$ rpki-client -vvf rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/CD072488981C11F081BD5721C4F9AE02.roa File: CD072488981C11F081BD5721C4F9AE02.roa (raw, json) Hash identifier: N9MkZB62gv52kczhap1clJNdPPPk6LnEG5YOZM6fSHE= Subject key identifier: 9B:97:85:D7:6B:62:9B:09:FF:CE:62:8B:28:12:E7:DE:78:C7:9E:95 Certificate issuer: /CN=A914781A/serialNumber=4D723955243AE88D552439AF8E4E0A09C8F6590D Certificate serial: 3557 Authority key identifier: 4D:72:39:55:24:3A:E8:8D:55:24:39:AF:8E:4E:0A:09:C8:F6:59:0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/CD072488981C11F081BD5721C4F9AE02.roa Signing time: Mon 06 Oct 2025 09:23:56 +0000 ROA not before: Mon 06 Oct 2025 09:23:56 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 132203 IP address blocks: 203.156.4.0/24 maxlen: 24 203.156.54.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 15:04:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13655 (0x3557) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914781A, serialNumber=4D723955243AE88D552439AF8E4E0A09C8F6590D Validity Not Before: Oct 6 09:23:56 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=68e38aac-6c65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b8:88:59:39:78:f3:4e:2c:74:46:71:cd:c9: 03:07:4c:56:f7:e3:c9:ff:f4:4b:94:44:8e:0c:30: e1:b6:8d:fd:89:75:9b:d1:93:47:c1:23:6c:8e:3d: e5:d8:43:ab:fc:27:c2:ba:49:f3:34:bd:25:f2:d7: 0d:68:a8:63:59:f8:e1:4b:ed:45:21:42:64:0f:bf: c7:47:6f:e4:02:03:9e:57:09:12:06:9f:d2:51:0d: 6a:b5:5c:46:e6:a5:fd:54:0e:5f:ca:1d:80:e5:cb: 30:f7:03:e9:0f:6b:d3:a6:d7:d1:ba:ba:21:a0:c5: 62:30:2f:e7:17:40:b7:16:47:93:b8:a1:78:c2:6a: 5e:45:3b:eb:9f:43:ad:39:31:66:59:9d:c6:c1:01: c1:61:1b:e1:c4:da:29:fd:7e:73:fe:78:bf:71:f0: 96:3b:09:05:85:24:bd:61:b2:d4:e0:d4:0c:36:be: 11:65:0e:a3:f1:cb:70:46:60:89:27:81:65:bc:7c: e2:0e:0b:1f:39:2f:97:f6:99:4e:12:dc:3b:27:d7: 2c:27:c3:62:1e:4b:c9:c8:f2:d0:91:c1:68:a5:53: 9e:13:c9:6d:c0:76:53:e6:2b:1e:f6:83:ed:fa:fd: f1:3c:7e:47:32:99:f4:1e:b9:ed:11:0a:c1:9b:6c: 6b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:97:85:D7:6B:62:9B:09:FF:CE:62:8B:28:12:E7:DE:78:C7:9E:95 X509v3 Authority Key Identifier: keyid:4D:72:39:55:24:3A:E8:8D:55:24:39:AF:8E:4E:0A:09:C8:F6:59:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/CD072488981C11F081BD5721C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.156.4.0/24 203.156.54.0/23 Signature Algorithm: sha256WithRSAEncryption 09:79:90:ff:72:bc:74:76:79:3d:56:05:7e:2f:99:76:f4:6f: 