$ rpki-client -vvf rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/ACCFE0643C9711F08159891EC4F9AE02.roa File: ACCFE0643C9711F08159891EC4F9AE02.roa (raw, json) Hash identifier: wGVIBPNEBcFCJnJRSDz4VWxuIzLpiNR2BJzQPhs1Kok= Subject key identifier: 04:D2:09:27:C6:55:80:F6:A1:40:8A:0D:EF:C9:5F:F7:22:5A:CF:32 Certificate issuer: /CN=A9157B74/serialNumber=E2CB96F3B05A63E9E54796526ECCE94A3591E5FC Certificate serial: 38 Authority key identifier: E2:CB:96:F3:B0:5A:63:E9:E5:47:96:52:6E:CC:E9:4A:35:91:E5:FC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4suW87BaY-nlR5ZSbszpSjWR5fw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/ACCFE0643C9711F08159891EC4F9AE02.roa Signing time: Wed 03 Sep 2025 08:37:41 +0000 ROA not before: Wed 03 Sep 2025 08:37:41 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 141011 IP address blocks: 165.99.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/4suW87BaY-nlR5ZSbszpSjWR5fw.crl rsync://rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/4suW87BaY-nlR5ZSbszpSjWR5fw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4suW87BaY-nlR5ZSbszpSjWR5fw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:42:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56 (0x38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157B74, serialNumber=E2CB96F3B05A63E9E54796526ECCE94A3591E5FC Validity Not Before: Sep 3 08:37:41 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68b7fe55-fa12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7a:31:93:60:71:fb:3f:24:53:1b:03:2a:60: 38:8d:a7:ce:69:c5:34:0b:ff:d8:a7:c3:74:c8:25: f6:52:aa:7b:f7:27:83:2b:66:ac:a9:85:f0:0c:bb: e2:5e:a1:70:bd:e7:6c:f5:bf:60:65:eb:c8:20:7c: 70:8d:a5:8a:55:ec:14:76:5a:eb:97:5d:c9:bc:f1: 6a:c6:e2:15:99:07:27:43:32:a8:72:55:e9:4f:8c: b2:fe:7d:a0:97:12:11:08:f3:ee:e4:3b:c1:7e:db: 82:46:84:98:12:86:ae:5c:5f:0b:1d:e3:28:93:e4: 2c:fb:c5:c8:a7:57:09:1f:9d:09:09:88:1d:c2:62: 61:ef:b5:d3:f7:32:17:1b:d8:e8:51:65:13:25:b3: 69:b4:51:f5:93:a6:ca:80:81:a5:f5:64:80:dc:24: 9c:1d:4a:aa:3a:42:37:6e:5c:b0:f3:72:c9:6b:67: 90:67:c0:d9:96:1a:6e:df:06:d9:a5:df:5e:60:88: d9:c5:22:80:be:59:68:da:99:5c:87:b2:63:dc:18: db:5d:5e:be:c2:61:1e:83:8a:32:ae:a9:94:0c:8c: b4:69:7e:0c:44:7b:93:a1:e2:ba:0e:c6:bb:1d:de: f9:88:9e:b8:72:60:1b:a0:c8:9f:d9:e7:59:7a:b7: f2:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:D2:09:27:C6:55:80:F6:A1:40:8A:0D:EF:C9:5F:F7:22:5A:CF:32 X509v3 Authority Key Identifier: keyid:E2:CB:96:F3:B0:5A:63:E9:E5:47:96:52:6E:CC:E9:4A:35:91:E5:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/4suW87BaY-nlR5ZSbszpSjWR5fw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4suW87BaY-nlR5ZSbszpSjWR5fw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157B74/AF64E5103BAA11F09642821CC4F9AE02/ACCFE0643C9711F08159891EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 