$ rpki-client -vvf rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/987E6D9E985711F08C4D1E11C4F9AE02.roa File: 987E6D9E985711F08C4D1E11C4F9AE02.roa (raw, json) Hash identifier: nhXCTWcJehwPCNY1j5T1uE9/H57zSIf0fsFJ0V9vXtI= Subject key identifier: 3F:78:16:5F:2D:99:5C:6D:B7:8B:6B:9F:47:68:BB:14:F2:AC:E6:86 Certificate issuer: /CN=A916B18B/serialNumber=368F3C938B601412521A3A819009978FCFE91E7E Certificate serial: 1788 Authority key identifier: 36:8F:3C:93:8B:60:14:12:52:1A:3A:81:90:09:97:8F:CF:E9:1E:7E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/987E6D9E985711F08C4D1E11C4F9AE02.roa Signing time: Tue 23 Sep 2025 08:30:44 +0000 ROA not before: Tue 23 Sep 2025 08:30:44 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 152335 IP address blocks: 143.9.0.0/16 maxlen: 16 143.9.0.0/23 maxlen: 23 143.9.4.0/22 maxlen: 22 143.9.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.crl rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 16:55:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6024 (0x1788) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B18B, serialNumber=368F3C938B601412521A3A819009978FCFE91E7E Validity Not Before: Sep 23 08:30:44 2025 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=68d25ab3-1b7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:4b:eb:75:b2:7a:b7:83:ac:3c:dd:1c:d5:ea: 45:9f:56:df:21:09:3a:8a:ff:9a:eb:a6:d6:ab:36: 32:06:d8:32:0f:a9:eb:33:2c:0d:05:93:42:c8:f8: 81:c1:3c:99:4c:3f:d1:f0:8e:12:76:b1:d7:36:68: 0a:4c:00:e4:59:b7:8a:e5:af:14:85:ff:db:9f:6d: a4:44:64:b5:7e:11:60:c5:77:99:79:8b:b3:29:58: 42:7f:e3:11:49:f5:36:3d:5d:82:e4:21:72:04:a5: fd:67:c2:3c:08:6d:86:c5:a7:0f:16:5c:07:0c:4b: ed:1c:05:4d:49:69:8d:e1:55:94:64:eb:c8:5c:b6: 28:16:95:2e:92:10:50:43:d2:27:32:3d:41:01:8f: 26:02:70:f6:35:57:a1:f0:6c:3d:a0:c0:36:dd:3a: f1:85:ad:9d:5d:24:2a:79:20:2e:6f:4b:b2:90:a5: 2c:02:30:ef:35:1e:07:42:96:ab:d2:00:dd:2e:b4: 65:60:c1:c0:e8:e4:86:70:aa:6f:2c:57:92:ff:5d: cd:b0:43:42:21:f5:0f:56:af:f7:21:dd:73:b6:44: c7:78:62:5e:8d:b4:ed:20:bf:25:2e:cb:d4:ac:61: ec:4a:5a:aa:59:62:a1:a7:2b:05:dc:1a:5b:e3:b3: 92:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:78:16:5F:2D:99:5C:6D:B7:8B:6B:9F:47:68:BB:14:F2:AC:E6:86 X509v3 Authority Key Identifier: keyid:36:8F:3C:93:8B:60:14:12:52:1A:3A:81:90:09:97:8F:CF:E9:1E:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/987E6D9E985711F08C4D1E11C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 143.9.0.0/16 Signature Algorithm: sha256WithRSAEncryption 