$ rpki-client -vvf rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/9156042083EB11ECB7EC3B76C4F9AE02.roa File: 9156042083EB11ECB7EC3B76C4F9AE02.roa (raw, json) Hash identifier: pLnncZW/+2aMcnpBmFNNa8a+AYjIGNXBznPCsUBo+1c= Subject key identifier: 66:2F:AF:29:B4:7C:3A:E6:54:12:76:78:54:9D:B1:AA:05:3B:0B:A5 Certificate issuer: /CN=A914247C/serialNumber=D5A0250634DFC03DC9CFCABA9795180FF05158FC Certificate serial: 0B4B Authority key identifier: D5:A0:25:06:34:DF:C0:3D:C9:CF:CA:BA:97:95:18:0F:F0:51:58:FC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/9156042083EB11ECB7EC3B76C4F9AE02.roa Signing time: Sat 30 Aug 2025 19:40:36 +0000 ROA not before: Sat 30 Aug 2025 19:40:36 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 24014 IP address blocks: 131.244.0.0/15 maxlen: 15 192.48.109.0/24 maxlen: 24 192.48.110.0/24 maxlen: 24 192.88.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.crl rsync://rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 19:24:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2891 (0xb4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914247C, serialNumber=D5A0250634DFC03DC9CFCABA9795180FF05158FC Validity Not Before: Aug 30 19:40:36 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68b353b4-0dd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:01:b3:85:e7:df:55:62:8e:a6:56:21:70:01: d2:6c:cb:eb:19:fc:3a:95:6e:e3:35:01:6e:1b:b6: 37:b2:c7:13:c5:3e:22:7a:5f:ac:a9:8d:2b:fc:e2: fe:5a:7b:6a:93:47:78:53:dd:36:7c:67:b9:75:4b: b1:1a:46:98:84:b6:be:80:64:55:15:2d:50:40:7e: e6:3a:56:d0:0a:80:45:55:db:be:4c:f7:15:94:f3: 93:f0:fe:0d:14:86:de:be:c0:59:26:cb:bb:f1:49: 1b:04:ba:09:35:b7:a0:67:13:96:64:af:ba:a8:92: 27:19:a5:d9:cf:a2:e3:9c:ff:12:22:c0:c7:4d:14: 19:7a:b5:d8:6a:95:f4:bc:4e:ad:f3:ee:7f:85:09: ec:e0:21:95:cb:d3:bf:87:a9:31:6b:07:5b:b7:10: 32:70:04:e6:f3:4b:63:bf:7b:28:35:ec:c2:a3:e3: b9:da:e6:07:4f:8b:ed:72:9d:d8:4a:53:07:c0:33: 05:b9:61:4b:56:7d:93:6f:a6:62:3b:36:e2:70:74: f5:e7:ac:19:c5:b0:af:89:15:a6:03:57:88:f0:d3: b4:0a:3f:b0:4f:ae:3b:aa:1e:bc:5c:04:e0:06:86: f2:4c:f3:ce:8d:73:b6:42:d0:c1:e5:e0:13:6f:2e: 99:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:2F:AF:29:B4:7C:3A:E6:54:12:76:78:54:9D:B1:AA:05:3B:0B:A5 X509v3 Authority Key Identifier: keyid:D5:A0:25:06:34:DF:C0:3D:C9:CF:CA:BA:97:95:18:0F:F0:51:58:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/9156042083EB11ECB7EC3B76C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 131.244.0.0/15 192.48.109.0-192.48.110.255 192.88.187.0/24 Signature Algorithm: sha256WithRSAEncryption 