$ rpki-client -vvf rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/BB799DA8844011F09054B049C4F9AE02.roa File: BB799DA8844011F09054B049C4F9AE02.roa (raw, json) Hash identifier: cFt8ol+rUcRVrdwEhcNK9trVsrCRwFUILKrI+CIAfKY= Subject key identifier: E6:32:D8:A5:26:67:12:58:C2:87:B0:80:E7:16:C5:24:BC:3F:27:D7 Certificate issuer: /CN=A9136EC5/serialNumber=9FCE28914C50DC99755F108AB4334F772CBEA0E2 Certificate serial: 2B4C Authority key identifier: 9F:CE:28:91:4C:50:DC:99:75:5F:10:8A:B4:33:4F:77:2C:BE:A0:E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n84okUxQ3Jl1XxCKtDNPdyy-oOI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/BB799DA8844011F09054B049C4F9AE02.roa Signing time: Thu 28 Aug 2025 18:56:41 +0000 ROA not before: Thu 28 Aug 2025 18:56:41 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 31898 IP address blocks: 43.245.96.0/22 maxlen: 24 43.245.108.0/22 maxlen: 24 101.100.192.0/18 maxlen: 24 103.9.100.0/22 maxlen: 24 103.15.232.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.crl rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n84okUxQ3Jl1XxCKtDNPdyy-oOI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 15:31:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11084 (0x2b4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136EC5, serialNumber=9FCE28914C50DC99755F108AB4334F772CBEA0E2 Validity Not Before: Aug 28 18:56:41 2025 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=68b0a668-d726 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:09:52:a8:32:5f:3c:08:4a:98:6a:4e:0d:1a: cc:a7:7d:80:da:54:27:00:99:1e:ec:6d:65:e1:c6: ee:97:bc:e0:59:0f:32:ab:08:6b:3f:f4:c8:8a:dc: 10:5e:3e:5c:3f:2b:81:16:64:6c:73:1e:5e:02:4a: 02:2f:ce:63:f4:03:13:1d:ae:94:5e:a0:fc:76:97: aa:36:62:50:43:e9:67:ab:d5:08:50:fb:58:bc:5e: 3d:d7:3f:60:64:89:bb:de:e9:21:62:1b:59:fc:57: b2:f2:68:fc:6b:7c:3d:87:aa:81:8b:7b:55:f5:07: d1:47:cc:cc:cf:5b:4b:4f:c2:63:87:07:9f:9d:1d: 18:f9:21:75:5a:cc:aa:17:0b:88:bd:cf:cb:e0:2e: 3c:d2:3f:25:74:4f:dc:2f:59:a7:f4:96:ad:70:2e: cc:d4:1e:b5:c3:6f:8c:b8:45:5f:ec:cf:75:0f:cb: 12:ae:6a:9f:ee:f5:d7:2f:d9:19:db:4a:d0:81:7b: a0:43:fc:2b:d1:ef:a0:04:ae:78:69:c3:c1:ac:2e: c6:07:9b:b3:63:07:27:46:75:24:d4:17:42:69:e5: bb:f3:7f:1b:eb:b9:33:01:f5:94:b9:27:dc:4e:b5: 2d:46:79:0f:9d:3a:05:df:9c:c7:43:47:1a:30:ea: f5:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:32:D8:A5:26:67:12:58:C2:87:B0:80:E7:16:C5:24:BC:3F:27:D7 X509v3 Authority Key Identifier: keyid:9F:CE:28:91:4C:50:DC:99:75:5F:10:8A:B4:33:4F:77:2C:BE:A0:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n84okUxQ3Jl1XxCKtDNPdyy-oOI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/BB799DA8844011F09054B049C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.245.96.0/22 