7d:9e:f6:30:4d:dc:fe:5c:f6:90:72:67:12:97:2d:46:1f:38: e9:c3:a4:fe:26:f9:da:13:91:01:1f:4b:a1:90:fb:35:b3:3b: 61:3b:49:0b:45:92:39:98:7b:15:6e:6d:87:33:01:30:a8:af: d4:ed:2f:7d:a6:c8:03:c1:b2:a0:b6:09:87:38:30:98:4e:54: ad:f8:14:fd:fc:4f:fd:7e:5c:20:32:03:52:35:fe:c2:a5:60: 9c:de:59:7d:b6:e6:05:b2:42:d8:82:97:40:37:7f:95:2d:93: c5:0a:ae:8b:64:b6:3d:55:0e:e4:08:ec:9c:8c:3b:66:2f:56: ab:71:0c:87:ec:21:42:fd:81:3b:c8:7e:15:c8:e1:ef:0b:85: 66:bf:26:9f:f7:55:86:a0:86:fa:e9:5a:30:90:c8:ab:db:a2: b1:6f:4e:73:d3:c9:25:1d:ca:3b:5d:1d:ce:64:80:cf:19:08: 4b:7d:ea:4c:5b:b8:41:61:be:2f:70:08:e4:e0:a4:2e:2a:fb: 6a:a7:e4:27:3c:62:68:6f:4c:cf:04:1d:6d:f7:fa:77:15:ec: 0b:e9:7c:4b:cf:b4:aa:4d:47:05:30:0f:de:62:45:8e:ab:5f: 7f:e4:b9:e1:28:e0:44:6f:57:80:5b:2e:da:0e:d7:c6:1a:fa: d3:ab:f9:5f -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgICF4gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkIxOEIxMTAvBgNVBAUTKDM2OEYzQzkzOEI2MDE0MTI1MjFBM0E4MTkwMDk5NzhG Q0ZFOTFFN0UwHhcNMjUwOTIzMDgzMDQ0WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGQyNWFiMy0xYjdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5EvrdbJ6t4OsPN0c1epFn1bfIQk6iv+a66bWqzYyBtgyD6nrMywNBZNCyPiB wTyZTD/R8I4SdrHXNmgKTADkWbeK5a8Uhf/bn22kRGS1fhFgxXeZeYuzKVhCf+MR SfU2PV2C5CFyBKX9Z8I8CG2GxacPFlwHDEvtHAVNSWmN4VWUZOvIXLYoFpUukhBQ Q9InMj1BAY8mAnD2NVeh8Gw9oMA23Trxha2dXSQqeSAub0uykKUsAjDvNR4HQpar 0gDdLrRlYMHA6OSGcKpvLFeS/13NsENCIfUPVq/3Id1ztkTHeGJejbTtIL8lLsvU rGHsSlqqWWKhpysF3Bpb47OSCQIDAQABo4IClDCCApAwHQYDVR0OBBYEFD94Fl8t mVxtt4trn0douxTyrOaGMB8GA1UdIwQYMBaAFDaPPJOLYBQSUho6gZAJl4/P6R5+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjE4Qi9GOThCNUYwQzIx RjkxMUU4OTZDMUREMjNDNEY5QUUwMi9Obzg4azR0Z0ZCSlNHanFCa0FtWGo4X3BI bjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL05vODhrNHRnRkJKU0dqcUJrQW1YajhfcEhuNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkIxOEIvRjk4QjVGMEMyMUY5MTFFODk2QzFERDIzQzRGOUFFMDIvOTg3RTZEOUU5 ODU3MTFGMDhDNEQxRTExQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8E DzANMAsEAgABMAUDAwCPCTANBgkqhkiG9w0BAQsFAAOCAQEAfZ72ME3c/lz2kHJn EpctRh846cOk/ib52hORAR9LoZD7NbM7YTtJC0WSOZh7FW5thzMBMKiv1O0vfabI A8GyoLYJhzgwmE5UrfgU/fxP/X5cIDIDUjX+wqVgnN5ZfbbmBbJC2IKXQDd/lS2T xQqui2S2PVUO5AjsnIw7Zi9Wq3EMh+whQv2BO8h+Fcjh7wuFZr8mn/dVhqCG+ula MJDIq9uisW9Oc9PJJR3KO10dzmSAzxkIS33qTFu4QWG+L3AI5OCkLir7aqfkJzxi aG9MzwQdbff6dxXsC+l8S8+0qk1HBTAP3mJFjqtff+S54SjgRG9XgFsu2g7Xxhr6 06v5Xw== -----END CERTIFICATE-----Generated at Mon Oct 20 21:03:36 2025 by rpki-client