$ rpki-client -vvf rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/1BC96D8C1BA111EA8BDD6114C4F9AE02.roa File: 1BC96D8C1BA111EA8BDD6114C4F9AE02.roa (raw, json) Hash identifier: nCv8KSq1x9Ijvp8OSX/9bUAYQko+S3mPDE0oXqFbbRA= Subject key identifier: 9C:A3:96:E8:EE:E2:F5:7C:65:E6:0C:EB:29:78:0D:F2:BC:E2:3E:29 Certificate issuer: /CN=A916A983/serialNumber=88D87B102F5C2771C367064E2049B68A903C71B5 Certificate serial: 134B Authority key identifier: 88:D8:7B:10:2F:5C:27:71:C3:67:06:4E:20:49:B6:8A:90:3C:71:B5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/1BC96D8C1BA111EA8BDD6114C4F9AE02.roa Signing time: Wed 06 Aug 2025 17:26:28 +0000 ROA not before: Wed 06 Aug 2025 17:26:28 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 135887 IP address blocks: 144.138.0.0/16 maxlen: 24 147.10.0.0/16 maxlen: 24 149.167.0.0/16 maxlen: 24 155.143.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.crl rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 17:04:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4939 (0x134b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A983, serialNumber=88D87B102F5C2771C367064E2049B68A903C71B5 Validity Not Before: Aug 6 17:26:28 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68939044-e9bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:54:0f:79:88:4e:51:14:72:68:50:08:ed:19: 7f:60:60:fe:e0:8d:10:93:16:d3:c9:52:21:53:68: b1:24:32:e7:81:47:0f:4a:16:2f:06:fc:29:26:e8: 12:83:cb:b2:8b:90:e9:c5:38:ac:e3:c5:54:6c:51: b5:da:37:9e:fc:95:d0:ba:06:af:cc:19:b3:a4:7b: 2d:2b:c6:20:ec:3b:a0:f1:f4:0b:4a:27:62:7c:f1: 17:0c:45:52:84:b8:ca:2a:4a:6d:c9:24:79:b8:ab: 3f:3e:5f:11:95:ad:3b:fa:f4:03:ca:81:40:a8:d7: f2:73:cc:4a:49:ed:09:db:7b:d0:7b:77:64:fb:c8: ba:54:9a:c8:58:9c:db:7e:72:1d:c9:c5:ab:f7:80: b5:c0:ec:7a:6b:0b:03:c1:89:12:cb:5b:19:b2:f4: 18:ed:c9:aa:db:ac:b7:7a:9b:b7:2c:9f:60:fe:39: 6b:53:be:8f:2b:cf:a8:b5:c1:99:05:33:48:9f:7d: c1:70:b3:65:87:c8:45:53:c9:12:a6:6a:a6:87:22: b2:1e:7a:cb:37:dd:18:6b:f6:83:6a:c8:d7:25:80: c2:82:80:07:98:28:20:d6:d4:25:1e:6d:86:aa:84: 73:3a:c7:b4:85:6a:43:00:51:6f:9a:3d:e5:04:e1: de:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:A3:96:E8:EE:E2:F5:7C:65:E6:0C:EB:29:78:0D:F2:BC:E2:3E:29 X509v3 Authority Key Identifier: keyid:88:D8:7B:10:2F:5C:27:71:C3:67:06:4E:20:49:B6:8A:90:3C:71:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/1BC96D8C1BA111EA8BDD6114C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 144.138.0.0/16 147.10.0.0/16 149.167.0.0/16 155.143.0.0/16 Signature Algorithm: