$ rpki-client -vvf rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/448119B0DAEA11EA8773CC58C4F9AE02.roa File: 448119B0DAEA11EA8773CC58C4F9AE02.roa (raw, json) Hash identifier: 4Kz/gb1MnYaV74RbCJyZRYORl5E6fIDMvNU65k0KJvs= Subject key identifier: D4:3F:0E:E0:94:3A:83:A7:FB:9E:D6:7B:15:40:D5:DC:6D:37:99:10 Certificate issuer: /CN=A9134CDB/serialNumber=2C4E5B054273A3C1EE416A42DF9E236226373961 Certificate serial: 0819 Authority key identifier: 2C:4E:5B:05:42:73:A3:C1:EE:41:6A:42:DF:9E:23:62:26:37:39:61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE5bBUJzo8HuQWpC354jYiY3OWE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/448119B0DAEA11EA8773CC58C4F9AE02.roa Signing time: Tue 20 May 2025 20:58:36 +0000 ROA not before: Tue 20 May 2025 20:58:36 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 132426 IP address blocks: 43.239.252.0/22 maxlen: 24 103.20.224.0/22 maxlen: 24 2405:4700::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.crl rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE5bBUJzo8HuQWpC354jYiY3OWE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:49:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2073 (0x819) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134CDB, serialNumber=2C4E5B054273A3C1EE416A42DF9E236226373961 Validity Not Before: May 20 20:58:36 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=682cecfc-58cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:e5:1c:c5:0d:8c:a2:d2:84:e6:86:25:f4:e1: 89:be:2b:25:2f:65:41:75:46:90:da:3d:15:33:d0: 70:4b:7e:1a:cf:ee:04:29:d7:6a:60:c5:79:68:e4: 35:49:6b:89:8d:85:50:55:53:15:21:e0:0f:f2:06: 3c:79:cd:ab:01:bf:9e:e4:94:a0:e6:83:42:b2:7b: fe:f6:f3:3c:ce:8f:29:77:fd:6f:f5:be:36:a7:88: 36:a9:51:a0:f7:b9:7f:f8:cd:4a:ce:e4:47:d4:27: 41:0c:6b:08:d1:73:e0:c3:66:ff:f3:c4:df:30:bc: ac:57:82:f5:d1:0c:03:d3:b5:20:6b:ba:43:a3:30: a9:47:95:90:c6:9f:98:01:1d:d7:cf:77:d0:41:9d: b9:be:e2:d3:1b:32:fd:56:c4:21:b6:eb:9c:2a:34: 69:fe:87:ae:74:57:c8:5f:71:49:13:06:e0:16:6b: de:16:52:3f:2f:02:da:7f:26:0f:3e:f4:2d:f1:32: 48:8c:05:be:3d:c3:22:f3:78:0c:d6:26:2f:27:60: 1f:95:98:cf:39:e0:51:46:77:fe:bd:6e:07:c0:6f: 1b:84:b4:9d:55:3c:7e:99:5e:65:8b:dc:64:bc:26: 7d:49:db:8e:53:70:75:cc:27:1f:0f:52:e6:7f:14: 7d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:3F:0E:E0:94:3A:83:A7:FB:9E:D6:7B:15:40:D5:DC:6D:37:99:10 X509v3 Authority Key Identifier: keyid:2C:4E:5B:05:42:73:A3:C1:EE:41:6A:42:DF:9E:23:62:26:37:39:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE5bBUJzo8HuQWpC354jYiY3OWE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/448119B0DAEA11EA8773CC58C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.239.252.0/22 