$ rpki-client -vvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/4A4A33C0661B11EFA314D413C4F9AE02.roa File: 4A4A33C0661B11EFA314D413C4F9AE02.roa (raw, json) Hash identifier: SO09lWc8oj56XbC1Qcew77xEM9+gwLydRegdmBpQ/n8= Subject key identifier: 83:CC:88:26:75:F5:CA:DE:76:68:15:DB:29:70:9F:6E:77:87:74:26 Certificate issuer: /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Certificate serial: 0845 Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/4A4A33C0661B11EFA314D413C4F9AE02.roa Signing time: Wed 08 Oct 2025 22:54:06 +0000 ROA not before: Wed 08 Oct 2025 22:54:06 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 142132 IP address blocks: 43.252.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:38:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2117 (0x845) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B412, serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Validity Not Before: Oct 8 22:54:06 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68e6eb8e-a49a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:12:50:db:e8:6e:4d:57:a4:ef:f1:7c:c4:fd: 36:03:37:4d:b4:a0:df:02:8c:13:af:02:b4:e8:1b: 42:bf:3f:a0:93:9a:d5:24:97:28:e9:f0:3f:e0:c5: ed:0d:cf:0b:2a:a6:eb:d2:d9:a7:3f:52:a8:06:33: a8:68:ea:27:f1:e6:fa:99:b5:2f:98:a2:08:74:49: b4:10:85:e6:d8:19:e5:92:33:e6:ae:4d:31:bd:8e: 37:1c:32:15:84:d2:12:82:23:0a:52:3f:0e:b0:18: 1c:76:15:fb:6e:cf:39:5d:cb:6d:c8:b4:df:98:40: 0c:0d:cc:9a:1d:40:7b:26:d1:80:66:ba:b4:ff:3c: 48:cd:a9:08:4f:dc:36:c4:3b:fc:8f:45:c0:a6:33: b5:1b:5b:d8:3d:96:e5:89:48:89:3f:43:b7:54:1a: ce:67:f6:33:6d:59:b1:cb:7c:53:18:7b:f7:7b:8c: a8:19:d1:b7:f2:7c:60:91:1b:de:30:72:ea:cd:99: bc:25:be:9b:31:6a:99:73:88:fa:46:32:53:3d:21: d5:88:79:5d:e4:f3:80:58:5c:75:e3:38:40:71:47: 32:59:40:18:87:02:51:ad:67:bd:17:8a:c2:05:04: 38:08:65:a6:16:4f:28:d2:c2:c8:2d:09:4e:e5:ae: d8:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:CC:88:26:75:F5:CA:DE:76:68:15:DB:29:70:9F:6E:77:87:74:26 X509v3 Authority Key Identifier: keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/4A4A33C0661B11EFA314D413C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.252.211.0/24 Signature Algorithm: sha256WithRSAEncryption 60:68:d2:c0:f7:31:2f:b2:d9:83:9a:fb:10:33:6e:8b:5d:c3: fe:c2:43:25:85:49:25:6e:d6:e1:3b:7a:b9:d1:cc:f1:e2:0c: 14:a8:57:92:bb:50:af:df:97:ff:26:ca:e3:5d:0c:d1:49:0e: a2:f1:71:d4:0c:92:1e:10:ca:06:b2:fd:b1:4f:ee:16:de:40: 2f:8f:1b:ef:b9:c4:00:2a:7a:4a:f7:99:ac:70:c8:27:84:74: 49:00:0c:4f:03:0d:9a:8c:88:c9:ea:1f:85:5b:9c:55:bb:f0: e9:a3:8f:ed:6c:29:8b:35:15:aa:76:e0:85:89:b1:30:9b:c7: 0b:60:95:f8:ea:7a:4c:1a:34:71:6e:59:b3:a5:12:a3:fd:fd: 41:52:53:c9:ea:4f:cb:30:48:4f:5e:ea:b6:06:85:5a:e4:da: e9:37:18:33:1b:1c:59:e9:74:65:d5:68:71:fd:d3:d6:ca:3e: 37:d8:c4:1c:39:ce:34:99:83:d4:05:a6:be:b0:31:30:99:ac: 3a:a0:46:78:96:88:f6:7f:1b:dc:bd:bf:60:0f:84:3c:de:91: 0b:d6:4e:14:7e:42:11:a4:1d:20:fd:ff:b5:f5:b0:d2:3c:c8: dd:aa:9c:3c:c1:a2:91:4b:e9:28:ae:49:1a:24:f5:19:b7:0f: be:0a:09:ed -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCEUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI0MTIxMTAvBgNVBAUTKDg3M0Q1OTVBRjU1NjlDMjAyMzlGNTNERDgwRUIxMTc3 RDgwQjA5MzQwHhcNMjUxMDA4MjI1NDA2WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGU2ZWI4ZS1hNDlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4xJQ2+huTVek7/F8xP02AzdNtKDfAowTrwK06BtCvz+gk5rVJJco6fA/4MXt Dc8LKqbr0tmnP1KoBjOoaOon8eb6mbUvmKIIdEm0EIXm2BnlkjPmrk0xvY43HDIV hNISgiMKUj8OsBgcdhX7bs85XcttyLTfmEAMDcyaHUB7JtGAZrq0/zxIzakIT9w2 xDv8j0XApjO1G1vYPZbliUiJP0O3VBrOZ/YzbVmxy3xTGHv3e4yoGdG38nxgkRve MHLqzZm8Jb6bMWqZc4j6RjJTPSHViHld5POAWFx14zhAcUcyWUAYhwJRrWe9F4rC BQQ4CGWmFk8o0sLILQlO5a7YzQIDAQABo4IClTCCApEwHQYDVR0OBBYEFIPMiCZ1 9credmgV2ylwn253h3QmMB8GA1UdIwQYMBaAFIc9WVr1VpwgI59T3YDrEXfYCwk0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjQxMi9DMUVBMDMzQ0Qy RUExMUVCQTIwNkIxNzhDNEY5QUUwMi9oejFaV3ZWV25DQWpuMVBkZ09zUmQ5Z0xD VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h6MVpXdlZXbkNBam4xUGRnT3NSZDlnTENUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUI0MTIvQzFFQTAzM0NEMkVBMTFFQkEyMDZCMTc4QzRGOUFFMDIvNEE0QTMzQzA2 NjFCMTFFRkEzMTRENDEzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAr/NMwDQYJKoZIhvcNAQELBQADggEBAGBo0sD3MS+y2YOa +xAzbotdw/7CQyWFSSVu1uE7ernRzPHiDBSoV5K7UK/fl/8myuNdDNFJDqLxcdQM kh4Qygay/bFP7hbeQC+PG++5xAAqekr3maxwyCeEdEkADE8DDZqMiMnqH4VbnFW7 8Omjj+1sKYs1Fap24IWJsTCbxwtglfjqekwaNHFuWbOlEqP9/UFSU8nqT8swSE9e 6rYGhVrk2uk3GDMbHFnpdGXVaHH909bKPjfYxBw5zjSZg9QFpr6wMTCZrDqgRniW iPZ/G9y9v2APhDzekQvWThR+QhGkHSD9/7X1sNI8yN2qnDzBopFL6SiuSRok9Rm3 D74KCe0= -----END CERTIFICATE-----Generated at Mon Oct 20 16:16:09 2025 by rpki-client