$ rpki-client -vvf rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/72AD814686F911F0A97FA80EC4F9AE02.roa File: 72AD814686F911F0A97FA80EC4F9AE02.roa (raw, json) Hash identifier: 7POo0MTD3bXJ+GgbQIE+3wN42OgF1nbCb45FXgCxa98= Subject key identifier: AC:3D:E2:C7:22:5E:31:82:45:62:6C:87:15:61:74:AE:27:DF:B1:32 Certificate issuer: /CN=A9123F2F/serialNumber=2EFEF89D6D5830EAFDA65A1DF1946E47A144A419 Certificate serial: 45 Authority key identifier: 2E:FE:F8:9D:6D:58:30:EA:FD:A6:5A:1D:F1:94:6E:47:A1:44:A4:19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lv74nW1YMOr9plod8ZRuR6FEpBk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/72AD814686F911F0A97FA80EC4F9AE02.roa Signing time: Mon 01 Sep 2025 06:03:58 +0000 ROA not before: Mon 01 Sep 2025 06:03:58 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 17660 IP address blocks: 163.227.20.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.crl rsync://rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lv74nW1YMOr9plod8ZRuR6FEpBk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 08:03:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69 (0x45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123F2F, serialNumber=2EFEF89D6D5830EAFDA65A1DF1946E47A144A419 Validity Not Before: Sep 1 06:03:58 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=68b5374d-c465 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5a:49:f5:70:0e:fa:c1:7b:8c:45:c8:5a:a9: eb:aa:ca:2c:d9:e2:c5:66:b9:e0:bc:8b:5d:aa:f7: 0f:c2:03:7b:8b:b5:50:6b:1c:db:a0:29:89:ab:3e: bc:f3:98:81:75:7d:c6:19:31:e2:08:63:da:bc:b1: 14:db:34:ec:88:cd:28:90:78:bb:69:70:6d:ce:3e: da:38:a7:15:6f:5e:29:69:c4:d4:2f:7d:a9:c7:ca: 08:83:68:50:cd:40:bf:86:37:6f:04:ca:57:a4:4d: 9d:af:01:7b:cf:da:9f:8b:4f:0e:67:eb:0e:da:67: e7:f4:1e:a3:8e:3a:00:7b:3d:d5:7e:d6:b1:73:b6: 9a:09:84:b0:7a:a9:e3:0c:ec:36:a3:44:b5:09:b2: 9b:b3:6c:2d:8d:47:8b:9d:a8:d3:ec:c7:42:d5:ad: 95:41:7e:48:bb:41:f8:9a:b0:4b:db:c1:60:d1:f2: 25:9d:55:d4:2e:b3:b2:43:a2:2f:e4:52:54:94:14: 96:5f:ea:2d:e6:ee:60:49:3e:1a:fc:82:95:a2:1f: 83:ec:9a:be:55:e8:ae:1e:60:4c:e6:56:68:84:5b: 83:93:ad:54:57:97:1e:ec:ef:f7:0b:a4:4a:24:20: ba:a5:e5:de:ac:97:92:84:32:35:70:0f:05:d9:5e: 08:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:3D:E2:C7:22:5E:31:82:45:62:6C:87:15:61:74:AE:27:DF:B1:32 X509v3 Authority Key Identifier: keyid:2E:FE:F8:9D:6D:58:30:EA:FD:A6:5A:1D:F1:94:6E:47:A1:44:A4:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lv74nW1YMOr9plod8ZRuR6FEpBk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/72AD814686F911F0A97FA80EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 