5a:13:d2:2a:c8:d4:db:35:1f:97:2d:29:c5:90:dd:b8:9e:7c: e7:3b:2b:f7:44:11:dc:d5:09:4c:b7:17:97:c1:13:7f:9c:ee: 42:df:41:8f:44:c7:d8:51:a0:a0:60:ec:df:45:cf:3c:a0:66: ad:11:20:2e:16:b9:80:2e:9b:13:60:12:79:47:8d:de:d5:44: 77:77:48:c6:87:80:0a:75:99:b9:22:9c:7b:5d:fb:96:b9:07: 5f:ce:71:df:ec:fd:97:96:4d:c9:fc:d6:5c:b4:f4:ca:ad:53: ae:74:e1:bf:7d:5c:ca:01:85:da:39:f4:6f:b9:bd:06:c0:23: 3b:e5:28:b7:8d:26:f4:96:ec:68:8c:fa:07:dc:75:26:22:bc: db:12:12:da:2a:32:1f:d3:34:36:7f:41:df:7a:13:a9:92:55: 3b:3b:df:9b:84:f9:5d:96:bb:ab:16:ef:99:28:b9:25:29:9f: 5c:aa:5a:3e:02:17:95:bf:6f:3c:2c:d9:e8:27:08:be:19:0f: 90:23:3f:5e:39:1f:e6:6f:88:18:58:f8:04:ca:3a:01:2b:86: bc:e3:21:26:47:e9:01:6a:c4:58:4e:9c:a1:ee:03:cb:e6:aa: ed:45:8a:81 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICNVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc4MUExMTAvBgNVBAUTKDRENzIzOTU1MjQzQUU4OEQ1NTI0MzlBRjhFNEUwQTA5 QzhGNjU5MEQwHhcNMjUxMDA2MDkyMzU2WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGUzOGFhYy02YzY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwLiIWTl4804sdEZxzckDB0xW9+PJ//RLlESODDDhto39iXWb0ZNHwSNsjj3l 2EOr/CfCuknzNL0l8tcNaKhjWfjhS+1FIUJkD7/HR2/kAgOeVwkSBp/SUQ1qtVxG 5qX9VA5fyh2A5csw9wPpD2vTptfRurohoMViMC/nF0C3FkeTuKF4wmpeRTvrn0Ot OTFmWZ3GwQHBYRvhxNop/X5z/ni/cfCWOwkFhSS9YbLU4NQMNr4RZQ6j8ctwRmCJ J4FlvHziDgsfOS+X9plOEtw7J9csJ8NiHkvJyPLQkcFopVOeE8ltwHZT5ise9oPt +v3xPH5HMpn0HrntEQrBm2xrUwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFJuXhddr YpsJ/85iiygS5954x56VMB8GA1UdIwQYMBaAFE1yOVUkOuiNVSQ5r45OCgnI9lkN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzgxQS9ENTIxNDI3MDFE OUIxMUUyQjgyMUZEODkwOEIwMkNEMi9UWEk1VlNRNjZJMVZKRG12ams0S0NjajJX UTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RYSTVWU1E2NkkxVkpEbXZqazRLQ2NqMldRMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDc4MUEvRDUyMTQyNzAxRDlCMTFFMkI4MjFGRDg5MDhCMDJDRDIvQ0QwNzI0ODg5 ODFDMTFGMDgxQkQ1NzIxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBADLnAQDBAHLnDYwDQYJKoZIhvcNAQELBQADggEBAAl5kP9y vHR2eT1WBX4vmXb0b1oT0irI1Ns1H5ctKcWQ3biefOc7K/dEEdzVCUy3F5fBE3+c 7kLfQY9Ex9hRoKBg7N9FzzygZq0RIC4WuYAumxNgEnlHjd7VRHd3SMaHgAp1mbki nHtd+5a5B1/Ocd/s/ZeWTcn81ly09MqtU6504b99XMoBhdo59G+5vQbAIzvlKLeN JvSW7GiM+gfcdSYivNsSEtoqMh/TNDZ/Qd96E6mSVTs735uE+V2Wu6sW75kouSUp n1yqWj4CF5W/bzws2egnCL4ZD5AjP145H+ZviBhY+ATKOgErhrzjISZH6QFqxFhO nKHuA8vmqu1FioE= -----END CERTIFICATE-----Generated at Mon Oct 20 16:57:56 2025 by rpki-client