$ rpki-client -vvf rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/CF1D6B3873B111EEB1254A5AC4F9AE02.roa File: CF1D6B3873B111EEB1254A5AC4F9AE02.roa (raw, json) Hash identifier: 6/RNoQhjZDLc2AhsjhYLjFVymAZMY+bhp7y0D06E0yU= Subject key identifier: CF:9F:DA:E9:F0:31:57:92:55:1B:4A:80:00:F1:B0:A5:E8:77:48:A3 Certificate issuer: /CN=A9142B70/serialNumber=622E7662D9FBE10C1AAE0BDFE988DB996AE3FD59 Certificate serial: 016C Authority key identifier: 62:2E:76:62:D9:FB:E1:0C:1A:AE:0B:DF:E9:88:DB:99:6A:E3:FD:59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi52Ytn74Qwargvf6YjbmWrj_Vk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/CF1D6B3873B111EEB1254A5AC4F9AE02.roa Signing time: Mon 29 Sep 2025 04:32:32 +0000 ROA not before: Mon 29 Sep 2025 04:32:32 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 132468 IP address blocks: 202.63.254.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.crl rsync://rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi52Ytn74Qwargvf6YjbmWrj_Vk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:28:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 364 (0x16c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142B70, serialNumber=622E7662D9FBE10C1AAE0BDFE988DB996AE3FD59 Validity Not Before: Sep 29 04:32:32 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=68da0be0-0fb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:85:2c:e8:ae:c1:91:69:ef:92:5b:66:5d:ea: d5:96:57:c6:07:3d:1c:06:ec:75:cf:ad:f8:d4:05: 85:c6:9b:d9:46:c6:2d:b3:19:e8:e8:47:77:dc:c9: 1f:d9:35:c0:05:e4:d0:6d:8c:c4:bc:66:6f:90:7c: 84:3d:17:55:88:21:47:51:f6:5a:30:01:61:97:ac: cc:44:f4:6c:5c:f5:94:3e:5e:b1:dc:fe:e9:ac:18: a1:33:ca:96:a5:6a:4b:5f:53:67:0f:3d:e2:7e:10: 79:7a:dc:d9:ad:6f:40:98:67:78:35:cf:b2:c2:3e: 5b:39:74:1f:6f:61:df:b1:08:2e:6a:0e:85:94:50: 06:db:97:ca:30:e4:77:48:a4:44:76:29:b7:f1:4f: 70:97:ea:7f:d8:8e:3d:cf:f2:67:8d:51:77:1c:c4: e3:0f:d1:5c:9f:01:0a:d3:df:3b:d2:8b:b4:6c:c5: ca:1a:f5:bf:f3:85:79:29:9e:7d:9a:33:14:bc:9d: ad:e4:17:e0:e9:f9:2e:93:e4:0b:bf:47:f4:37:c9: f0:93:14:0a:b8:bc:e9:f4:8a:2c:45:84:bb:44:be: a4:37:32:4e:07:f7:ee:94:8a:3f:c2:a6:c3:59:e0: 7c:1d:92:10:0a:4a:85:dc:44:28:26:df:ae:2b:21: 85:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:9F:DA:E9:F0:31:57:92:55:1B:4A:80:00:F1:B0:A5:E8:77:48:A3 X509v3 Authority Key Identifier: keyid:62:2E:76:62:D9:FB:E1:0C:1A:AE:0B:DF:E9:88:DB:99:6A:E3:FD:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi52Ytn74Qwargvf6YjbmWrj_Vk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/CF1D6B3873B111EEB1254A5AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.63.254.0/23 