$ rpki-client -vvf rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/9FCAD654781E11EB808A544BC4F9AE02.roa File: 9FCAD654781E11EB808A544BC4F9AE02.roa (raw, json) Hash identifier: AMggt9zpwS0BRdqI+ClPrj6WWxTra7y9F4TlC3w0Ums= Subject key identifier: 1D:DE:54:14:B2:8F:C7:4E:95:B0:52:1C:1A:37:8B:9D:AE:3F:2D:33 Certificate issuer: /CN=A912512F/serialNumber=E237D2CD3BA1F1B927545F244992872AD0AFC305 Certificate serial: 0920 Authority key identifier: E2:37:D2:CD:3B:A1:F1:B9:27:54:5F:24:49:92:87:2A:D0:AF:C3:05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jfSzTuh8bknVF8kSZKHKtCvwwU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/9FCAD654781E11EB808A544BC4F9AE02.roa Signing time: Tue 02 Sep 2025 20:41:08 +0000 ROA not before: Tue 02 Sep 2025 20:41:08 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 141742 IP address blocks: 43.246.216.0/22 maxlen: 22 43.246.216.0/24 maxlen: 24 43.246.217.0/24 maxlen: 24 43.246.218.0/24 maxlen: 24 43.246.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.crl rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jfSzTuh8bknVF8kSZKHKtCvwwU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 20:35:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2336 (0x920) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912512F, serialNumber=E237D2CD3BA1F1B927545F244992872AD0AFC305 Validity Not Before: Sep 2 20:41:08 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68b75664-46d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:4c:16:01:f1:09:8a:e2:95:a3:ea:e9:a4:96: be:6c:62:b4:6d:41:ba:74:3a:f6:f1:cb:04:a5:f4: 4c:8a:39:47:b2:7b:1b:5d:d1:36:00:99:af:3b:17: d0:2a:18:a9:d1:31:b6:ab:db:a1:ac:af:87:9e:ec: e1:9a:77:89:84:d3:18:fe:fe:b8:e9:d4:46:a5:28: 11:7a:b4:60:75:5e:46:74:cc:6b:dc:79:24:6a:0a: f1:cb:68:a1:2c:7b:bf:09:69:d7:fb:69:02:3f:16: 7e:62:aa:06:68:5a:bc:36:25:b9:11:e2:17:af:31: cd:4a:9d:c4:98:61:f9:9e:88:8a:96:90:4e:29:69: 30:3d:fa:1f:9f:66:c2:31:a7:54:42:be:5d:ed:32: 0a:22:ae:d8:4d:4e:22:e1:75:4a:e9:e2:fa:a5:34: af:7c:a8:da:3f:1a:ac:b2:e4:e5:ca:7a:eb:21:f6: da:14:7f:8a:f7:f5:af:bc:4a:15:f1:86:a3:1a:83: 08:24:e8:b3:2f:bc:e6:27:9b:6c:de:9c:1b:dd:c1: b8:ba:c3:f0:bf:99:a1:bd:5f:12:69:d9:79:b4:b2: 3f:3d:e9:46:5d:07:78:8c:2a:d7:fa:e1:05:3d:2d: 67:f1:0f:7d:96:f1:10:00:4a:0d:81:22:c1:94:52: b9:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:DE:54:14:B2:8F:C7:4E:95:B0:52:1C:1A:37:8B:9D:AE:3F:2D:33 X509v3 Authority Key Identifier: keyid:E2:37:D2:CD:3B:A1:F1:B9:27:54:5F:24:49:92:87:2A:D0:AF:C3:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jfSzTuh8bknVF8kSZKHKtCvwwU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/9FCAD654781E11EB808A544BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.246.216.0/22 