$ rpki-client -vvf rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/0AD382BA3AC211F08E4A722CC4F9AE02.roa File: 0AD382BA3AC211F08E4A722CC4F9AE02.roa (raw, json) Hash identifier: Xmx7r1RGT7f/JoA9c/U1eUxsqAqHU53hlPB4+oTq2f8= Subject key identifier: FE:2B:3B:8E:0A:30:4F:2B:16:C3:01:1A:C7:F0:44:61:A4:D9:39:89 Certificate issuer: /CN=A9148C7B/serialNumber=17577F1E92EB33B2CDE6E489C0B9A99A2E02FDA3 Certificate serial: 355F Authority key identifier: 17:57:7F:1E:92:EB:33:B2:CD:E6:E4:89:C0:B9:A9:9A:2E:02:FD:A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/0AD382BA3AC211F08E4A722CC4F9AE02.roa Signing time: Thu 16 Oct 2025 15:20:51 +0000 ROA not before: Thu 16 Oct 2025 15:20:51 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 133066 IP address blocks: 119.59.83.0/24 maxlen: 24 119.59.84.0/24 maxlen: 24 119.59.85.0/24 maxlen: 24 121.100.51.0/24 maxlen: 24 121.100.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.crl rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 14:50:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13663 (0x355f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148C7B, serialNumber=17577F1E92EB33B2CDE6E489C0B9A99A2E02FDA3 Validity Not Before: Oct 16 15:20:51 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68f10d53-c653 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d5:34:11:6f:8c:1d:57:9f:0d:1b:35:12:9a: 4e:cb:42:70:ce:d8:13:d6:cf:e4:58:56:80:e2:e7: 28:4a:e3:49:86:44:f9:37:c0:53:9d:21:86:21:74: 94:cf:2c:79:1e:8b:15:5c:09:1b:1b:18:15:33:72: 04:d3:ef:b6:72:d8:0d:a8:02:2d:fc:f2:a5:8c:20: 62:f0:04:11:03:51:f0:a8:37:e8:6e:4e:61:4a:1d: 14:b0:ff:4e:b4:d4:11:77:48:b9:12:1d:f6:2d:2d: 51:3a:9a:a9:73:1c:61:67:6d:dd:03:ee:82:20:21: 08:cf:ce:4b:ad:85:40:10:08:8e:52:b5:19:ca:a6: c4:0f:b0:7c:bd:40:2d:41:09:97:08:e6:c3:0f:97: 31:5b:e1:f2:7d:4c:d6:b2:d8:73:ac:f7:7d:d5:67: e6:5c:8f:e4:48:b1:f3:95:7f:16:76:41:53:67:a0: ed:e3:d3:60:f7:a5:f6:73:87:b0:01:93:ac:02:70: 2f:fd:74:8f:c4:42:72:b3:b7:56:a3:9b:21:b2:ce: fb:a5:f5:2c:43:54:6c:af:a7:37:3d:b7:80:a1:3d: 18:67:7c:af:cc:28:e1:4f:cb:55:a6:58:62:04:aa: ff:58:5e:78:03:f1:30:e9:c8:44:40:2d:a5:df:bd: 6a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:2B:3B:8E:0A:30:4F:2B:16:C3:01:1A:C7:F0:44:61:A4:D9:39:89 X509v3 Authority Key Identifier: keyid:17:57:7F:1E:92:EB:33:B2:CD:E6:E4:89:C0:B9:A9:9A:2E:02:FD:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/0AD382BA3AC211F08E4A722CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 119.59.83.0-119.59.85.255 121.100.51.0-121.100.52.255 Signature Algorithm: