$ rpki-client -vvf rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/FB170730324211EFA9B5F949C4F9AE02.roa File: FB170730324211EFA9B5F949C4F9AE02.roa (raw, json) Hash identifier: yYm1dMIQ816DxBHWaOlKO9yBaX3TNCa5zS93/rSk5Bg= Subject key identifier: 98:A9:75:58:1C:2F:C1:5C:E2:9D:DC:A9:2E:E3:DE:8C:1C:38:07:62 Certificate issuer: /CN=A918E308/serialNumber=D2536918C18B6BC2D91042808BCADFCDB7347531 Certificate serial: 0CAC Authority key identifier: D2:53:69:18:C1:8B:6B:C2:D9:10:42:80:8B:CA:DF:CD:B7:34:75:31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/FB170730324211EFA9B5F949C4F9AE02.roa Signing time: Thu 02 Oct 2025 18:48:49 +0000 ROA not before: Thu 02 Oct 2025 18:48:49 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 136482 IP address blocks: 202.53.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.crl rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 18:23:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3244 (0xcac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E308, serialNumber=D2536918C18B6BC2D91042808BCADFCDB7347531 Validity Not Before: Oct 2 18:48:49 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68dec911-899e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:cd:db:1d:3b:d5:52:b2:58:17:16:87:91:3a: f9:53:6d:85:0e:d1:7f:fc:96:1e:f7:1a:a8:c6:2a: 35:68:0c:18:bb:8d:53:4b:3f:53:dd:d1:73:41:6f: ce:c4:c9:5a:4b:bd:fd:ec:0b:c7:2d:f7:7e:10:4e: 2a:5b:a3:72:02:7a:32:46:13:43:26:79:65:8a:5f: 21:9b:82:32:9f:5a:56:eb:50:a1:ea:01:65:60:4f: 09:31:d3:af:78:8b:42:18:6f:c2:8f:eb:d9:fb:de: 52:7f:30:32:22:f7:03:7a:cb:2e:29:30:32:48:46: 86:ad:57:4a:ad:e3:97:1f:81:cd:66:cd:e4:6a:28: d9:9a:50:b9:fc:91:aa:51:a6:52:f7:9a:92:27:c0: 82:35:68:f9:26:90:65:80:95:f2:79:ac:69:91:7b: 58:0e:b2:f6:0b:8a:d3:f9:c9:ef:cf:46:fd:9a:d8: d5:64:aa:b5:f8:dd:d4:64:72:a7:53:19:a4:b2:77: 03:d7:1a:3c:29:5d:60:bf:16:7f:42:10:a9:2e:de: 8e:bd:35:24:0d:8e:40:62:62:ab:88:1e:f3:30:cd: fd:b5:eb:00:c2:4d:9e:6f:a1:f0:71:d2:25:b9:a6: f0:7d:72:f4:67:3e:17:53:54:2a:c0:00:fd:a8:52: f5:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:A9:75:58:1C:2F:C1:5C:E2:9D:DC:A9:2E:E3:DE:8C:1C:38:07:62 X509v3 Authority Key Identifier: keyid:D2:53:69:18:C1:8B:6B:C2:D9:10:42:80:8B:CA:DF:CD:B7:34:75:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/FB170730324211EFA9B5F949C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.53.141.