$ rpki-client -vvf rpki.apnic.net/member_repository/A912B64D/2BBE4014467C11EE92D6463CC4F9AE02/865B3F7C467C11EEBDE3D43CC4F9AE02.roa File: 865B3F7C467C11EEBDE3D43CC4F9AE02.roa (raw, json) Hash identifier: jXDiNUfmAph8KmmhKCwstWhLejYXnSu0uk3x3qOWIK4= Subject key identifier: A0:7F:66:0E:D6:1B:FD:72:2E:DB:75:56:03:B2:01:A2:AF:08:78:48 Certificate issuer: /CN=A912B64D/serialNumber=0C37A01CB63362344FB7396760FD94D9C9B97C7A Certificate serial: 017D Authority key identifier: 0C:37:A0:1C:B6:33:62:34:4F:B7:39:67:60:FD:94:D9:C9:B9:7C:7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DDegHLYzYjRPtzlnYP2U2cm5fHo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B64D/2BBE4014467C11EE92D6463CC4F9AE02/865B3F7C467C11EEBDE3D43CC4F9AE02.roa Signing time: Wed 03 Sep 2025 04:23:17 +0000 ROA not before: Wed 03 Sep 2025 04:23:17 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 135372 IP address blocks: 203.142.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B64D/2BBE4014467C11EE92D6463CC4F9AE02/DDegHLYzYjRPtzlnYP2U2cm5fHo.crl rsync://rpki.apnic.net/member_repository/A912B64D/2BBE4014467C11EE92D6463CC4F9AE02/DDegHLYzYjRPtzlnYP2U2cm5fHo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DDegHLYzYjRPtzlnYP2U2cm5fHo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:30:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 381 (0x17d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B64D, serialNumber=0C37A01CB63362344FB7396760FD94D9C9B97C7A Validity Not Before: Sep 3 04:23:17 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68b7c2b4-477f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4a:4c:b1:2f:36:ac:90:63:50:cb:25:53:07: 7d:cf:cf:a5:06:d9:85:63:1d:80:08:3d:df:a0:78: 1d:ad:fe:d0:4d:6b:b8:ae:2f:8f:26:1b:3a:78:b7: 00:fd:e1:0c:34:54:3e:7a:77:32:71:f1:b6:76:b5: 95:fd:5b:6f:c2:2d:57:3a:85:99:14:f1:d3:9d:4b: 32:dd:51:d0:97:4f:3a:00:8f:5b:79:7c:88:75:61: 81:df:73:e7:f2:e5:93:e6:d7:28:da:8d:a9:f3:2e: ca:a6:8e:3b:48:ee:b9:09:7d:a9:8f:44:bd:30:24: 31:f6:f2:09:4a:72:12:68:27:cf:b9:a0:ba:75:f3: 9d:e7:f7:17:db:fd:a1:88:29:d6:e1:76:32:70:e5: 03:7d:cb:76:c0:53:ff:c0:1f:68:a5:8f:d2:2a:a4: fc:22:ba:18:b6:2e:e9:23:e5:99:63:62:c1:56:5d: 97:e5:51:59:d1:14:10:41:3f:1f:7b:67:e9:88:84: 91:3a:80:ac:5f:97:fa:cf:80:6f:fb:06:72:f6:1b: ca:43:18:a8:b3:fb:ab:9e:60:ec:35:e4:42:a5:0d: 2a:46:bd:73:59:aa:76:51:f4:2c:25:e1:b3:3c:76: e0:56:6c:5d:4b:b7:d6:a4:61:3a:c0:e5:34:d2:0c: a8:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:7F:66:0E:D6:1B:FD:72:2E:DB:75:56:03:B2:01:A2:AF:08:78:48 X509v3 Authority Key Identifier: keyid:0C:37:A0:1C:B6:33:62:34:4F:B7:39:67:60:FD:94:D9:C9:B9:7C:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B64D/2BBE4014467C11EE92D6463CC4F9AE02/DDegHLYzYjRPtzlnYP2U2cm5fHo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DDegHLYzYjRPtzlnYP2U2cm5fHo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B64D/2BBE4014467C11EE92D6463CC4F9AE02/865B3F7C467C11EEBDE3D43CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.142.10.0/24 Signature Algorithm: sha256WithRSAEncryption a5:bf:76:9c:9a:fb:f1:1e:ab:9a:e1:92:97:0f:ff:38:47:ab: 60:81:c7:9c:2a:ed:3f:06:b5:16:26:66:f0:d8:73:5e:fa:b7: 99:e9:d5:1a:a4:a0:8b:6e:5c:31:6c:dc:79:ed:f9:7d:f7:b2: 2a:8e:c5:36:15:f5:34:a9:3f:da:ef:be:e3:11:b3:ed:e6:03: 8d:1b:8b:88:93:fe:a0:a6:8c:bd:d0:3b:28:d5:61:09:fc:97: d7:b0:1e:0d:3e:d5:77:3a:e9:01:d0:ed:1a:be:7b:b0:bc:16: e9:7c:d7:09:b1:e6:23:42:76:53:54:b0:ef:40:0a:f3:a1:a9: 6f:cc:cc:75:ba:eb:07:d0:d0:c0:51:26:7f:16:7d:a6:6d:31: b5:12:9b:2f:60:f6:db:da:b4:ed:06:01:71:b0:23:bc:f7:2d: 4d:26:00:a3:5e:ff:d5:4e:fd:25:b4:71:38:e3:2a:a1:77:60: 8d:f1:bb:1b:18:36:9b:29:77:cb:a7:0e:e8:70:c8:35:df:71: 0c:8f:ce:57:80:76:57:84:b0:1b:f5:32:3a:35:56:41:31:2b: b0:c1:ac:14:36:9b:de:74:ad:20:41:48:75:f3:f2:72:cb:10: 08:91:8f:9c:1a:a9:aa:5f:ac:e2:96:e4:7a:db:3a:ce:4d:1b: 5e:0a:a8:8b -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAX0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkI2NEQxMTAvBgNVBAUTKDBDMzdBMDFDQjYzMzYyMzQ0RkI3Mzk2NzYwRkQ5NEQ5 QzlCOTdDN0EwHhcNMjUwOTAzMDQyMzE3WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGI3YzJiNC00NzdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvUpMsS82rJBjUMslUwd9z8+lBtmFYx2ACD3foHgdrf7QTWu4ri+PJhs6eLcA /eEMNFQ+encycfG2drWV/Vtvwi1XOoWZFPHTnUsy3VHQl086AI9beXyIdWGB33Pn 8uWT5tco2o2p8y7Kpo47SO65CX2pj0S9MCQx9vIJSnISaCfPuaC6dfOd5/cX2/2h iCnW4XYycOUDfct2wFP/wB9opY/SKqT8IroYti7pI+WZY2LBVl2X5VFZ0RQQQT8f e2fpiISROoCsX5f6z4Bv+wZy9hvKQxios/urnmDsNeRCpQ0qRr1zWap2UfQsJeGz PHbgVmxdS7fWpGE6wOU00gyokwIDAQABo4IClTCCApEwHQYDVR0OBBYEFKB/Zg7W G/1yLtt1VgOyAaKvCHhIMB8GA1UdIwQYMBaAFAw3oBy2M2I0T7c5Z2D9lNnJuXx6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjY0RC8yQkJFNDAxNDQ2 N0MxMUVFOTJENjQ2M0NDNEY5QUUwMi9ERGVnSExZellqUlB0emxuWVAyVTJjbTVm SG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0REZWdITFl6WWpSUHR6bG5ZUDJVMmNtNWZIby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkI2NEQvMkJCRTQwMTQ0NjdDMTFFRTkyRDY0NjNDQzRGOUFFMDIvODY1QjNGN0M0 NjdDMTFFRUJERTNENDNDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADLjgowDQYJKoZIhvcNAQELBQADggEBAKW/dpya+/Eeq5rh kpcP/zhHq2CBx5wq7T8GtRYmZvDYc176t5np1RqkoItuXDFs3Hnt+X33siqOxTYV 9TSpP9rvvuMRs+3mA40bi4iT/qCmjL3QOyjVYQn8l9ewHg0+1Xc66QHQ7Rq+e7C8 Ful81wmx5iNCdlNUsO9ACvOhqW/MzHW66wfQ0MBRJn8WfaZtMbUSmy9g9tvatO0G AXGwI7z3LU0mAKNe/9VO/SW0cTjjKqF3YI3xuxsYNpspd8unDuhwyDXfcQyPzleA dleEsBv1Mjo1VkExK7DBrBQ2m950rSBBSHXz8nLLEAiRj5waqapfrOKW5HrbOs5N G14KqIs= -----END CERTIFICATE-----Generated at Wed Nov 5 12:28:56 2025 by rpki-client