$ rpki-client -vvf rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/0CB23E10AB4F11EC85BF147CC4F9AE02.roa File: 0CB23E10AB4F11EC85BF147CC4F9AE02.roa (raw, json) Hash identifier: Ede0tVdlNPWVCUW//GzdQMyLfS63PzDBePoDy9bu10o= Subject key identifier: C7:A5:A6:D3:E3:B7:55:8D:A7:8E:16:96:5A:36:03:EE:E7:81:65:BF Certificate issuer: /CN=A9182502/serialNumber=8C3CCB4FFB89189C6EF5B34DFDAABE1806A5218A Certificate serial: 0ACD Authority key identifier: 8C:3C:CB:4F:FB:89:18:9C:6E:F5:B3:4D:FD:AA:BE:18:06:A5:21:8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/0CB23E10AB4F11EC85BF147CC4F9AE02.roa Signing time: Tue 12 Aug 2025 20:31:17 +0000 ROA not before: Tue 12 Aug 2025 20:31:17 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 149628 IP address blocks: 39.109.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.crl rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:51:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2765 (0xacd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182502, serialNumber=8C3CCB4FFB89189C6EF5B34DFDAABE1806A5218A Validity Not Before: Aug 12 20:31:17 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=689ba495-4a63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:6f:7e:27:4b:20:14:1b:9e:48:19:bb:f8:91: ef:88:9d:db:5c:44:64:41:62:fa:9b:a7:62:b6:6e: 61:b0:bf:f9:40:c9:f5:49:ca:28:c9:d2:ad:52:e8: ad:97:00:d6:62:2d:d5:6a:7b:79:35:df:ab:cc:a7: 0b:38:e4:d9:c7:1d:b2:92:0f:cc:ac:24:e8:28:83: df:b2:32:62:53:8e:49:1a:f8:a2:2b:7c:1d:7a:bf: 87:27:c8:b3:ba:54:f9:6a:0b:53:47:83:8f:85:5c: 72:f5:63:dd:1e:77:eb:5b:be:4c:5b:56:d4:76:06: c0:c7:ad:04:c0:60:f6:dc:1d:d6:a0:f3:19:7b:1f: 2b:d8:6a:63:48:d7:5d:32:8f:07:76:af:45:43:49: 74:22:09:8b:88:f0:9e:fe:30:b9:36:30:e4:8c:9a: b8:5c:2e:97:1e:bb:1c:54:a4:47:8f:36:99:d3:53: 0b:0f:d4:14:55:02:00:ad:4c:e3:96:d5:0c:f6:63: 1f:9a:3b:7c:01:97:1a:7e:de:9d:80:86:df:a1:ae: 7a:62:96:d8:6a:de:ee:e4:c9:64:17:72:a9:ed:af: 92:64:48:45:6d:63:fc:ed:89:b4:0a:b2:19:bb:3b: ea:3e:5c:e5:fe:5e:61:07:91:ed:ee:83:c3:7e:01: a6:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:A5:A6:D3:E3:B7:55:8D:A7:8E:16:96:5A:36:03:EE:E7:81:65:BF X509v3 Authority Key Identifier: keyid:8C:3C:CB:4F:FB:89:18:9C:6E:F5:B3:4D:FD:AA:BE:18:06:A5:21:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/0CB23E10AB4F11EC85BF147CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 39.109.78.0/24 Signature Algorithm: sha256WithRSAEncryption 