$ rpki-client -vvf rpki.apnic.net/member_repository/A913C04E/22E68526513211EE964CCF5BC4F9AE02/F696778AFE6C11EF8DF5DD5FC4F9AE02.roa File: F696778AFE6C11EF8DF5DD5FC4F9AE02.roa (raw, json) Hash identifier: MhowPeZSiNZp59R7cxUY280rgW3KhDyuYTuF7r4VgLQ= Subject key identifier: 02:CB:45:7E:E5:95:44:25:34:C3:4C:F2:BF:A6:15:D0:0D:E1:D1:74 Certificate issuer: /CN=A913C04E/serialNumber=AADCDB89E54B677C410463799F9586815C40FA4B Certificate serial: 018F Authority key identifier: AA:DC:DB:89:E5:4B:67:7C:41:04:63:79:9F:95:86:81:5C:40:FA:4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtzbieVLZ3xBBGN5n5WGgVxA-ks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C04E/22E68526513211EE964CCF5BC4F9AE02/F696778AFE6C11EF8DF5DD5FC4F9AE02.roa Signing time: Fri 03 Oct 2025 03:59:55 +0000 ROA not before: Fri 03 Oct 2025 03:59:55 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 138677 IP address blocks: 119.235.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C04E/22E68526513211EE964CCF5BC4F9AE02/qtzbieVLZ3xBBGN5n5WGgVxA-ks.crl rsync://rpki.apnic.net/member_repository/A913C04E/22E68526513211EE964CCF5BC4F9AE02/qtzbieVLZ3xBBGN5n5WGgVxA-ks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtzbieVLZ3xBBGN5n5WGgVxA-ks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 399 (0x18f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C04E, serialNumber=AADCDB89E54B677C410463799F9586815C40FA4B Validity Not Before: Oct 3 03:59:55 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68df4a3b-45d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:51:94:8c:c6:eb:77:b8:97:ac:63:d4:b5:52: 31:d3:82:ea:5d:a6:30:70:9b:fe:e3:08:8c:2f:c3: c1:c9:df:00:62:a7:4a:38:31:ff:76:51:ab:87:df: 44:12:4d:b6:bb:e9:fa:d6:49:5d:32:55:96:f6:29: a4:23:51:27:d1:75:c6:9a:2c:1f:14:88:ff:ec:93: 2b:fd:1d:f5:ad:1a:24:52:47:66:0e:38:f3:cc:7a: a9:c6:79:5b:e4:ae:58:5b:29:ff:f2:0b:a2:1d:e5: d0:a4:86:3f:6d:8f:4d:85:35:4b:8a:e4:de:75:83: f5:4f:de:fa:33:10:9f:94:8a:29:8b:6d:8b:ea:be: dd:18:df:a5:6e:ea:76:5e:c6:47:c0:75:1c:1b:33: b3:78:93:a7:1d:38:62:5c:07:24:6c:cc:1a:20:e8: aa:91:fe:91:ea:82:57:e6:62:56:ad:93:53:af:f0: 7f:28:b6:05:4b:1b:45:56:b2:9c:7b:9b:93:61:f8: b5:fe:b5:4e:56:d0:cb:7d:c1:17:76:f3:8d:32:9a: 0e:d6:0b:61:d2:c4:a8:e9:15:3a:90:73:ac:2f:2f: c3:9d:84:d4:2f:2e:f2:1e:9a:51:02:da:9f:dc:08: ee:67:4c:7d:72:9b:0a:6a:5d:13:85:1b:42:db:9f: e5:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:CB:45:7E:E5:95:44:25:34:C3:4C:F2:BF:A6:15:D0:0D:E1:D1:74 X509v3 Authority Key Identifier: keyid:AA:DC:DB:89:E5:4B:67:7C:41:04:63:79:9F:95:86:81:5C:40:FA:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C04E/22E68526513211EE964CCF5BC4F9AE02/qtzbieVLZ3xBBGN5n5WGgVxA-ks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtzbieVLZ3xBBGN5n5WGgVxA-ks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C04E/22E68526513211EE964CCF5BC4F9AE02/F696778AFE6C11EF8DF5DD5FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 119.235.11.