59:e2:06:24:f9:50:e7:f7:1b:e2:58:8d:23:26:73:82:f5:b8: c8:20:aa:c9:37:ad:43:dc:d2:ea:d4:c7:0f:6c:fa:6e:2c:10: 70:1b:b6:1c:e0:9c:01:cd:98:d2:21:ac:90:4b:b5:f8:7e:7a: a8:0a:e1:66:98:67:c4:ca:66:ec:c8:d6:c2:3a:55:36:f3:e1: 53:c8:db:e4:d6:a9:50:2a:4c:74:e2:21:57:b6:e8:a9:68:d0: 47:3e:3a:2c:59:2a:31:9c:63:e5:9d:97:b6:54:f3:6d:ef:b9: a8:93:a8:ec:18:01:43:bb:87:ff:28:c4:a7:34:bf:bf:de:25: 80:0a:0a:01:73:19:2a:fd:81:4b:65:bf:d9:75:de:ba:69:44: e3:0e:64:25:e2:3d:94:0a:3a:24:9a:90:74:4d:98:02:b1:87: 3f:f8:66:05:12:07:05:77:14:db:1a:8e:9b:09:f6:a5:06:8d: ec:94:45:53:51:a3:02:b7:37:fd:cb:9b:fc:46:33:91:a4:05: 85:b2:2c:85:be:66:2f:3f:4b:fd:95:98:3c:7b:a9:17:19:9e: b4:36:8c:a3:e5:86:21:70:cb:e7:e3:28:d9:bc:50:2b:ef:57: f2:4c:3b:cf:c1:54:f1:11:b1:1e:ca:54:a8:58:6a:33:2c:5c: fc:77:1c:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC0swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI0N0MxMTAvBgNVBAUTKEQ1QTAyNTA2MzRERkMwM0RDOUNGQ0FCQTk3OTUxODBG RjA1MTU4RkMwHhcNMjUwODMwMTk0MDM2WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGIzNTNiNC0wZGQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqwGzheffVWKOplYhcAHSbMvrGfw6lW7jNQFuG7Y3sscTxT4iel+sqY0r/OL+ Wntqk0d4U902fGe5dUuxGkaYhLa+gGRVFS1QQH7mOlbQCoBFVdu+TPcVlPOT8P4N FIbevsBZJsu78UkbBLoJNbegZxOWZK+6qJInGaXZz6LjnP8SIsDHTRQZerXYapX0 vE6t8+5/hQns4CGVy9O/h6kxawdbtxAycATm80tjv3soNezCo+O52uYHT4vtcp3Y SlMHwDMFuWFLVn2Tb6ZiOzbicHT156wZxbCviRWmA1eI8NO0Cj+wT647qh68XATg BobyTPPOjXO2QtDB5eATby6ZuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGYvrym0 fDrmVBJ2eFSdsaoFOwulMB8GA1UdIwQYMBaAFNWgJQY038A9yc/KupeVGA/wUVj8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjQ3Qy84QTFDNDYxNjQz MEExMUVBODU4Q0RDNzZDNEY5QUUwMi8xYUFsQmpUZndEM0p6OHE2bDVVWURfQlJX UHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzFhQWxCalRmd0QzSno4cTZsNVVZRF9CUldQdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDI0N0MvOEExQzQ2MTY0MzBBMTFFQTg1OENEQzc2QzRGOUFFMDIvOTE1NjA0MjA4 M0VCMTFFQ0I3RUMzQjc2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMgYIKwYBBQUHAQcBAf8E IzAhMB8EAgABMBkDAwGD9DAMAwQAwDBtAwQAwDBuAwQAwFi7MA0GCSqGSIb3DQEB CwUAA4IBAQBZ4gYk+VDn9xviWI0jJnOC9bjIIKrJN61D3NLq1McPbPpuLBBwG7Yc 4JwBzZjSIayQS7X4fnqoCuFmmGfEymbsyNbCOlU28+FTyNvk1qlQKkx04iFXtuip aNBHPjosWSoxnGPlnZe2VPNt77mok6jsGAFDu4f/KMSnNL+/3iWACgoBcxkq/YFL Zb/Zdd66aUTjDmQl4j2UCjokmpB0TZgCsYc/+GYFEgcFdxTbGo6bCfalBo3slEVT UaMCtzf9y5v8RjORpAWFsiyFvmYvP0v9lZg8e6kXGZ60Noyj5YYhcMvn4yjZvFAr 71fyTDvPwVTxEbEeylSoWGozLFz8dxxG -----END CERTIFICATE-----Generated at Sun Sep 7 19:29:42 2025 by rpki-client