59:20:d3:86:c0:af:3f:46:77:83:33:8c:41:03:28:21:4d:58: fc:b6:08:9f:ab:e9:b2:60:9f:f6:6b:bc:02:b4:4c:15:bb:30: 09:51:f2:79:90:d2:32:18:db:7c:40:cb:ad:1f:f0:c2:e2:db: 99:5f:b5:21:08:b5:6a:1a:99:d4:7c:ac:ce:53:08:a6:75:6e: b1:ad:14:ab:93:0b:30:28:78:20:66:5a:c2:8b:5f:d7:ad:e9: 03:4e:c2:e8:da:1c:a9:2c:dd:09:ce:28:fd:07:fb:ae:a2:64: 26:3f:19:3b:fa:18:2d:fd:8d:55:b2:82:02:7c:d5:1b:6d:bd: 13:01:48:a6:af:16:ef:2a:da:85:88:88:ea:51:c9:7f:7e:b2: 0a:bc:d7:9c:6a:06:a7:71:4c:10:c3:57:37:2e:2f:23:07:cd: ba:cc:4d:71:a8:0b:dd:ff:fd:1c:8a:26:3c:39:fd:a2:a4:a3: dd:f1:9a:88:c8:00:f0:ec:c7:ba:d0:2d:cf:b4:89:42:40:f8: 9d:28:b7:6d:49:8d:81:4d:97:32:6a:4f:d0:94:40:df:d8:2a: b3:16:fe:43:ef:22:39:49:05:02:be:46:b0:01:3d:25:09:b0: ec:8f:1f:14:c4:d4:c4:8c:14:eb:0a:6e:ab:94:b5:c1:41:83: 66:e3:0c:85 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCs0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODI1MDIxMTAvBgNVBAUTKDhDM0NDQjRGRkI4OTE4OUM2RUY1QjM0REZEQUFCRTE4 MDZBNTIxOEEwHhcNMjUwODEyMjAzMTE3WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODliYTQ5NS00YTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3m9+J0sgFBueSBm7+JHviJ3bXERkQWL6m6ditm5hsL/5QMn1ScooydKtUuit lwDWYi3Vant5Nd+rzKcLOOTZxx2ykg/MrCToKIPfsjJiU45JGviiK3wder+HJ8iz ulT5agtTR4OPhVxy9WPdHnfrW75MW1bUdgbAx60EwGD23B3WoPMZex8r2GpjSNdd Mo8Hdq9FQ0l0IgmLiPCe/jC5NjDkjJq4XC6XHrscVKRHjzaZ01MLD9QUVQIArUzj ltUM9mMfmjt8AZcaft6dgIbfoa56YpbYat7u5MlkF3Kp7a+SZEhFbWP87Ym0CrIZ uzvqPlzl/l5hB5Ht7oPDfgGm1QIDAQABo4IClTCCApEwHQYDVR0OBBYEFMelptPj t1WNp44Wllo2A+7ngWW/MB8GA1UdIwQYMBaAFIw8y0/7iRicbvWzTf2qvhgGpSGK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjUwMi9EQTE2QzYzQTcz Q0MxMUVBQTM5OTUzMjZDNEY5QUUwMi9qRHpMVF91SkdKeHU5Yk5OX2FxLUdBYWxJ WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pEekxUX3VKR0p4dTliTk5fYXEtR0FhbElZby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODI1MDIvREExNkM2M0E3M0NDMTFFQUEzOTk1MzI2QzRGOUFFMDIvMENCMjNFMTBB QjRGMTFFQzg1QkYxNDdDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAnbU4wDQYJKoZIhvcNAQELBQADggEBAFkg04bArz9Gd4Mz jEEDKCFNWPy2CJ+r6bJgn/ZrvAK0TBW7MAlR8nmQ0jIY23xAy60f8MLi25lftSEI tWoamdR8rM5TCKZ1brGtFKuTCzAoeCBmWsKLX9et6QNOwujaHKks3QnOKP0H+66i ZCY/GTv6GC39jVWyggJ81RttvRMBSKavFu8q2oWIiOpRyX9+sgq815xqBqdxTBDD VzcuLyMHzbrMTXGoC93//RyKJjw5/aKko93xmojIAPDsx7rQLc+0iUJA+J0ot21J jYFNlzJqT9CUQN/YKrMW/kPvIjlJBQK+RrABPSUJsOyPHxTE1MSMFOsKbquUtcFB g2bjDIU= -----END CERTIFICATE-----Generated at Sun Aug 24 00:14:55 2025 by rpki-client