43.245.108.0/22 101.100.192.0/18 103.9.100.0/22 103.15.232.0/22 Signature Algorithm: sha256WithRSAEncryption 25:1f:e9:c6:fc:46:a1:f8:75:7b:8e:63:c8:7b:c0:f3:a8:1c: 06:09:63:a5:b1:ea:6f:61:00:98:2e:82:1a:dc:9f:53:58:af: e0:e6:45:71:64:9c:38:95:1c:ff:36:2a:bd:c5:50:a2:33:6c: 0f:69:d9:9c:7a:a7:db:ea:af:44:f9:a5:f2:19:65:cf:a3:bc: 06:d8:ec:13:3a:51:87:2d:19:7c:8b:34:d2:bf:e7:d0:4a:42: 6f:b8:0e:bb:7c:fc:f1:5a:7d:85:f0:f7:ca:45:a0:2f:6c:60: 52:ff:95:e8:ac:6c:c7:3c:95:a1:0f:6b:2d:1d:4d:ce:e3:e7: 45:27:67:92:6e:32:89:dc:8f:8e:a8:23:91:84:74:e7:2a:4c: 4f:eb:de:14:3a:7e:5f:0f:b9:27:37:66:f8:16:0e:bd:2f:20: e6:df:8b:6c:09:32:4e:3f:8f:c6:99:c4:0f:3a:68:c0:2d:8a: 8b:99:a9:c2:04:8c:9b:2f:46:69:d0:33:74:2c:7f:e5:d2:e9: c5:5a:c2:31:85:10:1d:aa:ad:0c:5f:f9:d5:e0:75:ec:d8:27: dd:c3:1b:05:35:f1:14:c8:14:92:68:cc:02:12:b4:03:d6:57: 11:99:f9:3b:57:89:8e:ba:3d:c6:bc:10:38:e3:f8:fc:96:5b: 2d:50:6d:79 -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgICK0wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZFQzUxMTAvBgNVBAUTKDlGQ0UyODkxNEM1MERDOTk3NTVGMTA4QUI0MzM0Rjc3 MkNCRUEwRTIwHhcNMjUwODI4MTg1NjQxWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGIwYTY2OC1kNzI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2glSqDJfPAhKmGpODRrMp32A2lQnAJke7G1l4cbul7zgWQ8yqwhrP/TIitwQ Xj5cPyuBFmRscx5eAkoCL85j9AMTHa6UXqD8dpeqNmJQQ+lnq9UIUPtYvF491z9g ZIm73ukhYhtZ/Fey8mj8a3w9h6qBi3tV9QfRR8zMz1tLT8JjhwefnR0Y+SF1Wsyq FwuIvc/L4C480j8ldE/cL1mn9JatcC7M1B61w2+MuEVf7M91D8sSrmqf7vXXL9kZ 20rQgXugQ/wr0e+gBK54acPBrC7GB5uzYwcnRnUk1BdCaeW7838b67kzAfWUuSfc TrUtRnkPnToF35zHQ0caMOr1twIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFOYy2KUm ZxJYwoewgOcWxSS8PyfXMB8GA1UdIwQYMBaAFJ/OKJFMUNyZdV8QirQzT3csvqDi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkVDNS8yREVDQUU1NjBF NTYxMUU0QjZGMTk1M0FDNEY5QUUwMi9uODRva1V4UTNKbDFYeENLdEROUGR5eS1v T0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL244NG9rVXhRM0psMVh4Q0t0RE5QZHl5LW9PSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzZFQzUvMkRFQ0FFNTYwRTU2MTFFNEI2RjE5NTNBQzRGOUFFMDIvQkI3OTlEQTg4 NDQwMTFGMDkwNTRCMDQ5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNwYIKwYBBQUHAQcBAf8E KDAmMCQEAgABMB4DBAIr9WADBAIr9WwDBAZlZMADBAJnCWQDBAJnD+gwDQYJKoZI hvcNAQELBQADggEBACUf6cb8RqH4dXuOY8h7wPOoHAYJY6Wx6m9hAJgughrcn1NY r+DmRXFknDiVHP82Kr3FUKIzbA9p2Zx6p9vqr0T5pfIZZc+jvAbY7BM6UYctGXyL NNK/59BKQm+4Drt8/PFafYXw98pFoC9sYFL/leisbMc8laEPay0dTc7j50UnZ5Ju Moncj46oI5GEdOcqTE/r3hQ6fl8PuSc3ZvgWDr0vIObfi2wJMk4/j8aZxA86aMAt iouZqcIEjJsvRmnQM3Qsf+XS6cVawjGFEB2qrQxf+dXgdezYJ93DGwU18RTIFJJo zAIStAPWVxGZ+TtXiY66Pca8EDjj+PyWWy1QbXk= -----END CERTIFICATE-----Generated at Tue Sep 9 18:44:07 2025 by rpki-client