3687 Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/BE6B7B76337911EA8016C03DC4F9AE02.roa Signing time: Sat 02 Aug 2025 15:52:42 +0000 ROA not before: Sat 02 Aug 2025 15:52:42 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 132651 IP address blocks: 175.184.236.0/22 maxlen: 22 175.184.236.0/24 maxlen: 24 175.184.237.0/24 maxlen: 24 175.184.238.0/24 maxlen: 24 175.184.239.0/24 maxlen: 24 2403:ba00:2000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 15:38:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13959 (0x3687) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7 Validity Not Before: Aug 2 15:52:42 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=688e344a-2522 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:de:3c:99:6f:a0:a9:e8:5b:ef:23:79:cc:03: fc:1a:4a:c5:b0:f4:53:4f:55:a6:fd:8b:4b:79:b8: 77:e2:c8:6d:1f:c4:78:28:69:89:79:22:e8:fc:cc: 92:3f:80:c6:60:aa:17:a1:8e:64:59:93:1c:8f:aa: 5a:05:b6:a4:5e:51:89:5f:40:08:87:3c:c2:a7:49: 2f:01:21:be:ab:4e:ce:3f:41:25:fc:d2:5d:7c:91: ab:28:6a:72:92:cf:b2:90:41:04:4f:53:a0:76:f6: c7:32:28:dd:15:cc:67:9b:49:d2:cf:db:1a:41:59: 1c:13:48:6c:e2:66:2c:c5:69:ad:3e:a7:f3:72:63: c6:3a:2b:4d:ff:a0:82:1d:83:62:d1:04:e6:bd:0c: 82:94:23:ee:17:ec:9a:65:8c:76:89:70:9f:25:f1: 31:7b:cd:c9:04:4c:1f:04:96:dd:63:cf:b7:b5:e6: 68:ec:be:21:4a:ce:7c:b7:49:52:ab:05:35:cf:51: be:36:c7:f1:8f:2a:b4:ea:e5:da:d3:77:57:68:89: 21:33:2d:81:76:63:de:d2:f9:83:9d:b3:9d:1e:db: 32:b6:bf:66:38:6b:22:e6:70:76:96:58:df:61:8c: bb:86:81:74:e1:11:39:1a:59:a4:9e:1a:d8:08:77: 4d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:55:EB:AE:D8:3A:74:99:C9:4F:DB:3B:B5:EB:F5:1F:14:78:17:E3 X509v3 Authority Key Identifier: keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/BE6B7B76337911EA8016C03DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 175.184.236.0/22 IPv6: 2403:ba00:2000::/40 Signature Algorithm: sha256WithRSAEncryption c3:ea:6a:11:93:c5:43:f8:fb:dd:09:8f:04:7d:f3:9a:d3:56: e6:9f:98:43:a8:0a:8b:07:c4:15:e2:d3:44:d2:35:db:23:ab: 7d:25:15:f3:52:d3:64:fa:8a:47:70:f8:62:e3:96:35:74:ce: f5:90:9e:f3:b3:06:28:01:8c:f2:9e:f4:65:9c:1c:69:14:68: b3:13:c6:d7:77:69:da:2e:2d:7e:d0:8d:09:c1:38:fa:0a:c6: 40:9f:7d:70:a2:6a:c3:e6:13:3d:69:18:8f:4f:cc:8c:a3:61: 91:15:ec:2a:cc:dc:cc:3d:fe:e3:52:b7:a5:4c:4c:cc:3b:2d: 22:e3:82:34:13:c7:2f:a1:c5:42:c5:f3:5a:5c:0d:7b:34:29: b9:dc:5b:ee:4b:cc:79:88:61:75:49:35:bd:03:5a:d0:8b:37: ee:e4:e6:3d:a3:07:9f:49:3f:0c:7d:cf:35:6f:74:5b:49:1b: 6b:7f:79:c4:00:d8:46:99:c9:4e:e3:5c:75:3b:df:6a:68:fa: c9:bd:d9:8d:49:65:dd:b4:99:64:f0:ca:43:64:37:7d:f7:29: 92:83:fb:8c:0b:c3:92:67:b3:e6:fe:54:42:5a:42:58:ee:64: e7:56:f7:b4:76:26:f7:bc:38:e2:91:09:b0:ff:af:b2:ef:67: 6a:43:63:d6 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgICNocwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYyMTQxMTAvBgNVBAUTKEYzREI5RjE2MjAwOEJENjY2Q0JGOEM5OTYwNzgxNENG QUIyNEQ3RTcwHhcNMjUwODAyMTU1MjQyWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02ODhlMzQ0YS0yNTIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs948mW+gqehb7yN5zAP8GkrFsPRTT1Wm/YtLebh34shtH8R4KGmJeSLo/MyS P4DGYKoXoY5kWZMcj6paBbakXlGJX0AIhzzCp0kvASG+q07OP0El/NJdfJGrKGpy ks+ykEEET1OgdvbHMijdFcxnm0nSz9saQVkcE0hs4mYsxWmtPqfzcmPGOitN/6CC HYNi0QTmvQyClCPuF+yaZYx2iXCfJfExe83JBEwfBJbdY8+3teZo7L4hSs58t0lS qwU1z1G+Nsfxjyq06uXa03dXaIkhMy2BdmPe0vmDnbOdHtsytr9mOGsi5nB2lljf YYy7hoF04RE5GlmknhrYCHdNWQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFKdV667Y OnSZyU/bO7Xr9R8UeBfjMB8GA1UdIwQYMBaAFPPbnxYgCL1mbL+MmWB4FM+rJNfn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjIxNC9DNjVENTM2NDMz MUExMUU0QUYyQUIzN0NDNEY5QUUwMi84OXVmRmlBSXZXWnN2NHlaWUhnVXo2c2sx LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg5dWZGaUFJdldac3Y0eVpZSGdVejZzazEtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODYyMTQvQzY1RDUzNjQzMzFBMTFFNEFGMkFCMzdDQzRGOUFFMDIvQkU2QjdCNzYz Mzc5MTFFQTgwMTZDMDNEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLwYIKwYBBQUHAQcBAf8E IDAeMAwEAgABMAYDBAKvuOwwDgQCAAIwCAMGACQDugAgMA0GCSqGSIb3DQEBCwUA A4IBAQDD6moRk8VD+PvdCY8EffOa01bmn5hDqAqLB8QV4tNE0jXbI6t9JRXzUtNk +opHcPhi45Y1dM71kJ7zswYoAYzynvRlnBxpFGizE8bXd2naLi1+0I0JwTj6CsZA n31womrD5hM9aRiPT8yMo2GRFewqzNzMPf7jUrelTEzMOy0i44I0E8cvocVCxfNa XA17NCm53FvuS8x5iGF1STW9A1rQizfu5OY9owefST8Mfc81b3RbSRtrf3nEANhG mclO41x1O99qaPrJvdmNSWXdtJlk8MpDZDd99ymSg/uMC8OSZ7Pm/lRCWkJY7mTn Vve0dib3vDjikQmw/6+y72dqQ2PW -----END CERTIFICATE-----Generated at Thu Aug 7 02:00:39 2025 by rpki-client