$ rpki-client -vvf rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/8B92BEBE5F6411EFA6B37A52C4F9AE02.roa File: 8B92BEBE5F6411EFA6B37A52C4F9AE02.roa (raw, json) Hash identifier: vhbGmjHPdOQaH+bh64NTaxDM6fa2DZigRG71btxol5I= Subject key identifier: 78:28:A0:AE:DC:8F:A9:B8:A8:EF:19:D1:41:D1:60:07:DE:FD:0A:DF Certificate issuer: /CN=A9179672/serialNumber=91AA7783FB027819838C4A91C91C60D41FB3EEAB Certificate serial: FC Authority key identifier: 91:AA:77:83:FB:02:78:19:83:8C:4A:91:C9:1C:60:D4:1F:B3:EE:AB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kap3g_sCeBmDjEqRyRxg1B-z7qs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/8B92BEBE5F6411EFA6B37A52C4F9AE02.roa Signing time: Thu 09 Oct 2025 06:34:34 +0000 ROA not before: Thu 09 Oct 2025 06:34:34 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 16509 IP address blocks: 192.206.153.0/24 maxlen: 24 192.206.156.0/24 maxlen: 24 192.206.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.crl rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kap3g_sCeBmDjEqRyRxg1B-z7qs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:35:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 252 (0xfc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179672, serialNumber=91AA7783FB027819838C4A91C91C60D41FB3EEAB Validity Not Before: Oct 9 06:34:34 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68e75779-f156 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:13:40:13:13:d2:84:e8:46:13:0e:d0:4c:6a: 8d:cd:3a:86:33:d8:78:21:59:0c:19:d1:e6:4e:de: f5:ac:67:45:62:4b:ad:29:d9:5b:19:ad:9f:49:d8: 92:74:c1:6d:a1:3a:09:37:5c:8c:e4:76:a6:05:28: 56:7e:00:35:12:e5:34:a8:ae:15:45:d2:2b:3b:c1: c0:00:e0:21:01:93:59:bc:7a:96:e2:76:75:f2:6c: 6b:7d:0d:ad:db:36:c5:4a:07:61:65:8a:d4:14:6d: 4c:b1:88:b2:06:3f:1e:7f:32:4d:c6:39:eb:8f:e3: f4:9e:72:e9:e7:86:32:05:04:18:17:60:92:d7:6c: 8c:45:6e:75:81:31:58:bb:7b:7f:04:b9:fc:37:f0: de:cf:3b:b7:25:d0:70:66:a9:9a:50:27:1c:d5:14: 7b:cf:79:54:26:75:7b:1e:55:f0:d5:5e:49:e0:5d: 32:3b:84:f4:1e:a9:d2:ba:7b:f6:0b:f4:f5:2f:f9: 00:94:86:e7:91:bc:5f:a6:52:80:d8:91:c8:42:dd: 5c:a5:21:c5:21:7a:55:3a:a3:e1:d8:b1:14:ed:12: 3e:1b:8e:d4:62:b0:91:22:18:f7:e0:c2:4a:55:0a: b4:2a:97:a4:d0:88:44:0c:74:f3:42:98:2e:12:af: ba:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:28:A0:AE:DC:8F:A9:B8:A8:EF:19:D1:41:D1:60:07:DE:FD:0A:DF X509v3 Authority Key Identifier: keyid:91:AA:77:83:FB:02:78:19:83:8C:4A:91:C9:1C:60:D4:1F:B3:EE:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kap3g_sCeBmDjEqRyRxg1B-z7qs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/8B92BEBE5F6411EFA6B37A52C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 