sha256WithRSAEncryption 7b:a7:bd:3f:93:e6:33:0b:80:ac:a5:a5:15:7f:0e:d3:b6:6c: f4:d3:d9:46:96:c4:0f:67:d1:70:99:50:40:fd:ee:8f:af:29: b7:5c:88:a0:38:70:e5:d2:d0:3a:78:33:66:a3:18:3f:3d:3b: 1b:83:76:65:fa:91:6e:0d:9b:67:06:e7:ca:27:a0:0d:77:d3: 50:b7:b0:bf:79:9a:1d:30:b5:0b:34:21:0b:d8:9d:9d:71:4f: 7d:f2:a9:6e:85:4f:ff:19:71:0e:6d:00:57:0e:5b:f5:ad:f1: 14:20:16:20:0f:22:82:aa:45:c4:79:a4:d9:38:63:3e:e4:cd: 3b:a3:4f:c9:66:6b:aa:c8:c3:14:38:2d:53:73:9d:ea:a3:8b: b3:de:35:e1:aa:27:3d:69:59:af:ed:42:76:2b:69:10:6f:73: d2:a6:36:c7:7b:74:b4:30:9d:38:e2:fe:21:b5:e2:25:14:3d: 7b:d4:06:13:b3:f4:c5:2c:50:0c:6b:57:71:01:1c:1d:76:d2: 65:6d:b8:24:5a:da:8a:4a:32:ef:f4:0f:e8:25:25:70:0f:e9: 7d:69:05:38:6f:8f:e2:0f:12:14:6d:d2:64:69:c7:39:4c:ab: a2:99:09:a4:bc:dc:c6:b2:eb:60:e6:71:50:44:ec:db:d7:47: a2:26:34:db -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICNV8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhDN0IxMTAvBgNVBAUTKDE3NTc3RjFFOTJFQjMzQjJDREU2RTQ4OUMwQjlBOTlB MkUwMkZEQTMwHhcNMjUxMDE2MTUyMDUxWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGYxMGQ1My1jNjUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0dU0EW+MHVefDRs1EppOy0JwztgT1s/kWFaA4ucoSuNJhkT5N8BTnSGGIXSU zyx5HosVXAkbGxgVM3IE0++2ctgNqAIt/PKljCBi8AQRA1HwqDfobk5hSh0UsP9O tNQRd0i5Eh32LS1ROpqpcxxhZ23dA+6CICEIz85LrYVAEAiOUrUZyqbED7B8vUAt QQmXCObDD5cxW+HyfUzWsthzrPd91WfmXI/kSLHzlX8WdkFTZ6Dt49Ng96X2c4ew AZOsAnAv/XSPxEJys7dWo5shss77pfUsQ1Rsr6c3PbeAoT0YZ3yvzCjhT8tVplhi BKr/WF54A/Ew6chEQC2l371q+QIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFP4rO44K ME8rFsMBGsfwRGGk2TmJMB8GA1UdIwQYMBaAFBdXfx6S6zOyzebkicC5qZouAv2j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEM3Qi82NzUyMDhBRTFE OTMxMUUyQkNCREU1RjYwOEIwMkNEMi9GMWRfSHBMck03TE41dVNKd0xtcG1pNENf YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0YxZF9IcExyTTdMTjV1U0p3TG1wbWk0Q19hTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDhDN0IvNjc1MjA4QUUxRDkzMTFFMkJDQkRFNUY2MDhCMDJDRDIvMEFEMzgyQkEz QUMyMTFGMDhFNEE3MjJDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNQYIKwYBBQUHAQcBAf8E JjAkMCIEAgABMBwwDAMEAHc7UwMEAXc7VDAMAwQAeWQzAwQAeWQ0MA0GCSqGSIb3 DQEBCwUAA4IBAQB7p70/k+YzC4CspaUVfw7Ttmz009lGlsQPZ9FwmVBA/e6Prym3 XIigOHDl0tA6eDNmoxg/PTsbg3Zl+pFuDZtnBufKJ6ANd9NQt7C/eZodMLULNCEL 2J2dcU998qluhU//GXEObQBXDlv1rfEUIBYgDyKCqkXEeaTZOGM+5M07o0/JZmuq yMMUOC1Tc53qo4uz3jXhqic9aVmv7UJ2K2kQb3PSpjbHe3S0MJ044v4hteIlFD17 1AYTs/TFLFAMa1dxARwddtJlbbgkWtqKSjLv9A/oJSVwD+l9aQU4b4/iDxIUbdJk acc5TKuimQmkvNzGsutg5nFQROzb10eiJjTb -----END CERTIFICATE-----Generated at Mon Oct 20 08:02:27 2025 by rpki-client