$ rpki-client -vvf rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/D50024D6DFEC11ED9AB6E147C4F9AE02.roa File: D50024D6DFEC11ED9AB6E147C4F9AE02.roa (raw, json) Hash identifier: hn226uuDr+Sb6ocn2sePSMCB9luhKNckDxMjXkyTZ+s= Subject key identifier: 21:2F:9B:8F:A8:0D:B8:D4:DF:27:77:31:5E:47:FB:BB:B2:7D:C3:0E Certificate issuer: /CN=A915C62B/serialNumber=50F20EA9E975AE4C4C8667CB57F7BCF570215C96 Certificate serial: 24FA Authority key identifier: 50:F2:0E:A9:E9:75:AE:4C:4C:86:67:CB:57:F7:BC:F5:70:21:5C:96 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPIOqel1rkxMhmfLV_e89XAhXJY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/D50024D6DFEC11ED9AB6E147C4F9AE02.roa Signing time: Tue 16 Sep 2025 15:53:53 +0000 ROA not before: Tue 16 Sep 2025 15:53:53 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 9498 IP address blocks: 202.189.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.crl rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPIOqel1rkxMhmfLV_e89XAhXJY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9466 (0x24fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C62B, serialNumber=50F20EA9E975AE4C4C8667CB57F7BCF570215C96 Validity Not Before: Sep 16 15:53:53 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68c98810-5cd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:53:b0:7c:51:da:55:32:ea:c5:49:36:71:54: e8:aa:06:89:87:e2:98:46:dc:a9:7b:e4:86:71:cf: 3c:28:c5:dc:32:2c:16:e1:f6:4f:48:46:aa:a2:80: 58:10:d9:3d:01:23:a2:29:33:b6:a4:7c:09:72:a7: 24:00:db:54:2a:cb:83:4f:65:7c:fe:3b:cc:7c:8a: ff:31:2a:c7:ed:44:08:7c:4b:e0:10:49:1d:b5:35: f5:e6:bb:59:39:5e:4d:d8:f1:74:1a:14:e4:a6:23: 49:b3:3f:bd:13:9e:e0:08:8a:99:74:52:79:fa:2c: c9:fd:56:ee:6a:88:e2:53:3b:71:6d:90:cf:78:0d: 03:63:e6:a4:e2:1e:cd:07:d3:a8:12:20:48:59:eb: 3e:90:26:fa:b7:83:e9:98:30:26:d9:b2:6c:4a:8a: 2b:2b:f2:a6:dc:7f:20:2f:34:c7:22:77:13:bb:da: 76:3a:24:69:51:92:30:c4:c6:a7:09:5a:5f:8b:a1: a3:46:2d:c0:f8:d3:98:21:02:e5:07:a4:b6:d0:30: ca:43:1e:1f:46:7c:04:09:03:92:3e:7d:c5:d5:7b: 48:b1:6e:8f:92:09:90:85:58:72:70:f0:da:36:a0: 13:0c:60:56:cb:c0:b0:5e:4a:71:87:1f:18:b4:84: 54:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:2F:9B:8F:A8:0D:B8:D4:DF:27:77:31:5E:47:FB:BB:B2:7D:C3:0E X509v3 Authority Key Identifier: keyid:50:F2:0E:A9:E9:75:AE:4C:4C:86:67:CB:57:F7:BC:F5:70:21:5C:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPIOqel1rkxMhmfLV_e89XAhXJY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/D50024D6DFEC11ED9AB6E147C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.189.134.0/24 