$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/1D5C6E6CA0FA11F0B026D133C4F9AE02.roa File: 1D5C6E6CA0FA11F0B026D133C4F9AE02.roa (raw, json) Hash identifier: C2XpgyfnYYZHApkuumNQPttPRBeBZUCBK2LL1AJJb7g= Subject key identifier: BB:6E:17:53:A5:C6:EA:CB:23:2E:8D:F6:AD:9B:EF:90:34:92:91:EA Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264 Certificate serial: 0EA5 Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/1D5C6E6CA0FA11F0B026D133C4F9AE02.roa Signing time: Sat 04 Oct 2025 08:15:12 +0000 ROA not before: Sat 04 Oct 2025 08:15:12 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 154198 IP address blocks: 14.192.144.0/24 maxlen: 24 14.192.147.0/24 maxlen: 24 14.192.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:56:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3749 (0xea5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264 Validity Not Before: Oct 4 08:15:12 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68e0d78f-0aa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f7:b7:31:b6:e1:7a:52:7f:62:6a:35:78:b3: a6:59:7f:79:9b:e8:f1:20:c4:92:49:42:cf:f3:1b: cf:76:20:eb:75:04:82:b5:b9:c2:e3:c1:92:b8:16: 10:74:10:94:d8:e3:2e:5c:f8:e9:6d:30:d3:dc:4a: 15:87:dd:58:6e:43:23:67:9a:65:88:19:5e:73:fc: 9e:13:4c:9a:01:1d:d8:c2:a1:3d:49:87:85:a8:90: 73:90:a0:94:0d:57:8c:66:fb:c4:97:71:bd:e8:bc: a8:e4:ed:17:8f:38:86:c9:07:2f:12:0c:3a:f8:c3: 8a:b7:ff:92:c6:06:78:3a:20:7b:03:5d:f5:15:cc: 8b:17:a0:1c:82:c6:42:31:78:ec:6f:29:60:c2:e0: da:21:64:3e:2b:17:1c:d2:88:1a:6b:92:dc:5b:98: 2c:e1:58:8e:49:c9:0a:fd:fe:ee:f3:b6:47:e4:d7: f1:16:38:67:bb:d4:68:b8:60:ae:0f:3f:44:ee:1f: 8e:6a:a1:c8:77:3b:d7:d6:de:02:98:73:60:00:3e: 53:bd:09:60:4c:b0:fc:ab:75:bc:16:fa:92:9d:6c: 0e:1b:da:85:fa:8b:ef:87:02:8b:ce:2f:96:8e:0c: 99:5c:45:49:c3:e9:86:99:38:67:fe:62:2c:19:8c: 12:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:6E:17:53:A5:C6:EA:CB:23:2E:8D:F6:AD:9B:EF:90:34:92:91:EA X509v3 Authority Key Identifier: keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/1D5C6E6CA0FA11F0B026D133C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 14.192.144.0/24 14.192.147.0-14.192.148.255 Signature Algorithm: sha256WithRSAEncryption aa:49:97:67:cd:0c:79:d2:20:25:f4:66:64:b0:1e:7b:ad:74: 33:b7:20:36:81:c1:46:8b:38:23:e5:56:c3:00:d2:dd:f5:5c: b5:fe:3c:2d:2f:be:af:b2:08:9d:36:a0:9d:3d:26:46:73:ce: a0:c3:e7:a8:d6:3a:1f:64:c3:46:aa:b4:d1:22:d8:d9:47:17: 97:66:25:c4:7f:07:0d:8f:b1:7c:93:3b:b3:bd:3d:d6:40:0c: 70:7d:25:53:18:bf:7b:49:5a:91:0c:fb:90:4d:9b:77:14:a8: 7e:77:d5:31:b5:d0:58:f4:26:ee:0f:c3:3b:94:58:50:c1:e3: 65:a0:90:0f:4e:15:59:3c:00:f2:a7:2d:16:aa:c6:d4:68:9b: 87:35:16:15:dc:b4:69:a8:28:aa:f6:f1:6e:be:9e:ca:71:65: 61:ed:f6:6f:44:f3:f5:5e:b9:91:b2:46:f2:c7:4e:02:f2:d2: 97:e2:20:23:ec:39:d5:75:07:6e:17:91:07:99:74:ad:9f:03: 0b:d6:77:a5:17:6f:d5:d6:b4:89:44:57:95:6f:d4:de:5d:63: 99:0b:f5:00:32:a3:ad:43:d6:be:5f:7a:02:5e:f1:63:a2:9a: cb:80:fb:be:6b:6b:0b:da:db:3a:71:cf:ab:bd:90:8b:ca:55: 94:cc:89:a5 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgICDqUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEwQ0QxMTAvBgNVBAUTKDM4MTkzNzIwODIxRTA3RDY5MThFM0E3OUZCRTA4MjND NjczMkUyNjQwHhcNMjUxMDA0MDgxNTEyWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGUwZDc4Zi0wYWEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy/e3MbbhelJ/Ymo1eLOmWX95m+jxIMSSSULP8xvPdiDrdQSCtbnC48GSuBYQ dBCU2OMuXPjpbTDT3EoVh91YbkMjZ5pliBlec/yeE0yaAR3YwqE9SYeFqJBzkKCU DVeMZvvEl3G96Lyo5O0XjziGyQcvEgw6+MOKt/+SxgZ4OiB7A131FcyLF6AcgsZC MXjsbylgwuDaIWQ+Kxcc0ogaa5LcW5gs4ViOSckK/f7u87ZH5NfxFjhnu9RouGCu Dz9E7h+OaqHIdzvX1t4CmHNgAD5TvQlgTLD8q3W8FvqSnWwOG9qF+ovvhwKLzi+W jgyZXEVJw+mGmThn/mIsGYwS5QIDAQABo4ICozCCAp8wHQYDVR0OBBYEFLtuF1Ol xurLIy6N9q2b75A0kpHqMB8GA1UdIwQYMBaAFDgZNyCCHgfWkY46efvggjxnMuJk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBDRC80NjcyM0YxRTg5 RUMxMUVBODFDMDRGMUVDNEY5QUUwMi9PQmszSUlJZUI5YVJqanA1LS1DQ1BHY3k0 bVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09CazNJSUllQjlhUmpqcDUtLUNDUEdjeTRtUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUEwQ0QvNDY3MjNGMUU4OUVDMTFFQTgxQzA0RjFFQzRGOUFFMDIvMUQ1QzZFNkNB MEZBMTFGMEIwMjZEMTMzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLQYIKwYBBQUHAQcBAf8E HjAcMBoEAgABMBQDBAAOwJAwDAMEAA7AkwMEAA7AlDANBgkqhkiG9w0BAQsFAAOC AQEAqkmXZ80MedIgJfRmZLAee610M7cgNoHBRos4I+VWwwDS3fVctf48LS++r7II nTagnT0mRnPOoMPnqNY6H2TDRqq00SLY2UcXl2YlxH8HDY+xfJM7s7091kAMcH0l Uxi/e0lakQz7kE2bdxSofnfVMbXQWPQm7g/DO5RYUMHjZaCQD04VWTwA8qctFqrG 1GibhzUWFdy0aagoqvbxbr6eynFlYe32b0Tz9V65kbJG8sdOAvLSl+IgI+w51XUH bheRB5l0rZ8DC9Z3pRdv1da0iURXlW/U3l1jmQv1ADKjrUPWvl96Al7xY6Kay4D7 vmtrC9rbOnHPq72Qi8pVlMyJpQ== -----END CERTIFICATE-----Generated at Mon Oct 20 12:24:16 2025 by rpki-client