$ rpki-client -vvf rpki.apnic.net/member_repository/A912946F/25D598DEAB2711F08CF79E13C4F9AE02/6F324D3CAB2811F08D96D563C4F9AE02.roa File: 6F324D3CAB2811F08D96D563C4F9AE02.roa (raw, json) Hash identifier: 88QIr/+6SV1XGmbtRjlIpjfP33+g+SedUIOc4mh9AFw= Subject key identifier: 35:06:9E:D7:79:3B:B7:F4:8A:40:76:F1:BF:5C:6A:DD:30:1B:82:55 Certificate issuer: /CN=A912946F/serialNumber=47EF0853A2D7DEA249B7C3FAF78169C8F8DBC7E9 Certificate serial: 02 Authority key identifier: 47:EF:08:53:A2:D7:DE:A2:49:B7:C3:FA:F7:81:69:C8:F8:DB:C7:E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R-8IU6LX3qJJt8P694FpyPjbx-k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912946F/25D598DEAB2711F08CF79E13C4F9AE02/6F324D3CAB2811F08D96D563C4F9AE02.roa Signing time: Fri 17 Oct 2025 07:11:00 +0000 ROA not before: Fri 17 Oct 2025 07:11:00 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 154167 IP address blocks: 203.17.177.0/24 maxlen: 24 2001:df6:7c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912946F/25D598DEAB2711F08CF79E13C4F9AE02/R-8IU6LX3qJJt8P694FpyPjbx-k.crl rsync://rpki.apnic.net/member_repository/A912946F/25D598DEAB2711F08CF79E13C4F9AE02/R-8IU6LX3qJJt8P694FpyPjbx-k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R-8IU6LX3qJJt8P694FpyPjbx-k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:41:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912946F, serialNumber=47EF0853A2D7DEA249B7C3FAF78169C8F8DBC7E9 Validity Not Before: Oct 17 07:11:00 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68f1ec04-26c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2b:e7:66:15:94:b1:ce:5c:df:ec:0f:62:e3: e0:06:da:ba:e6:1e:c0:2e:69:cf:46:e3:07:8e:67: 90:c5:bc:6f:b9:a1:31:d0:28:30:33:ef:d7:15:a3: 3e:74:e4:17:0e:9b:29:6b:a7:da:0d:30:be:55:03: 01:c0:3c:6a:8a:37:b1:05:ed:f8:6b:29:66:c4:e2: b4:75:5e:24:a5:b5:71:5f:ee:b9:f3:95:40:99:d5: f3:a8:f9:7e:ac:fe:fb:a2:4f:59:77:fb:c5:0d:4a: cd:00:b3:df:d6:97:a6:27:85:63:71:3f:8d:94:f3: 6f:5a:ca:84:95:98:e0:5b:88:18:3f:a2:43:27:c9: e7:04:4e:2a:df:fc:0e:9e:56:49:ec:9e:4a:8f:a6: 2e:b0:69:a1:df:0e:6d:f4:21:60:2c:ac:ce:4a:71: bd:21:15:15:be:57:48:75:e7:23:e7:dd:58:20:eb: cb:c6:31:86:77:2e:d1:ef:ca:8e:cd:c3:ef:87:4f: 6d:48:23:4b:1f:99:6b:0a:6c:19:7e:84:8a:98:7d: ec:cd:16:bb:85:1a:36:2d:64:87:b0:20:61:43:c1: 8a:85:71:c1:63:ab:60:40:ab:5d:61:f8:b7:87:87: 42:17:c3:2e:16:24:3e:3e:45:4e:99:3f:7d:90:80: 6c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:06:9E:D7:79:3B:B7:F4:8A:40:76:F1:BF:5C:6A:DD:30:1B:82:55 X509v3 Authority Key Identifier: