$ rpki-client -vvf rpki.apnic.net/member_repository/A913F474/13D6B4FEAE6C11F08794BB52C4F9AE02/F265F888AE6C11F0B33E1454C4F9AE02.roa File: F265F888AE6C11F0B33E1454C4F9AE02.roa (raw, json) Hash identifier: PwkeWMT2PFnmytpJenwW/pPPAGqdRGXyqS8HBrt6Ivw= Subject key identifier: 56:91:6B:03:3E:A0:C7:E3:45:A0:BC:16:1E:32:47:4E:81:DE:2C:5A Certificate issuer: /CN=A913F474/serialNumber=B4680D173B0BB85F34B8B8BBEDC326397958D8EE Certificate serial: 02 Authority key identifier: B4:68:0D:17:3B:0B:B8:5F:34:B8:B8:BB:ED:C3:26:39:79:58:D8:EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGgNFzsLuF80uLi77cMmOXlY2O4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F474/13D6B4FEAE6C11F08794BB52C4F9AE02/F265F888AE6C11F0B33E1454C4F9AE02.roa Signing time: Tue 21 Oct 2025 10:58:59 +0000 ROA not before: Tue 21 Oct 2025 10:58:59 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 140686 IP address blocks: 121.200.222.0/23 maxlen: 23 121.200.222.0/24 maxlen: 24 121.200.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F474/13D6B4FEAE6C11F08794BB52C4F9AE02/tGgNFzsLuF80uLi77cMmOXlY2O4.crl rsync://rpki.apnic.net/member_repository/A913F474/13D6B4FEAE6C11F08794BB52C4F9AE02/tGgNFzsLuF80uLi77cMmOXlY2O4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGgNFzsLuF80uLi77cMmOXlY2O4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 10:22:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F474, serialNumber=B4680D173B0BB85F34B8B8BBEDC326397958D8EE Validity Not Before: Oct 21 10:58:59 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68f76773-aa9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3a:fe:80:e1:4c:14:e3:72:63:2d:66:69:7e: c9:f1:2b:61:84:b0:96:7e:4e:88:3b:15:dc:9f:46: d4:bd:67:fb:46:68:d6:b6:7c:89:cb:33:06:41:b8: 4d:5a:6a:a7:4f:3d:b3:24:12:41:b5:70:6d:f6:6b: 69:4c:1a:07:ca:55:5f:27:a3:37:f5:0e:3c:93:1a: 1e:e7:c7:b4:76:7b:53:2d:da:3e:1a:28:b4:eb:a4: 65:ae:da:c6:49:e3:3b:02:ac:a5:a0:bc:cb:dd:e9: 7f:f7:a5:da:9c:81:4d:b7:3b:cb:7d:16:2c:90:1d: 99:83:2e:b6:fd:76:50:eb:d8:85:8f:3c:e6:26:2b: 38:0c:57:3c:2c:5f:15:c0:c5:46:7d:44:55:e7:cd: 3a:d9:8a:f3:41:a5:55:21:ef:7f:44:4d:ac:12:00: d4:7a:b8:cb:fe:48:e4:11:ac:05:9a:9e:16:b4:b6: 1d:a4:2a:3f:0b:83:0a:b2:2b:22:38:df:00:f2:cf: 9c:64:45:48:77:20:0e:9f:97:f1:53:75:fc:38:ab: 99:2b:e4:5c:6b:b9:5d:85:24:90:c6:5e:41:42:22: 6c:ad:62:e7:95:24:e9:c2:b7:9c:49:c4:71:01:4f: bf:42:15:79:d0:e6:9e:0c:de:d7:f5:c1:ad:bf:84: 9d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:91:6B:03:3E:A0:C7:E3:45:A0:BC:16:1E:32:47:4E:81:DE:2C:5A X509v3 Authority Key Identifier: keyid:B4:68:0D:17:3B:0B:B8:5F:34:B8:B8:BB:ED:C3:26:39:79:58:D8:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F474/13D6B4FEAE6C11F08794BB52C4F9AE02/tGgNFzsLuF80uLi77cMmOXlY2O4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGgNFzsLuF80uLi77cMmOXlY2O4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F474/13D6B4FEAE6C11F08794BB52C4F9AE02/F265F888AE6C11F0B33E1454C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 121.200.222.0/23 Signature Algorithm: sha256WithRSAEncryption b2:62:7b:ce:1c:a3:d3:d1:fd:02:08:e1:67:f0:bc:58:90:8d: c8:7e:8e:41:bd:4e:2a:a2:6b:c0:37:98:11:1a:6e:2e:36:93: 6a:fb:61:17:21:f3:d5:e9:ff:86:3a:3c:5d:36:5b:eb:c9:19: 7d:eb:ef:79:2c:e7:92:40:5c:75:21:3f:71:03:2c:fc:65:09: f3:2b:58:8f:bc:1e:f8:43:cf:5e:70:e1:a5:ee:0b:dc:dd:bd: eb:cd:d1:b8:f9:22:54:88:b3:2b:e9:3e:0a:fe:8d:d9:96:69: 81:ca:24:bc:24:6d:1b:4b:da:e0:b8:96:50:68:d6:fb:b5:b3: e7:62:1d:5a:65:90:6d:80:c8:e1:7b:d3:5e:b3:b4:51:46:f5: ef:fb:e8:ba:6d:4a:d1:d5:c4:07:ea:cf:f2:f1:5b:76:e0:f4: cc:ec:20:76:69:0a:47:70:cc:4f:1a:8a:1f:a5:7a:5a:76:b2: 83:be:ef:fb:2d:38:64:99:0c:e9:f0:c2:c4:77:c2:30:84:eb: 84:b0:bf:c8:fb:37:60:9a:ee:d5:ff:14:a0:9c:a1:57:62:01: 83:5b:58:69:67:55:09:61:c5:a6:7f:61:00:58:2b:02:a8:ba: 11:57:92:0c:11:a0:53:8b:d8:d6:ad:11:68:d4:b7:a4:03:4d: 3b:f8:9f:1b -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz RjQ3NDExMC8GA1UEBRMoQjQ2ODBEMTczQjBCQjg1RjM0QjhCOEJCRURDMzI2Mzk3 OTU4RDhFRTAeFw0yNTEwMjExMDU4NTlaFw0yNjEyMDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4Zjc2NzczLWFhOWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3Ov6A4UwU43JjLWZpfsnxK2GEsJZ+Tog7FdyfRtS9Z/tGaNa2fInLMwZBuE1a aqdPPbMkEkG1cG32a2lMGgfKVV8nozf1DjyTGh7nx7R2e1Mt2j4aKLTrpGWu2sZJ 4zsCrKWgvMvd6X/3pdqcgU23O8t9FiyQHZmDLrb9dlDr2IWPPOYmKzgMVzwsXxXA xUZ9RFXnzTrZivNBpVUh739ETawSANR6uMv+SOQRrAWanha0th2kKj8LgwqyKyI4 3wDyz5xkRUh3IA6fl/FTdfw4q5kr5FxruV2FJJDGXkFCImytYueVJOnCt5xJxHEB T79CFXnQ5p4M3tf1wa2/hJ3/AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUVpFrAz6g x+NFoLwWHjJHToHeLFowHwYDVR0jBBgwFoAUtGgNFzsLuF80uLi77cMmOXlY2O4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNGNDc0LzEzRDZCNEZFQUU2 QzExRjA4Nzk0QkI1MkM0RjlBRTAyL3RHZ05GenNMdUY4MHVMaTc3Y01tT1hsWTJP NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdEdnTkZ6c0x1RjgwdUxpNzdjTW1PWGxZMk80LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjQ3NC8xM0Q2QjRGRUFFNkMxMUYwODc5NEJCNTJDNEY5QUUwMi9GMjY1Rjg4OEFF NkMxMUYwQjMzRTE0NTRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAXnI3jANBgkqhkiG9w0BAQsFAAOCAQEAsmJ7zhyj09H9Agjh Z/C8WJCNyH6OQb1OKqJrwDeYERpuLjaTavthFyHz1en/hjo8XTZb68kZfevveSzn kkBcdSE/cQMs/GUJ8ytYj7we+EPPXnDhpe4L3N29683RuPkiVIizK+k+Cv6N2ZZp gcokvCRtG0va4LiWUGjW+7Wz52IdWmWQbYDI4XvTXrO0UUb17/voum1K0dXEB+rP 8vFbduD0zOwgdmkKR3DMTxqKH6V6Wnayg77v+y04ZJkM6fDCxHfCMITrhLC/yPs3 YJru1f8UoJyhV2IBg1tYaWdVCWHFpn9hAFgrAqi6EVeSDBGgU4vY1q0RaNS3pANN O/ifGw== -----END CERTIFICATE-----Generated at Fri Oct 24 09:17:42 2025 by rpki-client