$ rpki-client -vvf rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/FFE844FA9A4111F0A04F703EC4F9AE02.roa File: FFE844FA9A4111F0A04F703EC4F9AE02.roa (raw, json) Hash identifier: CVNQ8o5vgUTo0mQqecmD6qlSNzDJS1qhWASENFVDXu8= Subject key identifier: BE:55:7C:B6:EA:81:57:99:57:D2:F2:D1:AF:4E:AE:09:E2:26:20:9E Certificate issuer: /CN=A9159B6F/serialNumber=15839330A81ED8992073A23804C9F590538FB9D2 Certificate serial: 0135 Authority key identifier: 15:83:93:30:A8:1E:D8:99:20:73:A2:38:04:C9:F5:90:53:8F:B9:D2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYOTMKge2Jkgc6I4BMn1kFOPudI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/FFE844FA9A4111F0A04F703EC4F9AE02.roa Signing time: Thu 25 Sep 2025 19:01:10 +0000 ROA not before: Thu 25 Sep 2025 19:01:10 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 150180 IP address blocks: 157.20.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/FYOTMKge2Jkgc6I4BMn1kFOPudI.crl rsync://rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/FYOTMKge2Jkgc6I4BMn1kFOPudI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYOTMKge2Jkgc6I4BMn1kFOPudI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:18:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 309 (0x135) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159B6F, serialNumber=15839330A81ED8992073A23804C9F590538FB9D2 Validity Not Before: Sep 25 19:01:10 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=68d59176-6f0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a4:06:9d:4d:89:41:7b:57:ea:18:12:a1:00: 67:c7:23:d2:56:a9:9f:ce:18:5a:67:45:a6:ff:06: 98:28:da:b3:2c:00:e3:8f:aa:89:a1:a1:6b:38:28: c6:54:67:f1:6f:5b:98:12:c9:81:a2:9d:24:f4:22: 83:49:01:5d:99:6d:61:54:9c:2f:a2:5b:35:03:43: 96:db:e3:b1:10:39:69:cf:33:f0:16:1f:c0:6e:55: be:2a:3d:48:18:d3:55:87:11:06:26:1a:d0:42:c1: ed:87:62:b6:c9:79:67:de:d4:b7:cf:13:0b:82:20: 02:ed:7d:e7:e0:d3:80:8b:61:e9:78:20:6e:33:4e: fb:75:64:2d:db:32:c0:02:98:03:dc:7c:08:ff:dd: f2:43:9a:be:01:1a:35:07:36:0e:97:82:01:29:34: 74:4c:77:c0:ce:27:8e:c3:55:cf:1b:e7:35:40:4f: 99:5d:5e:f5:a1:b2:31:57:d5:b9:ad:a5:90:2c:c8: 44:3a:a1:3e:f4:a8:ad:c2:9d:f8:3a:e8:e1:a2:7c: c7:ab:79:ba:e9:1b:f4:73:73:e9:99:24:91:40:38: 04:6f:89:98:93:54:25:92:2f:56:3f:52:0c:0e:63: a6:5a:8a:1a:81:e0:1f:1a:6a:67:53:64:1f:22:e4: 6c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:55:7C:B6:EA:81:57:99:57:D2:F2:D1:AF:4E:AE:09:E2:26:20:9E X509v3 Authority Key Identifier: keyid:15:83:93:30:A8:1E:D8:99:20:73:A2:38:04:C9:F5:90:53:8F:B9:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/FYOTMKge2Jkgc6I4BMn1kFOPudI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYOTMKge2Jkgc6I4BMn1kFOPudI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159B6F/2AD5F6D8D09C11EE80AB8D7EC4F9AE02/FFE844FA9A4111F0A04F703EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.20.74.0/24 