$ rpki-client -vvf rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/46E504FC8A3D11F095CFBF20C4F9AE02.roa File: 46E504FC8A3D11F095CFBF20C4F9AE02.roa (raw, json) Hash identifier: jP4FeomWi1qPc7Kj3fPfUBMM7SlzKOq+HZbOrQh4oSU= Subject key identifier: 3F:16:14:41:1B:97:D1:B0:79:16:87:86:76:A0:48:D1:BD:2D:B8:CB Certificate issuer: /CN=A912FC73/serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC Certificate serial: 04B3 Authority key identifier: CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/46E504FC8A3D11F095CFBF20C4F9AE02.roa Signing time: Fri 05 Sep 2025 09:47:04 +0000 ROA not before: Fri 05 Sep 2025 09:47:04 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 22773 IP address blocks: 113.20.48.0/22 maxlen: 22 113.20.52.0/22 maxlen: 22 113.20.56.0/22 maxlen: 22 223.29.128.0/22 maxlen: 22 223.29.136.0/22 maxlen: 22 223.29.140.0/22 maxlen: 22 223.29.144.0/22 maxlen: 22 223.29.148.0/22 maxlen: 22 223.29.152.0/22 maxlen: 22 223.29.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 01:03:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1203 (0x4b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FC73, serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC Validity Not Before: Sep 5 09:47:04 2025 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=68bab197-21e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:03:b2:3e:6e:4d:2e:1f:d9:15:ac:ff:97:80: f9:ab:ba:89:7a:dd:b7:78:b4:e4:c9:42:13:42:09: 0c:91:d7:01:1a:4d:51:57:24:75:d8:01:1a:fd:ce: 68:75:a3:1b:3b:4a:2f:6e:54:c3:3f:ee:6f:c9:83: 36:b4:4c:38:fa:79:b2:0f:c1:c9:9a:f4:f2:7a:1e: 57:0d:37:e0:71:5f:29:0b:be:1e:46:01:49:9d:fc: 01:96:18:a1:a5:4f:ed:92:e7:97:91:de:ce:a4:16: cf:bd:38:ee:17:a5:a1:82:9e:1d:9f:0f:f2:0a:de: cc:b4:e5:ac:87:12:29:65:3e:45:13:56:dc:91:f9: bf:c0:4c:db:f1:86:ab:80:e5:38:cb:92:46:bd:f2: 9e:3e:f9:4c:cd:b7:3b:01:f3:40:71:2c:7a:51:34: 76:3d:a4:3b:2a:5a:d1:9a:2c:3e:79:a9:f1:b9:b5: 60:7b:c9:ec:6f:2a:e2:6c:a2:28:72:88:3f:cc:72: 65:01:45:05:22:bc:ed:90:82:4b:a7:b0:37:45:69: 10:1a:52:05:e2:50:c1:02:f5:75:a1:fb:80:2b:00: ed:01:e5:ef:fe:60:d0:67:78:20:b5:92:96:a9:49: 34:91:42:4e:a1:76:20:89:be:b3:35:a0:f5:90:38: cd:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:16:14:41:1B:97:D1:B0:79:16:87:86:76:A0:48:D1:BD:2D:B8:CB X509v3 Authority Key Identifier: keyid:CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/46E504FC8A3D11F095CFBF20C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 113.20.48.0-113.20.59.255 223.29.128.0/22 223.29.136.0-223.29.159.255 Signature Algorithm: sha256WithRSAEncryption