$ rpki-client -vvf rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/DCC969B048F911EC9F04C439C4F9AE02.roa File: DCC969B048F911EC9F04C439C4F9AE02.roa (raw, json) Hash identifier: JdA5JlwXLIa+e4Ydsq+HvnuHIMVtQwL6RUUhoUIWZBE= Subject key identifier: 39:8A:AC:94:21:59:D8:67:2B:BD:4D:80:7C:2A:EF:52:A4:D5:79:F8 Certificate issuer: /CN=A918B5FE/serialNumber=AB905DDC0AFBBD1549F66EFE8117AE15000A5E0F Certificate serial: 0700 Authority key identifier: AB:90:5D:DC:0A:FB:BD:15:49:F6:6E:FE:81:17:AE:15:00:0A:5E:0F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/DCC969B048F911EC9F04C439C4F9AE02.roa Signing time: Thu 16 Oct 2025 23:33:44 +0000 ROA not before: Thu 16 Oct 2025 23:33:44 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 136265 IP address blocks: 204.48.62.0/24 maxlen: 24 216.157.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.crl rsync://rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:24:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1792 (0x700) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B5FE, serialNumber=AB905DDC0AFBBD1549F66EFE8117AE15000A5E0F Validity Not Before: Oct 16 23:33:44 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68f180d8-2146 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:02:15:54:a4:5b:5f:b1:73:e9:68:93:4b:fe: 59:6d:19:58:7e:36:d0:82:19:66:0a:18:fa:73:df: 4c:24:18:13:24:27:d5:d5:37:fe:4d:16:bd:46:41: 90:08:12:40:93:ca:9c:92:0f:ab:80:78:3d:09:a3: a2:f5:d8:bc:2a:6f:19:7b:cb:5f:44:48:62:4c:a2: f7:99:36:b6:4c:4f:cd:64:5e:dd:57:0b:41:08:ae: c7:5a:8d:cf:8c:23:d5:40:20:0d:89:9b:ce:35:e1: eb:91:87:aa:2c:6c:a3:3e:32:df:f1:18:2a:8c:cd: 7b:c5:8a:7f:ab:a6:dc:86:63:d8:54:02:8d:23:e5: 51:f6:c9:b7:07:db:04:2c:aa:0e:66:0e:ec:b5:70: ec:0c:22:c3:34:19:31:c2:92:c9:c2:df:93:69:4c: b2:62:9e:9c:e4:47:0f:be:1e:82:de:92:9e:8a:5b: 90:dd:83:c8:7e:2b:9b:a2:be:84:39:58:c9:0c:f2: 8f:92:00:c8:16:21:0c:89:f3:80:8f:18:7b:b9:05: 9f:a0:e8:2f:cf:15:5d:b8:c0:90:2b:d1:4c:02:fe: 96:35:92:a9:6d:22:4a:22:e8:6f:59:f5:34:a1:c6: bd:0c:c2:15:7c:0c:5d:24:ad:4e:32:d9:da:74:3a: 3a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:8A:AC:94:21:59:D8:67:2B:BD:4D:80:7C:2A:EF:52:A4:D5:79:F8 X509v3 Authority Key Identifier: keyid:AB:90:5D:DC:0A:FB:BD:15:49:F6:6E:FE:81:17:AE:15:00:0A:5E:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/DCC969B048F911EC9F04C439C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 204.48.62.0/24 216.157.157.0/24 Signature Algorithm: sha256WithRSAEncryption