$ rpki-client -vvf rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/8BA504FCB27911EB978CE10AC4F9AE02.roa File: 8BA504FCB27911EB978CE10AC4F9AE02.roa (raw, json) Hash identifier: n01/3EIjRvyLbA9XmobgbcsSzY3lQa7SmWy3AZPr1nQ= Subject key identifier: 51:CE:0B:3A:2C:BD:97:18:3D:EF:0D:60:3B:F6:08:13:57:89:3A:CB Certificate issuer: /CN=A9186D83/serialNumber=BBE29490446D6870765B4E61D7EB9B22C6004638 Certificate serial: 0C91 Authority key identifier: BB:E2:94:90:44:6D:68:70:76:5B:4E:61:D7:EB:9B:22:C6:00:46:38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-KUkERtaHB2W05h1-ubIsYARjg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/8BA504FCB27911EB978CE10AC4F9AE02.roa Signing time: Mon 28 Jul 2025 18:57:38 +0000 ROA not before: Mon 28 Jul 2025 18:57:38 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 136908 IP address blocks: 45.121.32.0/22 maxlen: 24 103.96.244.0/22 maxlen: 24 2401:7f40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.crl rsync://rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-KUkERtaHB2W05h1-ubIsYARjg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 18:36:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3217 (0xc91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186D83, serialNumber=BBE29490446D6870765B4E61D7EB9B22C6004638 Validity Not Before: Jul 28 18:57:38 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=6887c822-85f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:37:f6:3d:35:d1:ae:50:d7:31:dd:e3:b2:fb: eb:72:c8:5e:cf:90:0f:ba:6b:6e:a2:4e:34:75:ba: 48:be:d5:5a:d9:81:13:e8:13:2b:bc:61:1c:b3:d3: 85:c5:ea:79:d4:ff:7b:5d:24:d6:7b:f9:73:38:9f: 0b:f7:2e:83:c6:9f:aa:98:b3:89:e4:c7:5f:de:e7: 02:cf:fe:ee:bb:ad:65:8b:3d:18:22:1b:76:f8:0c: ce:ce:a1:6c:23:20:1d:d9:fa:bf:4c:05:b3:8d:1a: 69:2d:7b:f4:e1:23:65:86:d7:d7:7e:ad:56:75:d8: dd:b5:27:06:39:c9:58:aa:b3:2d:8b:8f:ad:e3:da: de:61:d8:88:a7:72:13:e7:8f:44:63:80:ac:1a:ac: a6:c1:be:72:90:d9:7d:1a:9a:41:69:4f:3d:7f:45: f8:06:02:77:34:93:f1:f7:a9:c2:5a:7d:21:7b:91: ad:b6:39:86:95:78:64:c0:2b:e3:c6:a6:a6:8c:bf: 4d:ae:5b:e0:2e:09:05:ed:99:4a:77:8c:04:1e:b9: 06:cf:df:70:9b:d6:be:cb:b2:ff:98:9f:7b:0b:5d: 17:c1:ce:81:14:d2:44:b7:b1:bb:69:04:4e:93:7d: f7:b2:0e:f7:1c:11:12:5e:66:00:f7:42:6c:e6:15: d3:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:CE:0B:3A:2C:BD:97:18:3D:EF:0D:60:3B:F6:08:13:57:89:3A:CB X509v3 Authority Key Identifier: keyid:BB:E2:94:90:44:6D:68:70:76:5B:4E:61:D7:EB:9B:22:C6:00:46:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/u-KUkERtaHB2W05h1-ubIsYARjg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-KUkERtaHB2W05h1-ubIsYARjg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186D83/149747BE062A11EA8C9A7444C4F9AE02/8BA504FCB27911EB978CE10AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.121.32.0/22 