$ rpki-client -vvf rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/2DC3DC54D54E11EF8C5B1651C4F9AE02.roa File: 2DC3DC54D54E11EF8C5B1651C4F9AE02.roa (raw, json) Hash identifier: 4rLlw7arW1sP5IbnNCTRGWNEvfDKutT79yaN5ySnrBc= Subject key identifier: BE:F0:8D:00:E9:36:D2:75:09:1F:F4:64:78:76:7D:8B:C7:6C:26:05 Certificate issuer: /CN=A9150E55/serialNumber=A01A0F06E310B38130131D7882970BF162DD0D66 Certificate serial: 037C Authority key identifier: A0:1A:0F:06:E3:10:B3:81:30:13:1D:78:82:97:0B:F1:62:DD:0D:66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBoPBuMQs4EwEx14gpcL8WLdDWY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/2DC3DC54D54E11EF8C5B1651C4F9AE02.roa Signing time: Sat 11 Oct 2025 03:27:22 +0000 ROA not before: Sat 11 Oct 2025 03:27:22 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 153494 IP address blocks: 43.243.64.0/22 maxlen: 24 103.38.168.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.crl rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBoPBuMQs4EwEx14gpcL8WLdDWY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:52:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 892 (0x37c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150E55, serialNumber=A01A0F06E310B38130131D7882970BF162DD0D66 Validity Not Before: Oct 11 03:27:22 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68e9ce99-0d6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b7:49:8f:7d:59:2d:cf:2b:24:42:59:fd:11: ef:61:8d:ca:a3:ae:74:b8:88:53:e1:d3:6c:4c:97: 0b:4c:0a:2e:fa:aa:25:f6:1b:df:0c:32:9d:e9:89: 1c:c7:9c:73:00:fe:2f:ea:f1:a9:b1:83:5e:48:6a: 32:7b:39:e8:a3:35:75:c1:ee:f4:c3:69:15:02:4b: e8:97:55:74:47:5c:5c:e4:8a:20:45:ac:eb:34:52: e1:28:41:a1:85:04:e5:86:75:3e:dc:6f:c9:78:30: 83:27:b1:95:3c:e1:ac:37:55:19:31:f1:3a:2e:7d: a7:51:69:3e:79:0c:4c:39:6e:d6:24:e9:9c:9d:10: ca:91:ad:49:62:c6:4c:15:98:14:1d:39:d4:57:ca: 5e:68:7a:67:de:43:34:28:3e:24:8f:44:40:1e:c9: 5d:3d:4e:63:da:7e:4c:b9:85:0a:66:b7:8b:e1:df: 56:fc:e1:4c:ac:19:ce:15:a6:28:9e:c4:2f:d5:8f: a6:1d:9a:1f:02:60:b3:81:69:d6:91:d5:3c:95:b7: 84:11:cc:ad:9e:64:b4:28:58:38:2e:82:f9:0f:05: 73:fd:10:14:21:51:22:ef:b2:78:17:2b:4e:db:84: a2:b0:30:35:57:dc:5c:a0:11:47:6b:93:2a:ce:b6: 5c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:F0:8D:00:E9:36:D2:75:09:1F:F4:64:78:76:7D:8B:C7:6C:26:05 X509v3 Authority Key Identifier: keyid:A0:1A:0F:06:E3:10:B3:81:30:13:1D:78:82:97:0B:F1:62:DD:0D:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBoPBuMQs4EwEx14gpcL8WLdDWY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/2DC3DC54D54E11EF8C5B1651C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.243.64.0/22 