$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/56114F06A4BB11F0B6EACC72C4F9AE02.roa File: 56114F06A4BB11F0B6EACC72C4F9AE02.roa (raw, json) Hash identifier: iz2PMJCGfbh5+Jtd6O9796SI0m3ImTsq+vAvFcex50Y= Subject key identifier: 51:08:CE:56:1B:08:CF:14:94:5B:55:6D:B9:23:3A:D2:6B:C7:47:B3 Certificate issuer: /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138 Certificate serial: 0436 Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/56114F06A4BB11F0B6EACC72C4F9AE02.roa Signing time: Thu 09 Oct 2025 02:55:29 +0000 ROA not before: Thu 09 Oct 2025 02:55:29 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 135423 IP address blocks: 202.155.20.0/22 maxlen: 22 202.155.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1078 (0x436) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192C18, serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138 Validity Not Before: Oct 9 02:55:29 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68e72420-1f10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:34:c0:8e:1e:11:98:7b:05:37:e2:a6:bc:2f: c7:31:4f:65:66:09:2d:0d:78:84:d6:7c:b0:9b:69: 57:26:c4:b5:8e:e8:32:33:34:70:cd:71:fc:97:22: 68:aa:60:6f:1d:a9:3f:2b:c5:0c:bf:df:9f:16:43: 99:5e:aa:a0:e1:4c:2b:a7:6c:b5:69:a4:dc:b1:ea: cb:c5:84:33:4d:48:ca:8b:39:08:6e:2c:9a:4e:12: 2e:21:2f:68:65:a2:1b:e1:25:f0:eb:48:da:f9:f5: ae:9e:01:31:81:54:77:ff:97:29:76:f0:05:b0:b4: 16:5c:44:f0:1b:1d:f0:8b:e6:c8:8f:45:cf:98:a6: 82:ba:65:be:61:5d:03:72:b9:ab:37:ef:98:de:33: 65:a5:a6:62:93:8d:b2:ee:29:d8:19:d5:7b:d8:7e: fc:90:88:95:7f:aa:ce:fe:97:6b:7f:cb:11:12:ab: fe:1e:78:84:18:69:92:8b:e1:ae:fb:75:86:36:9c: ec:f5:73:25:f8:cd:7e:68:c6:cf:0e:84:a5:c7:94: f1:44:da:39:db:84:40:5f:46:7d:95:2b:70:ac:ec: 90:4f:7d:ef:86:5a:7b:f6:f0:f4:62:18:81:98:67: c0:ef:5d:c7:7b:db:52:f8:a5:49:b0:e9:e0:f2:2b: e3:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:08:CE:56:1B:08:CF:14:94:5B:55:6D:B9:23:3A:D2:6B:C7:47:B3 X509v3 Authority Key Identifier: keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/56114F06A4BB11F0B6EACC72C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.155.20.0/22 202.155.28.0/22 Signature Algorithm: sha256WithRSAEncryption d9:33:96:09:f3:71:54:66:ba:31:5d:c7:6a:ab:73:27:34:39: fe:44:59:b2:4a:db:43:7a:ef:ba:68:c6:dd:ba:51:4d:e1:73: bc:e1:5b:98:4b:f0:af:02:f0:45:b9:98:0c:d8:41:67:8e:4e: 3d:4d:bc:f1:87:5a:13:e7:51:4f:2c:6a:16:c8:b8:cc:7e:bf: 20:44:06:0b:1f:8c:a0:cd:a0:51:45:74:a2:42:20:65:e6:e9: ce:1b:f8:05:3e:06:fc:fe:ed:e3:fe:1e:d1:39:65:dd:5c:5c: 74:d9:8d:a0:36:c4:f8:d3:c4:55:b6:bb:7b:48:69:3f:60:fe: 4d:d1:d3:69:5d:8a:c1:52:db:1e:f6:86:69:08:a6:a7:1b:3a: b2:41:41:91:2e:07:4b:c5:af:1d:4c:5a:9e:86:9f:32:10:f9: 7f:c7:94:81:38:fe:7e:6f:44:ca:94:fb:d6:57:85:6c:30:7c: 5c:b2:88:e8:a2:47:16:4c:59:07:62:46:9d:86:31:58:88:e1: d4:e1:12:51:6c:f9:e8:bb:b6:fa:6e:b2:80:88:11:c4:60:b7: 50:f9:8e:c8:c6:82:bc:0a:76:bd:d7:97:51:32:9e:a3:e3:97: 50:1d:31:dc:d7:05:5f:9b:1d:db:82:86:70:b7:49:a4:8a:0a: 23:c2:1f:5d -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBDYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJDMTgxMTAvBgNVBAUTKEYxRkUwQzMyN0U3OUU1QUY0M0UxNUIwRTZGOENENjZD MDMyOUQxMzgwHhcNMjUxMDA5MDI1NTI5WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGU3MjQyMC0xZjEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsjTAjh4RmHsFN+KmvC/HMU9lZgktDXiE1nywm2lXJsS1jugyMzRwzXH8lyJo qmBvHak/K8UMv9+fFkOZXqqg4Uwrp2y1aaTcserLxYQzTUjKizkIbiyaThIuIS9o ZaIb4SXw60ja+fWungExgVR3/5cpdvAFsLQWXETwGx3wi+bIj0XPmKaCumW+YV0D crmrN++Y3jNlpaZik42y7inYGdV72H78kIiVf6rO/pdrf8sREqv+HniEGGmSi+Gu +3WGNpzs9XMl+M1+aMbPDoSlx5TxRNo524RAX0Z9lStwrOyQT33vhlp79vD0YhiB mGfA713He9tS+KVJsOng8ivj4wIDAQABo4ICmzCCApcwHQYDVR0OBBYEFFEIzlYb CM8UlFtVbbkjOtJrx0ezMB8GA1UdIwQYMBaAFPH+DDJ+eeWvQ+FbDm+M1mwDKdE4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkMxOC85QTVFRUE4QzNE RjQxMUVEODA0MUY5MzBDNEY5QUUwMi84ZjRNTW41NTVhOUQ0VnNPYjR6V2JBTXAw VGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhmNE1NbjU1NWE5RDRWc09iNHpXYkFNcDBUZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTJDMTgvOUE1RUVBOEMzREY0MTFFRDgwNDFGOTMwQzRGOUFFMDIvNTYxMTRGMDZB NEJCMTFGMEI2RUFDQzcyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBALKmxQDBALKmxwwDQYJKoZIhvcNAQELBQADggEBANkzlgnz cVRmujFdx2qrcyc0Of5EWbJK20N677poxt26UU3hc7zhW5hL8K8C8EW5mAzYQWeO Tj1NvPGHWhPnUU8sahbIuMx+vyBEBgsfjKDNoFFFdKJCIGXm6c4b+AU+Bvz+7eP+ HtE5Zd1cXHTZjaA2xPjTxFW2u3tIaT9g/k3R02ldisFS2x72hmkIpqcbOrJBQZEu B0vFrx1MWp6GnzIQ+X/HlIE4/n5vRMqU+9ZXhWwwfFyyiOiiRxZMWQdiRp2GMViI 4dThElFs+ei7tvpusoCIEcRgt1D5jsjGgrwKdr3Xl1EynqPjl1AdMdzXBV+bHduC hnC3SaSKCiPCH10= -----END CERTIFICATE-----Generated at Sun Oct 19 19:51:25 2025 by rpki-client