$ rpki-client -vvf rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/28C9E030920A11F0B546BD1DC4F9AE02.roa File: 28C9E030920A11F0B546BD1DC4F9AE02.roa (raw, json) Hash identifier: fj5tehx+kZefIpvOAwBpBUIWfAyDyG9608uECQgmSfs= Subject key identifier: 83:8D:F6:B4:9C:E8:0E:A0:84:72:8D:98:DE:14:53:A0:35:43:12:69 Certificate issuer: /CN=A912FC73/serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC Certificate serial: 04C8 Authority key identifier: CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/28C9E030920A11F0B546BD1DC4F9AE02.roa Signing time: Mon 15 Sep 2025 08:01:18 +0000 ROA not before: Mon 15 Sep 2025 08:01:18 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 7029 IP address blocks: 113.20.40.0/22 maxlen: 22 113.20.48.0/22 maxlen: 22 113.20.52.0/22 maxlen: 22 113.20.56.0/22 maxlen: 22 223.29.128.0/22 maxlen: 22 223.29.136.0/22 maxlen: 22 223.29.140.0/22 maxlen: 22 223.29.144.0/22 maxlen: 22 223.29.148.0/22 maxlen: 22 223.29.152.0/22 maxlen: 22 223.29.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:33:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1224 (0x4c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FC73, serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC Validity Not Before: Sep 15 08:01:18 2025 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=68c7c7ce-6eae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:6b:47:ce:77:41:c6:ec:0a:a6:2a:6b:69:50: 95:47:79:42:a6:41:7d:d6:49:7a:fc:16:c0:c4:1a: ab:18:ef:cc:e1:46:a1:50:9b:8b:71:e8:72:03:3b: 1f:3f:2c:2b:b7:8e:f0:8f:da:c2:97:90:69:ef:c9: 2a:1e:28:49:b9:66:58:07:07:03:f5:6b:34:3d:e8: c0:b5:09:97:b2:f1:d5:9e:1a:cd:b0:5c:51:2c:d9: 84:17:5a:15:4f:48:16:ba:8b:b5:30:6f:c2:90:d8: ad:a0:46:53:42:af:d4:ab:28:fb:f6:7f:34:48:e8: a9:fb:9a:2d:c1:de:db:32:ee:2a:ea:c1:94:05:37: a1:bd:04:a4:3f:45:c0:45:34:d5:85:18:bc:23:a3: 04:8f:9e:8c:63:18:4b:6f:7a:5a:01:59:d5:9b:e2: aa:d8:f0:af:43:67:46:6c:5c:a3:d5:fc:4a:af:bf: 9f:9d:98:21:17:92:b5:95:3b:cb:4a:c7:31:72:55: 05:fc:53:eb:d8:30:36:69:9d:26:e8:2a:39:8b:ba: 34:e5:bb:9c:2d:f6:bf:22:b3:89:21:34:00:8e:9e: 68:b2:cf:c5:26:ce:90:a6:0c:9c:e6:00:a8:0a:9c: 1e:05:50:c6:fc:8f:07:45:22:4c:fd:52:51:3b:a8: 92:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:8D:F6:B4:9C:E8:0E:A0:84:72:8D:98:DE:14:53:A0:35:43:12:69 X509v3 Authority Key Identifier: keyid:CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/28C9E030920A11F0B546BD1DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 113.20.40.0/22 113.20.48.0-113.20.59.255 223.29.128.0/22 223.29.136.0-223.29.159.255 Signature Algorithm: