$ rpki-client -vvf rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/235D2836A1F111F084328A39C4F9AE02.roa File: 235D2836A1F111F084328A39C4F9AE02.roa (raw, json) Hash identifier: bnkVNhU6o5rwwfFx9zgMXEGJHB9u5Plk3LVxSdWMAa0= Subject key identifier: 3A:91:28:D9:62:7A:DB:8F:8C:F5:1D:D0:3B:96:22:F3:7A:0C:A6:E6 Certificate issuer: /CN=A9168949/serialNumber=10E0502F3D382E8C1566ECCC2A121B6C439DE977 Certificate serial: 014B Authority key identifier: 10:E0:50:2F:3D:38:2E:8C:15:66:EC:CC:2A:12:1B:6C:43:9D:E9:77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOBQLz04LowVZuzMKhIbbEOd6Xc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/235D2836A1F111F084328A39C4F9AE02.roa Signing time: Sun 05 Oct 2025 13:42:30 +0000 ROA not before: Sun 05 Oct 2025 13:42:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 137444 IP address blocks: 203.20.108.0/24 maxlen: 24 2001:df3:9340::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.crl rsync://rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOBQLz04LowVZuzMKhIbbEOd6Xc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:26:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 331 (0x14b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168949, serialNumber=10E0502F3D382E8C1566ECCC2A121B6C439DE977 Validity Not Before: Oct 5 13:42:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=68e275c6-b0b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:55:82:23:cf:80:36:04:ac:d5:03:e7:65:50: ae:28:49:23:80:89:a3:be:9f:99:e6:d2:10:c5:fb: ce:8e:ae:65:17:af:49:f2:21:70:42:ef:a2:2a:64: c4:bb:4e:3b:74:b1:d8:d7:75:ad:a8:38:48:cf:4e: e2:68:bb:ee:a5:a6:17:4d:5a:74:fc:73:4c:ba:a4: 66:3f:9e:c3:fc:75:e7:43:2b:c7:fa:60:94:e1:50: 29:a9:7f:3d:bd:e3:c7:40:c6:f8:50:b9:ca:00:e0: 74:a7:9b:7e:b9:17:33:92:88:35:33:0a:9c:a3:0f: 1b:89:77:48:79:d3:f9:25:38:eb:04:ce:2d:20:7b: a5:00:1d:39:2f:d3:86:81:e1:c1:35:03:ee:53:74: af:2f:5f:d5:94:13:aa:44:2b:e5:0e:f3:a7:23:8f: af:e1:02:a6:86:6d:0f:fb:9f:22:de:8d:21:00:cc: 91:45:16:72:d5:e1:3e:02:62:3a:40:fc:64:5a:95: 16:78:b0:59:72:68:5b:a6:e8:b5:b9:68:ce:20:9c: 0a:7f:94:f4:b2:62:e4:fd:9f:ac:84:16:fe:0b:89: 12:44:c4:0a:76:b9:e0:27:33:1c:c0:c0:e5:7c:73: e3:1b:4e:65:53:66:1f:3b:b0:44:bc:77:e5:7d:39: fc:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:91:28:D9:62:7A:DB:8F:8C:F5:1D:D0:3B:96:22:F3:7A:0C:A6:E6 X509v3 Authority Key Identifier: keyid:10:E0:50:2F:3D:38:2E:8C:15:66:EC:CC:2A:12:1B:6C:43:9D:E9:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOBQLz04LowVZuzMKhIbbEOd6Xc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/235D2836A1F111F084328A39C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.20.108.0/24 