$ rpki-client -vvf rpki.apnic.net/member_repository/A911BC38/FE218D1A99BB11F0936C3135C4F9AE02/A9C261C699BC11F0A121CE7BC4F9AE02.roa File: A9C261C699BC11F0A121CE7BC4F9AE02.roa (raw, json) Hash identifier: cO9e4oRIPA+n/Y64CsdkcVvZdI/XIC/seUkrWKgVvP0= Subject key identifier: 06:A2:49:24:30:BF:92:1F:AC:A0:88:19:99:90:D9:4C:0B:6B:BC:53 Certificate issuer: /CN=A911BC38/serialNumber=576725B0C6D855B54D226A218DB3A8E7EF6E7AB9 Certificate serial: 02 Authority key identifier: 57:67:25:B0:C6:D8:55:B5:4D:22:6A:21:8D:B3:A8:E7:EF:6E:7A:B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V2clsMbYVbVNImohjbOo5-9uerk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BC38/FE218D1A99BB11F0936C3135C4F9AE02/A9C261C699BC11F0A121CE7BC4F9AE02.roa Signing time: Thu 25 Sep 2025 03:06:43 +0000 ROA not before: Thu 25 Sep 2025 03:06:43 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 154213 IP address blocks: 202.133.92.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BC38/FE218D1A99BB11F0936C3135C4F9AE02/V2clsMbYVbVNImohjbOo5-9uerk.crl rsync://rpki.apnic.net/member_repository/A911BC38/FE218D1A99BB11F0936C3135C4F9AE02/V2clsMbYVbVNImohjbOo5-9uerk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V2clsMbYVbVNImohjbOo5-9uerk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:33:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BC38, serialNumber=576725B0C6D855B54D226A218DB3A8E7EF6E7AB9 Validity Not Before: Sep 25 03:06:43 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68d4b1c3-f287 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:3c:0d:db:8a:7a:82:a8:8c:1d:ab:6a:b5:92: 0a:4a:d4:61:f6:85:e9:fc:1e:b3:60:36:81:1f:06: d4:14:b3:1d:8b:b7:84:7a:4b:8b:5e:bf:5e:65:db: 16:87:90:f1:46:aa:df:c3:a4:6e:e5:e1:60:50:c4: e4:d4:3b:09:93:67:a1:98:ea:93:99:e1:4b:5f:69: 13:c4:f3:02:ed:d1:56:62:72:2e:93:41:47:2d:38: ae:e3:cd:74:b6:e0:e8:33:13:3c:13:b5:de:39:05: 5f:e2:67:9d:f2:68:fe:cb:37:53:cd:b9:a2:fe:f0: 4d:0c:d0:bb:8b:f6:ee:4c:db:1b:88:6c:24:34:58: 82:09:97:f0:f0:4f:e9:d5:bf:0d:26:72:4e:20:df: a2:4d:13:1f:03:00:04:ae:d9:5a:2c:5f:04:aa:a8: 5d:33:7e:8d:18:bc:ab:ba:68:dd:f1:11:22:52:3f: b7:06:1e:64:35:9c:d6:d0:83:c1:5c:96:e1:74:81: 9c:3c:20:d8:b6:c4:b2:49:0a:8f:f9:6d:2a:ef:70: d8:64:3c:30:d4:db:fa:d3:8d:c9:ac:e5:82:c7:ca: 20:e1:17:0d:67:ff:26:cf:d2:b6:38:70:9d:15:65: d9:2d:09:4f:f7:db:d6:1d:fa:f0:fd:c6:f6:f6:34: 88:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:A2:49:24:30:BF:92:1F:AC:A0:88:19:99:90:D9:4C:0B:6B:BC:53 X509v3 Authority Key Identifier: