$ rpki-client -vvf rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/3F2B28B4D94411E98E28CD85C4F9AE02.roa File: 3F2B28B4D94411E98E28CD85C4F9AE02.roa (raw, json) Hash identifier: rsrHr7YKfZgSziRJ4fYTZE3PURFyCHMTrDSz518raFY= Subject key identifier: 76:50:91:17:FF:58:72:AA:0A:E3:6E:37:BF:28:98:A1:C6:27:38:EC Certificate issuer: /CN=A9145446/serialNumber=7D65EBE14C3046E73E3986957302A26E081F1AF8 Certificate serial: 2851 Authority key identifier: 7D:65:EB:E1:4C:30:46:E7:3E:39:86:95:73:02:A2:6E:08:1F:1A:F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/3F2B28B4D94411E98E28CD85C4F9AE02.roa Signing time: Tue 02 Sep 2025 16:03:48 +0000 ROA not before: Tue 02 Sep 2025 16:03:48 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 24241 IP address blocks: 202.57.108.0/24 maxlen: 24 202.57.117.0/24 maxlen: 24 202.57.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.crl rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 15:56:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10321 (0x2851) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145446, serialNumber=7D65EBE14C3046E73E3986957302A26E081F1AF8 Validity Not Before: Sep 2 16:03:48 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68b71563-a77c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:85:03:07:2b:d8:84:3b:05:0b:77:a5:5f:55: 45:de:71:4c:73:2a:36:dd:31:9d:10:ba:f4:a6:90: 6c:8d:5b:fb:34:61:41:92:7c:06:61:bd:06:cc:ab: 6b:91:73:37:9e:3e:e5:3b:80:8b:94:46:99:fe:e0: 85:0e:dd:7d:69:f3:5e:ce:ac:91:ec:42:59:fd:e5: 3e:97:e9:7d:3d:dd:95:71:89:ca:43:c0:6e:21:1e: 72:3a:70:c7:19:92:90:4a:7a:fe:f2:c3:bd:92:e4: 02:53:17:11:be:c8:ac:9a:20:a2:ee:54:07:b0:14: b2:b8:2f:71:a7:51:f8:d5:38:c0:6b:68:e4:63:f3: 07:a6:72:d7:db:2c:2d:eb:2b:52:cf:65:7d:1c:52: a4:ec:96:78:6b:7b:63:bd:e7:c7:58:1a:9c:10:8b: c8:a3:08:4f:ba:a7:2a:37:bb:28:1e:5b:73:50:c0: 11:72:a2:b9:1c:2a:90:37:27:85:31:de:e4:53:06: 16:29:03:14:63:db:79:73:e5:d6:99:14:77:d2:63: d6:f9:54:10:ac:e6:37:09:a1:4a:e4:90:7b:62:4d: b2:c6:c3:d3:22:0b:e4:a6:63:f1:15:67:91:f6:af: 76:5a:3c:7a:fb:e0:1a:2b:d5:c6:a3:50:38:92:95: 1c:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:50:91:17:FF:58:72:AA:0A:E3:6E:37:BF:28:98:A1:C6:27:38:EC X509v3 Authority Key Identifier: keyid:7D:65:EB:E1:4C:30:46:E7:3E:39:86:95:73:02:A2:6E:08:1F:1A:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/3F2B28B4D94411E98E28CD85C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.57.108.0/24 202.57.117.0-202.57.118.255 Signature Algorithm: sha256WithRSAEncryption