$ rpki-client -vvf rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/1A2298A2D23811EABDECA85FC4F9AE02.roa File: 1A2298A2D23811EABDECA85FC4F9AE02.roa (raw, json) Hash identifier: 1/+DL1PoqH8yBHyNvZhkg16rUz6sOO89hqHUzOVSkA4= Subject key identifier: 95:E3:AB:0A:49:74:5D:E5:DC:76:F1:6C:15:2A:B3:3E:57:D6:FB:75 Certificate issuer: /CN=A915C62B/serialNumber=50F20EA9E975AE4C4C8667CB57F7BCF570215C96 Certificate serial: 24FB Authority key identifier: 50:F2:0E:A9:E9:75:AE:4C:4C:86:67:CB:57:F7:BC:F5:70:21:5C:96 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPIOqel1rkxMhmfLV_e89XAhXJY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/1A2298A2D23811EABDECA85FC4F9AE02.roa Signing time: Tue 16 Sep 2025 15:53:53 +0000 ROA not before: Tue 16 Sep 2025 15:53:53 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 9911 IP address blocks: 203.208.128.0/24 maxlen: 24 203.208.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.crl rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPIOqel1rkxMhmfLV_e89XAhXJY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 16:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9467 (0x24fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C62B, serialNumber=50F20EA9E975AE4C4C8667CB57F7BCF570215C96 Validity Not Before: Sep 16 15:53:53 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68c98811-e575 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8a:09:66:d3:67:d7:55:3f:53:f3:ad:d2:c7: c8:09:ee:f9:05:6a:36:2a:b1:b1:24:e2:03:cf:94: 11:fa:4f:6a:24:22:86:e0:f6:17:fd:b9:a7:bd:47: f1:12:6e:40:26:c0:b4:4d:65:7c:04:a6:49:77:68: b6:49:08:c6:f7:ea:7a:31:eb:39:7a:38:39:15:85: 36:7e:28:9b:ad:4b:6d:33:80:62:bb:ee:18:0f:a5: c8:a3:d1:13:e6:a3:cb:a3:35:72:3c:22:ab:72:18: 2a:a0:5e:0a:7d:d1:cb:8b:9e:07:1d:45:6c:fa:0f: 74:49:46:0f:09:70:ca:61:80:7a:ad:9e:30:40:ab: a1:19:8a:09:f4:d6:9a:ab:11:5d:28:ff:b6:37:2f: dc:47:ae:c4:52:e0:ea:36:01:93:dd:49:92:5b:7b: 8d:aa:54:73:50:d4:ac:21:69:72:de:6c:f1:17:f8: 3f:f0:f8:a7:e9:63:8b:81:03:db:eb:af:92:e3:bd: 79:c8:dc:34:98:7d:d6:66:cb:17:87:0d:f3:77:c9: de:6f:42:54:76:30:d2:1b:97:e1:d5:1e:e0:cb:51: 19:05:53:38:f5:1c:bb:39:0d:d8:d7:73:fa:6d:b3: ca:22:cd:be:04:b3:bc:83:47:a5:b1:9d:11:c9:a4: 4f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:E3:AB:0A:49:74:5D:E5:DC:76:F1:6C:15:2A:B3:3E:57:D6:FB:75 X509v3 Authority Key Identifier: keyid:50:F2:0E:A9:E9:75:AE:4C:4C:86:67:CB:57:F7:BC:F5:70:21:5C:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPIOqel1rkxMhmfLV_e89XAhXJY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/1A2298A2D23811EABDECA85FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.208.128.0/24 