$ rpki-client -vvf rpki.apnic.net/member_repository/A915B581/BB8FDFFE1D9311E2A9638AF708B02CD2/7A38D6B854F311E7AC64ED3AC4F9AE02.roa File: 7A38D6B854F311E7AC64ED3AC4F9AE02.roa (raw, json) Hash identifier: 87V6SXUvvAIKhZA2XnoavxG9s7I/eBbv0ebUc09ej5A= Subject key identifier: 51:4A:CD:39:72:9F:34:C8:EB:69:72:9F:DF:31:2A:1B:04:A1:12:34 Certificate issuer: /CN=A915B581/serialNumber=BA9D251A4A9FACC4E4A66387750A28662A310057 Certificate serial: 34E8 Authority key identifier: BA:9D:25:1A:4A:9F:AC:C4:E4:A6:63:87:75:0A:28:66:2A:31:00:57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/up0lGkqfrMTkpmOHdQooZioxAFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B581/BB8FDFFE1D9311E2A9638AF708B02CD2/7A38D6B854F311E7AC64ED3AC4F9AE02.roa Signing time: Thu 18 Sep 2025 14:50:53 +0000 ROA not before: Thu 18 Sep 2025 14:50:53 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 38241 IP address blocks: 202.137.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B581/BB8FDFFE1D9311E2A9638AF708B02CD2/up0lGkqfrMTkpmOHdQooZioxAFc.crl rsync://rpki.apnic.net/member_repository/A915B581/BB8FDFFE1D9311E2A9638AF708B02CD2/up0lGkqfrMTkpmOHdQooZioxAFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/up0lGkqfrMTkpmOHdQooZioxAFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 14:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13544 (0x34e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B581, serialNumber=BA9D251A4A9FACC4E4A66387750A28662A310057 Validity Not Before: Sep 18 14:50:53 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68cc1c4d-7baa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b7:ed:74:f8:ba:08:80:7e:22:19:b0:32:c6: 42:02:99:37:19:2e:95:00:d6:b3:d6:6a:0b:90:f0: d1:ac:b9:9a:9d:78:6c:e7:93:55:95:7a:51:e8:31: a5:0b:b3:f3:71:47:c1:f7:f3:cd:c6:de:a8:68:a3: be:f9:e4:16:d8:50:97:ce:9f:95:ac:a7:43:49:5d: 65:fd:bf:95:7e:e7:d3:a8:17:8d:62:c4:d6:89:42: 57:97:0f:05:3c:51:f8:3e:fa:00:64:8e:37:66:c8: 10:d6:d3:7d:b5:55:96:28:9b:aa:11:51:d6:88:4f: f8:8d:ec:2c:82:ba:6d:4f:a7:fb:d7:18:11:b6:bd: 99:f9:6d:98:c7:27:68:8f:8e:1d:bc:c0:e2:2e:12: 93:5b:23:77:71:40:af:61:e8:a1:b6:f0:ba:09:62: a0:e5:6d:bb:44:5d:bd:e7:12:49:54:88:29:83:dc: 33:91:87:66:a0:4d:13:ed:62:13:e5:e2:4b:6d:3c: 63:19:f3:e6:69:fe:f4:d6:70:06:a8:ce:aa:1d:40: 83:31:04:d2:63:a0:25:b9:2b:6a:85:f5:92:c8:fa: ab:66:f4:75:bb:34:7b:1d:89:01:17:46:6d:0d:1c: 8d:ba:43:bc:23:45:a8:19:d0:b1:3f:3f:9c:12:95: 22:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:4A:CD:39:72:9F:34:C8:EB:69:72:9F:DF:31:2A:1B:04:A1:12:34 X509v3 Authority Key Identifier: keyid:BA:9D:25:1A:4A:9F:AC:C4:E4:A6:63:87:75:0A:28:66:2A:31:00:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B581/BB8FDFFE1D9311E2A9638AF708B02CD2/up0lGkqfrMTkpmOHdQooZioxAFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/up0lGkqfrMTkpmOHdQooZioxAFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B581/BB8FDFFE1D9311E2A9638AF708B02CD2/7A38D6B854F311E7AC64ED3AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.137.248.0/22 Signature Algorithm: sha256WithRSAEncryption 7e:54:4b:bb:bd:d1:12:04:3a:47:c0:3e:e3:c3:66:9b:77:36: 9c:c3:2e:a7:22:dc:66:c3:63:73:59:db:e5:e3:8e:92:6e:0a: bc:d5:78:69:b3:25:53:5b:31:2b:55:50:52:97:36:f2:95:62: e6:70:55:6d:b4:8f:4e:7c:fa:98:ab:56:7d:af:3f:dd:fe:e4: ba:d2:99:14:da:5f:3f:7b:df:4e:52:d6:b3:79:e9:df:54:86: 45:40:98:8a:89:e1:1e:78:ea:15:07:12:e4:e1:10:e2:fe:a2: c7:b7:73:9e:57:b7:01:42:af:07:23:e8:f3:e9:a5:4f:fc:9e: c7:21:b2:6e:5f:de:53:6f:96:59:cb:7d:9d:a4:9a:c9:95:47: 40:4a:75:7e:df:de:99:9a:b9:e0:98:34:0a:48:8a:fe:af:12: 1c:9f:66:d1:8b:2c:85:9a:36:10:e7:1d:11:33:6f:d7:c3:49: e5:49:f6:49:69:0a:22:3a:7a:21:6c:9e:30:70:c6:cc:be:64: 62:6d:82:ec:dd:b1:4d:86:fc:76:0e:85:c2:c8:82:56:fa:43: ea:6f:8d:04:e1:db:d5:8b:9d:37:91:ab:4d:c1:7a:86:af:df: 0b:06:42:79:b4:db:3b:fd:b3:a8:e9:1d:8a:75:87:31:fd:3e: 97:fa:8d:50 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI1ODExMTAvBgNVBAUTKEJBOUQyNTFBNEE5RkFDQzRFNEE2NjM4Nzc1MEEyODY2 MkEzMTAwNTcwHhcNMjUwOTE4MTQ1MDUzWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGNjMWM0ZC03YmFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA07ftdPi6CIB+IhmwMsZCApk3GS6VANaz1moLkPDRrLmanXhs55NVlXpR6DGl C7PzcUfB9/PNxt6oaKO++eQW2FCXzp+VrKdDSV1l/b+VfufTqBeNYsTWiUJXlw8F PFH4PvoAZI43ZsgQ1tN9tVWWKJuqEVHWiE/4jewsgrptT6f71xgRtr2Z+W2Yxydo j44dvMDiLhKTWyN3cUCvYeihtvC6CWKg5W27RF295xJJVIgpg9wzkYdmoE0T7WIT 5eJLbTxjGfPmaf701nAGqM6qHUCDMQTSY6AluStqhfWSyPqrZvR1uzR7HYkBF0Zt DRyNukO8I0WoGdCxPz+cEpUicwIDAQABo4IClTCCApEwHQYDVR0OBBYEFFFKzTly nzTI62lyn98xKhsEoRI0MB8GA1UdIwQYMBaAFLqdJRpKn6zE5KZjh3UKKGYqMQBX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjU4MS9CQjhGREZGRTFE OTMxMUUyQTk2MzhBRjcwOEIwMkNEMi91cDBsR2txZnJNVGtwbU9IZFFvb1ppb3hB RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VwMGxHa3Fmck1Ua3BtT0hkUW9vWmlveEFGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUI1ODEvQkI4RkRGRkUxRDkzMTFFMkE5NjM4QUY3MDhCMDJDRDIvN0EzOEQ2Qjg1 NEYzMTFFN0FDNjRFRDNBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBALKifgwDQYJKoZIhvcNAQELBQADggEBAH5US7u90RIEOkfA PuPDZpt3NpzDLqci3GbDY3NZ2+XjjpJuCrzVeGmzJVNbMStVUFKXNvKVYuZwVW20 j058+pirVn2vP93+5LrSmRTaXz97305S1rN56d9UhkVAmIqJ4R546hUHEuThEOL+ ose3c55XtwFCrwcj6PPppU/8nschsm5f3lNvllnLfZ2kmsmVR0BKdX7f3pmaueCY NApIiv6vEhyfZtGLLIWaNhDnHREzb9fDSeVJ9klpCiI6eiFsnjBwxsy+ZGJtguzd sU2G/HYOhcLIglb6Q+pvjQTh29WLnTeRq03Beoav3wsGQnm02zv9s6jpHYp1hzH9 Ppf6jVA= -----END CERTIFICATE-----Generated at Tue Oct 21 00:08:36 2025 by rpki-client