$ rpki-client -vvf rpki.apnic.net/member_repository/A9120656/4A709564B00D11F08DE4ED7BC4F9AE02/6D5A36FCB2FB11F0861C2754C4F9AE02.roa File: 6D5A36FCB2FB11F0861C2754C4F9AE02.roa (raw, json) Hash identifier: OEUGMrYO6pAbSO+UePFCHSKCBYTSreP7y03ptjqbGzQ= Subject key identifier: 55:DA:4E:82:8D:A5:E1:C1:BE:8C:79:68:85:B7:1F:78:6E:BD:BE:68 Certificate issuer: /CN=A9120656/serialNumber=19E05AFD1E6B36254A5CB1503639384B6A22A826 Certificate serial: 0D Authority key identifier: 19:E0:5A:FD:1E:6B:36:25:4A:5C:B1:50:36:39:38:4B:6A:22:A8:26 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GeBa_R5rNiVKXLFQNjk4S2oiqCY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120656/4A709564B00D11F08DE4ED7BC4F9AE02/6D5A36FCB2FB11F0861C2754C4F9AE02.roa Signing time: Mon 27 Oct 2025 06:08:59 +0000 ROA not before: Mon 27 Oct 2025 06:08:59 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 140849 IP address blocks: 138.252.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120656/4A709564B00D11F08DE4ED7BC4F9AE02/GeBa_R5rNiVKXLFQNjk4S2oiqCY.crl rsync://rpki.apnic.net/member_repository/A9120656/4A709564B00D11F08DE4ED7BC4F9AE02/GeBa_R5rNiVKXLFQNjk4S2oiqCY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GeBa_R5rNiVKXLFQNjk4S2oiqCY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 10:39:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120656, serialNumber=19E05AFD1E6B36254A5CB1503639384B6A22A826 Validity Not Before: Oct 27 06:08:59 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=68ff0c7b-cef3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ce:d1:4e:f1:49:0f:82:70:68:38:ec:87:5b: c0:bf:57:ba:06:8e:25:69:4e:77:84:86:47:2b:cc: 51:48:83:dc:50:0b:58:27:1a:cb:fb:fe:63:d8:03: cd:70:57:17:37:39:8a:f2:3e:38:ba:43:29:2b:f4: 62:c6:e7:a7:66:1f:3e:92:a5:40:fb:0b:f3:b7:18: 9f:fb:54:e2:83:b1:c9:71:2b:a2:bc:31:15:33:a7: 43:cc:37:7d:77:31:c3:e5:5a:80:08:b7:8e:0d:f3: 8c:53:3f:95:ec:7f:1a:89:b3:d0:1f:ea:a3:7e:56: 91:29:9e:4d:77:e6:79:51:64:7b:7c:df:90:29:20: 95:55:b0:8f:9a:53:06:27:19:61:4b:53:ba:39:64: f0:4a:fb:7d:c5:cb:ba:94:10:87:37:59:b4:73:21: fc:a9:a6:b5:e5:75:92:d2:24:a6:33:69:2f:7c:81: cb:ae:e0:2e:82:e9:3a:7b:64:d1:b5:ff:bd:2f:1a: 36:8e:97:50:43:46:f5:90:e0:50:ee:75:8e:cc:b9: ba:d8:8f:e4:b9:31:34:58:7a:68:e2:da:e7:1f:8d: 40:5f:bf:91:f2:73:97:f4:3b:a1:bc:18:85:bc:fd: 54:fb:44:9a:5b:45:6a:70:c8:07:c7:a1:5f:07:e3: f7:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:DA:4E:82:8D:A5:E1:C1:BE:8C:79:68:85:B7:1F:78:6E:BD:BE:68 X509v3 Authority Key Identifier: