$ rpki-client -vvf rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/709F917AF74111EF98C99938C4F9AE02.roa File: 709F917AF74111EF98C99938C4F9AE02.roa (raw, json) Hash identifier: 1qf+iawoit0ys+iUAf7LEY7HtRnvUIOTI+MZhHCWuYU= Subject key identifier: 55:51:E2:66:F4:84:6A:7C:2C:07:33:A5:F9:1E:93:94:4E:1A:6B:37 Certificate issuer: /CN=A9195DE5/serialNumber=B85BED99BF740ABAD5A399C9DF5FE9962A6DE8F1 Certificate serial: 07CA Authority key identifier: B8:5B:ED:99:BF:74:0A:BA:D5:A3:99:C9:DF:5F:E9:96:2A:6D:E8:F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uFvtmb90CrrVo5nJ31_plipt6PE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/709F917AF74111EF98C99938C4F9AE02.roa Signing time: Mon 31 Mar 2025 21:21:33 +0000 ROA not before: Mon 31 Mar 2025 21:21:33 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 25743 IP address blocks: 116.204.208.0/24 maxlen: 24 116.204.209.0/24 maxlen: 24 116.204.210.0/24 maxlen: 24 116.204.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.crl rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uFvtmb90CrrVo5nJ31_plipt6PE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:07:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1994 (0x7ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195DE5, serialNumber=B85BED99BF740ABAD5A399C9DF5FE9962A6DE8F1 Validity Not Before: Mar 31 21:21:33 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67eb075d-4764 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:93:ff:da:75:0d:1d:e2:66:de:e6:43:69:08: c7:58:8f:81:b8:e3:f5:5f:4f:96:3a:08:b0:d2:ea: 86:5a:fe:af:a9:2b:4c:03:2e:4c:e6:94:b7:6e:df: f8:1d:ff:77:57:10:6f:11:2d:13:69:48:41:83:ce: ad:c4:bc:a0:ba:28:c1:55:a3:7e:f6:3b:1c:21:0a: ee:89:cd:fc:4f:83:65:be:ae:71:7d:5b:a4:d5:af: 88:80:6d:e5:15:9c:a2:90:4d:a3:2d:93:55:78:fd: 7d:8e:c8:b5:d1:34:32:8d:0f:c2:c5:55:56:13:00: 50:53:d8:83:8a:39:b4:9a:d0:f4:9d:7c:f8:88:d2: af:98:5b:85:75:ce:32:0f:ae:89:03:2b:a8:e7:5f: b6:93:36:50:94:0f:0d:66:bc:c0:24:2a:fc:0b:89: f1:c0:a0:07:da:44:c7:02:36:c1:be:b8:73:8f:7c: 86:86:cd:09:06:27:2f:05:fb:b5:09:5c:36:fa:4a: b6:1a:e7:ad:ff:61:15:6b:18:10:49:0d:71:d5:3e: d5:ec:4d:2f:c5:1d:c3:2d:ba:0a:c7:f7:37:af:4e: 36:46:a7:7d:fa:27:60:d5:6c:7c:42:2b:90:5f:30: db:f3:c7:ee:df:9c:78:f4:21:b0:59:0b:28:78:3f: 65:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:51:E2:66:F4:84:6A:7C:2C:07:33:A5:F9:1E:93:94:4E:1A:6B:37 X509v3 Authority Key Identifier: keyid:B8:5B:ED:99:BF:74:0A:BA:D5:A3:99:C9:DF:5F:E9:96:2A:6D:E8:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uFvtmb90CrrVo5nJ31_plipt6PE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/709F917AF74111EF98C99938C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 