$ rpki-client -vvf rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/CAE10F4030E111F09B76D311C4F9AE02.roa File: CAE10F4030E111F09B76D311C4F9AE02.roa (raw, json) Hash identifier: 4EnYQ2VSNQD0o3dL265fkKkyLcx5j9mcOc/dYLCsIwo= Subject key identifier: DE:F8:0F:54:E0:F4:69:D4:95:2C:FD:25:EE:10:DD:24:98:3A:EF:74 Certificate issuer: /CN=A911DFC9/serialNumber=7665E2835D160085E31EC245222D4B2F7E484409 Certificate serial: 0A Authority key identifier: 76:65:E2:83:5D:16:00:85:E3:1E:C2:45:22:2D:4B:2F:7E:48:44:09 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dmXig10WAIXjHsJFIi1LL35IRAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/CAE10F4030E111F09B76D311C4F9AE02.roa Signing time: Wed 14 May 2025 16:37:58 +0000 ROA not before: Wed 14 May 2025 16:37:58 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 142032 IP address blocks: 165.99.42.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.crl rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dmXig10WAIXjHsJFIi1LL35IRAk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 09:38:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DFC9, serialNumber=7665E2835D160085E31EC245222D4B2F7E484409 Validity Not Before: May 14 16:37:58 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=6824c6e6-80e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:92:0b:d6:38:70:6d:b8:f2:d1:91:fb:83:56: e0:8f:99:a4:3d:fa:69:32:f3:ad:8d:46:6f:66:dd: 74:22:48:bf:fc:22:46:89:cf:ab:67:ec:7b:28:67: 45:d5:e0:1e:0a:44:10:30:1e:b3:70:a0:ea:cc:63: 3d:7b:1f:15:94:c1:4f:7a:76:c5:8a:3a:00:5d:43: 06:f1:b9:b5:d9:b4:ac:0b:f2:f3:34:91:48:51:17: 6f:0e:6d:42:a2:63:7a:99:55:15:09:55:28:2a:69: fc:b8:31:4f:00:38:cf:2e:ae:fa:e9:8d:03:98:7a: 46:51:09:f1:c7:bb:93:f7:72:d5:29:b0:98:3a:b9: a4:92:f4:45:c6:44:4d:36:8c:be:61:9e:a0:ca:ed: 4e:d7:87:54:a8:52:ee:ec:08:cd:43:8f:bb:7e:7c: f2:3e:a3:0c:36:43:f0:45:9d:03:d9:78:80:9b:64: b7:48:6d:41:c6:2e:4e:95:0b:73:8c:63:82:0a:67: 4b:7e:2c:e9:41:f1:a4:41:d9:f4:b1:74:98:1b:3a: 17:f1:50:94:d9:bf:7b:29:3e:2e:c1:b3:0f:d6:2c: ae:20:13:f4:31:5a:63:ea:0a:53:2e:ae:d9:e2:b2: 98:eb:3f:78:c4:55:b2:ac:1f:b2:f1:d6:5c:8e:13: a2:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:F8:0F:54:E0:F4:69:D4:95:2C:FD:25:EE:10:DD:24:98:3A:EF:74 X509v3 Authority Key Identifier: keyid:76:65:E2:83:5D:16:00:85:E3:1E:C2:45:22:2D:4B:2F:7E:48:44:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dmXig10WAIXjHsJFIi1LL35IRAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/CAE10F4030E111F09B76D311C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 