$ rpki-client -vvf rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/F4D5953246AF11E9A68E7652C4F9AE02.roa File: F4D5953246AF11E9A68E7652C4F9AE02.roa (raw, json) Hash identifier: VHcKNzyAzmZSWirHh/4WQLbdwtIOXQQo3L1Zg7i7VMM= Subject key identifier: A4:C4:BC:0B:06:DB:87:2B:66:C8:D0:88:D9:69:12:73:0F:2B:C4:B3 Certificate issuer: /CN=A918E6B7/serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708 Certificate serial: 103D Authority key identifier: BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/F4D5953246AF11E9A68E7652C4F9AE02.roa Signing time: Fri 02 May 2025 17:57:10 +0000 ROA not before: Fri 02 May 2025 17:57:10 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 10152 IP address blocks: 147.76.0.0/24 maxlen: 24 147.76.1.0/24 maxlen: 24 147.76.51.0/24 maxlen: 24 147.76.180.0/24 maxlen: 24 147.76.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:28:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4157 (0x103d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E6B7, serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708 Validity Not Before: May 2 17:57:10 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=68150776-0a4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:04:44:9b:aa:0e:63:68:77:59:b6:a2:99:dd: 01:b2:b4:e3:6a:8a:24:2f:d4:fb:4f:b1:5e:4e:c2: 05:e0:df:21:70:05:fe:2f:49:d6:6a:b1:70:e8:3f: 2f:69:40:f1:b8:15:f4:02:c1:4b:61:8a:be:06:dc: 31:c1:4a:29:97:cb:73:bb:e7:81:f8:16:ef:13:c6: 2c:f0:5e:19:f0:bb:5a:9d:a9:82:98:e5:87:75:f6: 3e:f2:46:6d:d2:91:39:2b:22:15:ce:9e:b4:e6:8d: 42:59:78:94:7a:e5:cb:98:83:be:fe:f8:40:ff:07: 9d:28:41:ff:41:3d:d5:b4:bc:ca:42:6b:3e:cd:82: 20:35:2d:c4:ca:5c:b6:77:52:94:0c:f8:37:61:65: d4:df:cf:10:94:75:0d:89:06:04:98:ed:33:ab:bd: fb:01:92:69:ba:ad:35:1f:22:5f:41:7b:22:7b:f4: 90:28:85:6f:d4:97:4b:e4:41:97:59:7c:2a:bb:16: 5b:41:6a:ec:73:fc:00:80:e0:ba:17:18:a9:72:39: b0:bb:fd:34:78:de:48:8f:be:4e:5f:d3:2c:7c:81: 62:8d:b6:22:24:6e:ea:b5:45:e3:21:47:ff:61:21: ec:71:60:a0:7c:dc:6a:37:3f:53:8e:cd:f7:c9:f9: 2c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:C4:BC:0B:06:DB:87:2B:66:C8:D0:88:D9:69:12:73:0F:2B:C4:B3 X509v3 Authority Key Identifier: keyid:BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/F4D5953246AF11E9A68E7652C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 147.76.0.0/23 147.76.51.0/24 147.76.180.0/23 Signature Algorithm: sha256WithRSAEncryption 56:86:20:a8:21:ae:fe:a5:58:c9:09:65:a5:df:e8:6f:f2:f2: b7:37:0f:07:4f:1e:bc:86:5a:78:12:43:84:76:2b:f1:a3:28: a8:14:5d:0a:6e:a4:36:a1:51:aa:21:d7:b3:03:a3:60:9d:65: e3:cb:2f:5e:c7:ce:be:66:90:b2:17:54:69:55:23:53:8c:93: c2:16:a6:04:11:9b:52:15:55:26:ea:f9:d2:ed:62:23:38:d1: 45:7a:f6:f6:e4:8e:d5:b3:fe:33:e3:69:6e:34:6d:f0:f1:c4: 45:17:c8:b7:3a:d4:f8:cf:0f:db:a4:c0:cc:d5:94:5f:bf:75: c7:0a:50:9d:b3:a8:18:4f:9b:ff:c3:10:9b:19:68:e2:3a:ca: de:0b:05:02:35:c2:7e:13:f4:29:24:9a:cb:ba:eb:72:10:bb: e7:3e:b4:57:88:7f:45:ef:49:cc:72:a9:6f:8d:d4:87:fc:9b: 34:d7:85:43:02:78:76:4b:a2:41:ec:04:a5:c0:7f:0d:cd:40: 94:b4:22:c5:ff:66:ec:2c:bf:60:69:42:a8:1d:d0:f8:d4:9c: 53:60:79:3d:bf:d0:58:90:71:86:87:3a:b8:f0:c5:01:61:55: 75:01:90:5c:c8:67:e2:06:9b:a8:ed:2c:33:b6:21:35:9b:b0: 54:d4:b8:60 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICED0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU2QjcxMTAvBgNVBAUTKEJFNzI1NDg0QjhDRDBEMUQ4RDc3RUQ4N0NDQ0VGQURG NzkzRjQ3MDgwHhcNMjUwNTAyMTc1NzEwWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODE1MDc3Ni0wYTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlwREm6oOY2h3Wbaimd0BsrTjaookL9T7T7FeTsIF4N8hcAX+L0nWarFw6D8v aUDxuBX0AsFLYYq+BtwxwUopl8tzu+eB+BbvE8Ys8F4Z8LtanamCmOWHdfY+8kZt 0pE5KyIVzp605o1CWXiUeuXLmIO+/vhA/wedKEH/QT3VtLzKQms+zYIgNS3Eyly2 d1KUDPg3YWXU388QlHUNiQYEmO0zq737AZJpuq01HyJfQXsie/SQKIVv1JdL5EGX WXwquxZbQWrsc/wAgOC6Fxipcjmwu/00eN5Ij75OX9MsfIFijbYiJG7qtUXjIUf/ YSHscWCgfNxqNz9Tjs33yfksCwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFKTEvAsG 24crZsjQiNlpEnMPK8SzMB8GA1UdIwQYMBaAFL5yVIS4zQ0djXfth8zO+t95P0cI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTZCNy9BRTdENEQ0RTQ2 QUMxMUU5OTYwODgzNDhDNEY5QUUwMi92bkpVaExqTkRSMk5kLTJIek03NjMza19S d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZuSlVoTGpORFIyTmQtMkh6TTc2MzNrX1J3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEU2QjcvQUU3RDRENEU0NkFDMTFFOTk2MDg4MzQ4QzRGOUFFMDIvRjRENTk1MzI0 NkFGMTFFOUE2OEU3NjUyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAGTTAADBACTTDMDBAGTTLQwDQYJKoZIhvcNAQELBQADggEB AFaGIKghrv6lWMkJZaXf6G/y8rc3DwdPHryGWngSQ4R2K/GjKKgUXQpupDahUaoh 17MDo2CdZePLL17Hzr5mkLIXVGlVI1OMk8IWpgQRm1IVVSbq+dLtYiM40UV69vbk jtWz/jPjaW40bfDxxEUXyLc61PjPD9ukwMzVlF+/dccKUJ2zqBhPm//DEJsZaOI6 yt4LBQI1wn4T9Ckkmsu663IQu+c+tFeIf0XvScxyqW+N1If8mzTXhUMCeHZLokHs BKXAfw3NQJS0IsX/Zuwsv2BpQqgd0PjUnFNgeT2/0FiQcYaHOrjwxQFhVXUBkFzI Z+IGm6jtLDO2ITWbsFTUuGA= -----END CERTIFICATE-----Generated at Thu Nov 6 02:55:41 2025 by rpki-client