$ rpki-client -vvf rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/E89AA63C3A3411EDA5928760C4F9AE02.roa File: E89AA63C3A3411EDA5928760C4F9AE02.roa (raw, json) Hash identifier: 4I+3xavxeBJbyMnYsMSj2G6sjqqfZ0aCKkQ3nfnxOP8= Subject key identifier: 1C:6E:26:0C:AC:44:16:C4:61:32:5C:0F:66:7E:33:A8:91:96:E7:01 Certificate issuer: /CN=A9135EC4/serialNumber=38E1D6E0AD025BB02E6548183EF2A8200050A365 Certificate serial: 34DB Authority key identifier: 38:E1:D6:E0:AD:02:5B:B0:2E:65:48:18:3E:F2:A8:20:00:50:A3:65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOHW4K0CW7AuZUgYPvKoIABQo2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/E89AA63C3A3411EDA5928760C4F9AE02.roa Signing time: Tue 14 Oct 2025 14:40:32 +0000 ROA not before: Tue 14 Oct 2025 14:40:32 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 17820 IP address blocks: 203.196.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.crl rsync://rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOHW4K0CW7AuZUgYPvKoIABQo2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 14:34:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13531 (0x34db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135EC4, serialNumber=38E1D6E0AD025BB02E6548183EF2A8200050A365 Validity Not Before: Oct 14 14:40:32 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68ee60e0-67e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:b5:6d:5d:c3:79:37:da:5b:f9:4e:ce:68:13: 84:3f:34:a8:9c:7f:71:dd:2f:8f:d2:fd:d3:d0:2c: 40:27:e7:b9:11:90:24:0e:16:c5:ed:46:06:9c:55: 27:4e:45:aa:e3:06:30:bd:e7:04:37:50:31:63:ee: 0c:93:96:85:82:2b:fb:f7:72:07:a7:e4:7a:01:f9: 24:2b:af:0a:de:7c:29:7a:84:f2:88:bb:33:73:91: 73:e7:15:54:6d:20:8a:ec:b0:08:c9:95:9b:95:45: da:91:44:58:06:31:42:d5:f5:3e:d2:f9:c7:15:17: 83:32:f8:9d:b8:7f:bc:46:d1:8e:8f:3f:92:d3:60: b6:8e:5b:b7:7d:57:88:d0:64:0e:14:7a:85:63:dc: 7e:68:26:40:ed:cc:25:71:5e:6b:8f:cf:e2:87:5b: 9f:e3:24:2d:6d:e5:8d:75:8d:1c:73:aa:c5:cc:fe: 63:a8:8d:7d:42:73:ba:06:06:3b:20:6a:a9:1e:f0: 5a:d2:e8:30:10:f5:2a:e1:09:96:d9:91:7f:8f:52: ae:3f:41:c1:ea:a6:5c:54:f0:ff:23:95:70:0d:4a: ab:f0:df:a7:50:f1:2d:0e:18:39:05:35:c5:d0:cb: 13:fe:3d:66:12:d6:32:db:fd:c7:bd:a7:f7:32:8d: 52:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:6E:26:0C:AC:44:16:C4:61:32:5C:0F:66:7E:33:A8:91:96:E7:01 X509v3 Authority Key Identifier: keyid:38:E1:D6:E0:AD:02:5B:B0:2E:65:48:18:3E:F2:A8:20:00:50:A3:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/OOHW4K0CW7AuZUgYPvKoIABQo2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OOHW4K0CW7AuZUgYPvKoIABQo2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135EC4/8A9A83681D8911E29CE5ECE208B02CD2/E89AA63C3A3411EDA5928760C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.196.128.0/21 