sha256WithRSAEncryption 7d:4f:5b:57:ef:ec:54:38:0a:4c:cb:d2:d1:c2:48:d9:6e:d3: 69:95:fd:dc:c1:dd:93:ff:70:9a:e2:32:07:18:bf:73:48:47: 83:ea:03:06:20:4d:9c:aa:a7:d6:48:84:1f:71:cc:d7:4a:f7: d9:05:26:02:d2:78:12:96:df:a6:b3:95:49:fd:01:c0:f0:75: 49:8c:8c:d5:b0:29:3a:f7:35:f2:39:99:1b:51:01:8a:d6:12: 9f:3c:b1:69:38:d1:90:56:96:f7:5d:77:75:03:5b:46:a9:3b: 31:ee:d2:fc:83:a0:4e:a3:e1:0f:18:2a:6a:df:0a:5e:3a:72: b9:df:8e:4b:3c:d6:16:4c:da:9d:4b:8a:b7:5c:cc:04:75:bf: a3:82:d3:52:bc:19:aa:de:58:ca:d8:cb:90:51:5d:cd:1f:57: 17:0f:9f:47:12:8a:06:ee:3a:65:0d:3b:9e:06:5e:64:1f:4a: 4c:db:b9:ba:dd:44:2a:5f:c4:ff:f0:e0:81:65:56:85:53:d8: 60:d3:c8:35:37:0b:e9:e1:08:94:14:77:60:96:f1:92:4d:a4: dc:76:93:f8:fb:c6:29:34:23:bb:9a:9c:0d:9b:20:f3:9f:db: 10:07:c4:bd:fb:42:b6:c1:54:3d:a0:fb:fd:84:07:22:40:93: 3c:bd:02:83 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgICE0swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE5ODMxMTAvBgNVBAUTKDg4RDg3QjEwMkY1QzI3NzFDMzY3MDY0RTIwNDlCNjhB OTAzQzcxQjUwHhcNMjUwODA2MTcyNjI4WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODkzOTA0NC1lOWJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2FQPeYhOURRyaFAI7Rl/YGD+4I0QkxbTyVIhU2ixJDLngUcPShYvBvwpJugS g8uyi5DpxTis48VUbFG12jee/JXQugavzBmzpHstK8Yg7Dug8fQLSidifPEXDEVS hLjKKkptySR5uKs/Pl8Rla07+vQDyoFAqNfyc8xKSe0J23vQe3dk+8i6VJrIWJzb fnIdycWr94C1wOx6awsDwYkSy1sZsvQY7cmq26y3epu3LJ9g/jlrU76PK8+otcGZ BTNIn33BcLNlh8hFU8kSpmqmhyKyHnrLN90Ya/aDasjXJYDCgoAHmCgg1tQlHm2G qoRzOse0hWpDAFFvmj3lBOHecQIDAQABo4ICozCCAp8wHQYDVR0OBBYEFJyjluju 4vV8ZeYM6yl4DfK84j4pMB8GA1UdIwQYMBaAFIjYexAvXCdxw2cGTiBJtoqQPHG1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTk4My8wRTA4MkU3MkNE MEYxMUU4OUQ5RkYxNjVDNEY5QUUwMi9pTmg3RUM5Y0ozSERad1pPSUVtMmlwQThj YlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lOaDdFQzljSjNIRFp3Wk9JRW0yaXBBOGNiVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkE5ODMvMEUwODJFNzJDRDBGMTFFODlEOUZGMTY1QzRGOUFFMDIvMUJDOTZEOEMx QkExMTFFQThCREQ2MTE0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLQYIKwYBBQUHAQcBAf8E HjAcMBoEAgABMBQDAwCQigMDAJMKAwMAlacDAwCbjzANBgkqhkiG9w0BAQsFAAOC AQEAfU9bV+/sVDgKTMvS0cJI2W7TaZX93MHdk/9wmuIyBxi/c0hHg+oDBiBNnKqn 1kiEH3HM10r32QUmAtJ4EpbfprOVSf0BwPB1SYyM1bApOvc18jmZG1EBitYSnzyx aTjRkFaW9113dQNbRqk7Me7S/IOgTqPhDxgqat8KXjpyud+OSzzWFkzanUuKt1zM BHW/o4LTUrwZqt5YytjLkFFdzR9XFw+fRxKKBu46ZQ07ngZeZB9KTNu5ut1EKl/E //DggWVWhVPYYNPINTcL6eEIlBR3YJbxkk2k3HaT+PvGKTQju5qcDZsg85/bEAfE vftCtsFUPaD7/YQHIkCTPL0Cgw== -----END CERTIFICATE-----Generated at Mon Oct 20 19:48:15 2025 by rpki-client