116.204.208.0/22 Signature Algorithm: sha256WithRSAEncryption 9e:c3:ad:1d:fd:0b:e6:c4:c3:85:a1:be:fe:c6:0f:b9:68:38: 1a:f5:97:a3:92:6f:49:6f:c5:4e:da:65:94:ff:3e:2c:0e:1e: 3a:ae:3f:fd:01:80:85:a2:20:8e:17:3c:dd:06:f3:31:ed:a0: a9:53:a6:c6:d8:92:52:6b:09:ed:af:63:c4:d7:68:90:2e:10: 2f:ae:75:3c:40:85:93:c5:26:7f:72:0c:0f:d0:7c:4f:d0:57: bf:7c:da:09:9b:74:60:d4:e3:bc:bb:9c:fb:55:0b:af:05:bf: 29:b3:8f:5b:15:f3:dd:53:a1:6e:68:2d:7b:05:29:3a:ff:5f: 3a:87:3c:21:cd:54:e3:47:fc:77:b3:43:a3:89:2d:15:4f:43: 8f:86:13:40:a0:db:65:44:7c:47:6c:44:5d:8b:a6:68:cc:4e: 9e:98:87:a5:a6:80:06:2a:e1:d1:ee:e6:cb:3a:f2:00:47:9d: 32:cc:01:30:0e:45:4f:42:24:ef:5c:13:25:de:65:75:d5:f9: 54:f5:8e:60:06:1a:b7:29:a8:40:8f:09:a4:03:3e:31:85:12: 14:27:3a:ad:7e:6b:ff:d4:fa:33:c9:e5:ff:0b:b2:52:62:e3: 36:e2:8e:18:fd:42:54:0c:08:a0:83:67:01:0a:3e:42:d8:0a: 8c:6f:90:c6 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB8owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVERTUxMTAvBgNVBAUTKEI4NUJFRDk5QkY3NDBBQkFENUEzOTlDOURGNUZFOTk2 MkE2REU4RjEwHhcNMjUwMzMxMjEyMTMzWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2ViMDc1ZC00NzY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuJP/2nUNHeJm3uZDaQjHWI+BuOP1X0+WOgiw0uqGWv6vqStMAy5M5pS3bt/4 Hf93VxBvES0TaUhBg86txLyguijBVaN+9jscIQruic38T4Nlvq5xfVuk1a+IgG3l FZyikE2jLZNVeP19jsi10TQyjQ/CxVVWEwBQU9iDijm0mtD0nXz4iNKvmFuFdc4y D66JAyuo51+2kzZQlA8NZrzAJCr8C4nxwKAH2kTHAjbBvrhzj3yGhs0JBicvBfu1 CVw2+kq2Guet/2EVaxgQSQ1x1T7V7E0vxR3DLboKx/c3r042Rqd9+idg1Wx8QiuQ XzDb88fu35x49CGwWQsoeD9lMwIDAQABo4IClTCCApEwHQYDVR0OBBYEFFVR4mb0 hGp8LAczpfkek5ROGms3MB8GA1UdIwQYMBaAFLhb7Zm/dAq61aOZyd9f6ZYqbejx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NURFNS9FM0VENjVEOEY0 QkUxMUVBOUMzNUZFNkFDNEY5QUUwMi91RnZ0bWI5MENyclZvNW5KMzFfcGxpcHQ2 UEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VGdnRtYjkwQ3JyVm81bkozMV9wbGlwdDZQRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTVERTUvRTNFRDY1RDhGNEJFMTFFQTlDMzVGRTZBQzRGOUFFMDIvNzA5RjkxN0FG NzQxMTFFRjk4Qzk5OTM4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJ0zNAwDQYJKoZIhvcNAQELBQADggEBAJ7DrR39C+bEw4Wh vv7GD7loOBr1l6OSb0lvxU7aZZT/PiwOHjquP/0BgIWiII4XPN0G8zHtoKlTpsbY klJrCe2vY8TXaJAuEC+udTxAhZPFJn9yDA/QfE/QV7982gmbdGDU47y7nPtVC68F vymzj1sV891ToW5oLXsFKTr/XzqHPCHNVONH/HezQ6OJLRVPQ4+GE0Cg22VEfEds RF2LpmjMTp6Yh6WmgAYq4dHu5ss68gBHnTLMATAORU9CJO9cEyXeZXXV+VT1jmAG GrcpqECPCaQDPjGFEhQnOq1+a//U+jPJ5f8LslJi4zbijhj9QlQMCKCDZwEKPkLY CoxvkMY= -----END CERTIFICATE-----Generated at Mon Oct 20 19:47:58 2025 by rpki-client