Signature Algorithm: sha256WithRSAEncryption 8f:8d:2b:df:6f:15:65:4f:dc:0c:22:b7:7f:13:f7:d8:c2:9b: f7:30:e8:c2:6c:f5:cc:81:6b:26:dd:6d:d2:15:c9:eb:f2:ac: cb:8a:5c:99:24:1b:83:f2:2a:4f:aa:7c:a5:0d:02:9c:4a:52: 2e:8a:b0:cf:65:e1:02:81:41:b9:dc:12:02:ad:cc:f3:57:05: 95:2c:f5:3a:2c:67:5a:8b:75:41:aa:56:71:28:51:0a:49:90: 2d:fc:fb:97:79:f1:8e:51:e7:94:81:8a:e7:76:25:f4:73:f9: ff:c5:64:e8:22:ad:8b:4e:96:f1:e1:24:09:fb:88:e6:8f:a0: ab:01:75:3d:65:8e:89:58:d8:ff:8f:d6:bf:02:e7:6a:20:62: 95:96:47:60:fc:c6:6c:68:42:4d:62:9a:35:51:0f:0e:6b:bc: 48:1d:46:0f:9a:75:0a:84:ef:eb:e2:43:32:f9:06:6d:d0:02: 4f:bd:5f:fd:37:c8:ac:2b:b1:ff:e0:65:ee:93:2f:a0:5f:15: da:3c:f0:8f:b0:43:64:37:de:be:3d:d2:94:8e:d9:a5:26:77: 34:02:75:ae:65:68:68:67:e8:b5:be:40:94:84:24:9d:de:c8: 69:75:bc:35:30:a5:04:ae:b8:cc:3f:41:f6:7d:d6:5d:a0:b3: 62:67:9e:86 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNNswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzVFQzQxMTAvBgNVBAUTKDM4RTFENkUwQUQwMjVCQjAyRTY1NDgxODNFRjJBODIw MDA1MEEzNjUwHhcNMjUxMDE0MTQ0MDMyWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGVlNjBlMC02N2U4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5bVtXcN5N9pb+U7OaBOEPzSonH9x3S+P0v3T0CxAJ+e5EZAkDhbF7UYGnFUn TkWq4wYwvecEN1AxY+4Mk5aFgiv793IHp+R6AfkkK68K3nwpeoTyiLszc5Fz5xVU bSCK7LAIyZWblUXakURYBjFC1fU+0vnHFReDMviduH+8RtGOjz+S02C2jlu3fVeI 0GQOFHqFY9x+aCZA7cwlcV5rj8/ih1uf4yQtbeWNdY0cc6rFzP5jqI19QnO6BgY7 IGqpHvBa0ugwEPUq4QmW2ZF/j1KuP0HB6qZcVPD/I5VwDUqr8N+nUPEtDhg5BTXF 0MsT/j1mEtYy2/3Hvaf3Mo1S8wIDAQABo4IClTCCApEwHQYDVR0OBBYEFBxuJgys RBbEYTJcD2Z+M6iRlucBMB8GA1UdIwQYMBaAFDjh1uCtAluwLmVIGD7yqCAAUKNl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUVDNC84QTlBODM2ODFE ODkxMUUyOUNFNUVDRTIwOEIwMkNEMi9PT0hXNEswQ1c3QXVaVWdZUHZLb0lBQlFv MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09PSFc0SzBDVzdBdVpVZ1lQdktvSUFCUW8yVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzVFQzQvOEE5QTgzNjgxRDg5MTFFMjlDRTVFQ0UyMDhCMDJDRDIvRTg5QUE2M0Mz QTM0MTFFREE1OTI4NzYwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAPLxIAwDQYJKoZIhvcNAQELBQADggEBAI+NK99vFWVP3Awi t38T99jCm/cw6MJs9cyBaybdbdIVyevyrMuKXJkkG4PyKk+qfKUNApxKUi6KsM9l 4QKBQbncEgKtzPNXBZUs9TosZ1qLdUGqVnEoUQpJkC38+5d58Y5R55SBiud2JfRz +f/FZOgirYtOlvHhJAn7iOaPoKsBdT1ljolY2P+P1r8C52ogYpWWR2D8xmxoQk1i mjVRDw5rvEgdRg+adQqE7+viQzL5Bm3QAk+9X/03yKwrsf/gZe6TL6BfFdo88I+w Q2Q33r490pSO2aUmdzQCda5laGhn6LW+QJSEJJ3eyGl1vDUwpQSuuMw/QfZ91l2g s2JnnoY= -----END CERTIFICATE-----Generated at Mon Oct 20 04:38:52 2025 by rpki-client