b8:f3:42:a2:c9:19:14:ab:ee:49:b1:f6:52:58:b2:a4:ef:09: 2a:29:b9:fc:d6:1e:95:f8:d1:2e:9e:2e:6f:b4:67:cd:a6:94: db:5d:28:e7:9c:06:46:62:55:31:78:a5:af:3d:06:63:b9:75: 4b:ea:a2:f9:13:f9:c7:58:79:e0:b9:20:36:f3:75:12:b4:ca: af:5a:4e:60:8b:8b:e7:b5:52:17:ef:bc:18:e8:a5:9f:be:d6: 6e:cf:4b:8e:4e:17:65:91:c8:e0:8a:df:97:9e:98:ad:94:b9: 44:1c:ad:82:12:4c:e4:2f:87:9b:d5:ac:bd:1a:62:e9:c9:95: b0:a7:a2:bb:04:59:20:59:dd:f1:4f:03:21:a6:17:0f:af:50: 6e:8c:83:0a:3c:ae:16:51:dc:08:ab:85:5d:31:88:60:2e:ac: 5f:bf:ed:1d:34:cc:f2:46:7b:55:6c:1e:b5:35:c9:2e:d1:84: f4:5e:a5:83:b6:b8:8c:5b:ab:37:ea:a4:ca:6e:0b:10:89:44: d8:d0:ff:55:6a:f0:3f:15:d0:dd:88:35:ab:56:4d:81:15:02: 9b:1e:29:b5:71:94:90:33:e4:15:b6:57:d9:69:da:4c:83:61: d7:39:8a:35:fa:02:05:08:c2:79:00:4e:ba:0b:96:4e:da:0a: 41:9d:5a:3f -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgICBLMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZDNzMxMTAvBgNVBAUTKENFRTQxNjAxRUVBOUY1MUIzNTI1REE1NURENEFDOTVD RUZBRjVBQkMwHhcNMjUwOTA1MDk0NzA0WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGJhYjE5Ny0yMWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqQOyPm5NLh/ZFaz/l4D5q7qJet23eLTkyUITQgkMkdcBGk1RVyR12AEa/c5o daMbO0ovblTDP+5vyYM2tEw4+nmyD8HJmvTyeh5XDTfgcV8pC74eRgFJnfwBlhih pU/tkueXkd7OpBbPvTjuF6Whgp4dnw/yCt7MtOWshxIpZT5FE1bckfm/wEzb8Yar gOU4y5JGvfKePvlMzbc7AfNAcSx6UTR2PaQ7KlrRmiw+eanxubVge8nsbyribKIo cog/zHJlAUUFIrztkIJLp7A3RWkQGlIF4lDBAvV1ofuAKwDtAeXv/mDQZ3ggtZKW qUk0kUJOoXYgib6zNaD1kDjNhwIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFD8WFEEb l9GweRaHhnagSNG9LbjLMB8GA1UdIwQYMBaAFM7kFgHuqfUbNSXaVd1KyVzvr1q8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkM3My8wMTQ0Q0RGODlG MzQxMUVDOUNFQkM2NzBDNEY5QUUwMi96dVFXQWU2cDlSczFKZHBWM1VySlhPLXZX cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p1UVdBZTZwOVJzMUpkcFYzVXJKWE8tdldydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkZDNzMvMDE0NENERjg5RjM0MTFFQzlDRUJDNjcwQzRGOUFFMDIvNDZFNTA0RkM4 QTNEMTFGMDk1Q0ZCRjIwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOwYIKwYBBQUHAQcBAf8E LDAqMCgEAgABMCIwDAMEBHEUMAMEAnEUOAMEAt8dgDAMAwQD3x2IAwQF3x2AMA0G CSqGSIb3DQEBCwUAA4IBAQC480KiyRkUq+5JsfZSWLKk7wkqKbn81h6V+NEuni5v tGfNppTbXSjnnAZGYlUxeKWvPQZjuXVL6qL5E/nHWHnguSA283UStMqvWk5gi4vn tVIX77wY6KWfvtZuz0uOThdlkcjgit+XnpitlLlEHK2CEkzkL4eb1ay9GmLpyZWw p6K7BFkgWd3xTwMhphcPr1BujIMKPK4WUdwIq4VdMYhgLqxfv+0dNMzyRntVbB61 Ncku0YT0XqWDtriMW6s36qTKbgsQiUTY0P9VavA/FdDdiDWrVk2BFQKbHim1cZSQ M+QVtlfZadpMg2HXOYo1+gIFCMJ5AE66C5ZO2gpBnVo/ -----END CERTIFICATE-----Generated at Mon Sep 8 10:05:32 2025 by rpki-client