sha256WithRSAEncryption c9:35:52:51:5d:9e:d3:16:83:5f:d7:5e:e3:20:3e:31:29:d2: a3:5d:4d:3f:a8:b3:5c:03:fd:67:fe:00:99:f5:7c:eb:55:aa: d1:57:12:d1:89:5b:b3:f8:fb:a6:96:83:ff:cc:e9:39:10:09: 90:0b:e2:40:6d:98:5a:eb:cc:41:bd:9e:49:55:88:4a:00:c6: 22:91:86:75:99:29:ff:04:d4:22:4d:5d:d9:15:e0:36:68:27: 82:a4:07:17:61:14:9f:ad:d1:78:a8:2f:db:1c:00:29:24:e5: 78:67:e1:3a:fc:e2:11:30:ee:3e:d0:2f:d1:15:d7:d3:95:2e: 29:0b:43:44:8c:f6:73:0a:97:1d:0c:05:79:27:9a:38:be:ee: 8f:11:dd:16:f6:4d:3c:12:6e:b0:6a:73:3f:fa:15:bc:c6:a3: 2e:ec:96:dd:11:1f:83:fc:e1:a9:0b:0a:d7:6d:8b:13:51:93: 96:9b:40:d1:45:2e:e4:c9:c7:9a:e4:e8:b3:25:f2:a2:b7:b1: 21:fe:15:5e:cb:24:f4:17:6f:7a:af:8b:ec:ed:7b:30:c7:d2: 33:a8:bf:47:34:6a:70:5a:11:6d:5b:27:c6:ba:53:f4:ae:41: c5:b2:ca:a0:95:d1:bf:9e:45:e5:3f:c9:11:5d:59:11:1d:f5: a4:6b:58:83 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgICBMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZDNzMxMTAvBgNVBAUTKENFRTQxNjAxRUVBOUY1MUIzNTI1REE1NURENEFDOTVD RUZBRjVBQkMwHhcNMjUwOTE1MDgwMTE4WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGM3YzdjZS02ZWFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoWtHzndBxuwKpipraVCVR3lCpkF91kl6/BbAxBqrGO/M4UahUJuLcehyAzsf Pywrt47wj9rCl5Bp78kqHihJuWZYBwcD9Ws0PejAtQmXsvHVnhrNsFxRLNmEF1oV T0gWuou1MG/CkNitoEZTQq/Uqyj79n80SOip+5otwd7bMu4q6sGUBTehvQSkP0XA RTTVhRi8I6MEj56MYxhLb3paAVnVm+Kq2PCvQ2dGbFyj1fxKr7+fnZghF5K1lTvL SscxclUF/FPr2DA2aZ0m6Co5i7o05bucLfa/IrOJITQAjp5oss/FJs6Qpgyc5gCo CpweBVDG/I8HRSJM/VJRO6iSrQIDAQABo4ICtzCCArMwHQYDVR0OBBYEFION9rSc 6A6ghHKNmN4UU6A1QxJpMB8GA1UdIwQYMBaAFM7kFgHuqfUbNSXaVd1KyVzvr1q8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkM3My8wMTQ0Q0RGODlG MzQxMUVDOUNFQkM2NzBDNEY5QUUwMi96dVFXQWU2cDlSczFKZHBWM1VySlhPLXZX cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p1UVdBZTZwOVJzMUpkcFYzVXJKWE8tdldydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkZDNzMvMDE0NENERjg5RjM0MTFFQzlDRUJDNjcwQzRGOUFFMDIvMjhDOUUwMzA5 MjBBMTFGMEI1NDZCRDFEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQQYIKwYBBQUHAQcBAf8E MjAwMC4EAgABMCgDBAJxFCgwDAMEBHEUMAMEAnEUOAMEAt8dgDAMAwQD3x2IAwQF 3x2AMA0GCSqGSIb3DQEBCwUAA4IBAQDJNVJRXZ7TFoNf117jID4xKdKjXU0/qLNc A/1n/gCZ9XzrVarRVxLRiVuz+PumloP/zOk5EAmQC+JAbZha68xBvZ5JVYhKAMYi kYZ1mSn/BNQiTV3ZFeA2aCeCpAcXYRSfrdF4qC/bHAApJOV4Z+E6/OIRMO4+0C/R FdfTlS4pC0NEjPZzCpcdDAV5J5o4vu6PEd0W9k08Em6wanM/+hW8xqMu7JbdER+D /OGpCwrXbYsTUZOWm0DRRS7kycea5OizJfKit7Eh/hVeyyT0F296r4vs7Xswx9Iz qL9HNGpwWhFtWyfGulP0rkHFssqgldG/nkXlP8kRXVkRHfWka1iD -----END CERTIFICATE-----Generated at Sun Oct 19 18:34:18 2025 by rpki-client