b4:39:17:04:a3:36:b1:82:fa:d4:aa:73:62:a5:51:af:8c:b2: 88:02:4f:11:d2:4f:a2:85:2d:1c:b4:86:6a:2d:53:94:30:46: 64:39:1c:4c:e7:61:9e:5b:11:45:da:e3:42:63:11:d7:63:f8: 9f:c6:13:49:8e:bf:0f:79:b4:cc:da:12:bb:d4:4d:3e:d1:cf: 46:c7:af:f9:64:24:40:08:0f:bc:44:40:5d:ae:24:1c:38:96: a5:d2:7e:b6:6b:e9:4d:59:b0:c7:76:05:4d:04:0a:9d:dd:7f: c3:61:ad:e7:c6:b2:e9:fd:a8:a1:76:12:65:34:9b:57:b2:6b: 1e:c7:d6:07:ff:cb:c4:b3:0a:ca:50:1d:30:f3:c8:e3:7c:a2: ef:fd:bc:cc:52:d2:26:1a:ad:bd:cf:8d:30:cf:9e:a9:58:4d: 02:90:85:68:b7:38:7a:01:17:04:b0:19:1b:21:4d:40:62:61: 1c:15:91:88:b0:e9:69:84:e8:b7:f4:68:41:80:21:f0:c5:ca: e3:f7:5c:ae:64:84:4e:90:ad:5d:36:21:9c:88:a0:d4:5d:7c: af:2b:cf:3a:ef:d2:2d:21:71:8f:da:09:19:0b:26:90:e7:57: 2b:6b:07:ed:ab:e5:df:03:e2:bd:d0:b5:a7:dc:f7:66:af:c4: f0:bf:fc:30 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgICKFEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU0NDYxMTAvBgNVBAUTKDdENjVFQkUxNEMzMDQ2RTczRTM5ODY5NTczMDJBMjZF MDgxRjFBRjgwHhcNMjUwOTAyMTYwMzQ4WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGI3MTU2My1hNzdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvYUDByvYhDsFC3elX1VF3nFMcyo23TGdELr0ppBsjVv7NGFBknwGYb0GzKtr kXM3nj7lO4CLlEaZ/uCFDt19afNezqyR7EJZ/eU+l+l9Pd2VcYnKQ8BuIR5yOnDH GZKQSnr+8sO9kuQCUxcRvsismiCi7lQHsBSyuC9xp1H41TjAa2jkY/MHpnLX2ywt 6ytSz2V9HFKk7JZ4a3tjvefHWBqcEIvIowhPuqcqN7soHltzUMARcqK5HCqQNyeF Md7kUwYWKQMUY9t5c+XWmRR30mPW+VQQrOY3CaFK5JB7Yk2yxsPTIgvkpmPxFWeR 9q92Wjx6++AaK9XGo1A4kpUcBQIDAQABo4ICozCCAp8wHQYDVR0OBBYEFHZQkRf/ WHKqCuNuN78omKHGJzjsMB8GA1UdIwQYMBaAFH1l6+FMMEbnPjmGlXMCom4IHxr4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTQ0Ni9BQ0EyRTc1QzFG QzUxMUU1QjQ1MERENjJDNEY5QUUwMi9mV1hyNFV3d1J1Yy1PWWFWY3dLaWJnZ2ZH dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZXWHI0VXd3UnVjLU9ZYVZjd0tpYmdnZkd2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDU0NDYvQUNBMkU3NUMxRkM1MTFFNUI0NTBERDYyQzRGOUFFMDIvM0YyQjI4QjRE OTQ0MTFFOThFMjhDRDg1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLQYIKwYBBQUHAQcBAf8E HjAcMBoEAgABMBQDBADKOWwwDAMEAMo5dQMEAMo5djANBgkqhkiG9w0BAQsFAAOC AQEAtDkXBKM2sYL61KpzYqVRr4yyiAJPEdJPooUtHLSGai1TlDBGZDkcTOdhnlsR RdrjQmMR12P4n8YTSY6/D3m0zNoSu9RNPtHPRsev+WQkQAgPvERAXa4kHDiWpdJ+ tmvpTVmwx3YFTQQKnd1/w2Gt58ay6f2ooXYSZTSbV7JrHsfWB//LxLMKylAdMPPI 43yi7/28zFLSJhqtvc+NMM+eqVhNApCFaLc4egEXBLAZGyFNQGJhHBWRiLDpaYTo t/RoQYAh8MXK4/dcrmSETpCtXTYhnIig1F18ryvPOu/SLSFxj9oJGQsmkOdXK2sH 7avl3wPivdC1p9z3Zq/E8L/8MA== -----END CERTIFICATE-----Generated at Mon Oct 20 21:36:16 2025 by rpki-client