165.99.155.0/24 Signature Algorithm: sha256WithRSAEncryption 95:ef:90:21:d9:9f:27:f7:e0:bb:99:ff:58:ad:6e:fa:af:45: 23:3d:63:bd:3d:b2:99:e8:a6:9f:c4:2c:f2:3f:40:db:9c:27: 51:b4:30:ea:47:21:c5:ff:08:c2:17:f0:0c:f0:a8:c0:2c:ac: d6:5d:ee:80:18:0b:45:aa:ae:c4:90:4c:60:6e:c7:43:18:5e: f8:67:61:8f:ae:c6:53:31:9f:02:c7:b9:d1:53:1d:78:5a:75: 75:78:de:27:08:b7:e0:95:3b:0d:73:32:19:5a:52:3e:98:27: 95:59:f9:cf:eb:06:1a:c9:5e:e6:a0:60:d9:a4:98:e0:8b:92: 37:94:21:db:19:38:47:ee:df:ea:99:6b:0f:e1:0d:9f:e8:8b: 4e:a7:0e:d0:e8:74:ba:7f:15:a1:bc:46:68:ff:d1:34:68:56: 40:55:d9:50:70:70:a2:a1:58:4d:8b:cd:0b:0f:b6:a8:a8:17: d6:25:98:fb:12:a8:d1:bf:2e:fa:32:33:93:f5:b6:3c:da:83: a2:4e:71:f4:e9:ee:8f:5e:3f:4c:aa:b2:09:4c:5f:f9:53:e8: 1f:5d:b6:80:69:da:54:42:d7:1e:12:14:1c:90:89:c1:11:cf: f6:c7:26:e9:1d:4a:51:ee:b4:9b:9f:94:ae:c2:35:92:b1:ee: 17:9e:6b:b4 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBODANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 N0I3NDExMC8GA1UEBRMoRTJDQjk2RjNCMDVBNjNFOUU1NDc5NjUyNkVDQ0U5NEEz NTkxRTVGQzAeFw0yNTA5MDMwODM3NDFaFw0yNjEyMDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4YjdmZTU1LWZhMTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9ejGTYHH7PyRTGwMqYDiNp85pxTQL/9inw3TIJfZSqnv3J4MrZqyphfAMu+Je oXC952z1v2Bl68ggfHCNpYpV7BR2WuuXXcm88WrG4hWZBydDMqhyVelPjLL+faCX EhEI8+7kO8F+24JGhJgShq5cXwsd4yiT5Cz7xcinVwkfnQkJiB3CYmHvtdP3Mhcb 2OhRZRMls2m0UfWTpsqAgaX1ZIDcJJwdSqo6QjduXLDzcslrZ5BnwNmWGm7fBtml 315giNnFIoC+WWjamVyHsmPcGNtdXr7CYR6DijKuqZQMjLRpfgxEe5Oh4roOxrsd 3vmInrhyYBugyJ/Z51l6t/KfAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUBNIJJ8ZV gPahQIoN78lf9yJazzIwHwYDVR0jBBgwFoAU4suW87BaY+nlR5ZSbszpSjWR5fww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU3Qjc0L0FGNjRFNTEwM0JB QTExRjA5NjQyODIxQ0M0RjlBRTAyLzRzdVc4N0JhWS1ubFI1WlNic3pwU2pXUjVm dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNHN1Vzg3QmFZLW5sUjVaU2JzenBTaldSNWZ3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0I3NC9BRjY0RTUxMDNCQUExMUYwOTY0MjgyMUNDNEY5QUUwMi9BQ0NGRTA2NDND OTcxMUYwODE1OTg5MUVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAKVjmzANBgkqhkiG9w0BAQsFAAOCAQEAle+QIdmfJ/fgu5n/ WK1u+q9FIz1jvT2ymeimn8Qs8j9A25wnUbQw6kchxf8IwhfwDPCowCys1l3ugBgL RaquxJBMYG7HQxhe+Gdhj67GUzGfAse50VMdeFp1dXjeJwi34JU7DXMyGVpSPpgn lVn5z+sGGsle5qBg2aSY4IuSN5Qh2xk4R+7f6plrD+ENn+iLTqcO0Oh0un8VobxG aP/RNGhWQFXZUHBwoqFYTYvNCw+2qKgX1iWY+xKo0b8u+jIzk/W2PNqDok5x9Onu j14/TKqyCUxf+VPoH122gGnaVELXHhIUHJCJwRHP9scm6R1KUe60m5+UrsI1krHu F55rtA== -----END CERTIFICATE-----Generated at Tue Oct 21 07:59:43 2025 by rpki-client