$ rpki-client -vvf rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/24108E38125C11EFA53AA21EC4F9AE02.roa File: 24108E38125C11EFA53AA21EC4F9AE02.roa (raw, json) Hash identifier: VqM+TAIOBknioMAJ/ATM6gx0sTDGMk2zuwyk43OpKzI= Subject key identifier: 00:61:05:59:36:06:EE:53:0E:0B:78:2E:50:DA:72:6A:91:95:5D:E9 Certificate issuer: /CN=A9111318/serialNumber=806ABFF463594CAA30DE70A311AE2F849189BC64 Certificate serial: 35E4 Authority key identifier: 80:6A:BF:F4:63:59:4C:AA:30:DE:70:A3:11:AE:2F:84:91:89:BC:64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/24108E38125C11EFA53AA21EC4F9AE02.roa Signing time: Thu 23 Oct 2025 03:48:48 +0000 ROA not before: Thu 23 Oct 2025 03:48:48 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 38022 IP address blocks: 163.7.128.0/19 maxlen: 19 163.7.128.0/24 maxlen: 24 163.7.136.0/24 maxlen: 24 163.7.137.0/24 maxlen: 24 163.7.144.0/21 maxlen: 21 163.7.159.0/24 maxlen: 24 210.7.32.0/20 maxlen: 20 2404:138::/32 maxlen: 32 2404:138:204::/48 maxlen: 48 2404:138:205::/48 maxlen: 48 2404:138:206::/48 maxlen: 48 2404:138:207::/48 maxlen: 48 2404:138:1305::/48 maxlen: 48 2404:138:1306::/48 maxlen: 48 2404:139::/32 maxlen: 32 2404:139::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.crl rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:47:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13796 (0x35e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111318, serialNumber=806ABFF463594CAA30DE70A311AE2F849189BC64 Validity Not Before: Oct 23 03:48:48 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=68f9a59f-9f9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:58:34:2f:54:36:c5:ff:98:fe:27:17:67:ec: 0e:ce:75:90:69:43:9d:c4:0f:dd:7b:18:aa:a6:20: 6c:2b:df:04:1b:e5:38:22:1d:cb:f4:4d:ec:29:28: 93:6d:d3:ae:1e:f1:82:73:6f:1a:55:c8:73:9d:c0: 42:d5:35:70:33:af:7b:0c:fa:e1:59:85:04:f5:f4: 45:6d:ad:4b:f5:c3:11:dc:dc:0f:3d:03:52:2a:95: fb:ed:8b:9d:0a:1e:21:a0:ac:f9:a6:c7:ad:c6:c2: 8f:3d:7e:d1:5f:04:35:7b:0d:e1:57:06:b0:04:1c: 46:88:95:b6:38:72:bf:c4:63:bb:35:9e:ab:bc:1d: de:44:74:1b:2a:0f:7f:78:e6:90:ef:63:99:8c:85: 4d:7a:08:ef:1b:df:b5:fa:95:b5:1c:89:c1:ea:5c: 5d:56:53:43:ea:f5:cb:3e:dd:d7:0e:f4:2a:e1:40: af:df:9a:ee:7e:d2:57:65:2e:08:31:41:5f:1c:fd: 04:ff:bf:29:07:a5:6e:5e:7a:0d:14:e1:7b:b0:b0: 17:f6:3a:2a:dc:c9:ee:38:3c:ef:96:de:71:65:25: 21:0e:81:f1:74:c8:a3:36:22:9b:96:25:7e:9b:66: ed:63:7e:8e:82:bd:d2:f6:4d:d1:1d:5a:59:3e:ff: 5a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:61:05:59:36:06:EE:53:0E:0B:78:2E:50:DA:72:6A:91:95:5D:E9 X509v3 Authority Key Identifier: keyid:80:6A:BF:F4:63:59:4C:AA:30:DE:70:A3:11:AE:2F:84:91:89:BC:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/24108E38125C11EFA53AA21EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 