Signature Algorithm: sha256WithRSAEncryption 85:c4:88:0b:c2:a9:c2:7e:03:7d:37:23:e9:6d:cb:d5:7d:0e: da:fb:1e:ba:61:ea:56:f3:a1:c5:1e:5f:61:a7:00:92:ec:b2: 37:21:bf:4f:ab:81:12:1a:5e:e4:27:df:ad:89:5b:86:46:76: 22:aa:79:2a:34:50:6a:12:e3:99:22:c1:92:29:bf:c5:dd:07: ea:e8:b7:a1:ad:3c:e9:12:47:d3:42:50:e3:c9:ef:37:21:ef: 5d:aa:87:4d:32:31:22:c5:12:3c:e6:0f:5b:ae:77:b2:b2:6a: 9c:b3:71:ef:ef:fd:be:f8:d2:bb:75:bc:d6:08:b9:31:7a:d0: c7:ad:05:da:02:53:b5:ac:da:da:41:d6:dd:37:bd:39:4d:fb: 87:d5:f4:fd:dc:19:78:eb:f1:e0:0b:83:14:14:53:8e:61:19: 39:0d:d7:59:20:e1:5d:38:57:ea:04:95:51:e5:81:27:7c:5b: 9c:54:06:30:71:dc:b7:ae:67:5a:1d:9d:d7:f4:3f:86:b5:b7: ec:f8:c6:6e:c8:67:50:44:7c:17:a5:70:77:6b:59:13:9a:37: 88:e4:89:6b:89:43:2b:12:3e:d3:4c:70:64:de:0c:79:0e:59: 3d:bb:f3:49:fe:f5:c4:76:f1:9f:d8:17:d8:89:55:d8:51:5f: c4:56:5b:e8 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAWwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJCNzAxMTAvBgNVBAUTKDYyMkU3NjYyRDlGQkUxMEMxQUFFMEJERkU5ODhEQjk5 NkFFM0ZENTkwHhcNMjUwOTI5MDQzMjMyWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGRhMGJlMC0wZmIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu4Us6K7BkWnvkltmXerVllfGBz0cBux1z6341AWFxpvZRsYtsxno6Ed33Mkf 2TXABeTQbYzEvGZvkHyEPRdViCFHUfZaMAFhl6zMRPRsXPWUPl6x3P7prBihM8qW pWpLX1NnDz3ifhB5etzZrW9AmGd4Nc+ywj5bOXQfb2HfsQguag6FlFAG25fKMOR3 SKREdim38U9wl+p/2I49z/JnjVF3HMTjD9FcnwEK09870ou0bMXKGvW/84V5KZ59 mjMUvJ2t5Bfg6fkuk+QLv0f0N8nwkxQKuLzp9IosRYS7RL6kNzJOB/fulIo/wqbD WeB8HZIQCkqF3EQoJt+uKyGFjQIDAQABo4IClTCCApEwHQYDVR0OBBYEFM+f2unw MVeSVRtKgADxsKXod0ijMB8GA1UdIwQYMBaAFGIudmLZ++EMGq4L3+mI25lq4/1Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkI3MC9DQ0I0NTRBNDcz QTkxMUVFODQ1MjdGMkVDNEY5QUUwMi9ZaTUyWXRuNzRRd2FyZ3ZmNllqYm1Xcmpf VmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lpNTJZdG43NFF3YXJndmY2WWpibVdyal9Way5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDJCNzAvQ0NCNDU0QTQ3M0E5MTFFRTg0NTI3RjJFQzRGOUFFMDIvQ0YxRDZCMzg3 M0IxMTFFRUIxMjU0QTVBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAHKP/4wDQYJKoZIhvcNAQELBQADggEBAIXEiAvCqcJ+A303 I+lty9V9Dtr7Hrph6lbzocUeX2GnAJLssjchv0+rgRIaXuQn362JW4ZGdiKqeSo0 UGoS45kiwZIpv8XdB+rot6GtPOkSR9NCUOPJ7zch712qh00yMSLFEjzmD1uud7Ky apyzce/v/b740rt1vNYIuTF60MetBdoCU7Ws2tpB1t03vTlN+4fV9P3cGXjr8eAL gxQUU45hGTkN11kg4V04V+oElVHlgSd8W5xUBjBx3LeuZ1odndf0P4a1t+z4xm7I Z1BEfBelcHdrWROaN4jkiWuJQysSPtNMcGTeDHkOWT2780n+9cR28Z/YF9iJVdhR X8RWW+g= -----END CERTIFICATE-----Generated at Mon Oct 20 13:41:02 2025 by rpki-client