$ rpki-client -vvf rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/927AA46C549211EFB6D69465C4F9AE02.roa File: 927AA46C549211EFB6D69465C4F9AE02.roa (raw, json) Hash identifier: BSpM2VSMPXNCcFdU8OVTaKUZ+gNICf8M+kzl5UfUxEY= Subject key identifier: D9:3E:ED:4D:12:46:ED:B2:5C:E8:71:C0:C5:1C:F6:16:1F:FC:3D:F5 Certificate issuer: /CN=A9148B19/serialNumber=70D2D06919957C6AA6771CF55DB96FC7EFE789A0 Certificate serial: 0417 Authority key identifier: 70:D2:D0:69:19:95:7C:6A:A6:77:1C:F5:5D:B9:6F:C7:EF:E7:89:A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/927AA46C549211EFB6D69465C4F9AE02.roa Signing time: Thu 11 Sep 2025 01:08:27 +0000 ROA not before: Thu 11 Sep 2025 01:08:27 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 1221 IP address blocks: 202.36.14.0/24 maxlen: 24 203.16.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.crl rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:17:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1047 (0x417) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148B19, serialNumber=70D2D06919957C6AA6771CF55DB96FC7EFE789A0 Validity Not Before: Sep 11 01:08:27 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68c2210b-0244 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:66:93:0d:d8:b3:a0:42:c0:68:f9:29:70:e9: 03:7c:6c:ce:55:86:d1:7e:e7:35:3f:31:91:7d:ff: c4:40:d7:00:3e:47:63:1d:ca:45:4d:18:56:da:41: 57:7d:f7:90:33:52:ed:59:33:b6:85:23:ec:59:84: 7d:a4:4a:56:57:88:50:c6:9b:fe:10:76:b1:90:b8: fb:ca:56:c0:ee:d9:db:30:e3:d4:96:c5:cb:35:7f: 04:33:32:08:29:25:ff:ed:6b:2a:c4:06:cb:01:df: ec:f0:d0:99:f4:e4:86:df:87:ab:a8:bf:4d:39:3a: ee:61:52:b3:15:45:7a:f6:d9:10:59:38:d9:07:da: 84:7b:bf:d4:35:18:14:a8:4d:78:c0:a7:6c:0a:ec: ac:95:e4:80:de:da:be:e7:c7:36:6e:3a:e7:0e:fe: 5d:ef:35:9f:9c:21:55:47:f9:7a:37:bd:89:b3:8c: 78:33:78:af:b1:89:70:91:98:d9:e0:d3:61:09:81: e5:f7:3e:f7:e4:3b:e0:77:d9:45:b0:79:e5:b3:2a: 73:ed:33:01:c8:b0:74:58:75:e8:30:d2:dc:c5:c1: ab:f9:48:b7:19:95:61:3e:ed:49:a9:9e:5e:b3:de: e0:04:e9:f0:8f:97:69:57:21:1e:25:0c:b9:b8:bb: a3:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:3E:ED:4D:12:46:ED:B2:5C:E8:71:C0:C5:1C:F6:16:1F:FC:3D:F5 X509v3 Authority Key Identifier: keyid:70:D2:D0:69:19:95:7C:6A:A6:77:1C:F5:5D:B9:6F:C7:EF:E7:89:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/927AA46C549211EFB6D69465C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.36.14.0/24 203.16.140.