keyid:47:EF:08:53:A2:D7:DE:A2:49:B7:C3:FA:F7:81:69:C8:F8:DB:C7:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912946F/25D598DEAB2711F08CF79E13C4F9AE02/R-8IU6LX3qJJt8P694FpyPjbx-k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R-8IU6LX3qJJt8P694FpyPjbx-k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912946F/25D598DEAB2711F08CF79E13C4F9AE02/6F324D3CAB2811F08D96D563C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.17.177.0/24 IPv6: 2001:df6:7c0::/48 Signature Algorithm: sha256WithRSAEncryption 47:0f:0c:50:48:5a:d6:a4:35:ca:43:b6:c0:c1:0d:a1:bd:c6: 91:b1:15:6a:47:76:2a:33:44:1c:5e:e1:2f:4c:6b:f1:04:f4: 0f:5c:b7:69:b2:3d:b2:40:89:64:93:dd:47:d7:a0:7d:80:15: 29:c8:45:a8:34:d7:ce:e5:e8:80:48:8a:09:7d:68:be:c2:82: 8b:33:0d:ee:5d:fa:da:8e:d9:91:3e:73:43:f4:07:d0:45:eb: f9:e8:28:b6:f8:12:d9:aa:b0:0e:2e:1c:88:6b:15:69:7f:c4: de:b0:0e:f1:80:e0:6b:17:dc:23:0c:8f:74:a2:33:f2:3d:1e: 54:cb:8a:77:c6:4d:cf:c2:ff:be:2f:62:b0:9a:0e:a9:9d:42: 77:e0:83:de:1b:4a:1f:f2:d8:55:38:9e:5c:20:0b:e5:b5:d3: 04:86:b6:a2:ca:cc:73:9f:c1:f3:ac:f8:ad:b9:84:56:ae:b0: 38:f3:fe:81:e0:6f:da:8f:5d:8c:f9:8b:d4:b2:b8:1f:88:cf: e7:2a:6d:b2:44:b1:f1:b3:1f:25:05:b1:d1:5b:d4:31:df:27: e1:f9:28:ee:96:54:77:e9:56:2f:9b:b3:2b:fe:84:f4:22:94: 59:4a:1d:e9:e9:b1:83:e0:d1:e0:56:c7:63:73:5d:c7:ca:94: 25:e1:2c:f4 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy OTQ2RjExMC8GA1UEBRMoNDdFRjA4NTNBMkQ3REVBMjQ5QjdDM0ZBRjc4MTY5QzhG OERCQzdFOTAeFw0yNTEwMTcwNzExMDBaFw0yNjEyMDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4ZjFlYzA0LTI2YzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBK+dmFZSxzlzf7A9i4+AG2rrmHsAuac9G4weOZ5DFvG+5oTHQKDAz79cVoz50 5BcOmylrp9oNML5VAwHAPGqKN7EF7fhrKWbE4rR1XiSltXFf7rnzlUCZ1fOo+X6s /vuiT1l3+8UNSs0As9/Wl6YnhWNxP42U829ayoSVmOBbiBg/okMnyecETirf/A6e VknsnkqPpi6waaHfDm30IWAsrM5Kcb0hFRW+V0h15yPn3Vgg68vGMYZ3LtHvyo7N w++HT21II0sfmWsKbBl+hIqYfezNFruFGjYtZIewIGFDwYqFccFjq2BAq11h+LeH h0IXwy4WJD4+RU6ZP32QgGyJAgMBAAGjggKmMIICojAdBgNVHQ4EFgQUNQae13k7 t/SKQHbxv1xq3TAbglUwHwYDVR0jBBgwFoAUR+8IU6LX3qJJt8P694FpyPjbx+kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI5NDZGLzI1RDU5OERFQUIy NzExRjA4Q0Y3OUUxM0M0RjlBRTAyL1ItOElVNkxYM3FKSnQ4UDY5NEZweVBqYngt ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUi04SVU2TFgzcUpKdDhQNjk0RnB5UGpieC1rLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTQ2Ri8yNUQ1OThERUFCMjcxMUYwOENGNzlFMTNDNEY5QUUwMi82RjMyNEQzQ0FC MjgxMUYwOEQ5NkQ1NjNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEAMsRsTAPBAIAAjAJAwcAIAEN9gfAMA0GCSqGSIb3DQEBCwUA A4IBAQBHDwxQSFrWpDXKQ7bAwQ2hvcaRsRVqR3YqM0QcXuEvTGvxBPQPXLdpsj2y QIlkk91H16B9gBUpyEWoNNfO5eiASIoJfWi+woKLMw3uXfrajtmRPnND9AfQRev5 6Ci2+BLZqrAOLhyIaxVpf8TesA7xgOBrF9wjDI90ojPyPR5Uy4p3xk3Pwv++L2Kw mg6pnUJ34IPeG0of8thVOJ5cIAvltdMEhraiysxzn8HzrPituYRWrrA48/6B4G/a j12M+YvUsrgfiM/nKm2yRLHxsx8lBbHRW9Qx3yfh+SjullR36VYvm7Mr/oT0IpRZ Sh3p6bGD4NHgVsdjc13HypQl4Sz0 -----END CERTIFICATE-----Generated at Mon Oct 20 18:31:30 2025 by rpki-client