$ rpki-client -vvf rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/FFFC26F0A51C11EC8394365BC4F9AE02.roa File: FFFC26F0A51C11EC8394365BC4F9AE02.roa (raw, json) Hash identifier: JJotf7VpmSYaDPVQqH2CXAbFgfSH9/zhk44G7WVeO/k= Subject key identifier: B2:CD:85:1F:19:28:CD:43:8B:2A:A6:D7:51:0A:49:22:C3:03:CD:77 Certificate issuer: /CN=A9114DDF/serialNumber=E8671750344F18C2AF747FFAF255850EBC79D01F Certificate serial: 03CE Authority key identifier: E8:67:17:50:34:4F:18:C2:AF:74:7F:FA:F2:55:85:0E:BC:79:D0:1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GcXUDRPGMKvdH_68lWFDrx50B8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/FFFC26F0A51C11EC8394365BC4F9AE02.roa Signing time: Tue 07 Oct 2025 00:58:31 +0000 ROA not before: Tue 07 Oct 2025 00:58:31 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 38182 IP address blocks: 45.126.88.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.crl rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GcXUDRPGMKvdH_68lWFDrx50B8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:37:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 974 (0x3ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114DDF, serialNumber=E8671750344F18C2AF747FFAF255850EBC79D01F Validity Not Before: Oct 7 00:58:31 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68e465b7-cd76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:40:46:b1:82:4e:5d:75:e5:8d:59:0b:cb:85: 30:ab:6e:d8:6f:4d:71:e8:23:72:01:36:31:e5:db: 96:9a:24:59:0b:42:16:4e:16:c9:04:51:73:0e:91: f4:c0:fd:34:f1:3e:ee:41:bc:89:22:3e:e4:c6:97: a0:39:52:30:c1:da:5c:67:fc:61:a5:8c:e8:56:82: 7e:68:72:1e:4a:06:97:e7:69:7f:1d:08:04:c7:08: 72:0a:8d:90:d4:47:05:36:71:8b:14:1e:f2:57:0c: b2:9a:86:07:fe:a3:1b:48:4b:59:6f:ec:07:fa:86: e0:35:6e:3d:dc:3d:cc:43:49:13:78:7e:fa:e3:64: 4c:80:9f:33:56:29:bd:12:7e:80:20:f0:81:4e:0d: 48:c5:6a:ce:f4:88:d4:b4:35:19:e8:42:2f:7d:01: 18:91:ba:6c:11:1a:13:88:81:d2:41:6a:a6:55:5f: 7d:95:f8:f1:0a:81:56:dd:c0:80:06:c9:bd:c4:fc: e0:a1:69:28:43:44:74:96:26:bc:21:ee:71:08:6e: df:5b:53:60:8b:46:8f:50:dd:19:a3:e7:7b:c7:ad: 75:dd:13:98:d7:bc:a3:c7:80:7e:e4:2b:34:be:10: 51:cb:4c:b8:bc:de:b4:20:4c:c0:19:10:e4:60:81: da:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:CD:85:1F:19:28:CD:43:8B:2A:A6:D7:51:0A:49:22:C3:03:CD:77 X509v3 Authority Key Identifier: keyid:E8:67:17:50:34:4F:18:C2:AF:74:7F:FA:F2:55:85:0E:BC:79:D0:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GcXUDRPGMKvdH_68lWFDrx50B8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/FFFC26F0A51C11EC8394365BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.126.88.0/23 