$ rpki-client -vvf rpki.apnic.net/member_repository/A918AAA1/8114C79C486E11EEA960942CC4F9AE02/E6EB2B10486E11EEB4D5FF2DC4F9AE02.roa File: E6EB2B10486E11EEB4D5FF2DC4F9AE02.roa (raw, json) Hash identifier: 5JFgGi1zcqLdr4l1Ei+0uqRhphNnP2rP0bMb+qfmJXM= Subject key identifier: 8B:B5:97:BF:52:FC:84:55:88:43:13:9E:6A:3C:8F:20:1D:4F:E8:02 Certificate issuer: /CN=A918AAA1/serialNumber=A2DA3637D3253F8997D88D0BD8DA9598F783F991 Certificate serial: 016C Authority key identifier: A2:DA:36:37:D3:25:3F:89:97:D8:8D:0B:D8:DA:95:98:F7:83:F9:91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oto2N9MlP4mX2I0L2NqVmPeD-ZE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918AAA1/8114C79C486E11EEA960942CC4F9AE02/E6EB2B10486E11EEB4D5FF2DC4F9AE02.roa Signing time: Thu 07 Aug 2025 04:41:32 +0000 ROA not before: Thu 07 Aug 2025 04:41:32 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 4768 IP address blocks: 202.37.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918AAA1/8114C79C486E11EEA960942CC4F9AE02/oto2N9MlP4mX2I0L2NqVmPeD-ZE.crl rsync://rpki.apnic.net/member_repository/A918AAA1/8114C79C486E11EEA960942CC4F9AE02/oto2N9MlP4mX2I0L2NqVmPeD-ZE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oto2N9MlP4mX2I0L2NqVmPeD-ZE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 364 (0x16c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918AAA1, serialNumber=A2DA3637D3253F8997D88D0BD8DA9598F783F991 Validity Not Before: Aug 7 04:41:32 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68942e7c-b4b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c8:d4:fd:99:b0:f4:61:94:90:67:57:f5:b4: 2c:04:88:17:37:44:2e:e1:3b:5a:2b:c3:2e:ba:61: 9d:35:af:db:c6:64:a7:4d:a6:6f:4d:ef:0c:c0:b3: 9f:49:9f:05:a0:05:44:76:c8:9c:aa:a3:07:3f:a0: 70:f8:eb:58:2e:8b:51:0f:fe:af:8d:81:6c:1b:f6: fc:a1:8e:b9:83:82:b0:52:17:0e:44:7b:c9:48:fa: ff:d4:0e:70:ff:2f:9f:17:a4:bd:52:91:6c:17:e6: 30:1b:65:ef:f9:b0:a1:59:b5:f8:c9:d1:1a:d5:60: 7f:d3:5e:a2:c7:36:ea:74:50:ae:7d:fc:6f:6a:71: 08:41:62:89:c1:e9:0b:80:58:4a:b8:33:dc:e9:e7: e3:9c:06:87:57:a9:9c:71:58:3a:f4:b3:85:cd:8d: 8e:a7:82:5e:fc:6c:29:03:1c:85:d7:cf:ca:f4:e8: ab:42:3f:b5:d6:3a:d5:fa:7b:3c:83:d0:a5:d7:73: f9:54:e2:bb:3f:06:f0:43:9b:93:55:2f:12:ee:d3: f7:9f:2a:6a:4b:41:0b:77:a2:6f:72:f8:2f:7c:6a: e4:df:81:1f:7a:f9:ee:c7:df:0c:5c:7c:68:14:18: d2:d0:ef:2f:2a:c5:98:56:89:7a:a5:f3:c7:ef:a4: b7:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:B5:97:BF:52:FC:84:55:88:43:13:9E:6A:3C:8F:20:1D:4F:E8:02 X509v3 Authority Key Identifier: keyid:A2:DA:36:37:D3:25:3F:89:97:D8:8D:0B:D8:DA:95:98:F7:83:F9:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918AAA1/8114C79C486E11EEA960942CC4F9AE02/oto2N9MlP4mX2I0L2NqVmPeD-ZE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oto2N9MlP4mX2I0L2NqVmPeD-ZE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AAA1/8114C79C486E11EEA960942CC4F9AE02/E6EB2B10486E11EEB4D5FF2DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.37.138.0/24 Signature Algorithm: sha256WithRSAEncryption 63:1d:a6:ff:a5:ac:4b:d9:b3:88:91:10:68:43:d1:10:a7:8d: 91:10:71:bf:2e:11:71:19:7d:1e:f5:eb:01:b2:6e:fd:ca:e2: 01:0b:b9:da:59:68:af:00:71:56:49:20:f4:34:20:9c:cc:38: 82:17:3d:4a:0a:b3:85:44:16:fd:86:f9:27:75:a9:95:49:08: 1b:b6:87:ed:65:64:a1:99:1a:e8:fa:a7:b1:61:0d:fd:53:38: bb:cc:ac:ec:0f:16:b1:ca:18:6a:0e:7e:97:ac:a8:f3:4b:cc: e2:b9:16:5b:29:85:74:f5:6a:aa:f8:76:d5:36:68:2e:40:69: dd:15:ac:e2:27:37:18:68:ae:c1:be:5e:14:dd:9f:34:3b:62: d5:88:85:2f:53:8c:e5:33:8e:63:32:2a:b4:f5:ed:de:53:70: 30:65:dd:b0:be:7d:97:d0:79:4a:e7:b5:4d:f9:cc:b3:2c:75: d1:c7:30:e2:a7:08:bd:34:83:b7:27:7b:28:3d:8a:64:5b:8f: 81:ff:03:75:65:b0:63:7c:18:6d:d1:b4:2a:45:b8:5c:58:af: d4:3a:9c:a8:76:32:db:7e:8f:e4:ef:c6:d8:6e:df:85:03:53: 1e:43:88:e8:00:b6:d7:d9:77:a3:b5:40:c4:99:56:4d:1a:3e: 3e:88:8c:53 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAWwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEFBQTExMTAvBgNVBAUTKEEyREEzNjM3RDMyNTNGODk5N0Q4OEQwQkQ4REE5NTk4 Rjc4M0Y5OTEwHhcNMjUwODA3MDQ0MTMyWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODk0MmU3Yy1iNGI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxsjU/Zmw9GGUkGdX9bQsBIgXN0Qu4TtaK8MuumGdNa/bxmSnTaZvTe8MwLOf SZ8FoAVEdsicqqMHP6Bw+OtYLotRD/6vjYFsG/b8oY65g4KwUhcORHvJSPr/1A5w /y+fF6S9UpFsF+YwG2Xv+bChWbX4ydEa1WB/016ixzbqdFCuffxvanEIQWKJwekL gFhKuDPc6efjnAaHV6mccVg69LOFzY2Op4Je/GwpAxyF18/K9OirQj+11jrV+ns8 g9Cl13P5VOK7PwbwQ5uTVS8S7tP3nypqS0ELd6JvcvgvfGrk34Efevnux98MXHxo FBjS0O8vKsWYVol6pfPH76S36QIDAQABo4IClTCCApEwHQYDVR0OBBYEFIu1l79S /IRViEMTnmo8jyAdT+gCMB8GA1UdIwQYMBaAFKLaNjfTJT+Jl9iNC9jalZj3g/mR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QUFBMS84MTE0Qzc5QzQ4 NkUxMUVFQTk2MDk0MkNDNEY5QUUwMi9vdG8yTjlNbFA0bVgySTBMMk5xVm1QZUQt WkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL290bzJOOU1sUDRtWDJJMEwyTnFWbVBlRC1aRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEFBQTEvODExNEM3OUM0ODZFMTFFRUE5NjA5NDJDQzRGOUFFMDIvRTZFQjJCMTA0 ODZFMTFFRUI0RDVGRjJEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADKJYowDQYJKoZIhvcNAQELBQADggEBAGMdpv+lrEvZs4iR EGhD0RCnjZEQcb8uEXEZfR716wGybv3K4gELudpZaK8AcVZJIPQ0IJzMOIIXPUoK s4VEFv2G+Sd1qZVJCBu2h+1lZKGZGuj6p7FhDf1TOLvMrOwPFrHKGGoOfpesqPNL zOK5FlsphXT1aqr4dtU2aC5Aad0VrOInNxhorsG+XhTdnzQ7YtWIhS9TjOUzjmMy KrT17d5TcDBl3bC+fZfQeUrntU35zLMsddHHMOKnCL00g7cneyg9imRbj4H/A3Vl sGN8GG3RtCpFuFxYr9Q6nKh2Mtt+j+Tvxthu34UDUx5DiOgAttfZd6O1QMSZVk0a Pj6IjFM= -----END CERTIFICATE-----Generated at Sat Aug 9 22:49:36 2025 by rpki-client