$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/BAD612C09A5F11F0AE92FC5FC4F9AE02.roa File: BAD612C09A5F11F0AE92FC5FC4F9AE02.roa (raw, json) Hash identifier: L+dnh2Q7HzNEt79WFxpyhQgF8sP1p/CKeRCPS6JErUk= Subject key identifier: D7:E5:51:FA:BE:A7:25:44:D5:33:71:9D:D9:11:E7:88:F5:74:74:FD Certificate issuer: /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138 Certificate serial: 042A Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/BAD612C09A5F11F0AE92FC5FC4F9AE02.roa Signing time: Thu 25 Sep 2025 22:34:00 +0000 ROA not before: Thu 25 Sep 2025 22:34:00 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 214036 IP address blocks: 202.155.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1066 (0x42a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192C18, serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138 Validity Not Before: Sep 25 22:34:00 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68d5c357-e7a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:1f:82:68:cf:e1:e1:06:21:9f:a9:7c:37:7e: 0c:8a:66:05:3c:5e:a6:8e:09:4f:d1:13:eb:81:0d: cb:8e:9e:38:db:82:83:5c:0e:ec:e0:fb:fc:cd:44: e7:ea:85:13:0f:b3:4c:0f:94:a2:5d:91:fc:dd:bd: 1f:10:aa:8e:05:91:17:ac:a1:df:45:2d:d0:fb:07: a3:83:e5:d7:70:ad:39:f7:c5:a3:d7:e1:11:1b:52: 96:e0:2c:40:8b:63:66:cc:32:eb:df:9c:fa:b4:12: e2:2f:52:0d:bf:39:15:81:2c:c1:43:10:fb:55:98: d4:ec:06:e7:72:d3:01:03:a4:1c:d3:37:00:c2:a6: 7c:1d:1a:20:18:a5:1b:22:ae:f8:61:3c:d8:37:41: 0b:e9:85:4e:3c:ab:9c:0a:77:63:dd:0b:bc:ff:60: d8:6f:da:d8:af:87:10:b2:57:66:03:8c:f6:b0:01: de:86:01:91:23:65:4d:93:b6:43:4a:39:06:a8:39: 17:8f:d4:46:11:09:2c:d6:8c:3d:e6:66:41:1e:b7: ac:99:50:bc:bf:8c:93:e7:d9:a6:93:a8:a7:c0:d4: 59:fc:fb:0b:1f:f4:6c:60:4c:b2:b5:34:27:36:0d: e0:23:ea:72:c5:ae:26:66:03:16:4c:03:98:ce:3c: b6:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:E5:51:FA:BE:A7:25:44:D5:33:71:9D:D9:11:E7:88:F5:74:74:FD X509v3 Authority Key Identifier: keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/BAD612C09A5F11F0AE92FC5FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.155.11.0/24 Signature Algorithm: sha256WithRSAEncryption 30:58:6a:c8:ad:0f:01:d9:4b:cc:a2:f5:4f:43:b1:2a:1c:c6: 5b:77:ea:be:db:72:8f:37:7f:a4:b7:dd:84:11:e1:0a:60:8f: c1:5a:9f:1a:bf:3b:26:d3:ec:89:51:64:f2:be:fa:71:9f:b2: 5d:f7:78:72:cb:f0:c2:98:ec:ac:16:65:71:8f:f2:1e:02:e8: b8:e5:a9:21:e5:74:ab:90:5e:48:05:c6:46:d2:56:7a:bc:dd: 73:25:5f:ef:95:f4:2c:f2:fb:09:03:af:be:ab:b8:f4:91:b2: 14:e5:9d:e7:f6:f5:b2:b9:97:a1:b1:93:68:eb:c2:1b:dd:0e: 49:ba:db:db:a1:08:8d:0a:68:38:88:74:8c:68:61:b9:42:03: ea:73:5f:53:25:c2:39:d3:97:fd:22:a5:10:45:fd:59:da:77: 83:c3:58:c4:20:59:f5:20:1c:98:b3:32:19:26:65:50:af:a2: eb:50:f0:1c:bf:2a:14:58:12:3f:53:e6:b3:01:97:5d:39:bf: f3:02:af:84:58:b5:5b:0e:87:75:69:f2:1e:fe:eb:eb:2d:5b: e5:54:c9:e7:60:55:65:08:9c:09:7d:d7:d9:75:cd:db:17:08: 09:1c:2e:45:ff:ac:30:a6:c4:bd:19:b1:31:79:c9:2d:a3:e2: 41:db:29:dd -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBCowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJDMTgxMTAvBgNVBAUTKEYxRkUwQzMyN0U3OUU1QUY0M0UxNUIwRTZGOENENjZD MDMyOUQxMzgwHhcNMjUwOTI1MjIzNDAwWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGQ1YzM1Ny1lN2E4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyh+CaM/h4QYhn6l8N34MimYFPF6mjglP0RPrgQ3Ljp4424KDXA7s4Pv8zUTn 6oUTD7NMD5SiXZH83b0fEKqOBZEXrKHfRS3Q+wejg+XXcK0598Wj1+ERG1KW4CxA i2NmzDLr35z6tBLiL1INvzkVgSzBQxD7VZjU7AbnctMBA6Qc0zcAwqZ8HRogGKUb Iq74YTzYN0EL6YVOPKucCndj3Qu8/2DYb9rYr4cQsldmA4z2sAHehgGRI2VNk7ZD SjkGqDkXj9RGEQks1ow95mZBHresmVC8v4yT59mmk6inwNRZ/PsLH/RsYEyytTQn Ng3gI+pyxa4mZgMWTAOYzjy2uQIDAQABo4IClTCCApEwHQYDVR0OBBYEFNflUfq+ pyVE1TNxndkR54j1dHT9MB8GA1UdIwQYMBaAFPH+DDJ+eeWvQ+FbDm+M1mwDKdE4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkMxOC85QTVFRUE4QzNE RjQxMUVEODA0MUY5MzBDNEY5QUUwMi84ZjRNTW41NTVhOUQ0VnNPYjR6V2JBTXAw VGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhmNE1NbjU1NWE5RDRWc09iNHpXYkFNcDBUZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTJDMTgvOUE1RUVBOEMzREY0MTFFRDgwNDFGOTMwQzRGOUFFMDIvQkFENjEyQzA5 QTVGMTFGMEFFOTJGQzVGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADKmwswDQYJKoZIhvcNAQELBQADggEBADBYasitDwHZS8yi 9U9DsSocxlt36r7bco83f6S33YQR4Qpgj8Fanxq/OybT7IlRZPK++nGfsl33eHLL 8MKY7KwWZXGP8h4C6LjlqSHldKuQXkgFxkbSVnq83XMlX++V9Czy+wkDr76ruPSR shTlnef29bK5l6Gxk2jrwhvdDkm629uhCI0KaDiIdIxoYblCA+pzX1MlwjnTl/0i pRBF/Vnad4PDWMQgWfUgHJizMhkmZVCvoutQ8By/KhRYEj9T5rMBl105v/MCr4RY tVsOh3Vp8h7+6+stW+VUyedgVWUInAl919l1zdsXCAkcLkX/rDCmxL0ZsTF5yS2j 4kHbKd0= -----END CERTIFICATE-----Generated at Sun Oct 19 19:51:25 2025 by rpki-client