$ rpki-client -vvf rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/F3425EF0684D11F0B2D5FA37C4F9AE02.roa File: F3425EF0684D11F0B2D5FA37C4F9AE02.roa (raw, json) Hash identifier: kDg5gV8f685pEYZaJzry/4cBmeqL4qLx4WwwvbyKJCY= Subject key identifier: 42:08:BB:9E:93:BB:49:BC:0E:8F:D1:8C:5C:64:32:24:AA:BB:B1:DD Certificate issuer: /CN=A9134172/serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7 Certificate serial: 0B35 Authority key identifier: F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/F3425EF0684D11F0B2D5FA37C4F9AE02.roa Signing time: Fri 10 Oct 2025 06:34:09 +0000 ROA not before: Fri 10 Oct 2025 06:34:09 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 213607 IP address blocks: 61.15.96.0/24 maxlen: 24 203.168.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:09:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2869 (0xb35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134172, serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7 Validity Not Before: Oct 10 06:34:09 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=68e8a8e1-a3d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:1b:b7:0f:64:14:e8:a7:a7:32:a5:49:ad:09: de:40:64:28:0a:6b:a5:dd:e7:09:36:ef:3c:54:b4: 27:e0:02:4d:d0:f5:08:1f:f8:e0:9f:88:69:08:1c: 54:a9:dc:8e:45:dc:09:a7:f9:43:08:bf:93:30:00: 26:45:89:04:be:c0:ae:24:40:09:70:80:fa:9a:2e: 0d:93:77:ba:08:68:e9:ad:03:b6:50:47:13:dd:bd: c8:84:55:9e:cf:51:ce:55:60:50:6b:51:74:3c:9d: 5e:dc:cc:dc:ec:25:ef:5f:d6:8c:5c:aa:01:78:6b: 58:95:1f:05:af:0d:16:e3:68:82:b5:35:5b:0e:a1: 25:f9:a5:0e:a4:18:9c:5b:5f:8d:75:a5:07:08:d1: 97:3d:7f:8b:f3:9a:76:08:5b:7d:3b:fe:1d:f9:c1: 96:f4:80:32:7a:62:2c:3f:96:a1:61:7c:8b:a1:6f: 98:46:1c:f8:51:27:44:6d:a7:ee:0c:8f:b5:49:fd: 31:1b:32:9a:ba:c9:07:4e:d1:eb:4d:e6:e1:6a:19: 4d:0e:57:36:63:99:c1:34:3c:95:66:81:1d:7d:44: c5:c0:37:d7:45:70:2f:b4:ba:82:7e:c0:d3:dc:b7: 3e:a1:a5:31:56:3b:3a:98:64:eb:df:10:39:6a:39: 69:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:08:BB:9E:93:BB:49:BC:0E:8F:D1:8C:5C:64:32:24:AA:BB:B1:DD X509v3 Authority Key Identifier: keyid:F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/F3425EF0684D11F0B2D5FA37C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.15.96.0/24 203.168.239.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:05:f6:94:cd:54:4b:18:ab:a8:d7:3d:3f:74:85:04:5a:a1: 52:1a:0e:a8:97:51:09:cd:f3:23:b1:6d:e0:bf:fd:24:49:bd: e3:09:38:e1:14:90:9f:df:18:d7:84:30:99:c9:63:7c:c0:c7: 27:b4:d9:39:5c:24:d4:5d:8d:de:22:97:d6:5b:27:58:b3:9d: 7b:f2:51:1d:a0:b9:0c:a9:5c:3c:e8:07:ac:e4:8d:e5:35:1e: e7:d9:8d:b6:78:63:3c:7e:16:c9:80:bc:76:4e:4a:0d:01:df: c2:1c:5b:dd:0b:8f:8a:c7:84:d1:a1:b5:cc:e4:33:d4:28:40: 79:5f:83:93:0b:a4:b7:ab:51:1c:18:5d:b1:09:43:f6:70:85: 1d:12:f6:e7:97:e9:1b:8a:54:00:6c:6a:a3:91:b2:c0:20:67: b4:93:c3:16:e1:fe:f7:ad:c0:7f:6d:aa:63:46:48:f9:a7:af: 7e:43:62:34:f1:71:07:50:8b:8b:b0:86:f3:ab:a8:6f:c5:44: 73:e4:db:da:ec:e6:dc:c0:49:37:d3:ea:60:e9:e1:33:93:4f: 43:00:6b:c1:50:95:2f:f4:c1:57:11:85:4a:a9:30:21:05:fa: 49:6a:8f:6b:a8:73:53:04:64:67:0f:af:19:06:c8:29:ea:1c: 33:e4:37:60 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICCzUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQxNzIxMTAvBgNVBAUTKEY0NUMwRjRGNDY3Q0UxNTc2RTVFRTlFNDFFNTU3NkYw MzQ4QzQ2QTcwHhcNMjUxMDEwMDYzNDA5WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OGU4YThlMS1hM2Q0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3xu3D2QU6KenMqVJrQneQGQoCmul3ecJNu88VLQn4AJN0PUIH/jgn4hpCBxU qdyORdwJp/lDCL+TMAAmRYkEvsCuJEAJcID6mi4Nk3e6CGjprQO2UEcT3b3IhFWe z1HOVWBQa1F0PJ1e3Mzc7CXvX9aMXKoBeGtYlR8Frw0W42iCtTVbDqEl+aUOpBic W1+NdaUHCNGXPX+L85p2CFt9O/4d+cGW9IAyemIsP5ahYXyLoW+YRhz4USdEbafu DI+1Sf0xGzKauskHTtHrTebhahlNDlc2Y5nBNDyVZoEdfUTFwDfXRXAvtLqCfsDT 3Lc+oaUxVjs6mGTr3xA5ajlpbQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFEIIu56T u0m8Do/RjFxkMiSqu7HdMB8GA1UdIwQYMBaAFPRcD09GfOFXbl7p5B5VdvA0jEan MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDE3Mi81OTc2MTI2NDlF NEQxMUVBOUMyM0FGMUZDNEY5QUUwMi85RndQVDBaODRWZHVYdW5rSGxWMjhEU01S cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlGd1BUMFo4NFZkdVh1bmtIbFYyOERTTVJxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzQxNzIvNTk3NjEyNjQ5RTREMTFFQTlDMjNBRjFGQzRGOUFFMDIvRjM0MjVFRjA2 ODREMTFGMEIyRDVGQTM3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAA9D2ADBADLqO8wDQYJKoZIhvcNAQELBQADggEBAEwF9pTN VEsYq6jXPT90hQRaoVIaDqiXUQnN8yOxbeC//SRJveMJOOEUkJ/fGNeEMJnJY3zA xye02TlcJNRdjd4il9ZbJ1iznXvyUR2guQypXDzoB6zkjeU1HufZjbZ4Yzx+FsmA vHZOSg0B38IcW90Lj4rHhNGhtczkM9QoQHlfg5MLpLerURwYXbEJQ/ZwhR0S9ueX 6RuKVABsaqORssAgZ7STwxbh/vetwH9tqmNGSPmnr35DYjTxcQdQi4uwhvOrqG/F RHPk29rs5tzASTfT6mDp4TOTT0MAa8FQlS/0wVcRhUqpMCEF+klqj2uoc1MEZGcP rxkGyCnqHDPkN2A= -----END CERTIFICATE-----Generated at Mon Oct 20 01:43:48 2025 by rpki-client