Signature Algorithm: sha256WithRSAEncryption 04:07:fb:de:38:5b:e0:02:1c:58:ae:08:1a:28:48:37:57:9e: 2e:70:15:8c:77:45:d0:48:a1:82:7b:84:81:60:df:95:09:6e: 91:2c:af:cb:c0:84:0d:e8:a3:d4:bc:83:09:0f:44:53:51:1a: d6:ce:d5:d6:de:ac:b6:b3:d0:f7:f6:60:21:30:3c:01:7c:f6: 45:d6:f2:16:bf:53:68:1d:16:c6:f0:d7:f6:f1:65:cb:fc:99: 5c:d8:83:ca:cc:18:c4:42:02:57:8f:d6:67:f6:e1:4e:ee:c8: da:a7:a0:89:26:bd:09:ce:7a:f0:d3:af:d4:1b:28:59:27:01: fa:52:90:7e:22:75:37:53:2a:90:81:35:06:d1:21:7a:04:43: e3:ab:32:b4:b4:f9:be:d8:da:25:7b:47:4b:78:64:f9:0b:49: f1:c9:3d:ed:b1:a1:01:04:b6:e3:d3:a7:57:fb:b8:4a:d0:e3: 41:3a:ee:41:36:fd:d9:6d:df:07:93:51:10:c4:23:35:6a:a4: 84:09:cd:4c:46:e7:eb:e8:3d:32:f5:db:5e:7b:d5:47:df:1a: 35:68:de:a8:a6:85:d5:f2:63:c8:be:d1:62:d7:16:67:37:d3: 4c:32:47:49:a3:63:df:18:28:54:83:af:3d:21:1c:89:a9:70: b7:c3:26:7a -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCSAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjUxMkYxMTAvBgNVBAUTKEUyMzdEMkNEM0JBMUYxQjkyNzU0NUYyNDQ5OTI4NzJB RDBBRkMzMDUwHhcNMjUwOTAyMjA0MTA4WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGI3NTY2NC00NmQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2kwWAfEJiuKVo+rppJa+bGK0bUG6dDr28csEpfRMijlHsnsbXdE2AJmvOxfQ Khip0TG2q9uhrK+HnuzhmneJhNMY/v646dRGpSgRerRgdV5GdMxr3Hkkagrxy2ih LHu/CWnX+2kCPxZ+YqoGaFq8NiW5EeIXrzHNSp3EmGH5noiKlpBOKWkwPfofn2bC MadUQr5d7TIKIq7YTU4i4XVK6eL6pTSvfKjaPxqssuTlynrrIfbaFH+K9/WvvEoV 8YajGoMIJOizL7zmJ5ts3pwb3cG4usPwv5mhvV8Sadl5tLI/PelGXQd4jCrX+uEF PS1n8Q99lvEQAEoNgSLBlFK5NQIDAQABo4IClTCCApEwHQYDVR0OBBYEFB3eVBSy j8dOlbBSHBo3i52uPy0zMB8GA1UdIwQYMBaAFOI30s07ofG5J1RfJEmShyrQr8MF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTEyRi80QjhCRkZFQ0I0 NjkxMUVBQUJBNzFDNzVDNEY5QUUwMi80amZTelR1aDhia25WRjhrU1pLSEt0Q3Z3 d1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRqZlN6VHVoOGJrblZGOGtTWktIS3RDdnd3VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjUxMkYvNEI4QkZGRUNCNDY5MTFFQUFCQTcxQzc1QzRGOUFFMDIvOUZDQUQ2NTQ3 ODFFMTFFQjgwOEE1NDRCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAIr9tgwDQYJKoZIhvcNAQELBQADggEBAAQH+944W+ACHFiu CBooSDdXni5wFYx3RdBIoYJ7hIFg35UJbpEsr8vAhA3oo9S8gwkPRFNRGtbO1dbe rLaz0Pf2YCEwPAF89kXW8ha/U2gdFsbw1/bxZcv8mVzYg8rMGMRCAleP1mf24U7u yNqnoIkmvQnOevDTr9QbKFknAfpSkH4idTdTKpCBNQbRIXoEQ+OrMrS0+b7Y2iV7 R0t4ZPkLSfHJPe2xoQEEtuPTp1f7uErQ40E67kE2/dlt3weTURDEIzVqpIQJzUxG 5+voPTL121571UffGjVo3qimhdXyY8i+0WLXFmc300wyR0mjY98YKFSDrz0hHImp cLfDJno= -----END CERTIFICATE-----Generated at Fri Sep 19 09:07:20 2025 by rpki-client