$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/C68EA896D18011EFA738B84AC4F9AE02.roa File: C68EA896D18011EFA738B84AC4F9AE02.roa (raw, json) Hash identifier: HyIgElgMkh+GGclue1DDS6Azg4ghtyeJGsAuLXmPhPk= Subject key identifier: 83:5F:96:85:BF:AA:61:D0:9C:93:7B:6D:B2:FB:78:E5:69:D4:B0:C4 Certificate issuer: /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138 Certificate serial: 041A Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/C68EA896D18011EFA738B84AC4F9AE02.roa Signing time: Thu 25 Sep 2025 02:21:19 +0000 ROA not before: Thu 25 Sep 2025 02:21:19 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 23679 IP address blocks: 202.155.138.0/24 maxlen: 24 202.155.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1050 (0x41a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192C18, serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138 Validity Not Before: Sep 25 02:21:19 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68d4a71f-852e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1c:b9:6c:40:dd:4d:84:36:1f:7f:a4:b9:8d: 4c:b6:7f:6b:e4:f2:c5:aa:29:0c:a0:50:c1:86:db: a5:5d:fe:f6:cf:82:18:b7:de:7b:c4:ea:fb:06:3e: c0:c6:e7:1e:e5:bb:fb:cf:e6:16:54:9e:71:1b:9d: b2:36:8c:3a:e5:41:75:69:97:8e:2d:5f:63:34:0d: 1b:61:e2:c6:d5:6b:65:ab:31:61:67:30:12:0c:60: ef:9c:69:95:f5:12:80:13:e8:30:c3:87:88:10:1a: 65:9c:2e:27:18:21:a3:ec:b8:ce:1a:5b:f5:97:93: 85:b1:89:80:05:01:20:65:d6:88:1a:70:d4:cd:cd: 42:cc:d2:51:1a:3b:99:6c:c0:b7:97:48:1c:70:92: ae:53:1c:3d:47:64:89:ce:34:5c:2a:d5:82:30:2b: e4:df:46:7f:ce:10:7d:cb:5d:3c:ca:15:81:0c:46: 8c:36:af:5d:cc:4e:ad:3a:75:fc:4c:0f:4f:32:be: 75:12:b0:95:65:27:77:0a:4c:8d:53:59:2f:64:ec: fa:4b:04:0b:69:96:c4:b0:5a:9b:2b:8f:fb:f8:a7: 5d:c3:8c:a1:0d:4c:d0:f1:12:87:f7:02:c9:0b:37: 83:3a:2f:db:14:09:af:4b:30:3f:50:48:36:fc:61: f2:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:5F:96:85:BF:AA:61:D0:9C:93:7B:6D:B2:FB:78:E5:69:D4:B0:C4 X509v3 Authority Key Identifier: keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/C68EA896D18011EFA738B84AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.155.138.0/23 Signature Algorithm: sha256WithRSAEncryption 96:7d:b4:52:92:36:e6:d7:d6:fa:0b:74:31:88:c1:85:ae:13: 80:23:57:5c:5b:8f:2b:90:be:e4:9d:ef:72:cb:cd:1e:03:d2: de:79:60:29:09:8f:36:f7:ae:1f:ff:00:06:56:e9:38:60:f1: 3b:10:b2:56:e4:a8:5b:ea:58:7e:8f:af:b3:2b:35:78:73:e4: c8:b8:dd:51:2c:5e:35:83:ea:8d:7c:ce:21:bc:40:dd:4b:81: 2f:46:cf:01:af:9d:46:5e:04:cd:c1:92:cd:ca:ee:39:2f:c3: 2a:87:1e:d4:dc:8a:9b:bc:f6:cf:fc:48:77:b9:d3:98:7d:df: 98:a7:c7:66:59:f6:bb:96:22:de:8c:c3:0d:90:c8:b5:b6:33: b0:67:10:5c:41:60:d4:77:c5:eb:1e:39:f6:ed:4b:98:30:f7: fb:c5:ce:d1:31:47:ae:59:7f:e1:cf:f9:2f:43:48:cf:33:75: 81:f8:dd:ad:70:e4:4a:84:d9:4c:b2:7b:36:8a:17:1c:91:78: 01:57:18:f2:a7:20:67:83:ce:15:cd:c4:56:04:b6:ee:7b:83: ec:79:0c:9a:a4:77:49:1e:22:f1:fe:3a:94:34:55:3b:69:29: f1:12:42:7a:fd:09:05:c7:23:2e:51:c0:32:a1:2b:fd:54:a2: 99:1f:51:d2 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBBowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJDMTgxMTAvBgNVBAUTKEYxRkUwQzMyN0U3OUU1QUY0M0UxNUIwRTZGOENENjZD MDMyOUQxMzgwHhcNMjUwOTI1MDIyMTE5WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGQ0YTcxZi04NTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvBy5bEDdTYQ2H3+kuY1Mtn9r5PLFqikMoFDBhtulXf72z4IYt957xOr7Bj7A xuce5bv7z+YWVJ5xG52yNow65UF1aZeOLV9jNA0bYeLG1WtlqzFhZzASDGDvnGmV 9RKAE+gww4eIEBplnC4nGCGj7LjOGlv1l5OFsYmABQEgZdaIGnDUzc1CzNJRGjuZ bMC3l0gccJKuUxw9R2SJzjRcKtWCMCvk30Z/zhB9y108yhWBDEaMNq9dzE6tOnX8 TA9PMr51ErCVZSd3CkyNU1kvZOz6SwQLaZbEsFqbK4/7+Kddw4yhDUzQ8RKH9wLJ CzeDOi/bFAmvSzA/UEg2/GHyqQIDAQABo4IClTCCApEwHQYDVR0OBBYEFINfloW/ qmHQnJN7bbL7eOVp1LDEMB8GA1UdIwQYMBaAFPH+DDJ+eeWvQ+FbDm+M1mwDKdE4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkMxOC85QTVFRUE4QzNE RjQxMUVEODA0MUY5MzBDNEY5QUUwMi84ZjRNTW41NTVhOUQ0VnNPYjR6V2JBTXAw VGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhmNE1NbjU1NWE5RDRWc09iNHpXYkFNcDBUZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTJDMTgvOUE1RUVBOEMzREY0MTFFRDgwNDFGOTMwQzRGOUFFMDIvQzY4RUE4OTZE MTgwMTFFRkE3MzhCODRBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAHKm4owDQYJKoZIhvcNAQELBQADggEBAJZ9tFKSNubX1voL dDGIwYWuE4AjV1xbjyuQvuSd73LLzR4D0t55YCkJjzb3rh//AAZW6Thg8TsQslbk qFvqWH6Pr7MrNXhz5Mi43VEsXjWD6o18ziG8QN1LgS9GzwGvnUZeBM3Bks3K7jkv wyqHHtTcipu89s/8SHe505h935inx2ZZ9ruWIt6Mww2QyLW2M7BnEFxBYNR3xese OfbtS5gw9/vFztExR65Zf+HP+S9DSM8zdYH43a1w5EqE2UyyezaKFxyReAFXGPKn IGeDzhXNxFYEtu57g+x5DJqkd0keIvH+OpQ0VTtpKfESQnr9CQXHIy5RwDKhK/1U opkfUdI= -----END CERTIFICATE-----Generated at Sun Oct 19 20:02:59 2025 by rpki-client