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:fe:f3:c8:02:4c:98:8e:b2:45:48:d2:62:7a:69:06:ad:65: 7a:21:c7:3f:ef:db:d2:5c:ac:c5:9d:05:e4:c2:2b:af:5c:8a: 73:33:1b:6a:a6:5f:f8:ef:06:ef:ad:5a:55:f5:7d:05:21:0d: ed:8e:4c:16:fa:20:21:19:aa:58:d7:66:3b:15:39:de:02:3a: 90:9b:19:c5:f5:2c:05:62:4a:a4:e7:0d:2a:02:70:3a:ae:b7: 5b:2b:f5:c8:43:7b:b9:92:1c:51:3a:26:bc:28:4f:80:33:82: 37:af:81:89:60:70:5d:2d:71:61:fc:24:60:fd:a9:24:dd:4b: de:88:a6:1b:92:07:79:ee:8f:3a:6a:6f:ce:36:6b:e0:2b:f6: 27:db:5b:be:e5:c6:34:db:5f:55:2b:a5:c8:39:fa:61:9d:86: 88:df:43:e2:54:27:51:d1:5b:2e:f2:91:49:89:dc:e2:9d:05: 96:af:a1:5d:52:b9:e2:70:26:09:76:7d:fc:2b:2e:4c:93:b2: 3b:d9:df:b5:15:95:26:3b:bf:d9:23:a4:88:62:bb:09:07:3e: 9b:f9:f6:6a:81:94:3f:09:a7:a7:4e:48:78:61:d4:fd:50:5f: bd:5f:0f:ec:57:4d:a9:87:86:f0:f1:45:a6:ff:31:0a:be:c0: c2:3c:43:3c -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEUzMDgxMTAvBgNVBAUTKEQyNTM2OTE4QzE4QjZCQzJEOTEwNDI4MDhCQ0FERkNE QjczNDc1MzEwHhcNMjUxMDAyMTg0ODQ5WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGRlYzkxMS04OTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvs3bHTvVUrJYFxaHkTr5U22FDtF//JYe9xqoxio1aAwYu41TSz9T3dFzQW/O xMlaS7397AvHLfd+EE4qW6NyAnoyRhNDJnllil8hm4Iyn1pW61Ch6gFlYE8JMdOv eItCGG/Cj+vZ+95SfzAyIvcDessuKTAySEaGrVdKreOXH4HNZs3kaijZmlC5/JGq UaZS95qSJ8CCNWj5JpBlgJXyeaxpkXtYDrL2C4rT+cnvz0b9mtjVZKq1+N3UZHKn UxmksncD1xo8KV1gvxZ/QhCpLt6OvTUkDY5AYmKriB7zMM39tesAwk2eb6HwcdIl uabwfXL0Zz4XU1QqwAD9qFL1JwIDAQABo4IClTCCApEwHQYDVR0OBBYEFJipdVgc L8Fc4p3cqS7j3owcOAdiMB8GA1UdIwQYMBaAFNJTaRjBi2vC2RBCgIvK3823NHUx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTMwOC9DNzdGN0ExMjA2 RDUxMUVBOEE4OTdGNEZDNEY5QUUwMi8wbE5wR01HTGE4TFpFRUtBaThyZnpiYzBk VEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBsTnBHTUdMYThMWkVFS0FpOHJmemJjMGRURS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEUzMDgvQzc3RjdBMTIwNkQ1MTFFQThBODk3RjRGQzRGOUFFMDIvRkIxNzA3MzAz MjQyMTFFRkE5QjVGOTQ5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADKNY0wDQYJKoZIhvcNAQELBQADggEBAAz+88gCTJiOskVI 0mJ6aQatZXohxz/v29JcrMWdBeTCK69cinMzG2qmX/jvBu+tWlX1fQUhDe2OTBb6 ICEZqljXZjsVOd4COpCbGcX1LAViSqTnDSoCcDqut1sr9chDe7mSHFE6JrwoT4Az gjevgYlgcF0tcWH8JGD9qSTdS96IphuSB3nujzpqb842a+Ar9ifbW77lxjTbX1Ur pcg5+mGdhojfQ+JUJ1HRWy7ykUmJ3OKdBZavoV1SueJwJgl2ffwrLkyTsjvZ37UV lSY7v9kjpIhiuwkHPpv59mqBlD8Jp6dOSHhh1P1QX71fD+xXTamHhvDxRab/MQq+ wMI8Qzw= -----END CERTIFICATE-----Generated at Mon Oct 20 21:35:06 2025 by rpki-client