$ rpki-client -vvf rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/2D4C6B20AAF411F08D7D0B81C4F9AE02.roa File: 2D4C6B20AAF411F08D7D0B81C4F9AE02.roa (raw, json) Hash identifier: hFKZKQB631IA4WIKA1wYkvNhSl9oz6iCSmNpqayClro= Subject key identifier: CD:1E:54:2B:76:B0:FC:A0:A8:6D:67:7C:34:5E:10:3C:DB:AF:98:9E Certificate issuer: /CN=A9127E99/serialNumber=E2534D26C78C9701790996438C114108254776AA Certificate serial: 0224 Authority key identifier: E2:53:4D:26:C7:8C:97:01:79:09:96:43:8C:11:41:08:25:47:76:AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lNNJseMlwF5CZZDjBFBCCVHdqo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/2D4C6B20AAF411F08D7D0B81C4F9AE02.roa Signing time: Fri 17 Oct 2025 00:56:56 +0000 ROA not before: Fri 17 Oct 2025 00:56:56 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 4826 IP address blocks: 45.117.24.0/24 maxlen: 24 45.117.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.crl rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lNNJseMlwF5CZZDjBFBCCVHdqo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:28:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 548 (0x224) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127E99, serialNumber=E2534D26C78C9701790996438C114108254776AA Validity Not Before: Oct 17 00:56:56 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68f19458-b037 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:69:3b:08:a4:93:7c:a9:cc:85:25:17:af:1d: c9:73:b0:51:a1:57:36:aa:22:9d:81:65:2f:bf:92: a7:e7:eb:81:53:f3:36:22:89:d8:9f:ba:1c:ac:64: f3:6e:a0:1c:18:c2:96:2c:25:36:6a:cc:d3:2b:59: 19:37:1d:63:8f:5c:51:85:7b:19:14:71:cd:08:c9: 5c:8a:85:92:65:2c:4f:f2:1c:b5:67:99:ea:94:5a: ba:53:bd:88:64:1a:e4:27:86:53:a2:cf:21:9c:06: aa:03:1d:3b:ca:90:a3:63:f1:b7:d1:cd:70:e8:8b: fb:0a:85:60:3f:61:9e:6c:e8:f4:4c:e3:e0:80:c1: 06:97:57:6d:56:a6:ac:94:16:81:28:03:ed:24:ef: d9:fd:a9:45:5f:45:99:4d:7b:5f:c0:87:81:5f:9d: 26:76:23:b2:10:9a:73:04:0b:39:06:fc:51:85:bc: ac:09:80:28:b8:8c:ed:e3:7a:91:0b:94:fa:c7:94: 84:c2:ed:07:fe:b1:29:98:0d:27:61:52:79:de:fa: da:85:ee:f6:1e:09:12:c6:bc:5b:29:7b:70:28:e2: d6:94:32:5b:3d:6e:ad:3a:57:c5:11:61:26:2b:05: 8f:2b:83:fb:83:b1:09:36:91:36:fc:00:79:48:e4: 7e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:1E:54:2B:76:B0:FC:A0:A8:6D:67:7C:34:5E:10:3C:DB:AF:98:9E X509v3 Authority Key Identifier: keyid:E2:53:4D:26:C7:8C:97:01:79:09:96:43:8C:11:41:08:25:47:76:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lNNJseMlwF5CZZDjBFBCCVHdqo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/2D4C6B20AAF411F08D7D0B81C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.117.24.0/24 45.117.26.