$ rpki-client -vvf rpki.apnic.net/member_repository/A9163358/7D40647EC1CA11EFA3F24A87C4F9AE02/2B340AEAC1CB11EF9CFC9509C4F9AE02.roa File: 2B340AEAC1CB11EF9CFC9509C4F9AE02.roa (raw, json) Hash identifier: MjWP0i0EPPeNLqvPp5oESKqz+VT7c3eRjXf0R5VUXOM= Subject key identifier: 64:7C:E8:6B:DA:3E:EC:67:C6:E4:62:3D:70:23:9B:51:A1:C4:D9:86 Certificate issuer: /CN=A9163358/serialNumber=7FBFCF196BFD2EF070625BEEC426E860688AC2F1 Certificate serial: 9F Authority key identifier: 7F:BF:CF:19:6B:FD:2E:F0:70:62:5B:EE:C4:26:E8:60:68:8A:C2:F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f7_PGWv9LvBwYlvuxCboYGiKwvE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163358/7D40647EC1CA11EFA3F24A87C4F9AE02/2B340AEAC1CB11EF9CFC9509C4F9AE02.roa Signing time: Wed 01 Oct 2025 07:35:17 +0000 ROA not before: Wed 01 Oct 2025 07:35:17 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 17541 IP address blocks: 202.44.56.0/24 maxlen: 24 202.44.57.0/24 maxlen: 24 202.44.58.0/24 maxlen: 24 202.44.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163358/7D40647EC1CA11EFA3F24A87C4F9AE02/f7_PGWv9LvBwYlvuxCboYGiKwvE.crl rsync://rpki.apnic.net/member_repository/A9163358/7D40647EC1CA11EFA3F24A87C4F9AE02/f7_PGWv9LvBwYlvuxCboYGiKwvE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f7_PGWv9LvBwYlvuxCboYGiKwvE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:35:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 159 (0x9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163358, serialNumber=7FBFCF196BFD2EF070625BEEC426E860688AC2F1 Validity Not Before: Oct 1 07:35:17 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68dcd9b5-8225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:cd:74:bd:06:65:b6:d5:fc:04:93:aa:83:c4: 66:98:68:10:5a:7c:ec:81:0a:e5:7a:1b:8f:8d:35: 81:d1:73:3f:ac:21:b9:b7:48:df:e6:4a:76:a0:01: 72:2e:10:0f:f9:f2:fa:b6:ed:b2:05:ab:11:1e:94: 87:35:c0:ce:d3:07:8c:39:7d:6a:c9:d2:3b:32:55: 5b:73:b3:c1:db:56:58:c8:5f:60:25:66:77:93:50: 00:6c:5a:aa:b1:c6:2f:04:6d:1d:ff:bb:9a:66:15: 12:46:a1:43:46:08:2f:4f:a3:5c:41:0e:f9:49:98: dd:e6:a8:f7:3c:cd:ff:46:08:77:6b:dd:68:4f:b5: fa:9d:da:e1:76:03:e9:a1:12:3a:e9:2d:c0:83:ef: 85:d3:09:20:70:19:f6:84:67:89:00:77:c5:28:a3: 7e:c9:0a:b7:5b:fa:75:fa:07:e3:b0:50:ff:e7:8f: b5:a8:c5:f0:7c:ab:05:37:66:72:de:88:24:dc:55: 94:5f:6c:07:14:37:b6:3e:22:ab:91:63:92:85:32: b9:88:69:bf:40:d1:b3:ee:fa:54:8f:0e:23:16:db: 89:67:44:38:bf:0a:5a:11:59:84:33:8c:fa:d6:35: 07:90:11:89:79:72:ee:ab:10:f8:32:80:8d:62:3c: b1:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:7C:E8:6B:DA:3E:EC:67:C6:E4:62:3D:70:23:9B:51:A1:C4:D9:86 X509v3 Authority Key Identifier: keyid:7F:BF:CF:19:6B:FD:2E:F0:70:62:5B:EE:C4:26:E8:60:68:8A:C2:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163358/7D40647EC1CA11EFA3F24A87C4F9AE02/f7_PGWv9LvBwYlvuxCboYGiKwvE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f7_PGWv9LvBwYlvuxCboYGiKwvE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163358/7D40647EC1CA11EFA3F24A87C4F9AE02/2B340AEAC1CB11EF9CFC9509C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.44.56.0/22 Signature Algorithm: sha256WithRSAEncryption 37:62:a8:aa:ea:84:cd:e1:43:2d:df:13:78:ad:49:5f:98:65: ce:db:a6:ba:b2:cd:1a:ec:bc:21:41:1f:1c:11:c5:d7:1d:ba: 54:a7:a1:1c:d0:91:b7:e6:04:be:9f:d4:37:e9:27:4b:94:cb: 1e:18:79:18:0e:f1:ac:b7:d4:bd:4d:5b:73:7c:48:f7:29:ff: 20:38:73:97:62:0f:b2:dc:4e:76:dc:7c:bc:4c:e5:58:7d:b1: 4c:19:9a:82:2e:9b:05:8e:7a:12:79:ce:bd:97:2d:9b:e4:89: 50:87:b8:23:c1:fc:04:15:b8:b7:d4:9b:8f:c7:5e:8b:73:2c: fc:c1:cc:48:63:6f:34:3a:57:46:2f:26:7a:43:92:48:1c:57: d7:ee:e8:22:08:c9:75:9e:c7:c6:a9:6c:d8:e1:52:a0:bc:9c: 3f:54:dc:d2:6c:c8:8c:65:31:ce:86:c5:de:0d:99:4e:51:ea: 0d:33:d6:e9:b3:cf:b9:ba:57:48:db:ed:0d:d9:f1:8b:2a:3b: da:c5:41:bb:d0:db:90:93:d2:10:32:0a:e4:f1:68:85:70:5c: 28:75:50:c2:74:2b:57:74:10:8f:3f:ce:0c:49:2b:c2:88:91: 0d:d7:ca:e3:81:f3:36:96:2a:cd:66:23:45:44:65:dd:c4:a6: 42:66:4f:2a -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjMzNTgxMTAvBgNVBAUTKDdGQkZDRjE5NkJGRDJFRjA3MDYyNUJFRUM0MjZFODYw Njg4QUMyRjEwHhcNMjUxMDAxMDczNTE3WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGRjZDliNS04MjI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyM10vQZlttX8BJOqg8RmmGgQWnzsgQrlehuPjTWB0XM/rCG5t0jf5kp2oAFy LhAP+fL6tu2yBasRHpSHNcDO0weMOX1qydI7MlVbc7PB21ZYyF9gJWZ3k1AAbFqq scYvBG0d/7uaZhUSRqFDRggvT6NcQQ75SZjd5qj3PM3/Rgh3a91oT7X6ndrhdgPp oRI66S3Ag++F0wkgcBn2hGeJAHfFKKN+yQq3W/p1+gfjsFD/54+1qMXwfKsFN2Zy 3ogk3FWUX2wHFDe2PiKrkWOShTK5iGm/QNGz7vpUjw4jFtuJZ0Q4vwpaEVmEM4z6 1jUHkBGJeXLuqxD4MoCNYjyxSQIDAQABo4IClTCCApEwHQYDVR0OBBYEFGR86Gva PuxnxuRiPXAjm1GhxNmGMB8GA1UdIwQYMBaAFH+/zxlr/S7wcGJb7sQm6GBoisLx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzM1OC83RDQwNjQ3RUMx Q0ExMUVGQTNGMjRBODdDNEY5QUUwMi9mN19QR1d2OUx2QndZbHZ1eENib1lHaUt3 dkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Y3X1BHV3Y5THZCd1lsdnV4Q2JvWUdpS3d2RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjMzNTgvN0Q0MDY0N0VDMUNBMTFFRkEzRjI0QTg3QzRGOUFFMDIvMkIzNDBBRUFD MUNCMTFFRjlDRkM5NTA5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBALKLDgwDQYJKoZIhvcNAQELBQADggEBADdiqKrqhM3hQy3f E3itSV+YZc7bprqyzRrsvCFBHxwRxdcdulSnoRzQkbfmBL6f1DfpJ0uUyx4YeRgO 8ay31L1NW3N8SPcp/yA4c5diD7LcTnbcfLxM5Vh9sUwZmoIumwWOehJ5zr2XLZvk iVCHuCPB/AQVuLfUm4/HXotzLPzBzEhjbzQ6V0YvJnpDkkgcV9fu6CIIyXWex8ap bNjhUqC8nD9U3NJsyIxlMc6Gxd4NmU5R6g0z1umzz7m6V0jb7Q3Z8YsqO9rFQbvQ 25CT0hAyCuTxaIVwXCh1UMJ0K1d0EI8/zgxJK8KIkQ3XyuOB8zaWKs1mI0VEZd3E pkJmTyo= -----END CERTIFICATE-----Generated at Tue Oct 21 05:29:43 2025 by rpki-client