keyid:57:67:25:B0:C6:D8:55:B5:4D:22:6A:21:8D:B3:A8:E7:EF:6E:7A:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BC38/FE218D1A99BB11F0936C3135C4F9AE02/V2clsMbYVbVNImohjbOo5-9uerk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V2clsMbYVbVNImohjbOo5-9uerk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BC38/FE218D1A99BB11F0936C3135C4F9AE02/A9C261C699BC11F0A121CE7BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.133.92.0/23 Signature Algorithm: sha256WithRSAEncryption 8b:be:73:91:51:78:10:3f:bb:fc:17:6e:15:73:d1:77:f6:46: df:eb:c1:c1:10:9e:e8:a0:be:45:14:40:ec:25:97:bb:7b:da: d9:ff:e9:e8:03:80:4c:6f:90:22:da:7b:37:ba:9c:97:29:5d: 1d:99:de:f1:6d:f2:c0:fe:b1:08:87:0f:ff:1f:53:6f:98:e2: 2f:90:60:cc:43:a5:3c:7a:d2:9b:3e:3a:31:17:7e:9f:16:4a: 85:90:6e:eb:33:31:4b:e9:ee:ac:35:3b:07:ff:0d:a2:a8:31: a3:28:0c:7a:b7:cd:84:da:2f:a9:83:3c:db:e8:1b:bb:a0:cb: 5e:d5:57:a3:8f:fd:98:81:bf:e3:23:53:22:de:b6:8b:92:a2: 6c:04:ee:c7:ff:c8:7d:64:6d:05:7d:b9:0d:ea:77:a3:4c:02: 37:24:66:1c:98:b5:5d:e3:b5:41:5f:be:9d:75:dc:b4:38:19: 01:7a:36:fa:03:ee:84:77:d6:f5:99:60:c1:50:ec:b6:3b:28: 8f:b9:90:c2:fe:3b:3f:56:9a:e1:9b:f4:15:c7:ae:99:81:0f: f0:6f:42:bf:1e:bf:88:24:c3:50:76:c8:bf:da:d3:a7:d8:13: 63:ba:88:97:36:7d:30:28:cc:9c:7a:2f:aa:67:20:79:bc:b4: a9:e3:90:e0 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QkMzODExMC8GA1UEBRMoNTc2NzI1QjBDNkQ4NTVCNTREMjI2QTIxOERCM0E4RTdF RjZFN0FCOTAeFw0yNTA5MjUwMzA2NDNaFw0yNjEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY4ZDRiMWMzLWYyODcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLPA3binqCqIwdq2q1kgpK1GH2hen8HrNgNoEfBtQUsx2Lt4R6S4tev15l2xaH kPFGqt/DpG7l4WBQxOTUOwmTZ6GY6pOZ4UtfaRPE8wLt0VZici6TQUctOK7jzXS2 4OgzEzwTtd45BV/iZ53yaP7LN1PNuaL+8E0M0LuL9u5M2xuIbCQ0WIIJl/DwT+nV vw0mck4g36JNEx8DAASu2VosXwSqqF0zfo0YvKu6aN3xESJSP7cGHmQ1nNbQg8Fc luF0gZw8INi2xLJJCo/5bSrvcNhkPDDU2/rTjcms5YLHyiDhFw1n/ybP0rY4cJ0V ZdktCU/329Yd+vD9xvb2NIj9AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUBqJJJDC/ kh+soIgZmZDZTAtrvFMwHwYDVR0jBBgwFoAUV2clsMbYVbVNImohjbOo5+9uerkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFCQzM4L0ZFMjE4RDFBOTlC QjExRjA5MzZDMzEzNUM0RjlBRTAyL1YyY2xzTWJZVmJWTkltb2hqYk9vNS05dWVy ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVjJjbHNNYllWYlZOSW1vaGpiT281LTl1ZXJrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkMzOC9GRTIxOEQxQTk5QkIxMUYwOTM2QzMxMzVDNEY5QUUwMi9BOUMyNjFDNjk5 QkMxMUYwQTEyMUNFN0JDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAcqFXDANBgkqhkiG9w0BAQsFAAOCAQEAi75zkVF4ED+7/Bdu FXPRd/ZG3+vBwRCe6KC+RRRA7CWXu3va2f/p6AOATG+QItp7N7qclyldHZne8W3y wP6xCIcP/x9Tb5jiL5BgzEOlPHrSmz46MRd+nxZKhZBu6zMxS+nurDU7B/8Noqgx oygMerfNhNovqYM82+gbu6DLXtVXo4/9mIG/4yNTIt62i5KibATux//IfWRtBX25 Dep3o0wCNyRmHJi1XeO1QV++nXXctDgZAXo2+gPuhHfW9ZlgwVDstjsoj7mQwv47 P1aa4Zv0FceumYEP8G9Cvx6/iCTDUHbIv9rTp9gTY7qIlzZ9MCjMnHovqmcgeby0 qeOQ4A== -----END CERTIFICATE-----Generated at Mon Oct 20 08:32:15 2025 by rpki-client