$ rpki-client -vvf rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/CCE5BAAA09D911EA80E56E21C4F9AE02.roa File: CCE5BAAA09D911EA80E56E21C4F9AE02.roa (raw, json) Hash identifier: UK4U60eiGuCuztGWWVANU0DD3PkFQsjwpFntP06fM3U= Subject key identifier: B7:A7:2D:4B:07:60:F0:6F:B1:70:44:51:95:1F:3C:31:39:5A:F7:EA Certificate issuer: /CN=A916DC92/serialNumber=945D097F2263D14C36B7B65C2DC0C25F9EE77192 Certificate serial: 0C84 Authority key identifier: 94:5D:09:7F:22:63:D1:4C:36:B7:B6:5C:2D:C0:C2:5F:9E:E7:71:92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/CCE5BAAA09D911EA80E56E21C4F9AE02.roa Signing time: Mon 06 Oct 2025 18:49:14 +0000 ROA not before: Mon 06 Oct 2025 18:49:14 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 132580 IP address blocks: 43.228.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.crl rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:14:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3204 (0xc84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DC92, serialNumber=945D097F2263D14C36B7B65C2DC0C25F9EE77192 Validity Not Before: Oct 6 18:49:14 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68e40f29-d902 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:6d:1e:64:81:37:ee:70:ce:50:89:71:37:3d: 1c:78:45:3c:0a:ee:9e:27:4d:33:de:04:10:d6:8a: 54:66:25:f2:96:b9:35:7a:bb:52:09:2d:ab:c8:65: 5f:59:14:b2:a8:0c:6d:1d:4d:8c:b2:45:40:e0:f8: 9d:3f:9e:72:26:59:30:bb:7f:4b:56:17:a0:02:6a: d0:bf:65:e2:04:22:24:ad:e6:20:a7:16:2b:fa:a5: 1e:9e:29:9d:08:ac:c3:9c:c0:0b:23:6b:c0:7b:e7: a7:6d:d1:0a:7f:81:a9:76:2e:1e:96:fc:19:35:51: 79:ab:ee:c5:65:2f:e2:ef:3f:90:44:9b:cd:56:c5: 58:ea:51:d1:87:6a:6a:51:30:d8:6b:98:fd:ec:c8: d9:fe:7b:66:4e:15:41:d5:d2:00:46:f1:07:d6:fd: f8:a1:f0:43:b1:2c:44:13:94:49:f0:2e:60:37:51: ee:43:b5:f1:66:7d:6a:8d:3d:a3:67:dd:9b:2d:29: 4e:61:ff:71:b1:62:c8:86:3d:e0:77:17:d1:2c:9b: 7c:77:59:b9:1a:e5:de:3e:06:cb:68:33:4c:7d:89: 08:c9:86:41:61:c3:e7:21:55:54:c0:e5:36:62:02: 3e:c2:bf:6d:9e:ab:da:f5:3b:fb:fb:09:19:8f:35: b7:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:A7:2D:4B:07:60:F0:6F:B1:70:44:51:95:1F:3C:31:39:5A:F7:EA X509v3 Authority Key Identifier: keyid:94:5D:09:7F:22:63:D1:4C:36:B7:B6:5C:2D:C0:C2:5F:9E:E7:71:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/CCE5BAAA09D911EA80E56E21C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.228.211.0/24 Signature Algorithm: sha256WithRSAEncryption 