165.99.42.0/23 Signature Algorithm: sha256WithRSAEncryption 98:b3:bb:13:34:8d:0a:21:47:b3:0f:f9:80:07:9e:6c:aa:c1: f2:0d:aa:cf:05:5a:8e:51:b8:54:06:e2:9e:1c:2f:c5:50:7b: 7f:c4:52:38:90:1d:78:e0:45:5c:20:ca:8e:ce:4a:ed:1a:11: 69:06:e0:bd:3c:36:61:06:40:da:2a:7a:7d:30:92:94:8d:2d: ab:34:71:7d:c2:b8:6a:40:de:b4:88:b5:62:15:c5:68:32:32: 22:83:6e:40:69:07:cc:79:3a:c8:88:28:67:72:2b:c2:eb:a4: bb:8f:84:3a:ef:11:d9:b8:bf:5a:2a:03:4c:b0:c7:fb:9b:30: f2:99:ea:bd:de:8c:19:38:7d:18:0f:f4:b0:1d:23:4a:e1:5c: 6c:9b:a5:10:12:11:7f:32:ea:1f:9b:4e:28:5b:42:22:fd:ba: a8:a2:c9:ba:4d:f8:bb:fb:3e:3d:42:83:f2:19:ab:52:4d:80: 69:c5:32:1f:ef:f4:8e:26:42:ee:dd:57:b2:05:d5:f3:92:a7: 96:7e:92:c0:07:01:80:b4:cf:18:fa:a2:60:22:74:d4:e3:05: 81:fe:a9:6f:8c:31:2a:b5:97:68:9f:76:ed:d9:a9:f0:86:af: 1d:ac:cd:23:30:80:7b:9f:97:ab:06:08:9a:d5:13:86:86:0c: 5b:e0:51:0c -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx REZDOTExMC8GA1UEBRMoNzY2NUUyODM1RDE2MDA4NUUzMUVDMjQ1MjIyRDRCMkY3 RTQ4NDQwOTAeFw0yNTA1MTQxNjM3NThaFw0yNjA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4MjRjNmU2LTgwZTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKkgvWOHBtuPLRkfuDVuCPmaQ9+mky862NRm9m3XQiSL/8IkaJz6tn7HsoZ0XV 4B4KRBAwHrNwoOrMYz17HxWUwU96dsWKOgBdQwbxubXZtKwL8vM0kUhRF28ObUKi Y3qZVRUJVSgqafy4MU8AOM8urvrpjQOYekZRCfHHu5P3ctUpsJg6uaSS9EXGRE02 jL5hnqDK7U7Xh1SoUu7sCM1Dj7t+fPI+oww2Q/BFnQPZeICbZLdIbUHGLk6VC3OM Y4IKZ0t+LOlB8aRB2fSxdJgbOhfxUJTZv3spPi7Bsw/WLK4gE/QxWmPqClMurtni spjrP3jEVbKsH7Lx1lyOE6J3AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU3vgPVOD0 adSVLP0l7hDdJJg673QwHwYDVR0jBBgwFoAUdmXig10WAIXjHsJFIi1LL35IRAkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFERkM5LzhEMzVFODJFMzAy QzExRjA4Nzc2NEEyQkM0RjlBRTAyL2RtWGlnMTBXQUlYakhzSkZJaTFMTDM1SVJB ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZG1YaWcxMFdBSVhqSHNKRklpMUxMMzVJUkFrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REZDOS84RDM1RTgyRTMwMkMxMUYwODc3NjRBMkJDNEY5QUUwMi9DQUUxMEY0MDMw RTExMUYwOUI3NkQzMTFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaVjKjANBgkqhkiG9w0BAQsFAAOCAQEAmLO7EzSNCiFHsw/5 gAeebKrB8g2qzwVajlG4VAbinhwvxVB7f8RSOJAdeOBFXCDKjs5K7RoRaQbgvTw2 YQZA2ip6fTCSlI0tqzRxfcK4akDetIi1YhXFaDIyIoNuQGkHzHk6yIgoZ3Irwuuk u4+EOu8R2bi/WioDTLDH+5sw8pnqvd6MGTh9GA/0sB0jSuFcbJulEBIRfzLqH5tO KFtCIv26qKLJuk34u/s+PUKD8hmrUk2AacUyH+/0jiZC7t1XsgXV85Knln6SwAcB gLTPGPqiYCJ01OMFgf6pb4wxKrWXaJ927dmp8IavHazNIzCAe5+XqwYImtUThoYM W+BRDA== -----END CERTIFICATE-----Generated at Tue Oct 28 00:37:58 2025 by rpki-client