103.20.224.0/22 IPv6: 2405:4700::/32 Signature Algorithm: sha256WithRSAEncryption 23:f3:46:ba:88:2b:6e:ed:4c:57:af:91:36:0a:dd:ea:e0:6f: 23:26:7b:2a:1b:40:d9:5f:3e:37:90:de:de:b8:cc:b5:33:e2: 55:84:c3:47:1e:e8:be:47:0a:1b:99:13:13:23:7d:8a:e2:05: 58:16:08:d1:c6:7e:ce:5f:be:8f:2a:60:ce:fc:db:39:6a:e5: e8:89:62:76:58:2f:17:7d:e0:36:bd:ce:a1:e2:a4:56:91:93: 6f:e3:2f:ca:96:9c:91:73:35:f2:a3:f4:cb:e1:3d:07:5e:c5: cf:ab:b7:45:f6:c1:f3:aa:04:6d:06:9b:8b:8c:b0:91:00:b7: b3:c3:b2:03:a2:a6:4d:86:19:77:98:f2:70:35:05:b5:c6:2d: 43:37:dc:7b:54:a4:61:3a:b9:e4:3b:83:a2:d2:a2:14:b7:f0: 0c:80:89:73:a6:40:a4:cd:39:99:3f:10:15:00:9a:5b:a4:5d: 07:70:26:f5:ec:b1:a4:21:3d:1b:a4:b0:30:f3:0d:47:7e:95: 74:df:82:ae:8c:8d:44:06:6d:fc:eb:93:e9:ca:8b:99:fe:dc: 5b:4a:c9:e8:76:d9:07:9b:1f:3a:46:dc:1a:5d:65:0a:ed:de: c3:8c:23:ee:a6:be:26:74:03:36:27:2c:3a:80:75:3a:57:a8: 3d:59:3b:cb -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICCBkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzRDREIxMTAvBgNVBAUTKDJDNEU1QjA1NDI3M0EzQzFFRTQxNkE0MkRGOUUyMzYy MjYzNzM5NjEwHhcNMjUwNTIwMjA1ODM2WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODJjZWNmYy01OGNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4eUcxQ2MotKE5oYl9OGJvislL2VBdUaQ2j0VM9BwS34az+4EKddqYMV5aOQ1 SWuJjYVQVVMVIeAP8gY8ec2rAb+e5JSg5oNCsnv+9vM8zo8pd/1v9b42p4g2qVGg 97l/+M1KzuRH1CdBDGsI0XPgw2b/88TfMLysV4L10QwD07Uga7pDozCpR5WQxp+Y AR3Xz3fQQZ25vuLTGzL9VsQhtuucKjRp/oeudFfIX3FJEwbgFmveFlI/LwLafyYP PvQt8TJIjAW+PcMi83gM1iYvJ2AflZjPOeBRRnf+vW4HwG8bhLSdVTx+mV5li9xk vCZ9SduOU3B1zCcfD1LmfxR94wIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFNQ/DuCU OoOn+57WexVA1dxtN5kQMB8GA1UdIwQYMBaAFCxOWwVCc6PB7kFqQt+eI2ImNzlh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNENEQi9CREFGNjBFNERB RTUxMUVBOEEyNTVBNERDNEY5QUUwMi9MRTViQlVKem84SHVRV3BDMzU0allpWTNP V0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xFNWJCVUp6bzhIdVFXcEMzNTRqWWlZM09XRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzRDREIvQkRBRjYwRTREQUU1MTFFQThBMjU1QTREQzRGOUFFMDIvNDQ4MTE5QjBE QUVBMTFFQTg3NzNDQzU4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAIr7/wDBAJnFOAwDQQCAAIwBwMFACQFRwAwDQYJKoZIhvcN AQELBQADggEBACPzRrqIK27tTFevkTYK3ergbyMmeyobQNlfPjeQ3t64zLUz4lWE w0ce6L5HChuZExMjfYriBVgWCNHGfs5fvo8qYM782zlq5eiJYnZYLxd94Da9zqHi pFaRk2/jL8qWnJFzNfKj9MvhPQdexc+rt0X2wfOqBG0Gm4uMsJEAt7PDsgOipk2G GXeY8nA1BbXGLUM33HtUpGE6ueQ7g6LSohS38AyAiXOmQKTNOZk/EBUAmlukXQdw JvXssaQhPRuksDDzDUd+lXTfgq6MjUQGbfzrk+nKi5n+3FtKyeh22QebHzpG3Bpd ZQrt3sOMI+6mviZ0AzYnLDqAdTpXqD1ZO8s= -----END CERTIFICATE-----Generated at Mon Oct 20 19:13:21 2025 by rpki-client