$ rpki-client -vvf rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/B1244BD078D011F09BDA6276C4F9AE02.roa File: B1244BD078D011F09BDA6276C4F9AE02.roa (raw, json) Hash identifier: MSd2CPWKWVGP/2LC1J75Fk9P+pL5TkROH7YDMp9XVT0= Subject key identifier: 3D:5A:B1:C4:5A:87:2D:4E:9D:44:6F:DB:C4:50:48:69:EA:D8:88:3B Certificate issuer: /CN=A9194E03/serialNumber=E39AB1D07B50DBB9ABE2CB51CD9B1E3A5A854521 Certificate serial: 34EB Authority key identifier: E3:9A:B1:D0:7B:50:DB:B9:AB:E2:CB:51:CD:9B:1E:3A:5A:85:45:21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/B1244BD078D011F09BDA6276C4F9AE02.roa Signing time: Thu 02 Oct 2025 15:41:12 +0000 ROA not before: Thu 02 Oct 2025 15:41:12 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 401783 IP address blocks: 101.0.20.0/24 maxlen: 24 101.0.21.0/24 maxlen: 24 101.0.22.0/24 maxlen: 24 101.0.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.crl rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 15:18:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13547 (0x34eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194E03, serialNumber=E39AB1D07B50DBB9ABE2CB51CD9B1E3A5A854521 Validity Not Before: Oct 2 15:41:12 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68de9d17-6ad2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:6d:16:66:60:9f:f2:19:68:7e:7c:83:b9:3b: ae:40:12:d6:cb:7e:fd:cd:01:6b:73:eb:d5:57:00: e5:88:bf:92:16:7f:80:9f:05:c6:6a:c9:a7:5d:63: 20:4e:8c:5e:d9:dd:5a:82:dc:bf:4d:4c:62:84:81: a3:cf:2d:aa:08:85:59:93:7d:d0:54:66:cf:dd:c2: e2:9c:4e:96:82:7d:8a:09:ce:84:9a:80:87:bd:00: 7d:19:a3:14:44:d2:2e:f0:b0:1d:1e:ae:0e:52:1e: d6:01:f8:73:60:02:52:60:ec:b6:fe:9c:12:79:35: 1a:03:4f:0d:31:5d:38:11:cb:da:07:0d:d1:41:61: 3b:ae:8e:0b:1f:e6:d4:23:3b:d3:15:2a:34:c0:76: 95:77:d5:aa:51:d4:de:05:1e:4f:2e:3a:8b:b8:21: 3f:5e:e6:d5:e2:1e:fa:fd:ba:4e:79:e3:9e:14:a5: 16:fa:e9:43:e0:62:4f:81:85:c3:57:7a:60:f2:89: aa:d3:8b:fb:f8:a4:31:8d:3b:c9:a4:0d:79:49:98: 3d:ad:cc:08:1f:f6:e7:b2:df:5d:39:e1:38:3c:f3: af:24:dc:e4:d2:b6:a0:fe:7a:2a:54:f0:d9:da:e7: dc:e1:fa:62:93:13:43:c4:f2:61:23:af:6a:71:e3: e7:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:5A:B1:C4:5A:87:2D:4E:9D:44:6F:DB:C4:50:48:69:EA:D8:88:3B X509v3 Authority Key Identifier: keyid:E3:9A:B1:D0:7B:50:DB:B9:AB:E2:CB:51:CD:9B:1E:3A:5A:85:45:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/B1244BD078D011F09BDA6276C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 101.0.20.0/22 