$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/9DB30BB83D5211F09B7D046AC4F9AE02.roa File: 9DB30BB83D5211F09B7D046AC4F9AE02.roa (raw, json) Hash identifier: POdAdeW6Mhez6u6FotX+t/6y8MhVWhrh9+mBHLv8MHg= Subject key identifier: FD:69:4F:90:6C:E4:5F:71:02:6B:DA:E2:2C:7B:D6:27:8E:3E:3B:DD Certificate issuer: /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138 Certificate serial: 041B Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/9DB30BB83D5211F09B7D046AC4F9AE02.roa Signing time: Thu 25 Sep 2025 02:21:20 +0000 ROA not before: Thu 25 Sep 2025 02:21:20 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 2914 IP address blocks: 218.33.80.0/22 maxlen: 24 218.33.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1051 (0x41b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192C18, serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138 Validity Not Before: Sep 25 02:21:20 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68d4a720-e61f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:29:95:84:4b:91:10:c4:fe:2e:1e:de:e6:7f: c7:22:2d:06:ba:07:7d:ef:4f:37:a4:aa:a7:8b:c1: 71:d4:c9:90:50:73:1f:26:c9:76:9f:4e:8b:07:00: 33:d4:01:09:a3:78:08:ee:8e:d9:b5:33:af:ef:dd: 6d:6c:9f:a7:a6:19:04:2a:f0:b9:60:ba:0a:f7:6c: af:65:4d:b3:60:41:b0:ed:1d:4f:b9:2f:ef:75:aa: 76:3b:ae:3d:a0:f6:bb:16:91:76:60:52:3d:a6:27: 05:f3:bb:6b:d9:82:4b:9f:99:25:5d:fd:33:d6:61: 5d:62:60:c6:11:30:cc:f4:9c:9d:f0:e3:23:44:73: a1:16:2c:c0:0a:73:40:ed:4b:ac:20:96:e6:e1:e8: 64:76:95:2f:86:f7:23:2e:14:1d:f1:61:0c:88:c2: 4d:e4:be:3a:e2:a3:fc:88:8a:a2:50:cc:4f:0a:61: 82:3d:24:d8:5c:3c:e4:cc:27:a7:cb:9c:ef:92:53: fa:75:b7:20:be:a8:a7:c3:7d:24:f3:c4:a1:28:61: 11:bf:9a:fc:ec:bd:d4:cb:e6:cb:fd:ed:85:81:eb: 75:dd:d2:5e:a7:15:ab:bd:b1:bc:7f:6e:64:e2:85: d3:d8:f2:e2:62:a6:e6:81:65:f9:ff:3b:82:9f:e0: d1:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:69:4F:90:6C:E4:5F:71:02:6B:DA:E2:2C:7B:D6:27:8E:3E:3B:DD X509v3 Authority Key Identifier: keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/9DB30BB83D5211F09B7D046AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 218.33.80.0/22 218.33.124.0/22 Signature Algorithm: sha256WithRSAEncryption 61:5e:a0:7f:05:89:77:00:c0:51:47:23:aa:bd:f7:97:e0:8b: c6:46:d2:c1:6b:2e:6f:fd:ea:26:f3:dc:50:47:ee:26:2f:df: 7d:fe:36:29:74:55:c1:f0:dc:71:7d:12:1b:cb:d6:77:26:cf: 1e:0e:35:2d:fb:fa:bf:4d:95:68:27:04:b1:06:a8:33:f3:f2: 76:ce:0e:ba:7d:ca:a6:7b:58:b6:43:ec:93:14:7f:0a:87:96: b9:c3:8d:f1:21:69:10:8e:bf:20:96:41:e0:49:65:40:a3:4a: f3:1f:f3:db:e5:61:b7:87:0a:01:95:fd:a2:c1:ac:7b:70:9e: 86:8d:5f:e3:bd:9f:e3:59:c7:eb:fc:d1:9b:b4:26:ab:2a:55: b3:65:fd:98:df:40:f5:7a:8d:9a:61:14:bf:1b:38:d9:b6:a6: e2:87:e1:6d:62:07:24:b6:d6:30:d6:da:b7:ae:98:4e:52:ff: f5:7c:d9:03:46:b6:9b:54:62:32:43:70:79:62:2d:20:33:11: 78:31:8a:ef:37:bb:f9:c0:20:47:1f:65:a5:08:f4:f9:23:16: 3c:05:a8:99:20:bb:8e:73:5e:53:74:ec:47:b9:42:11:cc:7c: 1d:69:62:c6:07:62:b6:9e:a9:e0:66:15:b8:a1:3e:e3:75:ac: 1b:79:45:e7 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBBswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJDMTgxMTAvBgNVBAUTKEYxRkUwQzMyN0U3OUU1QUY0M0UxNUIwRTZGOENENjZD MDMyOUQxMzgwHhcNMjUwOTI1MDIyMTIwWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGQ0YTcyMC1lNjFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoimVhEuREMT+Lh7e5n/HIi0Gugd97083pKqni8Fx1MmQUHMfJsl2n06LBwAz 1AEJo3gI7o7ZtTOv791tbJ+nphkEKvC5YLoK92yvZU2zYEGw7R1PuS/vdap2O649 oPa7FpF2YFI9picF87tr2YJLn5klXf0z1mFdYmDGETDM9Jyd8OMjRHOhFizACnNA 7UusIJbm4ehkdpUvhvcjLhQd8WEMiMJN5L464qP8iIqiUMxPCmGCPSTYXDzkzCen y5zvklP6dbcgvqinw30k88ShKGERv5r87L3Uy+bL/e2Fget13dJepxWrvbG8f25k 4oXT2PLiYqbmgWX5/zuCn+DR2QIDAQABo4ICmzCCApcwHQYDVR0OBBYEFP1pT5Bs 5F9xAmva4ix71ieOPjvdMB8GA1UdIwQYMBaAFPH+DDJ+eeWvQ+FbDm+M1mwDKdE4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkMxOC85QTVFRUE4QzNE RjQxMUVEODA0MUY5MzBDNEY5QUUwMi84ZjRNTW41NTVhOUQ0VnNPYjR6V2JBTXAw VGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhmNE1NbjU1NWE5RDRWc09iNHpXYkFNcDBUZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTJDMTgvOUE1RUVBOEMzREY0MTFFRDgwNDFGOTMwQzRGOUFFMDIvOURCMzBCQjgz RDUyMTFGMDlCN0QwNDZBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBALaIVADBALaIXwwDQYJKoZIhvcNAQELBQADggEBAGFeoH8F iXcAwFFHI6q995fgi8ZG0sFrLm/96ibz3FBH7iYv333+Nil0VcHw3HF9EhvL1ncm zx4ONS37+r9NlWgnBLEGqDPz8nbODrp9yqZ7WLZD7JMUfwqHlrnDjfEhaRCOvyCW QeBJZUCjSvMf89vlYbeHCgGV/aLBrHtwnoaNX+O9n+NZx+v80Zu0JqsqVbNl/Zjf QPV6jZphFL8bONm2puKH4W1iByS21jDW2reumE5S//V82QNGtptUYjJDcHliLSAz EXgxiu83u/nAIEcfZaUI9PkjFjwFqJkgu45zXlN07Ee5QhHMfB1pYsYHYraeqeBm FbihPuN1rBt5Rec= -----END CERTIFICATE-----Generated at Sun Oct 19 20:02:56 2025 by rpki-client