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:c2:69:f2:0b:66:68:ca:5e:64:6b:8b:f2:ce:c5:62:9a:d0: 3b:b4:7c:1f:fa:0f:f2:da:f4:31:ba:b2:19:76:d4:ec:33:83: 3f:cd:fe:90:a0:52:22:a6:8c:d8:00:6d:93:e9:5d:dc:fa:c6: a8:dc:87:4b:89:9c:79:34:15:30:46:04:b4:1f:10:0d:80:66: 28:d8:fe:9c:b2:58:aa:82:8e:91:3f:24:f9:1b:02:ef:90:39: 76:89:af:aa:24:9d:8f:6c:03:da:a7:8a:8c:4a:ae:70:0e:31: bc:2c:e1:f6:93:77:08:cf:5b:d1:13:e3:96:fe:97:49:ca:4e: 42:5d:3b:90:79:14:91:ac:a0:fa:c5:82:8a:2d:0c:ee:cb:89: 3d:e8:19:a9:4d:79:57:f2:e4:75:c2:07:3a:a1:5b:6e:25:71: 3d:05:0d:93:8b:1a:aa:f6:fe:f9:3f:10:f3:5a:a9:53:94:bd: 27:ec:a4:d3:e6:5f:7a:13:3f:d5:39:97:30:c0:ab:45:01:3b: 24:77:25:86:c0:63:86:0f:92:93:2b:7c:d3:8a:a3:db:c5:c0: b3:c9:63:e7:27:46:8a:13:cc:95:36:c9:12:a8:e0:f9:4a:7a: c7:b4:48:ff:d4:c5:da:aa:c8:10:9d:ce:b0:f3:9f:7c:2d:99: 75:58:01:7b -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAY8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0MwNEUxMTAvBgNVBAUTKEFBRENEQjg5RTU0QjY3N0M0MTA0NjM3OTlGOTU4Njgx NUM0MEZBNEIwHhcNMjUxMDAzMDM1OTU1WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGRmNGEzYi00NWQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn1GUjMbrd7iXrGPUtVIx04LqXaYwcJv+4wiML8PByd8AYqdKODH/dlGrh99E Ek22u+n61kldMlWW9imkI1En0XXGmiwfFIj/7JMr/R31rRokUkdmDjjzzHqpxnlb 5K5YWyn/8guiHeXQpIY/bY9NhTVLiuTedYP1T976MxCflIopi22L6r7dGN+lbup2 XsZHwHUcGzOzeJOnHThiXAckbMwaIOiqkf6R6oJX5mJWrZNTr/B/KLYFSxtFVrKc e5uTYfi1/rVOVtDLfcEXdvONMpoO1gth0sSo6RU6kHOsLy/DnYTULy7yHppRAtqf 3AjuZ0x9cpsKal0ThRtC25/llQIDAQABo4IClTCCApEwHQYDVR0OBBYEFALLRX7l lUQlNMNM8r+mFdAN4dF0MB8GA1UdIwQYMBaAFKrc24nlS2d8QQRjeZ+VhoFcQPpL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzA0RS8yMkU2ODUyNjUx MzIxMUVFOTY0Q0NGNUJDNEY5QUUwMi9xdHpiaWVWTFozeEJCR041bjVXR2dWeEEt a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3F0emJpZVZMWjN4QkJHTjVuNVdHZ1Z4QS1rcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0MwNEUvMjJFNjg1MjY1MTMyMTFFRTk2NENDRjVCQzRGOUFFMDIvRjY5Njc3OEFG RTZDMTFFRjhERjVERDVGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAB36wswDQYJKoZIhvcNAQELBQADggEBAErCafILZmjKXmRr i/LOxWKa0Du0fB/6D/La9DG6shl21Owzgz/N/pCgUiKmjNgAbZPpXdz6xqjch0uJ nHk0FTBGBLQfEA2AZijY/pyyWKqCjpE/JPkbAu+QOXaJr6oknY9sA9qnioxKrnAO Mbws4faTdwjPW9ET45b+l0nKTkJdO5B5FJGsoPrFgootDO7LiT3oGalNeVfy5HXC BzqhW24lcT0FDZOLGqr2/vk/EPNaqVOUvSfspNPmX3oTP9U5lzDAq0UBOyR3JYbA Y4YPkpMrfNOKo9vFwLPJY+cnRooTzJU2yRKo4PlKese0SP/UxdqqyBCdzrDzn3wt mXVYAXs= -----END CERTIFICATE-----Generated at Mon Oct 20 16:46:56 2025 by rpki-client