Signature Algorithm: sha256WithRSAEncryption 21:f6:4f:c1:cb:12:89:aa:8c:98:27:a1:e9:c1:fb:8a:08:1d: a0:80:d0:31:45:c0:76:ca:75:e1:d3:62:49:bc:2b:45:1d:46: 94:e7:19:97:6d:c2:67:a4:a3:3e:a2:44:03:93:43:be:7e:9f: 2f:be:72:0d:a9:ce:1d:2a:00:8e:9d:1c:e7:18:6d:a7:f6:2d: 73:82:65:d4:15:5a:a3:10:e1:ce:65:df:ca:a6:9a:b3:0d:9e: 45:5c:cd:a1:e9:67:3a:c2:06:58:a6:3f:e0:7c:23:1b:28:1d: 8c:75:5a:04:17:ee:66:b7:31:44:5b:1d:95:08:da:f3:60:68: 3f:d3:48:32:cf:33:d3:11:2a:c7:3b:fc:68:70:d9:67:03:47: ba:1a:2c:d1:30:97:06:43:a2:8a:ee:5b:42:8a:ca:02:d0:3e: 62:f8:90:a1:9e:45:d1:ec:7b:97:eb:06:bb:09:df:5b:33:5b: 92:d7:b5:81:38:7c:c2:9a:75:21:35:07:48:6b:99:ea:ee:e8: 3b:67:11:19:4d:5b:59:1b:67:67:b5:c7:12:56:7a:9e:45:b7: 08:cc:eb:8e:4d:a2:f0:6b:7a:a9:25:38:d9:16:81:48:58:77: 5d:77:a0:66:8a:96:75:7d:c4:f6:2d:3c:72:0f:c1:b4:30:72: 45:9b:85:13 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRFMDMxMTAvBgNVBAUTKEUzOUFCMUQwN0I1MERCQjlBQkUyQ0I1MUNEOUIxRTNB NUE4NTQ1MjEwHhcNMjUxMDAyMTU0MTEyWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGRlOWQxNy02YWQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1G0WZmCf8hlofnyDuTuuQBLWy379zQFrc+vVVwDliL+SFn+AnwXGasmnXWMg Toxe2d1agty/TUxihIGjzy2qCIVZk33QVGbP3cLinE6Wgn2KCc6EmoCHvQB9GaMU RNIu8LAdHq4OUh7WAfhzYAJSYOy2/pwSeTUaA08NMV04EcvaBw3RQWE7ro4LH+bU IzvTFSo0wHaVd9WqUdTeBR5PLjqLuCE/XubV4h76/bpOeeOeFKUW+ulD4GJPgYXD V3pg8omq04v7+KQxjTvJpA15SZg9rcwIH/bnst9dOeE4PPOvJNzk0rag/noqVPDZ 2ufc4fpikxNDxPJhI69qcePnlwIDAQABo4IClTCCApEwHQYDVR0OBBYEFD1ascRa hy1OnURv28RQSGnq2Ig7MB8GA1UdIwQYMBaAFOOasdB7UNu5q+LLUc2bHjpahUUh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEUwMy8zRjQ4RjIyNDFE QTYxMUUyOUEwNzVEOUQwOEIwMkNEMi80NXF4MEh0UTI3bXI0c3RSelpzZU9scUZS U0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQ1cXgwSHRRMjdtcjRzdFJ6WnNlT2xxRlJTRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTRFMDMvM0Y0OEYyMjQxREE2MTFFMjlBMDc1RDlEMDhCMDJDRDIvQjEyNDRCRDA3 OEQwMTFGMDlCREE2Mjc2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJlABQwDQYJKoZIhvcNAQELBQADggEBACH2T8HLEomqjJgn oenB+4oIHaCA0DFFwHbKdeHTYkm8K0UdRpTnGZdtwmekoz6iRAOTQ75+ny++cg2p zh0qAI6dHOcYbaf2LXOCZdQVWqMQ4c5l38qmmrMNnkVczaHpZzrCBlimP+B8Ixso HYx1WgQX7ma3MURbHZUI2vNgaD/TSDLPM9MRKsc7/Ghw2WcDR7oaLNEwlwZDooru W0KKygLQPmL4kKGeRdHse5frBrsJ31szW5LXtYE4fMKadSE1B0hrmeru6DtnERlN W1kbZ2e1xxJWep5FtwjM645NovBreqklONkWgUhYd113oGaKlnV9xPYtPHIPwbQw ckWbhRM= -----END CERTIFICATE-----Generated at Mon Oct 20 21:34:48 2025 by rpki-client