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:0e:d4:d5:21:36:65:cb:0d:88:d5:a4:0c:e9:c7:b6:db:25: 5f:61:9e:71:41:81:e4:2e:e8:06:09:df:39:ba:6f:77:58:97: 41:fa:6a:5e:4e:2d:3e:4d:37:a1:ad:d9:69:91:40:b6:25:ef: bb:6c:7d:6d:6f:cb:c5:61:15:58:7a:6f:43:17:80:34:ef:de: 1b:8b:65:60:f6:66:41:42:1a:f1:43:d7:c1:a9:fb:e1:2d:05: 28:6f:ee:a7:74:56:73:9f:10:fe:38:22:5f:7b:70:45:93:a0: d4:a3:5a:d8:50:7d:44:6b:8d:08:ba:d4:15:a0:18:71:4b:83: d7:df:48:c0:4f:2b:39:70:42:ea:6b:67:5e:2b:c2:87:13:1f: 25:b7:94:38:82:c2:24:cf:d9:54:b2:b6:25:46:35:67:a5:b6: 28:74:c9:66:ae:70:df:ce:ab:05:be:d9:b9:3a:aa:61:f5:f1: dc:60:6d:40:29:00:83:8c:f2:9a:e3:d1:fd:b9:19:8f:1d:d3: c6:3c:ee:d2:d7:a6:1d:9f:fd:98:19:37:e4:13:8a:9b:01:ea: 58:9c:af:6b:80:02:6e:26:80:98:b7:e6:b9:6b:fd:26:6f:a2: 2b:26:51:07:b4:b4:56:8f:0b:5b:a5:23:ce:2c:34:cc:c9:f7: 2a:d7:71:2e -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBBcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhCMTkxMTAvBgNVBAUTKDcwRDJEMDY5MTk5NTdDNkFBNjc3MUNGNTVEQjk2RkM3 RUZFNzg5QTAwHhcNMjUwOTExMDEwODI3WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGMyMjEwYi0wMjQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxGaTDdizoELAaPkpcOkDfGzOVYbRfuc1PzGRff/EQNcAPkdjHcpFTRhW2kFX ffeQM1LtWTO2hSPsWYR9pEpWV4hQxpv+EHaxkLj7ylbA7tnbMOPUlsXLNX8EMzII KSX/7WsqxAbLAd/s8NCZ9OSG34erqL9NOTruYVKzFUV69tkQWTjZB9qEe7/UNRgU qE14wKdsCuysleSA3tq+58c2bjrnDv5d7zWfnCFVR/l6N72Js4x4M3ivsYlwkZjZ 4NNhCYHl9z735Dvgd9lFsHnlsypz7TMByLB0WHXoMNLcxcGr+Ui3GZVhPu1JqZ5e s97gBOnwj5dpVyEeJQy5uLujHwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFNk+7U0S Ru2yXOhxwMUc9hYf/D31MB8GA1UdIwQYMBaAFHDS0GkZlXxqpncc9V25b8fv54mg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEIxOS8xMTAzMEFGNDg1 NTYxMUVDOUFCODJFMjFDNEY5QUUwMi9jTkxRYVJtVmZHcW1keHoxWGJsdngtX25p YUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NOTFFhUm1WZkdxbWR4ejFYYmx2eC1fbmlhQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDhCMTkvMTEwMzBBRjQ4NTU2MTFFQzlBQjgyRTIxQzRGOUFFMDIvOTI3QUE0NkM1 NDkyMTFFRkI2RDY5NDY1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBADKJA4DBADLEIwwDQYJKoZIhvcNAQELBQADggEBAFwO1NUh NmXLDYjVpAzpx7bbJV9hnnFBgeQu6AYJ3zm6b3dYl0H6al5OLT5NN6Gt2WmRQLYl 77tsfW1vy8VhFVh6b0MXgDTv3huLZWD2ZkFCGvFD18Gp++EtBShv7qd0VnOfEP44 Il97cEWToNSjWthQfURrjQi61BWgGHFLg9ffSMBPKzlwQuprZ14rwocTHyW3lDiC wiTP2VSytiVGNWeltih0yWaucN/OqwW+2bk6qmH18dxgbUApAIOM8prj0f25GY8d 08Y87tLXph2f/ZgZN+QTipsB6licr2uAAm4mgJi35rlr/SZvoismUQe0tFaPC1ul I84sNMzJ9yrXcS4= -----END CERTIFICATE-----Generated at Mon Oct 20 13:50:25 2025 by rpki-client