$ rpki-client -vvf rpki.apnic.net/member_repository/A9187CB1/1C8940A6A4D711F0B340FC81C4F9AE02/C4FE3638A4D711F0A8D1DB3CC4F9AE02.roa File: C4FE3638A4D711F0A8D1DB3CC4F9AE02.roa (raw, json) Hash identifier: Ff+TM86OU28LuAjmuMsbEF6hmH/6fMci4W3OBvaxsAQ= Subject key identifier: 7A:00:3C:E6:0D:8A:28:94:B8:69:87:6D:41:0A:20:DE:B4:AA:BE:72 Certificate issuer: /CN=A9187CB1/serialNumber=0968CDEB646CB6AABC0F4232CE23B1DCE54CAD20 Certificate serial: 03 Authority key identifier: 09:68:CD:EB:64:6C:B6:AA:BC:0F:42:32:CE:23:B1:DC:E5:4C:AD:20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CWjN62Rstqq8D0IyziOx3OVMrSA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187CB1/1C8940A6A4D711F0B340FC81C4F9AE02/C4FE3638A4D711F0A8D1DB3CC4F9AE02.roa Signing time: Thu 09 Oct 2025 06:18:28 +0000 ROA not before: Thu 09 Oct 2025 06:18:28 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 154267 IP address blocks: 157.119.68.0/23 maxlen: 23 157.119.68.0/24 maxlen: 24 157.119.69.0/24 maxlen: 24 2402:2ea0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187CB1/1C8940A6A4D711F0B340FC81C4F9AE02/CWjN62Rstqq8D0IyziOx3OVMrSA.crl rsync://rpki.apnic.net/member_repository/A9187CB1/1C8940A6A4D711F0B340FC81C4F9AE02/CWjN62Rstqq8D0IyziOx3OVMrSA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CWjN62Rstqq8D0IyziOx3OVMrSA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:39:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187CB1, serialNumber=0968CDEB646CB6AABC0F4232CE23B1DCE54CAD20 Validity Not Before: Oct 9 06:18:28 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68e753b4-3202 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9e:a6:22:22:cb:66:2b:ab:e2:b7:10:4a:34: 3c:fa:55:1c:26:38:1e:a9:52:7a:75:e3:fa:f4:32: b3:c6:00:95:b5:9e:59:61:17:a5:c8:6b:a7:b3:8c: cb:0b:bb:b5:28:6f:f0:48:3d:2d:de:f0:53:fd:95: 65:59:f5:bb:0a:8d:30:41:08:78:3c:7b:74:a7:75: 8a:e0:e9:20:f9:0b:6f:8a:85:47:5e:9d:d9:71:18: b9:d7:d1:c8:50:c0:bb:bc:aa:62:38:98:5b:e0:1c: fa:aa:56:19:68:90:9a:8f:b0:61:e6:5e:0f:34:f4: 57:e7:b7:02:42:73:7b:ed:1f:39:b4:28:28:87:0e: 32:75:f5:35:02:19:b9:2c:03:45:33:ef:4f:63:8a: 85:73:71:26:a2:68:a3:74:cd:7f:b3:e8:b3:fd:4e: 9e:5b:b9:1d:4f:93:f4:72:85:46:83:33:d4:c5:4e: be:76:23:c2:b1:5b:46:40:56:7b:0e:fd:4d:88:ea: f2:11:c6:41:b5:53:1d:8d:1d:ce:55:eb:31:65:a1: f2:6b:93:10:d4:45:a9:78:5b:92:6d:05:61:91:20: 0a:f1:24:55:e2:da:4e:b8:38:a0:d6:e3:6d:cd:95: 6c:66:7f:81:ae:05:b2:a2:76:02:5f:7f:25:37:9c: b1:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:00:3C:E6:0D:8A:28:94:B8:69:87:6D:41:0A:20:DE:B4:AA:BE:72 X509v3 Authority Key Identifier: keyid:09:68:CD:EB:64:6C:B6:AA:BC:0F:42:32:CE:23:B1:DC:E5:4C:AD:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187CB1/1C8940A6A4D711F0B340FC81C4F9AE02/CWjN62Rstqq8D0IyziOx3OVMrSA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CWjN62Rstqq8D0IyziOx3OVMrSA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187CB1/1C8940A6A4D711F0B340FC81C4F9AE02/C4FE3638A4D711F0A8D1DB3CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.119.68.0/23 IPv6: 2402:2ea0::/32 Signature Algorithm: sha256WithRSAEncryption 9e:3d:7f:42:e9:74:0e:3f:18:ec:76:e6:8c:a2:21:dc:05:0a: 0b:fe:3c:95:a6:9e:4e:c6:be:e1:63:e1:5a:1e:7a:50:50:bb: 73:ed:e3:d1:05:16:df:6f:c2:99:65:a9:b4:87:27:fa:32:14: ce:5a:86:e6:cf:5d:75:06:b8:de:d2:13:5a:01:31:d3:26:2d: ad:b5:71:da:16:27:ce:0f:b8:4c:21:c0:82:f7:30:08:96:97: 07:b1:72:b5:00:0c:c5:48:e9:7c:f6:5f:40:83:8b:38:9d:2e: e9:2d:4b:60:f8:34:ff:43:82:dd:30:26:59:2e:6d:16:bd:b5: 67:c2:dd:56:67:1b:49:12:4b:5d:79:82:87:12:bf:b6:1c:1b: a1:9f:f9:44:5a:0a:0a:d0:68:ba:81:f8:29:a6:8c:93:38:54: 02:98:b2:4a:c0:c9:e5:31:27:d9:a4:1e:25:1e:63:77:cc:ce: 6b:7c:84:be:06:77:9a:84:94:64:a8:e8:1a:3f:48:c3:3b:e7: d6:df:e9:08:21:98:db:fc:22:f6:65:7a:e9:10:5a:5c:46:c6: cf:c7:81:b7:d6:7f:49:bd:ef:3d:35:70:59:96:39:0d:4b:b5: 9a:6a:41:b2:69:f6:67:3c:f2:ff:01:7e:51:fd:56:40:66:e2: be:8f:9f:67 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 N0NCMTExMC8GA1UEBRMoMDk2OENERUI2NDZDQjZBQUJDMEY0MjMyQ0UyM0IxRENF NTRDQUQyMDAeFw0yNTEwMDkwNjE4MjhaFw0yNjEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY4ZTc1M2I0LTMyMDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvnqYiIstmK6vitxBKNDz6VRwmOB6pUnp14/r0MrPGAJW1nllhF6XIa6ezjMsL u7Uob/BIPS3e8FP9lWVZ9bsKjTBBCHg8e3SndYrg6SD5C2+KhUdendlxGLnX0chQ wLu8qmI4mFvgHPqqVhlokJqPsGHmXg809FfntwJCc3vtHzm0KCiHDjJ19TUCGbks A0Uz709jioVzcSaiaKN0zX+z6LP9Tp5buR1Pk/RyhUaDM9TFTr52I8KxW0ZAVnsO /U2I6vIRxkG1Ux2NHc5V6zFlofJrkxDURal4W5JtBWGRIArxJFXi2k64OKDW423N lWxmf4GuBbKidgJffyU3nLHlAgMBAAGjggKkMIICoDAdBgNVHQ4EFgQUegA85g2K KJS4aYdtQQog3rSqvnIwHwYDVR0jBBgwFoAUCWjN62Rstqq8D0IyziOx3OVMrSAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3Q0IxLzFDODk0MEE2QTRE NzExRjBCMzQwRkM4MUM0RjlBRTAyL0NXak42MlJzdHFxOEQwSXl6aU94M09WTXJT QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ1dqTjYyUnN0cXE4RDBJeXppT3gzT1ZNclNBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 N0NCMS8xQzg5NDBBNkE0RDcxMUYwQjM0MEZDODFDNEY5QUUwMi9DNEZFMzYzOEE0 RDcxMUYwQThEMURCM0NDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAuBggrBgEFBQcBBwEB/wQf MB0wDAQCAAEwBgMEAZ13RDANBAIAAjAHAwUAJAIuoDANBgkqhkiG9w0BAQsFAAOC AQEAnj1/Qul0Dj8Y7HbmjKIh3AUKC/48laaeTsa+4WPhWh56UFC7c+3j0QUW32/C mWWptIcn+jIUzlqG5s9ddQa43tITWgEx0yYtrbVx2hYnzg+4TCHAgvcwCJaXB7Fy tQAMxUjpfPZfQIOLOJ0u6S1LYPg0/0OC3TAmWS5tFr21Z8LdVmcbSRJLXXmChxK/ thwboZ/5RFoKCtBouoH4KaaMkzhUApiySsDJ5TEn2aQeJR5jd8zOa3yEvgZ3moSU ZKjoGj9Iwzvn1t/pCCGY2/wi9mV66RBaXEbGz8eBt9Z/Sb3vPTVwWZY5DUu1mmpB smn2Zzzy/wF+Uf1WQGbivo+fZw== -----END CERTIFICATE-----Generated at Tue Oct 21 01:32:49 2025 by rpki-client