a3:60:79:32:43:83:5f:27:91:0f:fd:ea:30:cf:c5:b7:7f:b3: fc:bb:1b:2b:80:f5:c8:34:2f:d9:80:42:4a:30:ad:9c:2d:d5: 31:8e:66:45:2e:f1:2d:5a:f8:25:8d:e6:92:6f:f0:65:3f:1f: 8a:59:2d:0c:b5:b3:1e:93:1a:71:19:99:b7:9a:f3:f2:25:a9: 5a:e7:19:40:75:c0:78:83:99:b3:eb:29:44:38:58:44:04:8d: 37:93:61:57:e1:2c:a7:85:4c:8e:d4:7a:74:02:c7:4f:ad:98: 05:81:14:8f:10:12:44:4b:c2:93:6a:8b:7d:b2:f9:83:52:42: d7:8b:40:7b:85:98:8c:02:15:86:c5:61:3c:9e:13:6c:0f:7d: 41:d5:cd:79:35:36:6d:04:89:8d:a4:58:f8:e5:1d:6f:8a:e9: 46:1e:60:f0:6a:ee:5f:ff:13:5d:53:5a:5c:25:29:16:ec:5e: 9b:21:59:17:ea:78:a6:e5:f5:63:51:1d:55:34:06:ec:6c:7e: c9:f4:24:f8:69:dc:77:7b:0a:c0:2f:a3:7c:15:3e:4b:52:4a: a1:85:bc:de:24:61:a9:82:d9:72:69:5e:29:e5:ab:24:d6:21: e2:b9:30:2a:a5:73:24:04:70:3b:98:fc:48:e8:c7:a2:71:24: a7:1e:bf:65 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBwAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEI1RkUxMTAvBgNVBAUTKEFCOTA1RERDMEFGQkJEMTU0OUY2NkVGRTgxMTdBRTE1 MDAwQTVFMEYwHhcNMjUxMDE2MjMzMzQ0WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGYxODBkOC0yMTQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAswIVVKRbX7Fz6WiTS/5ZbRlYfjbQghlmChj6c99MJBgTJCfV1Tf+TRa9RkGQ CBJAk8qckg+rgHg9CaOi9di8Km8Ze8tfREhiTKL3mTa2TE/NZF7dVwtBCK7HWo3P jCPVQCANiZvONeHrkYeqLGyjPjLf8RgqjM17xYp/q6bchmPYVAKNI+VR9sm3B9sE LKoOZg7stXDsDCLDNBkxwpLJwt+TaUyyYp6c5EcPvh6C3pKeiluQ3YPIfiubor6E OVjJDPKPkgDIFiEMifOAjxh7uQWfoOgvzxVduMCQK9FMAv6WNZKpbSJKIuhvWfU0 oca9DMIVfAxdJK1OMtnadDo6zwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFDmKrJQh WdhnK71NgHwq71Kk1Xn4MB8GA1UdIwQYMBaAFKuQXdwK+70VSfZu/oEXrhUACl4P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjVGRS8zMkMzMDAyODZB OUUxMUVCQjY3NjIzMThDNEY5QUUwMi9xNUJkM0FyN3ZSVko5bTctZ1JldUZRQUtY ZzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3E1QmQzQXI3dlJWSjltNy1nUmV1RlFBS1hnOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEI1RkUvMzJDMzAwMjg2QTlFMTFFQkI2NzYyMzE4QzRGOUFFMDIvRENDOTY5QjA0 OEY5MTFFQzlGMDRDNDM5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBADMMD4DBADYnZ0wDQYJKoZIhvcNAQELBQADggEBAKNgeTJD g18nkQ/96jDPxbd/s/y7GyuA9cg0L9mAQkowrZwt1TGOZkUu8S1a+CWN5pJv8GU/ H4pZLQy1sx6TGnEZmbea8/IlqVrnGUB1wHiDmbPrKUQ4WEQEjTeTYVfhLKeFTI7U enQCx0+tmAWBFI8QEkRLwpNqi32y+YNSQteLQHuFmIwCFYbFYTyeE2wPfUHVzXk1 Nm0EiY2kWPjlHW+K6UYeYPBq7l//E11TWlwlKRbsXpshWRfqeKbl9WNRHVU0Buxs fsn0JPhp3Hd7CsAvo3wVPktSSqGFvN4kYamC2XJpXinlqyTWIeK5MCqlcyQEcDuY /Ejox6JxJKcev2U= -----END CERTIFICATE-----Generated at Tue Oct 21 00:59:26 2025 by rpki-client