$ rpki-client -vvf rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/CDD9D46EA82511F0A1B4386EC4F9AE02.roa File: CDD9D46EA82511F0A1B4386EC4F9AE02.roa (raw, json) Hash identifier: +2ndLjbvJ/FC5QVpNRaE7vUXuw0EK/JBW1SNXfBSkkw= Subject key identifier: 70:5B:73:C7:E5:BC:76:DD:94:37:35:71:11:83:F6:27:68:C9:BD:86 Certificate issuer: /CN=A9188F72/serialNumber=AA909DEB355BE314F0553219430D09ACE2D8E771 Certificate serial: 6C Authority key identifier: AA:90:9D:EB:35:5B:E3:14:F0:55:32:19:43:0D:09:AC:E2:D8:E7:71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qpCd6zVb4xTwVTIZQw0JrOLY53E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/CDD9D46EA82511F0A1B4386EC4F9AE02.roa Signing time: Mon 13 Oct 2025 11:17:02 +0000 ROA not before: Mon 13 Oct 2025 11:17:02 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 135495 IP address blocks: 163.227.240.0/24 maxlen: 24 2001:df3:7200::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/qpCd6zVb4xTwVTIZQw0JrOLY53E.crl rsync://rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/qpCd6zVb4xTwVTIZQw0JrOLY53E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qpCd6zVb4xTwVTIZQw0JrOLY53E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:21:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108 (0x6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188F72, serialNumber=AA909DEB355BE314F0553219430D09ACE2D8E771 Validity Not Before: Oct 13 11:17:02 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68ecdfad-5424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:96:67:0b:e4:fd:8f:85:18:5d:4d:1f:8a:7e: 09:e1:5a:14:18:18:ae:78:ad:25:e3:34:15:f6:1f: 51:aa:aa:0c:84:d3:58:7d:d3:06:68:66:6c:93:58: 4e:32:f5:34:e3:ee:a6:f0:8a:74:f8:b3:c1:11:56: d3:c2:4d:8c:f4:a2:88:63:b9:9e:67:73:50:db:1e: 4b:a3:75:a1:0c:4c:9a:c1:8d:2d:f4:d7:ec:b7:89: 6e:b5:24:ad:90:22:83:6c:b4:17:50:63:b7:1c:8f: 5d:01:dd:f5:e8:e6:ea:48:ac:64:9f:6c:9f:96:a5: 13:6e:cd:29:c2:25:31:45:3b:6a:f2:20:bc:35:82: 5b:e9:ca:a3:f0:32:13:24:a4:ea:df:44:56:68:4e: 91:15:35:eb:d1:83:9a:29:48:a9:ee:17:71:77:ab: 3d:77:b3:5f:52:43:7d:72:29:b5:57:75:7d:4c:c7: 85:3a:ee:32:88:99:08:78:01:97:6f:06:4a:02:16: a2:ae:71:49:42:19:03:3f:dc:4f:51:b7:3b:f3:0c: 3d:2b:4a:08:6b:c7:2b:46:06:56:c4:e1:89:d6:a2: d2:37:d8:00:e2:6e:9e:4e:36:17:41:dd:6f:9d:d3: 7b:12:a7:ea:d2:3a:da:76:da:de:f6:e1:18:20:90: e9:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:5B:73:C7:E5:BC:76:DD:94:37:35:71:11:83:F6:27:68:C9:BD:86 X509v3 Authority Key Identifier: keyid:AA:90:9D:EB:35:5B:E3:14:F0:55:32:19:43:0D:09:AC:E2:D8:E7:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/qpCd6zVb4xTwVTIZQw0JrOLY53E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qpCd6zVb4xTwVTIZQw0JrOLY53E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/CDD9D46EA82511F0A1B4386EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 