Signature Algorithm: sha256WithRSAEncryption 86:1a:2a:af:5a:67:a2:35:0e:44:86:45:ae:3c:5a:65:c8:dd: 09:a7:5b:4e:04:cb:38:38:d3:96:13:f4:94:7f:6b:88:77:f9: c4:3c:a3:7a:8a:f8:25:87:7d:a7:9f:9b:75:0a:6e:75:5c:4e: a6:7f:93:f2:e8:b4:b3:5a:24:ac:db:bd:31:8d:1b:57:01:7f: cd:e6:e9:c3:2d:8a:bd:30:61:09:3b:23:d1:46:07:4d:a3:91: 8c:f3:9e:cd:90:61:96:d6:7b:78:ca:66:60:7a:32:a4:7a:63: 12:ce:04:40:13:1b:2f:c1:be:3c:5a:d5:ae:ae:50:b3:b7:72: 27:88:f6:d5:33:05:43:cc:aa:4d:02:93:94:e3:2c:97:b6:d7: 8c:71:ea:56:61:7c:0b:ed:8f:e1:27:78:7b:fc:09:5a:0a:b8: 5b:91:75:03:40:f3:14:b2:00:c1:da:b3:b6:f3:ca:e4:58:0f: dc:2c:aa:ea:df:ee:40:15:28:18:4c:d4:37:5e:b9:19:0a:ca: f1:22:75:2f:4c:b2:18:b2:0b:d5:45:38:6c:0a:5f:b4:d3:2d: 9d:bb:31:fe:95:d2:54:f1:79:b5:51:dd:43:dc:54:eb:53:35: 7d:8a:90:bb:4b:61:57:db:24:ce:62:1c:2a:28:2c:98:ed:93: 0f:a9:f9:18 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICATUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTlCNkYxMTAvBgNVBAUTKDE1ODM5MzMwQTgxRUQ4OTkyMDczQTIzODA0QzlGNTkw NTM4RkI5RDIwHhcNMjUwOTI1MTkwMTEwWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OGQ1OTE3Ni02ZjBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnKQGnU2JQXtX6hgSoQBnxyPSVqmfzhhaZ0Wm/waYKNqzLADjj6qJoaFrOCjG VGfxb1uYEsmBop0k9CKDSQFdmW1hVJwvols1A0OW2+OxEDlpzzPwFh/AblW+Kj1I GNNVhxEGJhrQQsHth2K2yXln3tS3zxMLgiAC7X3n4NOAi2HpeCBuM077dWQt2zLA ApgD3HwI/93yQ5q+ARo1BzYOl4IBKTR0THfAzieOw1XPG+c1QE+ZXV71obIxV9W5 raWQLMhEOqE+9Kitwp34OujhonzHq3m66Rv0c3PpmSSRQDgEb4mYk1Qlki9WP1IM DmOmWooageAfGmpnU2QfIuRsWQIDAQABo4IClTCCApEwHQYDVR0OBBYEFL5VfLbq gVeZV9Ly0a9OrgniJiCeMB8GA1UdIwQYMBaAFBWDkzCoHtiZIHOiOATJ9ZBTj7nS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OUI2Ri8yQUQ1RjZEOEQw OUMxMUVFODBBQjhEN0VDNEY5QUUwMi9GWU9UTUtnZTJKa2djNkk0Qk1uMWtGT1B1 ZEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0ZZT1RNS2dlMkprZ2M2STRCTW4xa0ZPUHVkSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTlCNkYvMkFENUY2RDhEMDlDMTFFRTgwQUI4RDdFQzRGOUFFMDIvRkZFODQ0RkE5 QTQxMTFGMEEwNEY3MDNFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBACdFEowDQYJKoZIhvcNAQELBQADggEBAIYaKq9aZ6I1DkSG Ra48WmXI3QmnW04Eyzg405YT9JR/a4h3+cQ8o3qK+CWHfaefm3UKbnVcTqZ/k/Lo tLNaJKzbvTGNG1cBf83m6cMtir0wYQk7I9FGB02jkYzzns2QYZbWe3jKZmB6MqR6 YxLOBEATGy/Bvjxa1a6uULO3cieI9tUzBUPMqk0Ck5TjLJe214xx6lZhfAvtj+En eHv8CVoKuFuRdQNA8xSyAMHas7bzyuRYD9wsqurf7kAVKBhM1DdeuRkKyvEidS9M shiyC9VFOGwKX7TTLZ27Mf6V0lTxebVR3UPcVOtTNX2KkLtLYVfbJM5iHCooLJjt kw+p+Rg= -----END CERTIFICATE-----Generated at Mon Oct 20 22:36:10 2025 by rpki-client