Signature Algorithm: sha256WithRSAEncryption 35:da:20:42:38:66:07:57:d6:6a:0f:12:1e:97:c4:59:53:0e: 7a:c0:fe:8e:b4:74:c9:94:fc:32:b2:9e:c9:e9:9d:8d:67:17: 93:4c:fa:45:7e:ef:3f:f3:6e:7a:28:31:15:13:c1:5f:88:5a: 23:de:3d:96:83:63:8f:67:6b:76:74:36:d5:62:c2:cf:23:e6: 19:fe:04:29:7b:04:a9:7b:9c:94:e0:d2:f3:0c:5c:d9:cc:4f: 84:ff:e9:c1:cf:35:4e:88:3d:8e:fd:1e:9a:53:ab:e7:00:c8: 8f:e4:38:56:fc:48:61:5a:35:22:61:f6:af:b5:85:46:8e:cb: 11:eb:e5:02:cf:06:71:b5:8d:b4:d6:8b:1e:9e:fb:fd:9c:49: 06:6e:5c:2b:92:41:3e:7c:02:40:32:2a:9e:f0:65:87:bb:b9: db:00:59:ab:fd:fb:07:60:cc:12:e8:b2:52:ef:ec:83:8f:76: 81:18:aa:b5:29:ba:5d:ae:e1:06:69:c0:0e:fa:cf:69:77:53: 19:ca:13:98:8e:63:8c:7e:df:83:f9:da:96:e3:04:f0:bb:9d: 43:12:49:95:fc:17:25:60:1e:ff:49:1d:ee:b8:39:2a:2f:75: 29:3c:a4:a4:9d:8c:08:d4:eb:f8:c7:7f:c3:e8:23:f4:32:33: a6:35:d5:0e -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICJPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUM2MkIxMTAvBgNVBAUTKDUwRjIwRUE5RTk3NUFFNEM0Qzg2NjdDQjU3RjdCQ0Y1 NzAyMTVDOTYwHhcNMjUwOTE2MTU1MzUzWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGM5ODgxMC01Y2QzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx1OwfFHaVTLqxUk2cVToqgaJh+KYRtype+SGcc88KMXcMiwW4fZPSEaqooBY ENk9ASOiKTO2pHwJcqckANtUKsuDT2V8/jvMfIr/MSrH7UQIfEvgEEkdtTX15rtZ OV5N2PF0GhTkpiNJsz+9E57gCIqZdFJ5+izJ/VbuaojiUztxbZDPeA0DY+ak4h7N B9OoEiBIWes+kCb6t4PpmDAm2bJsSoorK/Km3H8gLzTHIncTu9p2OiRpUZIwxMan CVpfi6GjRi3A+NOYIQLlB6S20DDKQx4fRnwECQOSPn3F1XtIsW6PkgmQhVhycPDa NqATDGBWy8CwXkpxhx8YtIRUfQIDAQABo4IClTCCApEwHQYDVR0OBBYEFCEvm4+o DbjU3yd3MV5H+7uyfcMOMB8GA1UdIwQYMBaAFFDyDqnpda5MTIZny1f3vPVwIVyW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzYyQi82NEEwNTE0NjYw MTIxMUU1QkU5MjUwNzBDNEY5QUUwMi9VUElPcWVsMXJreE1obWZMVl9lODlYQWhY SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VQSU9xZWwxcmt4TWhtZkxWX2U4OVhBaFhKWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUM2MkIvNjRBMDUxNDY2MDEyMTFFNUJFOTI1MDcwQzRGOUFFMDIvRDUwMDI0RDZE RkVDMTFFRDlBQjZFMTQ3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADKvYYwDQYJKoZIhvcNAQELBQADggEBADXaIEI4ZgdX1moP Eh6XxFlTDnrA/o60dMmU/DKynsnpnY1nF5NM+kV+7z/zbnooMRUTwV+IWiPePZaD Y49na3Z0NtViws8j5hn+BCl7BKl7nJTg0vMMXNnMT4T/6cHPNU6IPY79HppTq+cA yI/kOFb8SGFaNSJh9q+1hUaOyxHr5QLPBnG1jbTWix6e+/2cSQZuXCuSQT58AkAy Kp7wZYe7udsAWav9+wdgzBLoslLv7IOPdoEYqrUpul2u4QZpwA76z2l3UxnKE5iO Y4x+34P52pbjBPC7nUMSSZX8FyVgHv9JHe64OSovdSk8pKSdjAjU6/jHf8PoI/Qy M6Y11Q4= -----END CERTIFICATE-----Generated at Mon Oct 20 16:05:58 2025 by rpki-client