$ rpki-client -vvf rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/5EFDD3C4641511EF92F73520C4F9AE02.roa File: 5EFDD3C4641511EF92F73520C4F9AE02.roa (raw, json) Hash identifier: lb657OxiZdu7OS/rkuzqIPL5kfvM5EeZVQrmP0Hrb44= Subject key identifier: A1:84:2E:46:F3:B6:B8:5C:BB:CC:8E:F5:65:8A:79:AB:5C:DB:5C:43 Certificate issuer: /CN=A9165739/serialNumber=0A696F633677CC7FA5DC7D5BB299D39830FBE942 Certificate serial: 098C Authority key identifier: 0A:69:6F:63:36:77:CC:7F:A5:DC:7D:5B:B2:99:D3:98:30:FB:E9:42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/5EFDD3C4641511EF92F73520C4F9AE02.roa Signing time: Thu 02 Oct 2025 20:21:57 +0000 ROA not before: Thu 02 Oct 2025 20:21:57 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 38818 IP address blocks: 49.0.128.0/19 maxlen: 19 49.0.168.0/21 maxlen: 21 49.0.176.0/22 maxlen: 22 203.34.37.0/24 maxlen: 24 203.174.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.crl rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:18:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2444 (0x98c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165739, serialNumber=0A696F633677CC7FA5DC7D5BB299D39830FBE942 Validity Not Before: Oct 2 20:21:57 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=68dedee4-8c0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8e:80:27:3a:1a:68:d7:b1:09:88:c1:69:b9: ae:ef:78:d9:81:48:79:68:93:d1:9b:9b:16:0e:04: ec:bc:7a:87:7a:b3:5e:9e:89:a5:bd:48:52:b8:82: 22:78:ca:fa:e9:3b:e8:12:4a:cb:f0:e8:f0:6e:bb: b2:fd:a0:c9:12:d7:07:f8:95:4e:27:d6:13:b9:3a: ca:ff:2b:3f:19:05:f8:d7:e1:11:c0:97:ea:4a:d7: 2a:c5:70:bd:60:cf:e3:9d:e2:51:d0:41:ca:2a:cf: dc:f1:d2:40:e2:99:54:05:a5:ed:d1:f8:11:c1:68: 07:44:a8:50:a1:56:e7:a6:66:a1:ab:63:75:7b:ed: 64:4d:be:9f:71:23:58:00:25:e6:c3:e1:2d:93:a8: c8:7a:7e:00:5d:9b:d9:65:76:58:b6:e7:9e:32:9e: 86:8d:83:8f:18:7d:42:c6:10:22:2b:5a:99:de:7c: 94:fe:d8:37:b9:91:f1:cd:84:09:ff:0f:fd:f3:e4: d2:89:b5:7f:f9:dc:ae:05:04:44:cd:d2:c1:d4:96: f1:cc:92:60:fe:2e:ef:68:59:a8:e2:e9:47:2c:1d: a4:16:e4:b0:1d:1d:7b:75:9d:5e:ad:6b:6c:e8:42: a6:10:3d:b3:af:38:30:04:6e:97:b9:09:43:88:6f: aa:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:84:2E:46:F3:B6:B8:5C:BB:CC:8E:F5:65:8A:79:AB:5C:DB:5C:43 X509v3 Authority Key Identifier: keyid:0A:69:6F:63:36:77:CC:7F:A5:DC:7D:5B:B2:99:D3:98:30:FB:E9:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/5EFDD3C4641511EF92F73520C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.0.128.0/19 49.0.168.0-49.0.179.255 203.34.37.0/24 203.174.26.