$ rpki-client -vvf rpki.apnic.net/member_repository/A917C422/3E745368ED5511E38072C57E5911EA32/F645F318500C11EBA2295426C4F9AE02.roa File: F645F318500C11EBA2295426C4F9AE02.roa (raw, json) Hash identifier: NK9ND6m4XQQdYJfdTkVni6Vzs2GTwmWQ7OeeG3lJVUs= Subject key identifier: 7C:A7:A7:99:8A:CB:FE:1F:A4:42:07:36:42:FA:F4:05:89:FE:A3:3D Certificate issuer: /CN=A917C422/serialNumber=35439E0BF35C888BB84D1B24ECDE7060CF744E91 Certificate serial: 2BA6 Authority key identifier: 35:43:9E:0B:F3:5C:88:8B:B8:4D:1B:24:EC:DE:70:60:CF:74:4E:91 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NUOeC_NciIu4TRsk7N5wYM90TpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C422/3E745368ED5511E38072C57E5911EA32/F645F318500C11EBA2295426C4F9AE02.roa Signing time: Fri 12 Sep 2025 14:50:28 +0000 ROA not before: Fri 12 Sep 2025 14:50:28 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 9244 IP address blocks: 152.104.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C422/3E745368ED5511E38072C57E5911EA32/NUOeC_NciIu4TRsk7N5wYM90TpE.crl rsync://rpki.apnic.net/member_repository/A917C422/3E745368ED5511E38072C57E5911EA32/NUOeC_NciIu4TRsk7N5wYM90TpE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NUOeC_NciIu4TRsk7N5wYM90TpE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 14:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11174 (0x2ba6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C422, serialNumber=35439E0BF35C888BB84D1B24ECDE7060CF744E91 Validity Not Before: Sep 12 14:50:28 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68c43333-05ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b5:0e:61:94:ef:e8:4f:4a:b0:a7:e4:a1:2d: 60:23:e5:1e:43:a8:7b:3c:db:29:b0:b9:04:45:73: 27:59:f4:86:26:4a:db:ce:4c:06:59:95:ba:4f:6b: 52:8f:5f:d6:30:9e:7d:d8:9c:fe:a4:03:45:b0:54: 8b:66:cc:91:bd:bc:92:db:f4:98:3b:1a:70:4f:aa: 5d:c0:f9:f9:e1:c6:a5:e1:63:c8:50:76:8e:da:c4: 78:2d:ba:cb:3b:c1:5e:13:88:50:a8:11:e2:2b:34: 3b:8a:a3:4f:8e:48:51:ab:a3:34:35:2a:85:61:43: 7b:12:32:b4:56:49:d1:6f:d9:6b:cc:c2:0e:d1:7d: 0f:25:73:28:a2:bf:d6:4f:49:e5:bd:de:cc:a8:bd: de:4e:78:5b:ac:e9:92:15:52:d0:dd:2c:3c:b7:a0: 2f:e2:bc:cf:0f:74:1f:c3:ad:b9:45:66:b0:8f:54: a4:03:bf:2f:cc:fb:f3:b1:d9:81:80:5c:9e:aa:76: 9a:77:59:9b:0d:36:20:9a:0b:42:47:d4:15:98:45: 44:6e:f4:57:70:64:f2:18:be:9a:81:18:4f:e8:4c: 84:b9:2e:18:4c:79:2b:3f:e3:2a:6a:99:99:70:ac: 49:6b:05:d6:a6:a5:d5:d4:00:85:19:19:a5:c7:f9: 89:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:A7:A7:99:8A:CB:FE:1F:A4:42:07:36:42:FA:F4:05:89:FE:A3:3D X509v3 Authority Key Identifier: keyid:35:43:9E:0B:F3:5C:88:8B:B8:4D:1B:24:EC:DE:70:60:CF:74:4E:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C422/3E745368ED5511E38072C57E5911EA32/NUOeC_NciIu4TRsk7N5wYM90TpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NUOeC_NciIu4TRsk7N5wYM90TpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C422/3E745368ED5511E38072C57E5911EA32/F645F318500C11EBA2295426C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 152.104.96.0/19 Signature Algorithm: sha256WithRSAEncryption 8b:fa:eb:68:21:6b:25:10:0b:85:72:77:35:8b:ee:53:9c:94: 4c:0f:69:f8:12:7d:a7:6d:db:d4:91:8d:2a:b1:8f:71:32:3d: bf:6a:67:02:cb:51:11:b5:ed:6f:7f:50:72:89:67:d6:04:d2: 12:de:54:fa:71:7e:11:7b:50:4d:e9:ce:d0:c2:98:22:cd:9d: 67:71:30:51:f6:a5:d1:5b:3f:ba:a2:73:f4:e4:11:2d:28:6c: 20:b2:16:2c:a8:21:14:90:e7:f1:d8:d7:c4:7c:5e:08:9e:c5: 3b:fd:4d:bd:70:ba:f3:24:3c:8b:81:5c:1a:34:62:87:b3:45: a0:6a:48:5b:b0:6f:9b:f3:d4:30:16:5e:e9:c8:af:73:44:09: 11:80:99:8d:b6:9f:3b:76:b5:2c:41:a4:f0:48:8a:d2:8a:c1: 30:8c:e8:4b:ba:49:b5:f2:3e:67:81:11:d8:90:5b:49:e9:21: 7b:3f:cd:1c:af:80:c5:1b:4c:c8:38:8c:49:00:7e:b1:a6:c0: 85:7f:64:58:48:59:9e:3f:eb:cb:a3:dc:8d:8a:f2:f1:fc:0f: ab:69:9d:ee:9f:d5:78:44:ca:96:22:8c:a8:1d:87:6d:9a:c7: c7:f8:91:ed:91:e9:5c:14:a2:36:d6:b5:a3:79:ea:3c:4d:3e: 71:44:55:87 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICK6YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M0MjIxMTAvBgNVBAUTKDM1NDM5RTBCRjM1Qzg4OEJCODREMUIyNEVDREU3MDYw Q0Y3NDRFOTEwHhcNMjUwOTEyMTQ1MDI4WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGM0MzMzMy0wNWFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAobUOYZTv6E9KsKfkoS1gI+UeQ6h7PNspsLkERXMnWfSGJkrbzkwGWZW6T2tS j1/WMJ592Jz+pANFsFSLZsyRvbyS2/SYOxpwT6pdwPn54cal4WPIUHaO2sR4LbrL O8FeE4hQqBHiKzQ7iqNPjkhRq6M0NSqFYUN7EjK0VknRb9lrzMIO0X0PJXMoor/W T0nlvd7MqL3eTnhbrOmSFVLQ3Sw8t6Av4rzPD3Qfw625RWawj1SkA78vzPvzsdmB gFyeqnaad1mbDTYgmgtCR9QVmEVEbvRXcGTyGL6agRhP6EyEuS4YTHkrP+MqapmZ cKxJawXWpqXV1ACFGRmlx/mJAQIDAQABo4IClTCCApEwHQYDVR0OBBYEFHynp5mK y/4fpEIHNkL69AWJ/qM9MB8GA1UdIwQYMBaAFDVDngvzXIiLuE0bJOzecGDPdE6R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzQyMi8zRTc0NTM2OEVE NTUxMUUzODA3MkM1N0U1OTExRUEzMi9OVU9lQ19OY2lJdTRUUnNrN041d1lNOTBU cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL05VT2VDX05jaUl1NFRSc2s3TjV3WU05MFRwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0M0MjIvM0U3NDUzNjhFRDU1MTFFMzgwNzJDNTdFNTkxMUVBMzIvRjY0NUYzMTg1 MDBDMTFFQkEyMjk1NDI2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAWYaGAwDQYJKoZIhvcNAQELBQADggEBAIv662ghayUQC4Vy dzWL7lOclEwPafgSfadt29SRjSqxj3EyPb9qZwLLURG17W9/UHKJZ9YE0hLeVPpx fhF7UE3pztDCmCLNnWdxMFH2pdFbP7qic/TkES0obCCyFiyoIRSQ5/HY18R8Xgie xTv9Tb1wuvMkPIuBXBo0YoezRaBqSFuwb5vz1DAWXunIr3NECRGAmY22nzt2tSxB pPBIitKKwTCM6Eu6SbXyPmeBEdiQW0npIXs/zRyvgMUbTMg4jEkAfrGmwIV/ZFhI WZ4/68uj3I2K8vH8D6tpne6f1XhEypYijKgdh22ax8f4ke2R6VwUojbWtaN56jxN PnFEVYc= -----END CERTIFICATE-----Generated at Tue Oct 21 19:47:15 2025 by rpki-client