163.227.20.0/23 Signature Algorithm: sha256WithRSAEncryption 58:29:8c:2f:93:77:5a:c5:17:96:55:93:e2:2f:b5:82:0c:b0: ca:18:af:1a:bd:b4:8c:29:69:c6:65:d2:88:e1:1c:e1:7a:de: be:e7:c8:7f:ff:88:7d:bc:86:be:b9:a1:99:57:53:19:09:ee: a9:79:24:e5:a6:ec:94:97:ef:00:1d:cd:f5:a0:0f:95:3c:83: b0:45:bf:f3:7e:fd:89:c0:b5:15:6c:12:70:03:23:72:63:c8: d4:4e:77:61:b3:a1:3b:d8:17:b3:c2:85:44:19:75:f9:2c:e8: f4:1b:61:30:69:30:c9:16:5f:b3:1c:81:77:56:df:44:f0:ff: 3d:0b:9b:f3:e6:16:57:a0:77:63:e6:bf:8f:d5:92:e9:35:f2: 7c:da:ca:66:0b:4a:84:dd:d8:77:01:ad:e5:3f:ce:be:6f:37: be:36:ab:29:bb:f4:68:d8:e3:b5:ab:0a:b8:0b:59:6e:e2:c4: 14:56:2e:8f:00:ef:29:3f:ad:47:08:dc:4b:46:0d:b4:c2:53: 39:73:db:1c:4d:92:2a:6f:8a:8c:8d:5b:af:d1:09:0e:75:ce: 00:c2:2d:5c:56:bd:17:65:45:c1:79:2f:f2:9d:c5:19:f7:47: da:68:af:eb:c6:25:4c:a3:a6:b4:34:09:ad:16:b1:01:22:19: ca:9d:4e:7f -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBRTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy M0YyRjExMC8GA1UEBRMoMkVGRUY4OUQ2RDU4MzBFQUZEQTY1QTFERjE5NDZFNDdB MTQ0QTQxOTAeFw0yNTA5MDEwNjAzNThaFw0yNjA3MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4YjUzNzRkLWM0NjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4Wkn1cA76wXuMRchaqeuqyizZ4sVmueC8i12q9w/CA3uLtVBrHNugKYmrPrzz mIF1fcYZMeIIY9q8sRTbNOyIzSiQeLtpcG3OPto4pxVvXilpxNQvfanHygiDaFDN QL+GN28EylekTZ2vAXvP2p+LTw5n6w7aZ+f0HqOOOgB7PdV+1rFztpoJhLB6qeMM 7DajRLUJspuzbC2NR4udqNPsx0LVrZVBfki7QfiasEvbwWDR8iWdVdQus7JDoi/k UlSUFJZf6i3m7mBJPhr8gpWiH4Psmr5V6K4eYEzmVmiEW4OTrVRXlx7s7/cLpEok ILql5d6sl5KEMjVwDwXZXgjnAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUrD3ixyJe MYJFYmyHFWF0riffsTIwHwYDVR0jBBgwFoAULv74nW1YMOr9plod8ZRuR6FEpBkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIzRjJGL0VFMEE2RjJDMUU2 MDExRjA4MDY2QkE1NUM0RjlBRTAyL0x2NzRuVzFZTU9yOXBsb2Q4WlJ1UjZGRXBC ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTHY3NG5XMVlNT3I5cGxvZDhaUnVSNkZFcEJrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0YyRi9FRTBBNkYyQzFFNjAxMUYwODA2NkJBNTVDNEY5QUUwMi83MkFEODE0Njg2 RjkxMUYwQTk3RkE4MEVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaPjFDANBgkqhkiG9w0BAQsFAAOCAQEAWCmML5N3WsUXllWT 4i+1ggywyhivGr20jClpxmXSiOEc4XrevufIf/+IfbyGvrmhmVdTGQnuqXkk5abs lJfvAB3N9aAPlTyDsEW/8379icC1FWwScAMjcmPI1E53YbOhO9gXs8KFRBl1+Szo 9BthMGkwyRZfsxyBd1bfRPD/PQub8+YWV6B3Y+a/j9WS6TXyfNrKZgtKhN3YdwGt 5T/Ovm83vjarKbv0aNjjtasKuAtZbuLEFFYujwDvKT+tRwjcS0YNtMJTOXPbHE2S Km+KjI1br9EJDnXOAMItXFa9F2VFwXkv8p3FGfdH2miv68YlTKOmtDQJrRaxASIZ yp1Ofw== -----END CERTIFICATE-----Generated at Fri Sep 19 02:34:43 2025 by rpki-client