$ rpki-client -vvf rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/02C97520985011F083EA2077C4F9AE02.roa File: 02C97520985011F083EA2077C4F9AE02.roa (raw, json) Hash identifier: iDndSBoFAc9uhUgvXQuDJ/5b7tXkUPKhNkfuD+XgWIQ= Subject key identifier: ED:11:BD:53:3C:53:3B:D8:3D:EA:05:BB:E5:C3:A6:B3:46:57:7E:6F Certificate issuer: /CN=A918F550/serialNumber=A24B6A62044B70065F0506388460E4AF2F17F3FF Certificate serial: 3596 Authority key identifier: A2:4B:6A:62:04:4B:70:06:5F:05:06:38:84:60:E4:AF:2F:17:F3:FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/02C97520985011F083EA2077C4F9AE02.roa Signing time: Tue 23 Sep 2025 07:36:26 +0000 ROA not before: Tue 23 Sep 2025 07:36:26 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 18222 IP address blocks: 202.51.70.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.crl rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 14:27:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13718 (0x3596) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F550, serialNumber=A24B6A62044B70065F0506388460E4AF2F17F3FF Validity Not Before: Sep 23 07:36:26 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68d24dfa-f308 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:fd:34:d8:3e:3c:67:22:55:5c:21:77:e0:c9: 10:34:63:cb:bf:08:9f:9b:28:d5:e3:28:42:df:c5: 9f:02:38:af:a1:83:77:e7:62:4f:a0:24:d2:13:fe: 0c:36:10:7b:69:ea:6a:95:49:7a:42:f2:dc:d0:a6: d4:c3:9f:e4:0d:99:9e:b1:77:5c:f8:79:9b:36:96: 8c:a9:02:38:64:b7:94:54:fa:0c:82:99:e6:ac:c3: 6c:34:5c:72:c6:3c:e7:20:b0:17:cb:5a:1a:ce:76: 05:64:ab:e5:89:e4:fc:57:a8:5c:2e:f9:cf:c5:15: 80:36:7c:51:57:50:21:ab:4a:18:01:7d:2b:fc:9f: 49:0d:43:80:0c:2c:5e:a5:7b:7a:80:de:3b:60:55: 0a:94:19:94:1f:6e:6c:54:b5:62:7a:7f:df:4f:a3: 19:9e:bc:91:a5:54:3f:ad:27:ce:95:1f:d3:30:30: 1c:41:45:03:69:7b:92:f8:84:21:12:07:03:44:7f: 9b:72:7d:50:11:be:e3:29:d2:db:45:93:d9:65:50: 59:03:67:d2:8e:14:a6:7c:52:0b:fd:5b:bc:fc:7e: 3c:41:0a:9e:4a:06:ba:18:ba:91:b1:af:3e:f0:99: 3c:39:03:c2:f6:88:cd:39:48:04:5e:0b:59:38:59: 90:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:11:BD:53:3C:53:3B:D8:3D:EA:05:BB:E5:C3:A6:B3:46:57:7E:6F X509v3 Authority Key Identifier: keyid:A2:4B:6A:62:04:4B:70:06:5F:05:06:38:84:60:E4:AF:2F:17:F3:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/02C97520985011F083EA2077C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.51.70.0/23 Signature Algorithm: sha256WithRSAEncryption c0:a9:9e:1e:17:bf:62:ca:64:44:53:92:6b:05:aa:39:4f:13: fc:18:fa:16:ef:d1:83:2d:b8:15:e6:6d:5c:46:b0:84:93:f7: 52:ed:07:38:07:c1:4c:83:32:d7:2f:0e:48:ac:02:41:64:96: 68:3f:90:66:f6:37:6d:9c:75:f7:84:b9:36:07:d2:35:30:1e: 2f:97:52:94:cd:73:3d:a1:53:fc:26:28:39:58:10:f1:49:e6: 89:b7:14:c7:ab:02:f3:65:4d:07:9f:87:75:8c:58:83:86:0b: bc:a1:fc:c7:9a:97:b8:5a:4a:12:97:dd:24:99:a0:ae:ae:79: 84:dd:9a:7f:7c:70:49:ec:dd:a0:d3:48:7a:c6:1e:35:c2:9e: 74:d7:95:67:9f:74:21:6b:2a:61:78:b4:1e:37:de:8d:6a:b3: 98:3b:5a:1b:65:da:8c:27:42:39:eb:7c:69:77:38:24:30:17: b5:fe:56:a1:f7:d0:35:a8:ad:91:fa:14:d8:bf:f0:4f:a7:45: 40:a3:df:10:4c:12:89:6e:04:b8:63:83:31:a8:a7:49:ef:cf: 9e:84:1b:fe:ec:49:a7:df:7b:e1:76:bc:70:0a:5a:bc:4f:79: 05:f0:21:33:e7:f6:9a:7a:b8:c3:9c:21:cc:2a:50:ed:8c:6f: 8b:7d:16:1f -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY1NTAxMTAvBgNVBAUTKEEyNEI2QTYyMDQ0QjcwMDY1RjA1MDYzODg0NjBFNEFG MkYxN0YzRkYwHhcNMjUwOTIzMDczNjI2WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGQyNGRmYS1mMzA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4v002D48ZyJVXCF34MkQNGPLvwifmyjV4yhC38WfAjivoYN352JPoCTSE/4M NhB7aepqlUl6QvLc0KbUw5/kDZmesXdc+HmbNpaMqQI4ZLeUVPoMgpnmrMNsNFxy xjznILAXy1oaznYFZKvlieT8V6hcLvnPxRWANnxRV1Ahq0oYAX0r/J9JDUOADCxe pXt6gN47YFUKlBmUH25sVLVien/fT6MZnryRpVQ/rSfOlR/TMDAcQUUDaXuS+IQh EgcDRH+bcn1QEb7jKdLbRZPZZVBZA2fSjhSmfFIL/Vu8/H48QQqeSga6GLqRsa8+ 8Jk8OQPC9ojNOUgEXgtZOFmQLQIDAQABo4IClTCCApEwHQYDVR0OBBYEFO0RvVM8 UzvYPeoFu+XDprNGV35vMB8GA1UdIwQYMBaAFKJLamIES3AGXwUGOIRg5K8vF/P/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjU1MC84QjlCRDIwMjFE ODUxMUUyQjQxMjMwREMwOEIwMkNEMi9va3RxWWdSTGNBWmZCUVk0aEdEa3J5OFg4 XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29rdHFZZ1JMY0FaZkJRWTRoR0Rrcnk4WDhfOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEY1NTAvOEI5QkQyMDIxRDg1MTFFMkI0MTIzMERDMDhCMDJDRDIvMDJDOTc1MjA5 ODUwMTFGMDgzRUEyMDc3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAHKM0YwDQYJKoZIhvcNAQELBQADggEBAMCpnh4Xv2LKZERT kmsFqjlPE/wY+hbv0YMtuBXmbVxGsIST91LtBzgHwUyDMtcvDkisAkFklmg/kGb2 N22cdfeEuTYH0jUwHi+XUpTNcz2hU/wmKDlYEPFJ5om3FMerAvNlTQefh3WMWIOG C7yh/Meal7haShKX3SSZoK6ueYTdmn98cEns3aDTSHrGHjXCnnTXlWefdCFrKmF4 tB433o1qs5g7Whtl2ownQjnrfGl3OCQwF7X+VqH30DWorZH6FNi/8E+nRUCj3xBM EoluBLhjgzGop0nvz56EG/7sSaffe+F2vHAKWrxPeQXwITPn9pp6uMOcIcwqUO2M b4t9Fh8= -----END CERTIFICATE-----Generated at Mon Oct 20 02:47:21 2025 by rpki-client