192.206.153.0/24 192.206.156.0/23 Signature Algorithm: sha256WithRSAEncryption c1:f6:c9:9d:63:77:be:4d:ba:d1:a0:54:a2:70:d8:d8:3f:be: 9a:9f:3e:8c:0a:ba:46:15:ce:aa:c8:b4:0c:86:a1:8b:04:a2: 1b:b5:3c:ff:11:3d:80:2d:9b:27:d0:63:1f:98:a7:8e:a0:99: 9e:95:8c:6c:b4:66:61:69:00:e6:aa:ae:97:19:f5:42:24:97: a6:6a:ec:ed:0a:1e:46:4a:bb:e8:4b:c1:d6:53:36:4e:c8:69: 8c:cc:72:42:13:3d:05:ca:c7:e6:83:69:b8:01:ba:6c:f5:1f: 34:ad:92:42:d8:ef:b2:6a:a2:22:22:ab:b0:3b:8e:a6:52:69: 9b:eb:bd:4e:8c:7a:a8:87:55:ef:bc:76:f3:b5:cc:cb:44:19: cd:15:80:95:69:14:05:51:6d:e0:e0:cb:bd:8e:a6:6b:89:e9: 06:dd:3b:2d:85:15:d1:7d:8d:28:bc:c2:f7:a9:19:8f:ef:92: 63:93:98:7b:9f:c0:d9:9e:d1:f6:b9:0e:f7:88:30:4d:3a:80: f4:6d:c8:57:7b:a8:be:97:33:5d:a9:34:b3:ed:55:e2:a2:64: 49:81:1e:91:da:81:1a:0a:56:dc:68:f4:de:0f:be:b9:13:26: 2f:41:df:16:9e:8f:a9:2e:11:89:91:2d:88:e6:96:60:0f:f5: 46:20:be:fa -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzk2NzIxMTAvBgNVBAUTKDkxQUE3NzgzRkIwMjc4MTk4MzhDNEE5MUM5MUM2MEQ0 MUZCM0VFQUIwHhcNMjUxMDA5MDYzNDM0WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGU3NTc3OS1mMTU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6BNAExPShOhGEw7QTGqNzTqGM9h4IVkMGdHmTt71rGdFYkutKdlbGa2fSdiS dMFtoToJN1yM5HamBShWfgA1EuU0qK4VRdIrO8HAAOAhAZNZvHqW4nZ18mxrfQ2t 2zbFSgdhZYrUFG1MsYiyBj8efzJNxjnrj+P0nnLp54YyBQQYF2CS12yMRW51gTFY u3t/BLn8N/Dezzu3JdBwZqmaUCcc1RR7z3lUJnV7HlXw1V5J4F0yO4T0HqnSunv2 C/T1L/kAlIbnkbxfplKA2JHIQt1cpSHFIXpVOqPh2LEU7RI+G47UYrCRIhj34MJK VQq0Kpek0IhEDHTzQpguEq+6uQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFHgooK7c j6m4qO8Z0UHRYAfe/QrfMB8GA1UdIwQYMBaAFJGqd4P7AngZg4xKkckcYNQfs+6r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OTY3Mi9FNUY0NUFEMDVG NTQxMUVGOEQxOEJFMjNDNEY5QUUwMi9rYXAzZ19zQ2VCbURqRXFSeVJ4ZzFCLXo3 cXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2thcDNnX3NDZUJtRGpFcVJ5UnhnMUItejdxcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Nzk2NzIvRTVGNDVBRDA1RjU0MTFFRjhEMThCRTIzQzRGOUFFMDIvOEI5MkJFQkU1 RjY0MTFFRkE2QjM3QTUyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBADAzpkDBAHAzpwwDQYJKoZIhvcNAQELBQADggEBAMH2yZ1j d75NutGgVKJw2Ng/vpqfPowKukYVzqrItAyGoYsEohu1PP8RPYAtmyfQYx+Yp46g mZ6VjGy0ZmFpAOaqrpcZ9UIkl6Zq7O0KHkZKu+hLwdZTNk7IaYzMckITPQXKx+aD abgBumz1HzStkkLY77JqoiIiq7A7jqZSaZvrvU6MeqiHVe+8dvO1zMtEGc0VgJVp FAVRbeDgy72OpmuJ6QbdOy2FFdF9jSi8wvepGY/vkmOTmHufwNme0fa5DveIME06 gPRtyFd7qL6XM12pNLPtVeKiZEmBHpHagRoKVtxo9N4PvrkTJi9B3xaej6kuEYmR LYjmlmAP9UYgvvo= -----END CERTIFICATE-----Generated at Mon Oct 20 16:35:28 2025 by rpki-client