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:55:c2:31:63:32:08:47:96:8a:bb:0e:ba:c5:6d:86:c9:29: a0:71:6d:9c:39:3e:fd:48:a5:6a:ee:fc:7b:17:fb:c5:6a:35: 74:88:59:de:99:d0:cd:53:0c:ef:70:eb:1c:d5:4c:ab:b1:b9: af:45:93:ce:4c:d2:b9:9b:19:f6:b5:c1:1c:8b:da:eb:a1:56: bc:8f:de:4c:b3:90:79:f0:65:d2:63:da:4d:f1:f0:c6:db:93: f4:12:f1:8b:e4:c9:cd:ee:59:2d:2d:eb:b9:ef:7e:2b:9b:bc: d8:f9:dd:fa:82:26:14:9a:79:34:0e:c6:3d:bf:5a:f3:e0:e3: c8:f5:c0:bc:6d:e4:4a:34:3a:0c:22:8a:1d:e4:10:3e:5e:1e: 2e:81:b7:17:9b:76:dd:0a:03:a9:21:cf:77:b1:a7:3d:ca:9f: 1c:cd:a0:95:9e:1d:69:6b:ef:da:e9:99:d5:a3:1c:0b:60:ab: 18:a4:68:1d:b1:c2:e8:c0:85:f1:fa:8d:5e:3b:aa:68:53:da: 69:39:1c:96:ff:59:13:9e:8e:ad:00:55:39:c4:08:c9:e9:35: 7c:60:68:fa:b6:46:ad:b9:c7:3c:0e:eb:fa:35:a5:c7:0a:d4: 0a:50:7f:af:25:af:d6:df:26:a8:8e:44:d6:40:ae:3e:a3:4d: ce:57:2f:c8 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAiQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdFOTkxMTAvBgNVBAUTKEUyNTM0RDI2Qzc4Qzk3MDE3OTA5OTY0MzhDMTE0MTA4 MjU0Nzc2QUEwHhcNMjUxMDE3MDA1NjU2WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGYxOTQ1OC1iMDM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Gk7CKSTfKnMhSUXrx3Jc7BRoVc2qiKdgWUvv5Kn5+uBU/M2IonYn7ocrGTz bqAcGMKWLCU2aszTK1kZNx1jj1xRhXsZFHHNCMlcioWSZSxP8hy1Z5nqlFq6U72I ZBrkJ4ZTos8hnAaqAx07ypCjY/G30c1w6Iv7CoVgP2GebOj0TOPggMEGl1dtVqas lBaBKAPtJO/Z/alFX0WZTXtfwIeBX50mdiOyEJpzBAs5BvxRhbysCYAouIzt43qR C5T6x5SEwu0H/rEpmA0nYVJ53vrahe72HgkSxrxbKXtwKOLWlDJbPW6tOlfFEWEm KwWPK4P7g7EJNpE2/AB5SOR+5wIDAQABo4ICmzCCApcwHQYDVR0OBBYEFM0eVCt2 sPygqG1nfDReEDzbr5ieMB8GA1UdIwQYMBaAFOJTTSbHjJcBeQmWQ4wRQQglR3aq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0U5OS8wQUNFMTlCMDdB ODUxMUVEQUQ2OTI4ODdDNEY5QUUwMi80bE5OSnNlTWx3RjVDWlpEakJGQkNDVkhk cW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRsTk5Kc2VNbHdGNUNaWkRqQkZCQ0NWSGRxby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjdFOTkvMEFDRTE5QjA3QTg1MTFFREFENjkyODg3QzRGOUFFMDIvMkQ0QzZCMjBB QUY0MTFGMDhEN0QwQjgxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAAtdRgDBAAtdRowDQYJKoZIhvcNAQELBQADggEBAC1VwjFj MghHloq7DrrFbYbJKaBxbZw5Pv1IpWru/HsX+8VqNXSIWd6Z0M1TDO9w6xzVTKux ua9Fk85M0rmbGfa1wRyL2uuhVryP3kyzkHnwZdJj2k3x8Mbbk/QS8Yvkyc3uWS0t 67nvfiubvNj53fqCJhSaeTQOxj2/WvPg48j1wLxt5Eo0Ogwiih3kED5eHi6Btxeb dt0KA6khz3expz3KnxzNoJWeHWlr79rpmdWjHAtgqxikaB2xwujAhfH6jV47qmhT 2mk5HJb/WROejq0AVTnECMnpNXxgaPq2Rq25xzwO6/o1pccK1ApQf68lr9bfJqiO RNZArj6jTc5XL8g= -----END CERTIFICATE-----Generated at Mon Oct 20 07:50:30 2025 by rpki-client