$ rpki-client -vvf rpki.apnic.net/member_repository/A9163358/7D40647EC1CA11EFA3F24A87C4F9AE02/476FD748C1CB11EF9557BF09C4F9AE02.roa File: 476FD748C1CB11EF9557BF09C4F9AE02.roa (raw, json) Hash identifier: +/qAVwhOr2/ylyq1aTboEKPGR+yHej6JqmrIy7gVF3I= Subject key identifier: 27:8E:96:28:EA:DE:25:39:56:97:FB:EA:BB:C7:7E:EA:30:74:65:7E Certificate issuer: /CN=A9163358/serialNumber=7FBFCF196BFD2EF070625BEEC426E860688AC2F1 Certificate serial: A0 Authority key identifier: 7F:BF:CF:19:6B:FD:2E:F0:70:62:5B:EE:C4:26:E8:60:68:8A:C2:F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f7_PGWv9LvBwYlvuxCboYGiKwvE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163358/7D40647EC1CA11EFA3F24A87C4F9AE02/476FD748C1CB11EF9557BF09C4F9AE02.roa Signing time: Wed 01 Oct 2025 07:35:18 +0000 ROA not before: Wed 01 Oct 2025 07:35:18 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 4755 IP address blocks: 202.44.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163358/7D40647EC1CA11EFA3F24A87C4F9AE02/f7_PGWv9LvBwYlvuxCboYGiKwvE.crl rsync://rpki.apnic.net/member_repository/A9163358/7D40647EC1CA11EFA3F24A87C4F9AE02/f7_PGWv9LvBwYlvuxCboYGiKwvE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f7_PGWv9LvBwYlvuxCboYGiKwvE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:35:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160 (0xa0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163358, serialNumber=7FBFCF196BFD2EF070625BEEC426E860688AC2F1 Validity Not Before: Oct 1 07:35:18 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68dcd9b6-c4f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:84:40:47:10:2d:0b:84:8d:61:0d:11:2b:3e: a0:bc:9d:5e:3e:aa:60:93:f7:71:1d:a7:dc:4d:f6: fe:30:3b:7f:3c:c0:50:fd:a3:63:29:4a:e2:ec:51: c8:c3:0b:b9:a4:19:57:97:16:a5:8f:58:9a:52:c5: ba:d3:ef:e8:9a:ae:55:dd:ef:de:cc:6d:ad:8c:dd: 5e:b8:08:b7:58:d0:26:f4:b2:2f:26:ed:5e:2a:7c: 17:65:78:f1:0c:d6:73:fa:5b:74:d3:19:50:b1:cc: 67:26:a3:e5:11:83:ea:17:a6:71:3f:f0:48:24:d0: 46:a9:5c:6c:4f:85:e9:eb:a1:4d:34:a4:b5:fd:d2: 02:de:f5:d4:02:59:4b:0e:be:c5:30:5d:f6:84:10: 24:50:db:32:ac:06:94:50:fa:fe:5b:67:14:0b:1f: c1:f5:30:6d:12:6d:7a:2c:a9:60:88:06:9a:3c:64: a3:a7:c3:7c:fa:0f:56:7f:4d:d3:db:f0:c9:fc:ef: ca:52:4a:bd:c9:02:f6:00:0b:28:0b:c1:b1:fc:bb: e8:c8:65:f2:10:08:fb:e5:5a:7b:7c:4c:74:06:34: 21:10:07:e7:0a:f8:86:0b:a0:cf:ab:0f:79:47:31: 1e:11:83:d9:68:63:a2:b7:f6:ae:1d:e7:bc:37:bf: cc:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:8E:96:28:EA:DE:25:39:56:97:FB:EA:BB:C7:7E:EA:30:74:65:7E X509v3 Authority Key Identifier: keyid:7F:BF:CF:19:6B:FD:2E:F0:70:62:5B:EE:C4:26:E8:60:68:8A:C2:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163358/7D40647EC1CA11EFA3F24A87C4F9AE02/f7_PGWv9LvBwYlvuxCboYGiKwvE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f7_PGWv9LvBwYlvuxCboYGiKwvE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163358/7D40647EC1CA11EFA3F24A87C4F9AE02/476FD748C1CB11EF9557BF09C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.44.56.0/24 Signature Algorithm: sha256WithRSAEncryption c6:d3:ec:74:95:66:32:43:ac:41:fd:d2:67:b1:50:1d:a8:a6: 85:d8:b9:93:e0:b8:70:af:5f:9f:01:ce:c2:c0:2f:bd:3f:51: ab:17:1c:4a:d2:51:14:c6:4b:fc:3a:7a:6a:8a:1b:83:5d:de: d9:a6:ed:11:cb:04:03:56:6a:47:0e:d9:9d:65:15:48:48:60: cd:a5:47:9b:ea:26:09:5c:2b:d7:c0:c1:ee:94:c6:3c:35:9c: fe:65:36:79:b8:f2:30:8f:c1:cb:cb:2e:1d:5a:7f:2b:cf:7c: 80:7b:ee:56:e9:47:23:79:01:c4:41:97:db:4f:72:f1:d7:d3: 38:36:2a:a8:be:2e:35:24:f0:36:f7:ce:4b:ae:77:29:ec:43: 7c:4b:46:a2:6e:81:cd:c9:4e:72:69:5b:17:34:77:89:f4:37: 6b:e5:5e:ea:ca:54:e1:ae:6e:23:e9:0b:39:65:c3:f1:db:5e: 92:9f:90:22:21:c9:99:0b:18:57:10:72:48:cc:94:6c:90:8b: b5:4c:75:d6:8f:60:14:c6:b4:6a:34:86:fa:d6:d6:25:53:eb: 40:c8:6d:96:56:93:54:53:c1:ea:b6:0b:7e:c3:e7:eb:ee:b8: 89:50:42:51:d9:de:0b:ff:75:af:23:12:70:89:af:85:11:5e: 65:5c:6a:07 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjMzNTgxMTAvBgNVBAUTKDdGQkZDRjE5NkJGRDJFRjA3MDYyNUJFRUM0MjZFODYw Njg4QUMyRjEwHhcNMjUxMDAxMDczNTE4WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGRjZDliNi1jNGY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4YRARxAtC4SNYQ0RKz6gvJ1ePqpgk/dxHafcTfb+MDt/PMBQ/aNjKUri7FHI wwu5pBlXlxalj1iaUsW60+/omq5V3e/ezG2tjN1euAi3WNAm9LIvJu1eKnwXZXjx DNZz+lt00xlQscxnJqPlEYPqF6ZxP/BIJNBGqVxsT4Xp66FNNKS1/dIC3vXUAllL Dr7FMF32hBAkUNsyrAaUUPr+W2cUCx/B9TBtEm16LKlgiAaaPGSjp8N8+g9Wf03T 2/DJ/O/KUkq9yQL2AAsoC8Gx/LvoyGXyEAj75Vp7fEx0BjQhEAfnCviGC6DPqw95 RzEeEYPZaGOit/auHee8N7/MrQIDAQABo4IClTCCApEwHQYDVR0OBBYEFCeOlijq 3iU5Vpf76rvHfuowdGV+MB8GA1UdIwQYMBaAFH+/zxlr/S7wcGJb7sQm6GBoisLx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzM1OC83RDQwNjQ3RUMx Q0ExMUVGQTNGMjRBODdDNEY5QUUwMi9mN19QR1d2OUx2QndZbHZ1eENib1lHaUt3 dkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Y3X1BHV3Y5THZCd1lsdnV4Q2JvWUdpS3d2RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjMzNTgvN0Q0MDY0N0VDMUNBMTFFRkEzRjI0QTg3QzRGOUFFMDIvNDc2RkQ3NDhD MUNCMTFFRjk1NTdCRjA5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADKLDgwDQYJKoZIhvcNAQELBQADggEBAMbT7HSVZjJDrEH9 0mexUB2opoXYuZPguHCvX58BzsLAL70/UasXHErSURTGS/w6emqKG4Nd3tmm7RHL BANWakcO2Z1lFUhIYM2lR5vqJglcK9fAwe6Uxjw1nP5lNnm48jCPwcvLLh1afyvP fIB77lbpRyN5AcRBl9tPcvHX0zg2Kqi+LjUk8Db3zkuudynsQ3xLRqJugc3JTnJp Wxc0d4n0N2vlXurKVOGubiPpCzllw/HbXpKfkCIhyZkLGFcQckjMlGyQi7VMddaP YBTGtGo0hvrW1iVT60DIbZZWk1RTweq2C37D5+vuuIlQQlHZ3gv/da8jEnCJr4UR XmVcagc= -----END CERTIFICATE-----Generated at Mon Oct 20 19:31:01 2025 by rpki-client