keyid:19:E0:5A:FD:1E:6B:36:25:4A:5C:B1:50:36:39:38:4B:6A:22:A8:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120656/4A709564B00D11F08DE4ED7BC4F9AE02/GeBa_R5rNiVKXLFQNjk4S2oiqCY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GeBa_R5rNiVKXLFQNjk4S2oiqCY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120656/4A709564B00D11F08DE4ED7BC4F9AE02/6D5A36FCB2FB11F0861C2754C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 138.252.88.0/24 Signature Algorithm: sha256WithRSAEncryption 47:07:2c:7c:aa:ac:fe:2a:52:8c:10:ae:91:de:22:cb:86:d7: e2:fe:e0:46:4b:31:43:59:5d:16:15:d7:b8:4d:4d:44:10:78: 14:27:e2:8f:54:3e:c0:b8:b5:9a:e8:9e:da:b4:dd:d7:26:b3: f1:00:a6:8d:2a:96:88:89:fd:b7:a9:e5:7e:44:59:f3:1d:0c: 68:ec:c8:3e:3e:4e:79:ea:aa:d1:ef:5f:6f:f2:88:5d:4f:99: 41:c8:76:c7:b2:6c:e6:59:89:d2:4a:ba:07:55:cc:2e:a7:51: cb:f7:83:13:fa:99:4a:06:7f:df:12:84:94:a0:e8:9d:35:4f: 64:c2:d0:4a:75:a7:86:37:8c:ed:c0:e9:bb:ad:90:78:d0:49: cf:05:b3:2c:30:0c:82:2c:02:ef:76:1c:9b:9a:ef:88:f6:40: 21:49:65:57:e2:7d:82:08:98:e8:53:fc:57:32:a9:5b:ca:4d: 0c:96:cd:b8:1f:ec:85:b7:a9:11:19:88:4f:05:d7:7f:c8:15: 77:7a:ee:cf:85:23:16:82:bb:54:52:df:d8:c7:f8:ff:e7:48: e9:3b:d0:5c:0e:57:6f:d5:72:e9:40:e3:20:44:15:f5:01:ce: 85:cd:ea:50:ce:d6:15:6c:f8:55:88:81:d0:d3:e4:27:e7:2b: d4:2c:29:c8 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MDY1NjExMC8GA1UEBRMoMTlFMDVBRkQxRTZCMzYyNTRBNUNCMTUwMzYzOTM4NEI2 QTIyQTgyNjAeFw0yNTEwMjcwNjA4NTlaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4ZmYwYzdiLWNlZjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqztFO8UkPgnBoOOyHW8C/V7oGjiVpTneEhkcrzFFIg9xQC1gnGsv7/mPYA81w Vxc3OYryPji6Qykr9GLG56dmHz6SpUD7C/O3GJ/7VOKDsclxK6K8MRUzp0PMN313 McPlWoAIt44N84xTP5XsfxqJs9Af6qN+VpEpnk135nlRZHt835ApIJVVsI+aUwYn GWFLU7o5ZPBK+33Fy7qUEIc3WbRzIfypprXldZLSJKYzaS98gcuu4C6C6Tp7ZNG1 /70vGjaOl1BDRvWQ4FDudY7MubrYj+S5MTRYemji2ucfjUBfv5Hyc5f0O6G8GIW8 /VT7RJpbRWpwyAfHoV8H4/evAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUVdpOgo2l 4cG+jHlohbcfeG69vmgwHwYDVR0jBBgwFoAUGeBa/R5rNiVKXLFQNjk4S2oiqCYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIwNjU2LzRBNzA5NTY0QjAw RDExRjA4REU0RUQ3QkM0RjlBRTAyL0dlQmFfUjVyTmlWS1hMRlFOams0UzJvaXFD WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvR2VCYV9SNXJOaVZLWExGUU5qazRTMm9pcUNZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDY1Ni80QTcwOTU2NEIwMEQxMUYwOERFNEVEN0JDNEY5QUUwMi82RDVBMzZGQ0Iy RkIxMUYwODYxQzI3NTRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAIr8WDANBgkqhkiG9w0BAQsFAAOCAQEARwcsfKqs/ipSjBCu kd4iy4bX4v7gRksxQ1ldFhXXuE1NRBB4FCfij1Q+wLi1muie2rTd1yaz8QCmjSqW iIn9t6nlfkRZ8x0MaOzIPj5Oeeqq0e9fb/KIXU+ZQch2x7Js5lmJ0kq6B1XMLqdR y/eDE/qZSgZ/3xKElKDonTVPZMLQSnWnhjeM7cDpu62QeNBJzwWzLDAMgiwC73Yc m5rviPZAIUllV+J9ggiY6FP8VzKpW8pNDJbNuB/shbepERmITwXXf8gVd3ruz4Uj FoK7VFLf2Mf4/+dI6TvQXA5Xb9Vy6UDjIEQV9QHOhc3qUM7WFWz4VYiB0NPkJ+cr 1CwpyA== -----END CERTIFICATE-----Generated at Wed Oct 29 02:55:00 2025 by rpki-client