$ rpki-client -vvf rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/0AC916D89EB111F0A0F4072DC4F9AE02.roa File: 0AC916D89EB111F0A0F4072DC4F9AE02.roa (raw, json) Hash identifier: SAttJrcW9yDLwQeR6ELfn6S0PVgoMa/Mwd4bftwLjMw= Subject key identifier: 6D:AA:83:D5:8C:29:A7:9C:B1:94:D8:99:93:0B:EB:88:97:BA:9F:BB Certificate issuer: /CN=A912FC73/serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC Certificate serial: 04D8 Authority key identifier: CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/0AC916D89EB111F0A0F4072DC4F9AE02.roa Signing time: Wed 01 Oct 2025 10:27:02 +0000 ROA not before: Wed 01 Oct 2025 10:27:02 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 401362 IP address blocks: 223.29.132.0/22 maxlen: 22 223.29.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:33:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1240 (0x4d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FC73, serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC Validity Not Before: Oct 1 10:27:02 2025 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=68dd01f5-0d8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:4b:0d:c5:ad:9b:df:93:51:07:28:a5:d4:d0: e8:55:40:d0:17:e0:81:25:53:9e:25:4c:b0:db:f6: 58:e5:31:9d:25:78:7a:f5:85:3c:b2:2b:23:78:fc: a8:4f:83:96:b2:5b:3d:1c:3b:fd:a8:97:94:f7:10: d9:37:02:65:7d:0d:f1:60:75:43:73:0a:b0:b7:eb: 19:53:8e:87:cc:1e:31:33:66:b2:2d:e4:76:d7:67: bf:cb:bd:a9:ca:df:a6:ed:c3:e5:e1:0e:3f:e1:4a: 8f:28:76:1e:dd:a1:9f:91:10:80:cc:ec:e3:b3:2f: dc:37:03:6c:72:77:08:b2:cf:b0:15:de:0a:82:9b: 14:5e:9b:21:40:28:68:62:75:4c:52:8c:48:cf:22: 21:c3:5d:30:8e:b0:83:89:5e:46:b9:c6:33:da:31: 4c:89:5a:82:af:b4:71:76:4d:de:51:bd:a8:c5:87: b7:fc:4a:56:fb:22:de:c4:a5:23:46:73:c9:84:e6: 29:93:b1:2d:67:c7:79:5f:e3:6c:44:4b:e5:77:87: 52:03:cd:85:c6:65:28:de:79:a6:c3:a5:07:5c:87: 76:a3:24:e1:62:ff:16:12:04:9f:62:6f:53:a0:69: c5:18:6e:a1:84:05:4d:30:07:9a:79:20:be:a5:d4: 7c:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:AA:83:D5:8C:29:A7:9C:B1:94:D8:99:93:0B:EB:88:97:BA:9F:BB X509v3 Authority Key Identifier: keyid:CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/0AC916D89EB111F0A0F4072DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 223.29.132.0/22 223.29.160.0/21 Signature Algorithm: sha256WithRSAEncryption bb:f8:72:26:f2:dd:3c:09:12:ac:e2:27:80:10:71:4a:96:33: 7f:a7:94:1b:bd:ca:49:95:35:6d:5b:de:e8:b0:bd:99:e3:d9: 23:a0:99:4f:59:50:8f:38:ea:ba:f9:45:c5:91:db:15:eb:2a: 9e:88:89:9c:c3:63:f3:78:7d:c9:34:6d:7d:06:8f:38:07:23: f2:18:43:0e:18:a0:a4:c8:ee:eb:5d:af:ee:9b:58:e2:d7:38: ff:08:ac:33:4e:2e:33:13:bc:2b:0f:df:07:0c:89:95:02:04: fa:af:4d:73:86:e4:15:35:3c:42:df:03:b5:ed:aa:df:06:d2: 9e:e1:55:11:c9:d1:ed:59:b3:6f:0c:ce:bd:88:f1:c0:f0:77: 98:dd:5e:31:b3:78:44:18:2b:c9:5c:92:b3:aa:cc:eb:0e:8d: b5:1c:26:6c:99:9f:8a:eb:dd:d5:8f:71:b0:87:a9:61:1b:d2: c6:74:4a:ee:a3:a5:8f:ec:92:d3:32:ac:ab:2e:37:36:a5:44: 50:a2:65:de:d5:80:19:0c:2a:94:fe:4c:4d:c7:1b:5e:ef:24: 30:e2:91:27:56:21:03:1b:35:c9:8a:1a:12:07:06:61:00:ea: 1b:f9:80:d5:2f:ea:ec:db:fc:e3:cd:ae:9a:b4:38:ac:62:4c: 11:68:7a:71 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBNgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZDNzMxMTAvBgNVBAUTKENFRTQxNjAxRUVBOUY1MUIzNTI1REE1NURENEFDOTVD RUZBRjVBQkMwHhcNMjUxMDAxMTAyNzAyWhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGRkMDFmNS0wZDhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5ksNxa2b35NRByil1NDoVUDQF+CBJVOeJUyw2/ZY5TGdJXh69YU8sisjePyo T4OWsls9HDv9qJeU9xDZNwJlfQ3xYHVDcwqwt+sZU46HzB4xM2ayLeR212e/y72p yt+m7cPl4Q4/4UqPKHYe3aGfkRCAzOzjsy/cNwNscncIss+wFd4KgpsUXpshQCho YnVMUoxIzyIhw10wjrCDiV5GucYz2jFMiVqCr7Rxdk3eUb2oxYe3/EpW+yLexKUj RnPJhOYpk7EtZ8d5X+NsREvld4dSA82FxmUo3nmmw6UHXId2oyThYv8WEgSfYm9T oGnFGG6hhAVNMAeaeSC+pdR8iwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFG2qg9WM KaecsZTYmZML64iXup+7MB8GA1UdIwQYMBaAFM7kFgHuqfUbNSXaVd1KyVzvr1q8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkM3My8wMTQ0Q0RGODlG MzQxMUVDOUNFQkM2NzBDNEY5QUUwMi96dVFXQWU2cDlSczFKZHBWM1VySlhPLXZX cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p1UVdBZTZwOVJzMUpkcFYzVXJKWE8tdldydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkZDNzMvMDE0NENERjg5RjM0MTFFQzlDRUJDNjcwQzRGOUFFMDIvMEFDOTE2RDg5 RUIxMTFGMEEwRjQwNzJEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBALfHYQDBAPfHaAwDQYJKoZIhvcNAQELBQADggEBALv4ciby 3TwJEqziJ4AQcUqWM3+nlBu9ykmVNW1b3uiwvZnj2SOgmU9ZUI846rr5RcWR2xXr Kp6IiZzDY/N4fck0bX0GjzgHI/IYQw4YoKTI7utdr+6bWOLXOP8IrDNOLjMTvCsP 3wcMiZUCBPqvTXOG5BU1PELfA7Xtqt8G0p7hVRHJ0e1Zs28Mzr2I8cDwd5jdXjGz eEQYK8lckrOqzOsOjbUcJmyZn4rr3dWPcbCHqWEb0sZ0Su6jpY/sktMyrKsuNzal RFCiZd7VgBkMKpT+TE3HG17vJDDikSdWIQMbNcmKGhIHBmEA6hv5gNUv6uzb/OPN rpq0OKxiTBFoenE= -----END CERTIFICATE-----Generated at Mon Oct 20 03:49:27 2025 by rpki-client