Signature Algorithm: sha256WithRSAEncryption 4b:cd:d1:1c:43:ba:26:22:41:4e:70:03:2a:a1:aa:57:f3:9a: 85:d9:df:5e:0d:12:2e:84:3a:70:14:cb:46:95:06:ec:eb:69: 67:74:80:ac:66:fe:65:a7:82:59:f7:8f:e2:4b:42:c9:4d:8a: 60:97:14:82:07:d2:ad:c0:51:88:0b:ed:fd:2d:cb:b9:b2:d3: a9:57:bb:e2:f9:28:99:e1:33:b8:20:c7:e0:c3:1c:ef:fc:30: d4:b4:05:c9:88:e2:45:f3:08:8f:36:1b:d2:4f:b2:fa:25:8e: 5a:3d:74:a6:cd:da:17:67:a9:3f:cd:fe:a2:a8:3c:2e:f2:2e: a7:df:7b:2c:50:00:f1:c0:02:f8:a6:1b:ac:d5:9a:43:c7:54: ed:40:4f:5c:8e:00:e4:0a:fa:5b:c9:f9:ae:e1:a7:9f:f6:8e: f0:91:fa:45:dc:1b:31:5b:d2:85:ec:0a:9f:eb:60:28:b8:93: 29:1c:d8:b0:41:86:c1:49:75:68:86:01:e9:1e:bb:f7:80:c3: b7:1b:25:33:c0:c9:37:1d:82:d7:10:f2:18:63:0a:d7:20:2f: e9:ac:24:8d:59:20:ed:7b:1a:d8:44:9a:34:96:f3:fc:1c:79: 5e:7a:06:14:a0:5c:8e:28:d1:d1:e7:51:d8:ea:5f:89:ae:a6: 73:aa:ae:71 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICA84wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTREREYxMTAvBgNVBAUTKEU4NjcxNzUwMzQ0RjE4QzJBRjc0N0ZGQUYyNTU4NTBF QkM3OUQwMUYwHhcNMjUxMDA3MDA1ODMxWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGU0NjViNy1jZDc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxkBGsYJOXXXljVkLy4Uwq27Yb01x6CNyATYx5duWmiRZC0IWThbJBFFzDpH0 wP008T7uQbyJIj7kxpegOVIwwdpcZ/xhpYzoVoJ+aHIeSgaX52l/HQgExwhyCo2Q 1EcFNnGLFB7yVwyymoYH/qMbSEtZb+wH+obgNW493D3MQ0kTeH7642RMgJ8zVim9 En6AIPCBTg1IxWrO9IjUtDUZ6EIvfQEYkbpsERoTiIHSQWqmVV99lfjxCoFW3cCA Bsm9xPzgoWkoQ0R0lia8Ie5xCG7fW1Ngi0aPUN0Zo+d7x6113ROY17yjx4B+5Cs0 vhBRy0y4vN60IEzAGRDkYIHaOwIDAQABo4IClTCCApEwHQYDVR0OBBYEFLLNhR8Z KM1Diyqm11EKSSLDA813MB8GA1UdIwQYMBaAFOhnF1A0TxjCr3R/+vJVhQ68edAf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNERERi81QjA2RkVGMkE1 MEExMUVDQjI3NzhENUNDNEY5QUUwMi82R2NYVURSUEdNS3ZkSF82OGxXRkRyeDUw QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZHY1hVRFJQR01LdmRIXzY4bFdGRHJ4NTBCOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTREREYvNUIwNkZFRjJBNTBBMTFFQ0IyNzc4RDVDQzRGOUFFMDIvRkZGQzI2RjBB NTFDMTFFQzgzOTQzNjVCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAEtflgwDQYJKoZIhvcNAQELBQADggEBAEvN0RxDuiYiQU5w AyqhqlfzmoXZ314NEi6EOnAUy0aVBuzraWd0gKxm/mWngln3j+JLQslNimCXFIIH 0q3AUYgL7f0ty7my06lXu+L5KJnhM7ggx+DDHO/8MNS0BcmI4kXzCI82G9JPsvol jlo9dKbN2hdnqT/N/qKoPC7yLqffeyxQAPHAAvimG6zVmkPHVO1AT1yOAOQK+lvJ +a7hp5/2jvCR+kXcGzFb0oXsCp/rYCi4kykc2LBBhsFJdWiGAekeu/eAw7cbJTPA yTcdgtcQ8hhjCtcgL+msJI1ZIO17GthEmjSW8/wceV56BhSgXI4o0dHnUdjqX4mu pnOqrnE= -----END CERTIFICATE-----Generated at Tue Oct 21 00:44:45 2025 by rpki-client