99:8a:da:90:11:b7:4c:32:43:44:71:47:aa:a5:cf:84:96:7a: 87:3b:14:25:44:df:b4:68:b6:b7:b1:f4:47:ef:21:50:d3:b2: ed:12:d7:26:03:61:8e:79:34:0d:ec:e7:00:d5:31:03:bc:9f: 4e:01:87:f2:51:81:6d:3c:14:83:8a:45:55:c3:b0:50:11:bc: 82:97:82:1f:d0:00:55:5b:7a:c8:23:44:0e:f3:f2:24:f2:58: e8:7d:4a:d8:75:ad:d9:1a:9f:f4:68:c3:d9:41:3f:7d:e9:e0: 00:f5:fe:de:01:29:43:b0:7e:ae:16:c1:5d:a6:73:20:65:63: d8:70:c2:b7:c6:4f:3e:b4:38:9c:02:b5:67:67:3c:11:a1:73: b5:17:11:7e:5c:35:4f:b5:a3:b7:a3:42:ca:de:94:fe:cf:05: b0:e9:4b:13:e2:b6:a3:cd:ee:5e:85:78:fc:bf:5a:a4:ff:00: ab:3d:2f:e2:d9:26:38:d3:50:cc:6a:16:b3:07:39:cc:3e:a2: 0c:49:08:98:3b:9e:a4:68:14:7a:41:1d:66:b7:24:e8:ec:d4: 1d:f2:f3:c9:e5:27:6a:69:51:2e:0c:8e:4a:b6:68:1f:7f:3b: 68:40:90:0e:a7:b2:67:f0:d6:b5:59:e0:06:3f:72:37:37:58: ff:74:44:c2 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRDOTIxMTAvBgNVBAUTKDk0NUQwOTdGMjI2M0QxNEMzNkI3QjY1QzJEQzBDMjVG OUVFNzcxOTIwHhcNMjUxMDA2MTg0OTE0WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGU0MGYyOS1kOTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzW0eZIE37nDOUIlxNz0ceEU8Cu6eJ00z3gQQ1opUZiXylrk1ertSCS2ryGVf WRSyqAxtHU2MskVA4PidP55yJlkwu39LVhegAmrQv2XiBCIkreYgpxYr+qUenimd CKzDnMALI2vAe+enbdEKf4Gpdi4elvwZNVF5q+7FZS/i7z+QRJvNVsVY6lHRh2pq UTDYa5j97MjZ/ntmThVB1dIARvEH1v34ofBDsSxEE5RJ8C5gN1HuQ7XxZn1qjT2j Z92bLSlOYf9xsWLIhj3gdxfRLJt8d1m5GuXePgbLaDNMfYkIyYZBYcPnIVVUwOU2 YgI+wr9tnqva9Tv7+wkZjzW3cQIDAQABo4IClTCCApEwHQYDVR0OBBYEFLenLUsH YPBvsXBEUZUfPDE5WvfqMB8GA1UdIwQYMBaAFJRdCX8iY9FMNre2XC3Awl+e53GS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REM5Mi8wRjREN0I0NjA5 RDgxMUVBOUZFOERCMUVDNEY5QUUwMi9sRjBKZnlKajBVdzJ0N1pjTGNEQ1g1N25j WkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xGMEpmeUpqMFV3MnQ3WmNMY0RDWDU3bmNaSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkRDOTIvMEY0RDdCNDYwOUQ4MTFFQTlGRThEQjFFQzRGOUFFMDIvQ0NFNUJBQUEw OUQ5MTFFQTgwRTU2RTIxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAr5NMwDQYJKoZIhvcNAQELBQADggEBAJmK2pARt0wyQ0Rx R6qlz4SWeoc7FCVE37Rotrex9EfvIVDTsu0S1yYDYY55NA3s5wDVMQO8n04Bh/JR gW08FIOKRVXDsFARvIKXgh/QAFVbesgjRA7z8iTyWOh9Sth1rdkan/Row9lBP33p 4AD1/t4BKUOwfq4WwV2mcyBlY9hwwrfGTz60OJwCtWdnPBGhc7UXEX5cNU+1o7ej QsrelP7PBbDpSxPitqPN7l6FePy/WqT/AKs9L+LZJjjTUMxqFrMHOcw+ogxJCJg7 nqRoFHpBHWa3JOjs1B3y88nlJ2ppUS4Mjkq2aB9/O2hAkA6nsmfw1rVZ4AY/cjc3 WP90RMI= -----END CERTIFICATE-----Generated at Mon Oct 20 16:46:52 2025 by rpki-client