163.227.240.0/24 IPv6: 2001:df3:7200::/48 Signature Algorithm: sha256WithRSAEncryption 1d:db:f5:71:8e:da:fa:15:d2:5f:bd:b4:fd:22:06:03:e1:2c: 1f:8e:69:96:d2:73:a3:0e:c6:4e:a5:00:9f:e9:40:c6:ba:9b: d4:50:58:84:7e:c3:7e:78:91:5d:40:c6:ea:8c:2f:b3:35:a4: 07:49:7d:ff:71:b3:7a:07:4f:64:fc:ae:04:de:06:ab:c9:5b: d6:e1:9d:bd:5d:87:fa:04:f6:9e:15:d3:b8:c3:81:bc:75:b0: 36:2a:95:e7:8d:af:b4:ba:64:44:25:06:33:f2:1a:14:75:95: 08:2e:df:87:b3:79:01:c4:80:3a:a1:fe:4b:97:0a:dc:df:9a: bf:a5:eb:e2:3c:8a:e1:b2:a2:6d:01:dc:d1:88:b9:ae:12:a7: 42:27:7a:f7:f2:dc:3a:1c:03:44:23:35:e1:f3:9a:c7:b0:32: 11:b0:b7:4c:ed:fc:01:76:e2:7f:b1:f8:82:6f:09:a7:fe:68: 83:fc:ef:55:01:af:f9:d4:85:98:99:62:0b:79:f2:a2:12:64: 9f:03:ce:ee:a2:52:f3:fa:e0:2a:00:ad:ae:47:0a:0c:80:fc: 59:6e:9c:45:b7:e1:ad:64:41:6b:49:85:a8:6b:d6:92:4d:bd: 3c:b3:d0:29:d0:b2:70:07:2f:ee:0f:79:fd:52:ae:0a:50:c7: 9b:41:54:21 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIBbDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 OEY3MjExMC8GA1UEBRMoQUE5MDlERUIzNTVCRTMxNEYwNTUzMjE5NDMwRDA5QUNF MkQ4RTc3MTAeFw0yNTEwMTMxMTE3MDJaFw0yNjEwMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4ZWNkZmFkLTU0MjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCplmcL5P2PhRhdTR+KfgnhWhQYGK54rSXjNBX2H1GqqgyE01h90wZoZmyTWE4y 9TTj7qbwinT4s8ERVtPCTYz0oohjuZ5nc1DbHkujdaEMTJrBjS301+y3iW61JK2Q IoNstBdQY7ccj10B3fXo5upIrGSfbJ+WpRNuzSnCJTFFO2ryILw1glvpyqPwMhMk pOrfRFZoTpEVNevRg5opSKnuF3F3qz13s19SQ31yKbVXdX1Mx4U67jKImQh4AZdv BkoCFqKucUlCGQM/3E9RtzvzDD0rSghrxytGBlbE4YnWotI32ADibp5ONhdB3W+d 03sSp+rSOtp22t724RggkOkfAgMBAAGjggKmMIICojAdBgNVHQ4EFgQUcFtzx+W8 dt2UNzVxEYP2J2jJvYYwHwYDVR0jBBgwFoAUqpCd6zVb4xTwVTIZQw0JrOLY53Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4RjcyL0NBQUYwRDRDMEUy QzExRjA4RjFENjk4MUM0RjlBRTAyL3FwQ2Q2elZiNHhUd1ZUSVpRdzBKck9MWTUz RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcXBDZDZ6VmI0eFR3VlRJWlF3MEpyT0xZNTNFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OEY3Mi9DQUFGMEQ0QzBFMkMxMUYwOEYxRDY5ODFDNEY5QUUwMi9DREQ5RDQ2RUE4 MjUxMUYwQTFCNDM4NkVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEAKPj8DAPBAIAAjAJAwcAIAEN83IAMA0GCSqGSIb3DQEBCwUA A4IBAQAd2/Vxjtr6FdJfvbT9IgYD4SwfjmmW0nOjDsZOpQCf6UDGupvUUFiEfsN+ eJFdQMbqjC+zNaQHSX3/cbN6B09k/K4E3garyVvW4Z29XYf6BPaeFdO4w4G8dbA2 KpXnja+0umREJQYz8hoUdZUILt+Hs3kBxIA6of5Llwrc35q/peviPIrhsqJtAdzR iLmuEqdCJ3r38tw6HANEIzXh85rHsDIRsLdM7fwBduJ/sfiCbwmn/miD/O9VAa/5 1IWYmWILefKiEmSfA87uolLz+uAqAK2uRwoMgPxZbpxFt+GtZEFrSYWoa9aSTb08 s9Ap0LJwBy/uD3n9Uq4KUMebQVQh -----END CERTIFICATE-----Generated at Mon Oct 20 18:41:49 2025 by rpki-client