$ rpki-client -vvf rpki.apnic.net/member_repository/A9158F8D/46583B08FFC811EF9E6A8A4DC4F9AE02/9180262C1B6111F08E120D13C4F9AE02.roa File: 9180262C1B6111F08E120D13C4F9AE02.roa (raw, json) Hash identifier: EsTB7TakNl9Tx/hsuSfCjLfMjZ+fBEoPIeukrwd3M1s= Subject key identifier: 04:B1:AA:C5:1E:B3:D5:80:EE:F2:25:AF:CD:CF:7E:81:F5:36:46:FA Certificate issuer: /CN=A9158F8D/serialNumber=4C8D7BEA24CAFCC57A53E8E774872D3D8B2EB45D Certificate serial: 71 Authority key identifier: 4C:8D:7B:EA:24:CA:FC:C5:7A:53:E8:E7:74:87:2D:3D:8B:2E:B4:5D Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TI176iTK_MV6U-jndIctPYsutF0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158F8D/46583B08FFC811EF9E6A8A4DC4F9AE02/9180262C1B6111F08E120D13C4F9AE02.roa Signing time: Sat 11 Oct 2025 09:03:31 +0000 ROA not before: Sat 11 Oct 2025 09:03:30 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 138199 IP address blocks: 185.24.232.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158F8D/46583B08FFC811EF9E6A8A4DC4F9AE02/TI176iTK_MV6U-jndIctPYsutF0.crl rsync://rpki.apnic.net/member_repository/A9158F8D/46583B08FFC811EF9E6A8A4DC4F9AE02/TI176iTK_MV6U-jndIctPYsutF0.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TI176iTK_MV6U-jndIctPYsutF0.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:39:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 113 (0x71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158F8D, serialNumber=4C8D7BEA24CAFCC57A53E8E774872D3D8B2EB45D Validity Not Before: Oct 11 09:03:30 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68ea1d62-1094 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:90:1a:dc:fc:fd:00:7d:a0:18:cf:40:00:4f: ee:a3:35:ba:9c:b8:4e:60:f5:e9:57:40:fc:b1:b6: 06:e8:0f:99:86:19:4c:af:1a:40:f8:81:d8:ab:16: d3:fd:ae:2a:64:eb:f3:59:f4:4e:4b:8a:95:57:69: 55:f5:e3:d1:c0:dc:5f:03:67:2a:fc:64:11:20:ed: a9:f0:0e:9f:9f:0a:1a:e3:e9:0f:ab:8f:1b:e7:d0: c5:66:00:66:d7:8b:7c:97:93:ea:5f:4c:75:0f:45: 2c:cd:f9:b9:da:a1:d8:ce:40:c6:e1:f5:6d:d3:5b: 27:3d:49:e4:4a:65:81:57:60:4b:65:85:75:67:58: 70:bc:86:bd:b1:29:4f:6a:8a:2c:12:23:70:cd:21: f8:f1:3a:e1:30:bc:cf:02:94:d4:87:81:10:c3:3c: 0b:c4:c2:31:67:be:b6:21:9c:d5:03:26:2f:f0:b5: 1b:6a:67:c9:43:f8:d6:fd:6c:62:5c:9a:87:7c:ea: 84:1a:ba:d9:5c:67:de:e7:f9:c7:8a:65:7d:22:80: 0b:75:22:44:56:43:96:b8:e1:f0:04:09:c8:f4:3d: fb:e8:b1:69:b8:4a:9c:bf:77:4b:39:d6:cb:1b:45: c3:e1:38:84:9c:0d:f0:c7:9f:21:30:6c:3b:a4:7c: 7f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:B1:AA:C5:1E:B3:D5:80:EE:F2:25:AF:CD:CF:7E:81:F5:36:46:FA X509v3 Authority Key Identifier: keyid:4C:8D:7B:EA:24:CA:FC:C5:7A:53:E8:E7:74:87:2D:3D:8B:2E:B4:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158F8D/46583B08FFC811EF9E6A8A4DC4F9AE02/TI176iTK_MV6U-jndIctPYsutF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TI176iTK_MV6U-jndIctPYsutF0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158F8D/46583B08FFC811EF9E6A8A4DC4F9AE02/9180262C1B6111F08E120D13C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 185.24.232.0/22 Signature Algorithm: sha256WithRSAEncryption 7f:80:f4:d5:38:18:6c:0f:86:59:a0:ac:2a:7d:b5:61:37:e8: 68:47:4e:a3:66:e5:4a:e5:7f:1a:08:39:5a:4c:f9:79:7d:59: 45:28:6e:52:db:2f:e9:9f:59:4d:30:c5:fd:f8:d2:64:54:f6: 26:7c:20:a0:a0:e9:4f:b2:5e:26:67:4e:6f:b3:a2:e6:57:45: 06:c6:27:0d:9d:a0:dd:d0:6c:05:60:ba:b2:f6:b8:a5:f6:51: 76:0d:1d:08:20:b8:45:43:0e:ac:2f:67:00:39:d2:ea:05:f3: f3:8c:3b:85:c5:79:04:55:7c:ae:92:e6:bc:eb:e8:1c:19:42: 59:88:64:6b:6e:35:94:6a:35:8e:35:84:07:56:01:b1:a4:a3: 7b:fb:6d:9d:53:c1:91:32:a4:7c:b4:38:76:fd:2f:d5:40:db: b2:a1:48:df:ed:99:12:69:ba:0a:4a:74:9d:d1:7c:c2:23:61: 16:b5:93:58:5e:43:ce:16:4b:04:ae:d0:47:a4:28:26:99:90: 76:e1:30:d0:32:c4:23:6a:7f:51:dc:5e:92:f6:4f:e0:1c:e2: 5a:15:d9:16:c4:e5:ca:1b:ed:e9:44:8b:e4:ba:7e:57:a3:4c: e0:d2:c6:b4:e0:7c:3f:3c:12:ff:b8:4d:24:8b:75:9b:b7:81: 1a:4d:1b:3d -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBcTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 OEY4RDExMC8GA1UEBRMoNEM4RDdCRUEyNENBRkNDNTdBNTNFOEU3NzQ4NzJEM0Q4 QjJFQjQ1RDAeFw0yNTEwMTEwOTAzMzBaFw0yNjEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY4ZWExZDYyLTEwOTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCukBrc/P0AfaAYz0AAT+6jNbqcuE5g9elXQPyxtgboD5mGGUyvGkD4gdirFtP9 ripk6/NZ9E5LipVXaVX149HA3F8DZyr8ZBEg7anwDp+fChrj6Q+rjxvn0MVmAGbX i3yXk+pfTHUPRSzN+bnaodjOQMbh9W3TWyc9SeRKZYFXYEtlhXVnWHC8hr2xKU9q iiwSI3DNIfjxOuEwvM8ClNSHgRDDPAvEwjFnvrYhnNUDJi/wtRtqZ8lD+Nb9bGJc mod86oQautlcZ97n+ceKZX0igAt1IkRWQ5a44fAECcj0PfvosWm4Spy/d0s51ssb RcPhOIScDfDHnyEwbDukfH9fAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUBLGqxR6z 1YDu8iWvzc9+gfU2RvowHwYDVR0jBBgwFoAUTI176iTK/MV6U+jndIctPYsutF0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4RjhELzQ2NTgzQjA4RkZD ODExRUY5RTZBOEE0REM0RjlBRTAyL1RJMTc2aVRLX01WNlUtam5kSWN0UFlzdXRG MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvVEkxNzZpVEtfTVY2VS1qbmRJY3RQWXN1dEYwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OEY4RC80NjU4M0IwOEZGQzgxMUVGOUU2QThBNERDNEY5QUUwMi85MTgwMjYyQzFC NjExMUYwOEUxMjBEMTNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEArkY6DANBgkqhkiG9w0BAQsFAAOCAQEAf4D01TgYbA+GWaCs Kn21YTfoaEdOo2blSuV/Ggg5Wkz5eX1ZRShuUtsv6Z9ZTTDF/fjSZFT2JnwgoKDp T7JeJmdOb7Oi5ldFBsYnDZ2g3dBsBWC6sva4pfZRdg0dCCC4RUMOrC9nADnS6gXz 84w7hcV5BFV8rpLmvOvoHBlCWYhka241lGo1jjWEB1YBsaSje/ttnVPBkTKkfLQ4 dv0v1UDbsqFI3+2ZEmm6Ckp0ndF8wiNhFrWTWF5DzhZLBK7QR6QoJpmQduEw0DLE I2p/UdxekvZP4BziWhXZFsTlyhvt6USL5Lp+V6NM4NLGtOB8PzwS/7hNJIt1m7eB Gk0bPQ== -----END CERTIFICATE-----Generated at Tue Oct 21 02:25:36 2025 by rpki-client