$ rpki-client -vvf rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/3FBB06DAA33E11F087A31D6FC4F9AE02.roa File: 3FBB06DAA33E11F087A31D6FC4F9AE02.roa (raw, json) Hash identifier: BNAPJ3/CpCWTx7hBbgBdxITs1Fr1KS3TR7ZjscKU17w= Subject key identifier: C5:19:E2:14:5C:08:9C:5F:DD:50:C7:D5:B3:79:81:1E:5F:99:EE:44 Certificate issuer: /CN=A9183B95/serialNumber=FAD7ECC9C05CD8EB2056909D6C614715E2C5133E Certificate serial: 0462 Authority key identifier: FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/3FBB06DAA33E11F087A31D6FC4F9AE02.roa Signing time: Tue 07 Oct 2025 05:27:00 +0000 ROA not before: Tue 07 Oct 2025 05:27:00 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 55154 IP address blocks: 43.228.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.crl rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:13:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1122 (0x462) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183B95, serialNumber=FAD7ECC9C05CD8EB2056909D6C614715E2C5133E Validity Not Before: Oct 7 05:27:00 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=68e4a4a4-2f67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ae:4c:c5:8c:35:d1:46:91:e4:a7:97:68:8e: a3:e6:8a:c4:08:af:4c:b8:90:eb:65:7e:11:7a:22: 76:23:fd:fb:29:4d:27:78:ca:b6:62:22:db:8c:c2: 8e:8b:e0:61:52:3c:63:85:3e:cb:c7:e9:c4:11:5b: 2b:a4:e8:45:9e:f3:a4:3d:c3:55:14:ea:c9:00:e6: 10:1f:6a:be:cc:78:07:47:0a:52:2a:77:65:71:42: 5e:b3:09:12:cb:25:fe:68:2b:97:0a:bd:00:34:e0: 9a:5f:aa:74:46:d0:ba:f6:31:cd:ec:e0:01:7a:20: 83:e6:36:76:23:95:8a:c2:d6:7c:43:b3:49:63:aa: 7a:20:3e:1c:91:b1:c3:1b:50:16:33:03:f1:e8:c7: b1:28:1b:52:37:4c:75:ca:0c:52:c3:66:31:47:4d: bb:9f:4e:3f:e7:a0:5a:60:5c:bf:87:a2:fe:80:df: a1:26:c8:c4:23:a4:3a:1c:36:af:b7:82:b1:1d:ac: ac:5a:e7:4b:3b:7c:3e:c2:a1:32:f9:4e:4e:57:e2: f5:32:f1:e8:08:ab:15:5f:b0:b1:8b:e0:06:35:11: 0e:03:cc:c8:a0:1a:8e:6b:78:fa:6f:a1:e5:b0:4a: cf:85:a8:2f:11:c2:64:25:71:ce:5a:74:83:0b:4f: d4:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:19:E2:14:5C:08:9C:5F:DD:50:C7:D5:B3:79:81:1E:5F:99:EE:44 X509v3 Authority Key Identifier: keyid:FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/3FBB06DAA33E11F087A31D6FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.228.157.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:55:89:70:80:15:24:b5:49:55:14:fe:3b:ee:38:00:dd:2c: e0:89:27:b9:16:15:0e:b8:17:58:77:2b:c2:9e:1d:92:c2:bd: 2a:a0:d0:a9:01:ff:dc:1a:fa:69:ad:42:cf:20:df:30:01:3f: 20:ec:c8:ff:71:f1:e2:f2:60:16:41:1f:b1:fe:08:b6:55:ee: 7f:30:fd:11:05:3c:bb:a7:9c:1f:d4:e5:35:b8:76:e7:88:38: ca:13:28:dc:62:34:2e:26:15:17:ea:9b:b4:54:8f:a7:5c:ae: 72:35:40:46:b7:c5:be:df:63:d5:e5:2b:52:a2:32:78:e9:08: b1:20:06:e4:ff:fc:e4:7e:0e:7b:ae:a7:f7:c0:81:f1:26:cc: f2:fd:38:e1:06:61:e3:38:8d:80:59:f3:2b:59:9d:06:41:60: 37:12:4e:17:b6:36:46:9e:47:0b:d3:16:1f:d7:86:2b:4a:0f: 2b:d9:ac:db:5f:93:f0:ee:44:b6:a6:98:b8:d6:2e:95:54:3f: 59:2b:3a:26:f6:57:6f:4f:1b:1d:c6:ed:00:78:3f:59:9d:20: ae:12:25:d9:3d:41:05:ab:a5:6a:9d:24:47:73:98:e2:01:85: e1:cb:56:6c:17:1d:e6:a7:2c:8f:db:c8:bf:a9:f2:45:5f:ee: 9d:7c:2f:32 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBGIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODNCOTUxMTAvBgNVBAUTKEZBRDdFQ0M5QzA1Q0Q4RUIyMDU2OTA5RDZDNjE0NzE1 RTJDNTEzM0UwHhcNMjUxMDA3MDUyNzAwWhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGU0YTRhNC0yZjY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt65MxYw10UaR5KeXaI6j5orECK9MuJDrZX4ReiJ2I/37KU0neMq2YiLbjMKO i+BhUjxjhT7Lx+nEEVsrpOhFnvOkPcNVFOrJAOYQH2q+zHgHRwpSKndlcUJeswkS yyX+aCuXCr0ANOCaX6p0RtC69jHN7OABeiCD5jZ2I5WKwtZ8Q7NJY6p6ID4ckbHD G1AWMwPx6MexKBtSN0x1ygxSw2YxR027n04/56BaYFy/h6L+gN+hJsjEI6Q6HDav t4KxHaysWudLO3w+wqEy+U5OV+L1MvHoCKsVX7Cxi+AGNREOA8zIoBqOa3j6b6Hl sErPhagvEcJkJXHOWnSDC0/U5QIDAQABo4IClTCCApEwHQYDVR0OBBYEFMUZ4hRc CJxf3VDH1bN5gR5fme5EMB8GA1UdIwQYMBaAFPrX7MnAXNjrIFaQnWxhRxXixRM+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0I5NS9CNTRBM0MzNDgw MzUxMUVDOUFEREE1NEZDNEY5QUUwMi8tdGZzeWNCYzJPc2dWcENkYkdGSEZlTEZF ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy10ZnN5Y0JjMk9zZ1ZwQ2RiR0ZIRmVMRkV6NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODNCOTUvQjU0QTNDMzQ4MDM1MTFFQzlBRERBNTRGQzRGOUFFMDIvM0ZCQjA2REFB MzNFMTFGMDg3QTMxRDZGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAr5J0wDQYJKoZIhvcNAQELBQADggEBAI1ViXCAFSS1SVUU /jvuOADdLOCJJ7kWFQ64F1h3K8KeHZLCvSqg0KkB/9wa+mmtQs8g3zABPyDsyP9x 8eLyYBZBH7H+CLZV7n8w/REFPLunnB/U5TW4dueIOMoTKNxiNC4mFRfqm7RUj6dc rnI1QEa3xb7fY9XlK1KiMnjpCLEgBuT//OR+Dnuup/fAgfEmzPL9OOEGYeM4jYBZ 8ytZnQZBYDcSThe2NkaeRwvTFh/XhitKDyvZrNtfk/DuRLammLjWLpVUP1krOib2 V29PGx3G7QB4P1mdIK4SJdk9QQWrpWqdJEdzmOIBheHLVmwXHeanLI/byL+p8kVf 7p18LzI= -----END CERTIFICATE-----Generated at Mon Oct 20 03:49:55 2025 by rpki-client