$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/7316D720AB4011F088F0CE30C4F9AE02.roa File: 7316D720AB4011F088F0CE30C4F9AE02.roa (raw, json) Hash identifier: j1D2LXrywK4KBLgXfVHzrKrqz//GdKARR+TTpuFTLmk= Subject key identifier: 9A:6B:8D:A8:22:9E:1E:51:3C:77:5C:7C:FD:CD:EF:D4:D6:B0:BC:92 Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264 Certificate serial: 0EC1 Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/7316D720AB4011F088F0CE30C4F9AE02.roa Signing time: Fri 17 Oct 2025 10:03:55 +0000 ROA not before: Fri 17 Oct 2025 10:03:55 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 208185 IP address blocks: 14.192.131.0/24 maxlen: 24 14.192.132.0/24 maxlen: 24 14.192.133.0/24 maxlen: 24 14.192.134.0/24 maxlen: 24 14.192.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:56:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3777 (0xec1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264 Validity Not Before: Oct 17 10:03:55 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68f2148a-cf2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:dd:71:f9:54:c4:32:6b:dd:f3:bf:2a:b8:a2: f5:20:34:e3:b9:bd:26:90:07:c2:41:d4:84:19:68: cc:59:fd:69:a9:99:e3:c9:34:9a:99:e8:d1:d3:3c: 7a:60:68:ee:d2:17:c4:cd:e8:e9:b4:d2:ac:1c:2c: ce:44:ec:c3:54:d0:0f:0f:8c:4d:c1:e5:99:34:8f: 32:8d:72:c4:9f:67:12:c2:34:2c:d0:2c:c7:d1:ec: e0:05:a8:47:e3:8a:a5:40:df:2a:d7:d6:12:91:80: 33:e2:d6:f0:66:e3:3e:9c:c1:46:d3:67:29:7d:b0: 23:03:92:59:0f:34:6d:76:70:8c:f5:ab:39:13:d6: 13:91:0c:8c:d8:c6:01:a0:c1:f7:41:ea:50:1b:e7: 8c:b6:ca:d8:da:06:21:d4:cf:9e:ef:59:e8:de:e9: db:13:5d:76:3c:33:8a:68:bb:79:da:f7:75:09:30: d3:c9:f0:b3:e2:af:62:e4:c2:35:59:ca:2c:65:12: 23:bb:c6:ae:2b:16:61:90:b1:3e:22:0f:c7:5f:92: 22:b4:8b:e9:94:54:09:10:2f:59:ca:0f:33:4d:01: ef:ed:54:69:43:0b:20:f1:c8:19:34:36:89:96:57: f1:1f:8f:5c:2b:fc:5f:a6:98:9c:45:e1:5d:6b:a0: e8:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:6B:8D:A8:22:9E:1E:51:3C:77:5C:7C:FD:CD:EF:D4:D6:B0:BC:92 X509v3 Authority Key Identifier: keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/7316D720AB4011F088F0CE30C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 14.192.131.0-14.192.135.255 Signature Algorithm: sha256WithRSAEncryption ad:f5:ef:99:64:22:c2:82:f5:63:c2:4a:94:2e:5c:df:ec:98: 64:28:a1:bf:ed:84:5e:f0:31:57:bc:f8:44:eb:63:02:32:98: 66:bb:71:32:8e:38:75:4d:f2:0d:29:cf:fe:fc:8f:38:6e:f9: 74:91:3c:10:68:f1:a8:c4:2b:15:94:9f:a0:d8:09:9a:49:1d: c4:64:fc:d5:fb:74:cf:23:c8:c1:bf:9b:0c:1d:55:6c:13:eb: 5d:57:16:e1:f2:3f:29:c8:da:3c:95:03:46:5f:db:d6:55:b3: c0:12:00:ff:b7:f7:34:2a:06:3a:c2:73:a2:1f:c5:76:11:9a: d2:11:0b:13:06:24:27:ab:0b:12:e7:ff:4a:fc:48:e4:1b:68: ad:46:98:1f:3e:85:ad:e4:2a:65:9a:02:9a:5b:c7:ee:d4:00: 88:2d:af:a1:20:09:a5:7b:00:f8:d3:0d:ca:4c:a4:8b:38:57: 4b:ad:a3:fa:9a:eb:18:af:a6:95:b5:b1:87:35:0e:8a:a8:10: bc:8f:cc:3a:59:5f:74:22:e7:87:10:60:57:77:fa:83:9d:2c: 65:7e:50:f1:d9:66:ae:dc:6b:0e:71:e2:25:5b:66:05:ad:8c: 83:32:b8:de:d8:23:ba:a8:56:1e:46:a4:5f:b1:d5:b2:5b:a9: 89:9f:00:6a -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgICDsEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEwQ0QxMTAvBgNVBAUTKDM4MTkzNzIwODIxRTA3RDY5MThFM0E3OUZCRTA4MjND NjczMkUyNjQwHhcNMjUxMDE3MTAwMzU1WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGYyMTQ4YS1jZjJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7N1x+VTEMmvd878quKL1IDTjub0mkAfCQdSEGWjMWf1pqZnjyTSamejR0zx6 YGju0hfEzejptNKsHCzOROzDVNAPD4xNweWZNI8yjXLEn2cSwjQs0CzH0ezgBahH 44qlQN8q19YSkYAz4tbwZuM+nMFG02cpfbAjA5JZDzRtdnCM9as5E9YTkQyM2MYB oMH3QepQG+eMtsrY2gYh1M+e71no3unbE112PDOKaLt52vd1CTDTyfCz4q9i5MI1 WcosZRIju8auKxZhkLE+Ig/HX5IitIvplFQJEC9Zyg8zTQHv7VRpQwsg8cgZNDaJ llfxH49cK/xfppicReFda6DoZwIDAQABo4ICnTCCApkwHQYDVR0OBBYEFJprjagi nh5RPHdcfP3N79TWsLySMB8GA1UdIwQYMBaAFDgZNyCCHgfWkY46efvggjxnMuJk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBDRC80NjcyM0YxRTg5 RUMxMUVBODFDMDRGMUVDNEY5QUUwMi9PQmszSUlJZUI5YVJqanA1LS1DQ1BHY3k0 bVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09CazNJSUllQjlhUmpqcDUtLUNDUEdjeTRtUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUEwQ0QvNDY3MjNGMUU4OUVDMTFFQTgxQzA0RjFFQzRGOUFFMDIvNzMxNkQ3MjBB QjQwMTFGMDg4RjBDRTMwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E GDAWMBQEAgABMA4wDAMEAA7AgwMEAw7AgDANBgkqhkiG9w0BAQsFAAOCAQEArfXv mWQiwoL1Y8JKlC5c3+yYZCihv+2EXvAxV7z4ROtjAjKYZrtxMo44dU3yDSnP/vyP OG75dJE8EGjxqMQrFZSfoNgJmkkdxGT81ft0zyPIwb+bDB1VbBPrXVcW4fI/Kcja PJUDRl/b1lWzwBIA/7f3NCoGOsJzoh/FdhGa0hELEwYkJ6sLEuf/SvxI5BtorUaY Hz6FreQqZZoCmlvH7tQAiC2voSAJpXsA+NMNykykizhXS62j+prrGK+mlbWxhzUO iqgQvI/MOllfdCLnhxBgV3f6g50sZX5Q8dlmrtxrDnHiJVtmBa2MgzK43tgjuqhW HkakX7HVslupiZ8Aag== -----END CERTIFICATE-----Generated at Mon Oct 20 19:55:58 2025 by rpki-client