103.96.244.0/22 IPv6: 2401:7f40::/32 Signature Algorithm: sha256WithRSAEncryption 5e:3a:f7:70:35:a5:e7:43:20:26:d0:82:46:04:db:b3:c2:e5: 9e:7b:1b:0b:a3:2b:51:18:c9:18:47:3f:57:68:a1:e5:bf:4f: 79:42:2a:7b:1b:bd:3f:98:74:02:a6:0b:17:de:eb:c0:dc:a7: 7a:20:08:38:b1:47:52:06:80:25:b2:18:63:c0:fa:cf:90:50: 7f:27:7e:25:36:a0:a5:46:38:70:f4:ae:5b:3f:47:79:53:3a: 6d:a4:04:9a:34:4e:36:67:01:12:71:5a:6a:14:6a:1b:0a:bf: 9d:38:02:f4:05:9c:9a:26:ff:75:cd:41:7a:65:82:53:c1:c3: 9f:04:18:3d:60:cd:7e:75:6d:db:31:02:76:25:ae:d2:42:b2: 4c:37:8f:e0:63:cf:22:1c:9b:c4:22:35:2d:b4:9c:e8:ee:50: 56:19:4d:98:f8:cf:08:5c:d7:bd:3f:a7:ef:d6:f8:e8:b3:12: 33:e5:3b:8d:b8:85:83:86:0a:51:40:30:c7:20:9d:98:3d:e7: f7:d5:35:20:7c:13:03:08:9e:82:a5:db:94:fb:e9:a2:93:4f: 60:ad:53:69:86:9e:12:bb:6a:f3:bf:bb:0e:ff:73:88:ad:11: 5e:c0:00:fb:4f:d2:6b:fc:c6:40:2e:51:1f:c4:8b:f7:00:93: c7:b3:50:a6 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICDJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZEODMxMTAvBgNVBAUTKEJCRTI5NDkwNDQ2RDY4NzA3NjVCNEU2MUQ3RUI5QjIy QzYwMDQ2MzgwHhcNMjUwNzI4MTg1NzM4WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODg3YzgyMi04NWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtTf2PTXRrlDXMd3jsvvrcshez5APumtuok40dbpIvtVa2YET6BMrvGEcs9OF xep51P97XSTWe/lzOJ8L9y6Dxp+qmLOJ5Mdf3ucCz/7uu61liz0YIht2+AzOzqFs IyAd2fq/TAWzjRppLXv04SNlhtfXfq1WddjdtScGOclYqrMti4+t49reYdiIp3IT 549EY4CsGqymwb5ykNl9GppBaU89f0X4BgJ3NJPx96nCWn0he5GttjmGlXhkwCvj xqamjL9NrlvgLgkF7ZlKd4wEHrkGz99wm9a+y7L/mJ97C10Xwc6BFNJEt7G7aQRO k333sg73HBESXmYA90Js5hXTxQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFFHOCzos vZcYPe8NYDv2CBNXiTrLMB8GA1UdIwQYMBaAFLvilJBEbWhwdltOYdfrmyLGAEY4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkQ4My8xNDk3NDdCRTA2 MkExMUVBOEM5QTc0NDRDNEY5QUUwMi91LUtVa0VSdGFIQjJXMDVoMS11YklzWUFS amcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UtS1VrRVJ0YUhCMlcwNWgxLXViSXNZQVJqZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODZEODMvMTQ5NzQ3QkUwNjJBMTFFQThDOUE3NDQ0QzRGOUFFMDIvOEJBNTA0RkNC Mjc5MTFFQjk3OENFMTBBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAIteSADBAJnYPQwDQQCAAIwBwMFACQBf0AwDQYJKoZIhvcN AQELBQADggEBAF4693A1pedDICbQgkYE27PC5Z57GwujK1EYyRhHP1dooeW/T3lC KnsbvT+YdAKmCxfe68Dcp3ogCDixR1IGgCWyGGPA+s+QUH8nfiU2oKVGOHD0rls/ R3lTOm2kBJo0TjZnARJxWmoUahsKv504AvQFnJom/3XNQXplglPBw58EGD1gzX51 bdsxAnYlrtJCskw3j+BjzyIcm8QiNS20nOjuUFYZTZj4zwhc170/p+/W+OizEjPl O424hYOGClFAMMcgnZg95/fVNSB8EwMInoKl25T76aKTT2CtU2mGnhK7avO/uw7/ c4itEV7AAPtP0mv8xkAuUR/Ei/cAk8ezUKY= -----END CERTIFICATE-----Generated at Wed Aug 13 11:29:43 2025 by rpki-client