103.38.168.0/22 Signature Algorithm: sha256WithRSAEncryption aa:1b:0e:0d:3f:14:ea:57:c6:59:ee:e4:5c:c3:06:b6:a1:65: 71:64:bd:51:d0:4b:7d:59:98:6a:42:fb:14:d0:73:09:46:ee: 7c:d5:4a:7d:da:e7:d2:83:5a:1b:27:aa:38:29:ca:78:10:82: 2b:63:91:2a:78:ce:cf:fd:c1:25:6b:e4:e4:b7:99:6a:c6:bb: 42:4f:bc:b3:42:c8:5e:10:16:4d:1f:84:cc:07:fe:74:61:84: df:8b:1a:42:c2:d2:8f:a0:da:7e:75:88:0d:48:11:91:0e:f0: 62:79:8e:0f:9a:e1:12:b3:97:a2:7f:95:21:7e:ce:41:8e:35: 83:94:87:96:0d:e9:5e:c0:2e:42:e6:3a:3d:f2:1b:bf:d0:e3: 97:48:44:5b:a9:db:76:2a:50:08:25:e3:43:c8:0a:57:0a:19: 68:34:53:f1:59:81:c2:66:52:14:ac:08:f5:36:66:be:4f:a8: 5f:a6:ff:c2:88:3f:c8:9a:1b:cf:b0:23:2e:46:1d:55:4b:b9: 09:55:50:61:3d:bd:55:ee:d1:6e:ac:40:1c:da:a4:9c:08:c1: eb:aa:2c:94:bf:a6:4e:bd:0c:71:9c:99:9a:c9:da:15:82:f6: e0:db:a0:90:60:d2:fc:f5:f1:d4:ef:f3:60:fa:7e:c9:d9:63: 9e:8f:73:41 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICA3wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBFNTUxMTAvBgNVBAUTKEEwMUEwRjA2RTMxMEIzODEzMDEzMUQ3ODgyOTcwQkYx NjJERDBENjYwHhcNMjUxMDExMDMyNzIyWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGU5Y2U5OS0wZDZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2rdJj31ZLc8rJEJZ/RHvYY3Ko650uIhT4dNsTJcLTAou+qol9hvfDDKd6Ykc x5xzAP4v6vGpsYNeSGoyeznoozV1we70w2kVAkvol1V0R1xc5IogRazrNFLhKEGh hQTlhnU+3G/JeDCDJ7GVPOGsN1UZMfE6Ln2nUWk+eQxMOW7WJOmcnRDKka1JYsZM FZgUHTnUV8peaHpn3kM0KD4kj0RAHsldPU5j2n5MuYUKZreL4d9W/OFMrBnOFaYo nsQv1Y+mHZofAmCzgWnWkdU8lbeEEcytnmS0KFg4LoL5DwVz/RAUIVEi77J4FytO 24SisDA1V9xcoBFHa5MqzrZcBwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFL7wjQDp NtJ1CR/0ZHh2fYvHbCYFMB8GA1UdIwQYMBaAFKAaDwbjELOBMBMdeIKXC/Fi3Q1m MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEU1NS83RDMyQTc0RUM2 MDAxMUVDODcwMDVDN0RDNEY5QUUwMi9vQm9QQnVNUXM0RXdFeDE0Z3BjTDhXTGRE V1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29Cb1BCdU1RczRFd0V4MTRncGNMOFdMZERXWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTBFNTUvN0QzMkE3NEVDNjAwMTFFQzg3MDA1QzdEQzRGOUFFMDIvMkRDM0RDNTRE NTRFMTFFRjhDNUIxNjUxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAIr80ADBAJnJqgwDQYJKoZIhvcNAQELBQADggEBAKobDg0/ FOpXxlnu5FzDBrahZXFkvVHQS31ZmGpC+xTQcwlG7nzVSn3a59KDWhsnqjgpyngQ gitjkSp4zs/9wSVr5OS3mWrGu0JPvLNCyF4QFk0fhMwH/nRhhN+LGkLC0o+g2n51 iA1IEZEO8GJ5jg+a4RKzl6J/lSF+zkGONYOUh5YN6V7ALkLmOj3yG7/Q45dIRFup 23YqUAgl40PIClcKGWg0U/FZgcJmUhSsCPU2Zr5PqF+m/8KIP8iaG8+wIy5GHVVL uQlVUGE9vVXu0W6sQBzapJwIweuqLJS/pk69DHGcmZrJ2hWC9uDboJBg0vz18dTv 82D6fsnZY56Pc0E= -----END CERTIFICATE-----Generated at Mon Oct 20 11:41:05 2025 by rpki-client