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:1c:fb:70:47:b3:ad:c6:f3:b0:a6:e8:f8:d3:df:d4:89:77: f7:be:3f:3f:f2:33:f5:27:0f:b9:ed:4c:80:43:56:61:f5:57: ce:28:27:13:8c:97:09:f6:75:45:a6:01:16:f6:2f:11:2c:75: 7e:db:d2:19:60:0b:60:8b:6c:ec:35:c8:52:87:90:12:ad:a1: f6:84:1e:d8:84:42:d2:85:10:ab:f7:35:4a:4c:a7:25:6f:ab: cc:cf:da:d1:8e:5b:78:bf:07:25:e6:49:39:1e:a1:9f:9f:88: 08:7a:66:d0:7a:2a:4f:22:bc:60:69:02:f5:37:86:b2:43:6f: bb:06:11:03:bf:14:49:10:b5:aa:c0:1b:b0:48:f4:03:29:45: e1:76:50:52:33:6e:c7:7a:c5:33:98:53:3b:9f:48:85:f5:6a: 30:ee:f5:80:58:12:19:2b:c5:61:81:b7:a7:b1:36:36:b7:b3: 11:46:ef:54:6a:a3:11:77:df:15:f7:35:00:b0:da:76:11:59: 84:95:48:40:c1:80:ce:16:89:1c:48:2a:2d:08:71:86:59:cf: d9:d3:ed:76:f3:2d:24:cd:8a:c2:aa:2e:95:46:0c:11:46:55: 6f:1e:71:f5:49:a5:d6:95:15:e5:a8:3d:35:99:b1:5c:8a:4c: 4e:11:b0:aa -----BEGIN CERTIFICATE----- MIIFizCCBHOgAwIBAgICCYwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU3MzkxMTAvBgNVBAUTKDBBNjk2RjYzMzY3N0NDN0ZBNURDN0Q1QkIyOTlEMzk4 MzBGQkU5NDIwHhcNMjUxMDAyMjAyMTU3WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OGRlZGVlNC04YzBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyY6AJzoaaNexCYjBabmu73jZgUh5aJPRm5sWDgTsvHqHerNenomlvUhSuIIi eMr66TvoEkrL8Ojwbruy/aDJEtcH+JVOJ9YTuTrK/ys/GQX41+ERwJfqStcqxXC9 YM/jneJR0EHKKs/c8dJA4plUBaXt0fgRwWgHRKhQoVbnpmahq2N1e+1kTb6fcSNY ACXmw+Etk6jIen4AXZvZZXZYtueeMp6GjYOPGH1CxhAiK1qZ3nyU/tg3uZHxzYQJ /w/98+TSibV/+dyuBQREzdLB1JbxzJJg/i7vaFmo4ulHLB2kFuSwHR17dZ1erWts 6EKmED2zrzgwBG6XuQlDiG+qfwIDAQABo4ICrzCCAqswHQYDVR0OBBYEFKGELkbz trhcu8yO9WWKeatc21xDMB8GA1UdIwQYMBaAFAppb2M2d8x/pdx9W7KZ05gw++lC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTczOS82QkEwMzI4OEFD NTUxMUVBQTgxNTlFNUNDNEY5QUUwMi9DbWx2WXpaM3pILWwzSDFic3BuVG1ERDc2 VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NtbHZZelozekgtbDNIMWJzcG5UbURENzZVSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjU3MzkvNkJBMDMyODhBQzU1MTFFQUE4MTU5RTVDQzRGOUFFMDIvNUVGREQzQzQ2 NDE1MTFFRjkyRjczNTIwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOQYIKwYBBQUHAQcBAf8E KjAoMCYEAgABMCADBAUxAIAwDAMEAzEAqAMEAjEAsAMEAMsiJQMEAMuuGjANBgkq hkiG9w0BAQsFAAOCAQEAWxz7cEezrcbzsKbo+NPf1Il3974/P/Iz9ScPue1MgENW YfVXzignE4yXCfZ1RaYBFvYvESx1ftvSGWALYIts7DXIUoeQEq2h9oQe2IRC0oUQ q/c1SkynJW+rzM/a0Y5beL8HJeZJOR6hn5+ICHpm0HoqTyK8YGkC9TeGskNvuwYR A78USRC1qsAbsEj0AylF4XZQUjNux3rFM5hTO59IhfVqMO71gFgSGSvFYYG3p7E2 NrezEUbvVGqjEXffFfc1ALDadhFZhJVIQMGAzhaJHEgqLQhxhlnP2dPtdvMtJM2K wqoulUYMEUZVbx5x9Uml1pUV5ag9NZmxXIpMThGwqg== -----END CERTIFICATE-----Generated at Mon Oct 20 16:26:32 2025 by rpki-client