$ rpki-client -vvf rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/BB799DA8844011F09054B049C4F9AE02.roa File: BB799DA8844011F09054B049C4F9AE02.roa (raw, json) Hash identifier: W+leA70SicgPxg1HjMlJr7Zrh6NlHpRsyqndp8PDjQA= Subject key identifier: 23:7D:B0:E7:75:95:74:EF:27:00:94:CD:8F:B2:BA:F0:91:0B:F7:5C Certificate issuer: /CN=A9136EC5/serialNumber=9FCE28914C50DC99755F108AB4334F772CBEA0E2 Certificate serial: 2B7A Authority key identifier: 9F:CE:28:91:4C:50:DC:99:75:5F:10:8A:B4:33:4F:77:2C:BE:A0:E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n84okUxQ3Jl1XxCKtDNPdyy-oOI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/BB799DA8844011F09054B049C4F9AE02.roa Signing time: Tue 28 Oct 2025 14:15:08 +0000 ROA not before: Tue 28 Oct 2025 14:15:08 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 31898 IP address blocks: 43.245.96.0/22 maxlen: 24 43.245.108.0/22 maxlen: 24 101.100.192.0/18 maxlen: 24 103.9.100.0/22 maxlen: 24 103.11.188.0/22 maxlen: 24 103.15.232.0/22 maxlen: 24 103.104.196.0/24 maxlen: 24 111.235.136.0/22 maxlen: 24 119.31.232.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.crl rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n84okUxQ3Jl1XxCKtDNPdyy-oOI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 15:32:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11130 (0x2b7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136EC5, serialNumber=9FCE28914C50DC99755F108AB4334F772CBEA0E2 Validity Not Before: Oct 28 14:15:08 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=6900cfec-2b5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:08:8c:1e:d6:aa:46:b3:41:e6:14:88:57:80: 6d:51:2a:5b:f9:44:66:8f:74:57:03:e4:58:b9:53: e4:b2:eb:dc:04:c3:f3:62:dd:0f:0c:f5:28:fb:21: 9f:94:ee:c0:27:d0:f0:60:7a:b7:39:2b:06:79:f0: e4:a7:cc:19:7b:9b:97:aa:9f:fa:90:5b:71:3d:b8: 75:a3:6b:ea:cc:76:e8:c1:9b:e3:eb:ea:66:b8:97: 99:6a:aa:42:92:d2:e3:f4:17:24:9c:e8:20:a3:ec: 88:cb:a7:b5:b1:58:0f:a9:67:c4:54:0d:2b:e6:c4: cb:95:50:66:c3:af:7e:4d:9b:76:a3:82:b5:25:6c: 04:5c:75:64:82:14:24:58:ef:5c:27:b9:95:b0:5d: 0f:17:83:1e:b7:70:e2:f9:a4:b9:23:e2:ea:5d:f7: ec:e3:6c:8b:35:7a:7d:ab:7f:d5:07:e0:af:97:16: 20:cf:80:83:c6:d1:9e:29:6d:0c:73:c4:31:00:d7: 05:a3:3b:75:ff:1d:60:04:d5:17:3b:64:ea:d4:26: 87:60:1b:ea:e5:ff:b1:aa:98:6f:07:cb:b6:b4:ee: 68:15:df:6d:4a:b1:a0:6d:44:20:5a:f8:dc:cb:6b: c4:4b:5b:c2:ec:e5:01:ea:64:ff:69:8d:16:fe:f0: 9d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:7D:B0:E7:75:95:74:EF:27:00:94:CD:8F:B2:BA:F0:91:0B:F7:5C X509v3 Authority Key Identifier: keyid:9F:CE:28:91:4C:50:DC:99:75:5F:10:8A:B4:33:4F:77:2C:BE:A0:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n84okUxQ3Jl1XxCKtDNPdyy-oOI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/BB799DA8844011F09054B049C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.245.96.0/22 