$ rpki-client -vvf rpki.apnic.net/member_repository/A9142F59/0526D62E623011F0A0207630C4F9AE02/C7A29726A65311F091E2CF10C4F9AE02.roa File: C7A29726A65311F091E2CF10C4F9AE02.roa (raw, json) Hash identifier: H+sz1WV2JCbo6B0gUh55p+qB63Mvx+1vqhNeQo2vgMo= Subject key identifier: 6F:EE:27:A9:C1:6C:8F:FC:D1:69:02:E2:28:E9:B7:06:DB:9C:83:EF Certificate issuer: /CN=A9142F59/serialNumber=1CA36DCFC3C04333F883B835F2C8DDD025D54106 Certificate serial: 3A Authority key identifier: 1C:A3:6D:CF:C3:C0:43:33:F8:83:B8:35:F2:C8:DD:D0:25:D5:41:06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HKNtz8PAQzP4g7g18sjd0CXVQQY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142F59/0526D62E623011F0A0207630C4F9AE02/C7A29726A65311F091E2CF10C4F9AE02.roa Signing time: Sat 11 Oct 2025 03:41:53 +0000 ROA not before: Sat 11 Oct 2025 03:41:53 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 153689 IP address blocks: 163.223.80.0/23 maxlen: 23 163.223.80.0/24 maxlen: 24 163.223.81.0/24 maxlen: 24 2001:df5:3840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142F59/0526D62E623011F0A0207630C4F9AE02/HKNtz8PAQzP4g7g18sjd0CXVQQY.crl rsync://rpki.apnic.net/member_repository/A9142F59/0526D62E623011F0A0207630C4F9AE02/HKNtz8PAQzP4g7g18sjd0CXVQQY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HKNtz8PAQzP4g7g18sjd0CXVQQY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:08:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58 (0x3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142F59, serialNumber=1CA36DCFC3C04333F883B835F2C8DDD025D54106 Validity Not Before: Oct 11 03:41:53 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=68e9d201-05de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ef:35:1e:db:de:42:1b:70:89:c9:10:95:f6: 80:a8:6d:0f:c0:f2:60:29:51:6c:6c:64:fe:4a:b1: 95:2b:76:93:65:3b:ca:dc:89:49:85:a3:83:b4:80: 1b:1a:a5:f5:cf:18:66:65:a1:b5:2a:5f:0a:9b:b5: 9d:39:d8:3a:3c:a4:0e:e7:85:84:4c:0a:1e:65:7e: c9:10:e9:70:76:ac:02:1b:77:63:7b:59:58:81:35: 55:52:0a:7e:35:09:6c:9d:90:96:92:8e:8c:22:9d: 0d:6c:57:d6:09:d9:c7:99:42:1d:22:66:36:6d:8d: 02:0f:68:11:bd:d3:82:bd:2f:81:9e:28:8d:b9:fa: c6:09:71:75:03:4f:08:90:04:09:10:fa:01:93:e7: 7f:6d:19:be:a2:24:87:bb:53:9d:aa:56:5e:77:dd: 5b:8d:6f:e5:c5:72:f4:89:67:30:f4:3d:c7:49:7f: 24:7c:f4:9a:37:21:36:55:e6:54:c2:03:c6:36:89: 68:6f:65:4d:75:9f:2f:76:ef:2f:26:3a:30:04:db: f3:16:99:f7:14:78:25:f8:29:b9:e3:92:71:83:e6: da:a0:5b:a2:96:f4:e6:a4:4a:73:40:98:fb:66:4b: 5f:8f:23:3b:c9:15:7d:62:11:dd:ba:2f:51:6f:01: e0:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:EE:27:A9:C1:6C:8F:FC:D1:69:02:E2:28:E9:B7:06:DB:9C:83:EF X509v3 Authority Key Identifier: keyid:1C:A3:6D:CF:C3:C0:43:33:F8:83:B8:35:F2:C8:DD:D0:25:D5:41:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142F59/0526D62E623011F0A0207630C4F9AE02/HKNtz8PAQzP4g7g18sjd0CXVQQY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HKNtz8PAQzP4g7g18sjd0CXVQQY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142F59/0526D62E623011F0A0207630C4F9AE02/C7A29726A65311F091E2CF10C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 163.223.80.0/23 IPv6: 2001:df5:3840::/48 Signature Algorithm: sha256WithRSAEncryption 1f:81:ca:88:5b:f8:ed:85:a5:e0:de:4b:52:b6:29:17:ba:b3: ec:8f:93:ee:a9:5c:5a:17:5f:ff:8b:3a:a7:b2:f3:e3:ca:f7: 6a:ff:3c:27:1b:67:1c:56:09:38:63:42:07:fc:f7:a0:a2:3b: 4d:67:ee:08:40:04:fd:53:ec:be:8f:56:10:3d:98:6f:2a:e9: 7e:34:ae:a3:87:1f:86:e6:72:6a:88:81:14:a6:87:42:5e:b9: ab:91:d8:24:6c:e0:6e:68:2a:97:47:c5:46:5f:62:f2:2b:56: 20:36:1f:bf:fe:18:ad:53:45:3c:07:3a:41:cf:13:89:71:7f: 87:87:de:f8:64:6e:67:f1:a4:ce:5f:54:b6:c5:59:6e:1d:ba: 02:39:b6:3f:7e:07:8a:f0:14:d3:87:e8:ef:e9:59:82:f7:0c: a7:8a:c2:48:bc:ec:d5:3e:83:18:5f:95:34:c9:97:c7:ca:94: 5d:36:fb:73:5e:0f:c3:53:1b:fc:5f:20:ef:e2:80:81:b0:a1: f8:3f:c2:d4:bc:7b:20:ba:d5:78:a7:9a:d4:8d:84:6e:30:85: a3:b0:ab:d1:0e:ab:80:95:35:b2:fa:e6:b0:a8:63:eb:27:c3: 6a:c6:14:c3:45:3d:4b:73:5a:ef:73:91:ad:70:f2:65:de:8f: 15:f3:23:3a -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIBOjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MkY1OTExMC8GA1UEBRMoMUNBMzZEQ0ZDM0MwNDMzM0Y4ODNCODM1RjJDOERERDAy NUQ1NDEwNjAeFw0yNTEwMTEwMzQxNTNaFw0yNjA3MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4ZTlkMjAxLTA1ZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDe7zUe295CG3CJyRCV9oCobQ/A8mApUWxsZP5KsZUrdpNlO8rciUmFo4O0gBsa pfXPGGZlobUqXwqbtZ052Do8pA7nhYRMCh5lfskQ6XB2rAIbd2N7WViBNVVSCn41 CWydkJaSjowinQ1sV9YJ2ceZQh0iZjZtjQIPaBG904K9L4GeKI25+sYJcXUDTwiQ BAkQ+gGT539tGb6iJIe7U52qVl533VuNb+XFcvSJZzD0PcdJfyR89Jo3ITZV5lTC A8Y2iWhvZU11ny927y8mOjAE2/MWmfcUeCX4KbnjknGD5tqgW6KW9OakSnNAmPtm S1+PIzvJFX1iEd26L1FvAeCtAgMBAAGjggKmMIICojAdBgNVHQ4EFgQUb+4nqcFs j/zRaQLiKOm3Btucg+8wHwYDVR0jBBgwFoAUHKNtz8PAQzP4g7g18sjd0CXVQQYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyRjU5LzA1MjZENjJFNjIz MDExRjBBMDIwNzYzMEM0RjlBRTAyL0hLTnR6OFBBUXpQNGc3ZzE4c2pkMENYVlFR WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSEtOdHo4UEFRelA0ZzdnMThzamQwQ1hWUVFZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkY1OS8wNTI2RDYyRTYyMzAxMUYwQTAyMDc2MzBDNEY5QUUwMi9DN0EyOTcyNkE2 NTMxMUYwOTFFMkNGMTBDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEAaPfUDAPBAIAAjAJAwcAIAEN9ThAMA0GCSqGSIb3DQEBCwUA A4IBAQAfgcqIW/jthaXg3ktStikXurPsj5PuqVxaF1//izqnsvPjyvdq/zwnG2cc Vgk4Y0IH/PegojtNZ+4IQAT9U+y+j1YQPZhvKul+NK6jhx+G5nJqiIEUpodCXrmr kdgkbOBuaCqXR8VGX2LyK1YgNh+//hitU0U8BzpBzxOJcX+Hh974ZG5n8aTOX1S2 xVluHboCObY/fgeK8BTTh+jv6VmC9wynisJIvOzVPoMYX5U0yZfHypRdNvtzXg/D Uxv8XyDv4oCBsKH4P8LUvHsgutV4p5rUjYRuMIWjsKvRDquAlTWy+uawqGPrJ8Nq xhTDRT1Lc1rvc5GtcPJl3o8V8yM6 -----END CERTIFICATE-----Generated at Mon Oct 20 22:19:37 2025 by rpki-client