IPv6: 2001:df3:9340::/48 Signature Algorithm: sha256WithRSAEncryption 5f:d1:57:22:0d:0e:3d:84:0e:2f:2a:4a:72:26:0f:e0:d2:b9: 6f:a6:b2:d9:32:e7:70:c0:35:80:a4:da:e5:33:91:53:49:23: 04:30:7c:34:0e:ae:36:e1:51:80:4d:d9:fe:4a:74:95:b5:53: 51:95:ae:4e:cf:61:98:e4:c5:59:61:73:33:36:28:b0:3b:6d: 38:e3:f6:ba:5c:f2:3f:8b:ea:0f:79:ff:e6:20:d1:0e:08:46: c5:de:7e:ed:0a:3b:00:01:53:5c:b3:69:78:53:46:db:d9:bd: a2:59:ac:47:db:ba:df:ea:a4:d6:2d:cb:4d:1c:a5:14:f8:a6: 76:63:cd:ca:3c:7a:b6:ea:e9:fa:f9:56:8b:10:f8:09:af:e9: ff:d2:56:c7:f9:17:15:c4:bd:67:6a:b2:2d:54:6d:88:80:d8: e7:31:49:9d:09:30:22:a2:da:33:9e:7c:41:95:82:cf:9f:2a: 0f:e7:b5:9a:43:a2:91:2f:3d:22:da:74:f1:73:21:d7:49:7b: 61:24:03:66:b3:31:e3:26:58:35:a9:ba:cc:e8:5b:7a:17:57: d8:c6:cb:ca:51:5c:47:ee:9c:74:76:44:59:ad:42:20:94:9f: 03:4f:71:a0:9a:a4:f2:d1:f4:6d:b2:a6:06:a7:db:ca:5a:e0: 5d:5e:cf:e6 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg5NDkxMTAvBgNVBAUTKDEwRTA1MDJGM0QzODJFOEMxNTY2RUNDQzJBMTIxQjZD NDM5REU5NzcwHhcNMjUxMDA1MTM0MjMwWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGUyNzVjNi1iMGI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy1WCI8+ANgSs1QPnZVCuKEkjgImjvp+Z5tIQxfvOjq5lF69J8iFwQu+iKmTE u047dLHY13WtqDhIz07iaLvupaYXTVp0/HNMuqRmP57D/HXnQyvH+mCU4VApqX89 vePHQMb4ULnKAOB0p5t+uRczkog1Mwqcow8biXdIedP5JTjrBM4tIHulAB05L9OG geHBNQPuU3SvL1/VlBOqRCvlDvOnI4+v4QKmhm0P+58i3o0hAMyRRRZy1eE+AmI6 QPxkWpUWeLBZcmhbpui1uWjOIJwKf5T0smLk/Z+shBb+C4kSRMQKdrngJzMcwMDl fHPjG05lU2YfO7BEvHflfTn8rQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFDqRKNli etuPjPUd0DuWIvN6DKbmMB8GA1UdIwQYMBaAFBDgUC89OC6MFWbszCoSG2xDnel3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODk0OS8zRjI0MkFDMkU0 RjMxMUVFOTkxMDE0MzhDNEY5QUUwMi9FT0JRTHowNExvd1ZadXpNS2hJYmJFT2Q2 WGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VPQlFMejA0TG93Vlp1ek1LaEliYkVPZDZYYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Njg5NDkvM0YyNDJBQzJFNEYzMTFFRTk5MTAxNDM4QzRGOUFFMDIvMjM1RDI4MzZB MUYxMTFGMDg0MzI4QTM5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBADLFGwwDwQCAAIwCQMHACABDfOTQDANBgkqhkiG9w0BAQsF AAOCAQEAX9FXIg0OPYQOLypKciYP4NK5b6ay2TLncMA1gKTa5TORU0kjBDB8NA6u NuFRgE3Z/kp0lbVTUZWuTs9hmOTFWWFzMzYosDttOOP2ulzyP4vqD3n/5iDRDghG xd5+7Qo7AAFTXLNpeFNG29m9olmsR9u63+qk1i3LTRylFPimdmPNyjx6turp+vlW ixD4Ca/p/9JWx/kXFcS9Z2qyLVRtiIDY5zFJnQkwIqLaM558QZWCz58qD+e1mkOi kS89Itp08XMh10l7YSQDZrMx4yZYNam6zOhbehdX2MbLylFcR+6cdHZEWa1CIJSf A09xoJqk8tH0bbKmBqfbylrgXV7P5g== -----END CERTIFICATE-----Generated at Mon Oct 20 15:17:38 2025 by rpki-client