43.245.108.0/22 101.100.192.0/18 103.9.100.0/22 103.11.188.0/22 103.15.232.0/22 103.104.196.0/24 111.235.136.0/22 119.31.232.0/21 Signature Algorithm: sha256WithRSAEncryption 42:f1:76:10:d4:0d:e8:73:4b:40:dd:3e:b5:12:59:10:e2:e2: 5a:75:2c:ea:58:83:c3:56:b6:6b:20:68:ea:a9:10:52:b8:18: 68:c6:c6:e8:82:d9:f3:90:17:0c:a8:6c:90:78:c2:71:22:40: 19:8b:fd:12:a7:7c:28:2b:66:c2:ab:94:f2:0b:fc:ae:dc:a1: 43:de:d4:cb:40:6f:a1:69:f0:48:0f:80:1c:cc:ce:4a:0b:ab: 79:9f:64:fc:0e:21:2d:9d:55:28:77:8a:99:6a:3a:af:80:9b: 9c:29:7a:d7:41:01:2d:32:57:2b:d1:41:05:9e:7d:ca:c7:34: e9:40:47:b8:0b:ae:2f:98:2c:64:52:d9:6b:ce:81:4c:53:cc: d4:8b:d6:97:9b:04:50:f8:2b:d0:75:36:bc:d2:f0:41:0d:b3: 8e:8f:6f:29:c4:ff:3b:82:d5:45:f0:57:03:4f:55:b5:a6:4b: e7:4e:b3:ea:5b:a9:fd:ab:06:88:6b:ed:c8:16:f8:59:6b:d2: 32:8c:35:7e:ec:b7:61:96:9a:93:7a:9b:19:fc:83:4a:4a:53: 1c:50:a1:04:22:70:99:5d:5d:62:33:43:fb:82:98:3d:ce:78: 7f:c8:f8:1b:10:4d:c5:dc:7b:f5:53:91:a5:c9:3f:54:54:f7: 49:6e:4c:0b -----BEGIN CERTIFICATE----- MIIFoTCCBImgAwIBAgICK3owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZFQzUxMTAvBgNVBAUTKDlGQ0UyODkxNEM1MERDOTk3NTVGMTA4QUI0MzM0Rjc3 MkNCRUEwRTIwHhcNMjUxMDI4MTQxNTA4WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTAwY2ZlYy0yYjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3wiMHtaqRrNB5hSIV4BtUSpb+URmj3RXA+RYuVPksuvcBMPzYt0PDPUo+yGf lO7AJ9DwYHq3OSsGefDkp8wZe5uXqp/6kFtxPbh1o2vqzHbowZvj6+pmuJeZaqpC ktLj9BcknOggo+yIy6e1sVgPqWfEVA0r5sTLlVBmw69+TZt2o4K1JWwEXHVkghQk WO9cJ7mVsF0PF4Met3Di+aS5I+LqXffs42yLNXp9q3/VB+CvlxYgz4CDxtGeKW0M c8QxANcFozt1/x1gBNUXO2Tq1CaHYBvq5f+xqphvB8u2tO5oFd9tSrGgbUQgWvjc y2vES1vC7OUB6mT/aY0W/vCdWwIDAQABo4ICxTCCAsEwHQYDVR0OBBYEFCN9sOd1 lXTvJwCUzY+yuvCRC/dcMB8GA1UdIwQYMBaAFJ/OKJFMUNyZdV8QirQzT3csvqDi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkVDNS8yREVDQUU1NjBF NTYxMUU0QjZGMTk1M0FDNEY5QUUwMi9uODRva1V4UTNKbDFYeENLdEROUGR5eS1v T0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL244NG9rVXhRM0psMVh4Q0t0RE5QZHl5LW9PSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzZFQzUvMkRFQ0FFNTYwRTU2MTFFNEI2RjE5NTNBQzRGOUFFMDIvQkI3OTlEQTg4 NDQwMTFGMDkwNTRCMDQ5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwTwYIKwYBBQUHAQcBAf8E QDA+MDwEAgABMDYDBAIr9WADBAIr9WwDBAZlZMADBAJnCWQDBAJnC7wDBAJnD+gD BABnaMQDBAJv64gDBAN3H+gwDQYJKoZIhvcNAQELBQADggEBAELxdhDUDehzS0Dd PrUSWRDi4lp1LOpYg8NWtmsgaOqpEFK4GGjGxuiC2fOQFwyobJB4wnEiQBmL/RKn fCgrZsKrlPIL/K7coUPe1MtAb6Fp8EgPgBzMzkoLq3mfZPwOIS2dVSh3iplqOq+A m5wpetdBAS0yVyvRQQWefcrHNOlAR7gLri+YLGRS2WvOgUxTzNSL1pebBFD4K9B1 NrzS8EENs46PbynE/zuC1UXwVwNPVbWmS+dOs+pbqf2rBohr7cgW+Flr0jKMNX7s t2GWmpN6mxn8g0pKUxxQoQQicJldXWIzQ/uCmD3OeH/I+BsQTcXce/VTkaXJP1RU 90luTAs= -----END CERTIFICATE-----Generated at Mon Nov 3 17:20:08 2025 by rpki-client