203.208.144.0/24 Signature Algorithm: sha256WithRSAEncryption 44:82:33:28:40:ff:53:fb:47:fb:45:96:48:d6:f6:e5:a7:fe: 8f:0b:00:c5:27:05:e9:de:b3:fb:f0:b5:3f:70:04:fe:20:3d: 37:d6:e1:bf:69:eb:c5:ed:b0:52:d8:d8:7f:74:d0:0e:46:d7: 1c:50:0a:42:58:3d:f3:2f:82:af:5b:b4:a0:1c:85:99:05:3d: da:e6:5c:84:56:97:56:6c:ad:96:6a:0b:62:f5:21:a0:d3:b1: 09:f3:4b:1c:e3:42:6d:96:c9:8b:b5:97:55:9e:98:21:6c:e5: 3d:ca:6f:1a:e1:02:2d:90:83:40:9b:14:65:bd:bc:e9:71:c1: e9:10:1f:40:72:17:2a:81:5a:03:52:6e:a4:bb:43:4e:83:e4: 98:30:c2:e2:c9:cd:19:3e:33:76:d0:34:08:6a:4e:32:b4:d3: 48:b1:ed:98:5d:e5:ac:68:95:6b:13:b9:9c:b4:09:d6:0d:d5: bc:00:c8:68:7d:74:06:6b:80:6f:b8:63:7b:0f:0a:0d:5c:e0: 1d:8b:6a:1f:70:50:a7:81:db:ca:60:8e:70:58:ed:21:23:33: 30:3a:35:dc:d6:69:b6:43:8d:08:43:fd:1f:2c:5c:0b:15:57: 4b:e7:7d:b7:2c:06:4b:f2:68:e1:cd:d3:e3:dd:39:7d:c7:5c: 49:6e:d8:9a -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICJPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUM2MkIxMTAvBgNVBAUTKDUwRjIwRUE5RTk3NUFFNEM0Qzg2NjdDQjU3RjdCQ0Y1 NzAyMTVDOTYwHhcNMjUwOTE2MTU1MzUzWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGM5ODgxMS1lNTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtYoJZtNn11U/U/Ot0sfICe75BWo2KrGxJOIDz5QR+k9qJCKG4PYX/bmnvUfx Em5AJsC0TWV8BKZJd2i2SQjG9+p6Mes5ejg5FYU2fiibrUttM4Biu+4YD6XIo9ET 5qPLozVyPCKrchgqoF4KfdHLi54HHUVs+g90SUYPCXDKYYB6rZ4wQKuhGYoJ9Naa qxFdKP+2Ny/cR67EUuDqNgGT3UmSW3uNqlRzUNSsIWly3mzxF/g/8Pin6WOLgQPb 66+S4715yNw0mH3WZssXhw3zd8neb0JUdjDSG5fh1R7gy1EZBVM49Ry7OQ3Y13P6 bbPKIs2+BLO8g0elsZ0RyaRPWQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFJXjqwpJ dF3l3HbxbBUqsz5X1vt1MB8GA1UdIwQYMBaAFFDyDqnpda5MTIZny1f3vPVwIVyW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzYyQi82NEEwNTE0NjYw MTIxMUU1QkU5MjUwNzBDNEY5QUUwMi9VUElPcWVsMXJreE1obWZMVl9lODlYQWhY SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VQSU9xZWwxcmt4TWhtZkxWX2U4OVhBaFhKWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUM2MkIvNjRBMDUxNDY2MDEyMTFFNUJFOTI1MDcwQzRGOUFFMDIvMUEyMjk4QTJE MjM4MTFFQUJERUNBODVGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBADL0IADBADL0JAwDQYJKoZIhvcNAQELBQADggEBAESCMyhA /1P7R/tFlkjW9uWn/o8LAMUnBenes/vwtT9wBP4gPTfW4b9p68XtsFLY2H900A5G 1xxQCkJYPfMvgq9btKAchZkFPdrmXIRWl1ZsrZZqC2L1IaDTsQnzSxzjQm2WyYu1 l1WemCFs5T3KbxrhAi2Qg0CbFGW9vOlxwekQH0ByFyqBWgNSbqS7Q06D5JgwwuLJ zRk+M3bQNAhqTjK000ix7Zhd5axolWsTuZy0CdYN1bwAyGh9dAZrgG+4Y3sPCg1c 4B2Lah9wUKeB28pgjnBY7SEjMzA6NdzWabZDjQhD/R8sXAsVV0vnfbcsBkvyaOHN 0+PdOX3HXElu2Jo= -----END CERTIFICATE-----Generated at Mon Oct 20 19:35:19 2025 by rpki-client