163.7.128.0/19 210.7.32.0/20 IPv6: 2404:138::/31 Signature Algorithm: sha256WithRSAEncryption 5b:07:ea:6e:ee:0d:4f:d3:23:b6:a4:44:16:52:a6:17:0a:c1: d0:b8:d2:b0:5f:3e:ce:21:74:84:e5:57:36:f1:77:29:85:2b: 41:72:c6:9d:a0:62:43:05:74:83:b9:2b:3f:c7:cf:fe:76:08: 17:59:eb:67:29:d3:6e:4f:35:45:01:5c:f6:72:3f:89:51:c6: 3c:cb:fa:59:1a:71:91:7d:0a:8c:d8:63:26:df:17:97:59:16: 79:7d:11:6f:95:ff:17:00:10:26:13:a3:77:15:8b:2d:b1:e4: 98:bc:31:58:bd:29:d4:86:4c:18:83:60:d2:0a:4a:1e:5d:09: 8a:fa:dd:2d:a7:53:fa:5c:20:66:fc:45:ae:46:4d:2d:dc:3e: b5:07:5f:69:db:4d:f5:a9:df:a2:2d:f0:e4:d1:70:a7:78:84: c9:1f:f4:5f:a2:d1:e3:f1:43:4b:40:46:7c:cf:83:3c:08:dc: 98:58:b3:46:27:de:1c:89:89:93:e5:39:fd:7d:9b:25:76:45: c4:9a:de:de:39:69:d9:22:43:c6:cb:95:43:03:a1:7b:d9:a6: c1:0c:f8:a1:91:12:be:43:36:5d:20:a7:03:27:73:b7:e5:85: 17:e8:4c:85:90:00:15:7b:4b:2c:4f:a4:e6:91:d0:13:72:46: 86:a0:c2:82 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICNeQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTEzMTgxMTAvBgNVBAUTKDgwNkFCRkY0NjM1OTRDQUEzMERFNzBBMzExQUUyRjg0 OTE4OUJDNjQwHhcNMjUxMDIzMDM0ODQ4WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGY5YTU5Zi05ZjlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6lg0L1Q2xf+Y/icXZ+wOznWQaUOdxA/dexiqpiBsK98EG+U4Ih3L9E3sKSiT bdOuHvGCc28aVchzncBC1TVwM697DPrhWYUE9fRFba1L9cMR3NwPPQNSKpX77Yud Ch4hoKz5psetxsKPPX7RXwQ1ew3hVwawBBxGiJW2OHK/xGO7NZ6rvB3eRHQbKg9/ eOaQ72OZjIVNegjvG9+1+pW1HInB6lxdVlND6vXLPt3XDvQq4UCv35ruftJXZS4I MUFfHP0E/78pB6VuXnoNFOF7sLAX9joq3MnuODzvlt5xZSUhDoHxdMijNiKbliV+ m2btY36Ogr3S9k3RHVpZPv9aVQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFABhBVk2 Bu5TDgt4LlDacmqRlV3pMB8GA1UdIwQYMBaAFIBqv/RjWUyqMN5woxGuL4SRibxk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTMxOC9EQzc0NTFGMjFE OTExMUUyOThFNzQ2RjQwOEIwMkNEMi9nR3FfOUdOWlRLb3czbkNqRWE0dmhKR0p2 R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dHcV85R05aVEtvdzNuQ2pFYTR2aEpHSnZHUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTEzMTgvREM3NDUxRjIxRDkxMTFFMjk4RTc0NkY0MDhCMDJDRDIvMjQxMDhFMzgx MjVDMTFFRkE1M0FBMjFFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAWjB4ADBATSByAwDQQCAAIwBwMFASQEATgwDQYJKoZIhvcN AQELBQADggEBAFsH6m7uDU/TI7akRBZSphcKwdC40rBfPs4hdITlVzbxdymFK0Fy xp2gYkMFdIO5Kz/Hz/52CBdZ62cp025PNUUBXPZyP4lRxjzL+lkacZF9CozYYybf F5dZFnl9EW+V/xcAECYTo3cViy2x5Ji8MVi9KdSGTBiDYNIKSh5dCYr63S2nU/pc IGb8Ra5GTS3cPrUHX2nbTfWp36It8OTRcKd4hMkf9F+i0ePxQ0tARnzPgzwI3JhY s0Yn3hyJiZPlOf19myV2RcSa3t45adkiQ8bLlUMDoXvZpsEM+KGREr5DNl0gpwMn c7flhRfoTIWQABV7SyxPpOaR0BNyRoagwoI= -----END CERTIFICATE-----Generated at Wed Nov 5 07:55:05 2025 by rpki-client