$ rpki-client -vvf rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/BDA4E3289A8311EF8E25CE76C4F9AE02.roa File: BDA4E3289A8311EF8E25CE76C4F9AE02.roa (raw, json) Hash identifier: flOC9BgqvfJjOP86rJtUD8YssT26VE7edHVyZu+Czlk= Subject key identifier: FF:73:73:45:1E:A4:85:E1:10:42:82:69:46:D7:F9:88:60:C5:92:33 Certificate issuer: /CN=A9145446/serialNumber=7D65EBE14C3046E73E3986957302A26E081F1AF8 Certificate serial: 284B Authority key identifier: 7D:65:EB:E1:4C:30:46:E7:3E:39:86:95:73:02:A2:6E:08:1F:1A:F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/BDA4E3289A8311EF8E25CE76C4F9AE02.roa Signing time: Tue 02 Sep 2025 16:03:42 +0000 ROA not before: Tue 02 Sep 2025 16:03:42 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 132212 IP address blocks: 125.5.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.crl rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 15:59:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10315 (0x284b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145446, serialNumber=7D65EBE14C3046E73E3986957302A26E081F1AF8 Validity Not Before: Sep 2 16:03:42 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68b7155e-2a24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:f7:67:f3:0a:1f:63:96:2a:21:8a:6e:5f:37: ed:30:8d:03:8c:27:80:4a:1c:d8:d3:d3:73:43:04: a4:1f:54:cc:70:00:73:e4:9a:a2:2a:35:94:f5:16: 16:ee:e7:a0:bf:de:4f:58:33:c5:61:a9:cc:da:60: ab:42:92:85:a4:a7:11:d9:4c:66:cc:2d:7e:28:80: c3:e6:8e:7e:7c:62:ac:b8:4e:56:7d:8c:9c:b5:92: 83:c8:d5:b6:9a:a8:a3:40:6f:0f:9c:c1:d3:c2:30: 2c:81:d1:cc:e8:89:76:7f:e7:16:46:01:99:95:b8: 61:b8:31:39:f6:7c:8b:09:30:2a:2b:59:55:52:25: cf:cf:8a:10:b8:db:c2:37:cb:1d:b8:4e:8d:c1:95: 4a:2a:f3:3c:6e:b2:46:73:14:b7:56:3c:78:92:86: 4f:24:1e:53:e2:6e:75:f9:80:1c:0d:e0:53:39:07: 0e:dd:6d:06:09:aa:38:43:af:88:62:a0:7e:f4:32: e0:12:6e:8f:0b:9b:e4:ac:1c:f9:34:5e:dd:60:45: fb:75:5f:1f:7b:44:db:62:37:4c:74:ae:43:69:09: 16:a4:cc:4d:32:6e:d1:89:d1:8b:80:d2:55:d1:30: 3e:47:6d:ba:cc:51:5c:54:4e:0a:c3:ca:48:d5:28: 54:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:73:73:45:1E:A4:85:E1:10:42:82:69:46:D7:F9:88:60:C5:92:33 X509v3 Authority Key Identifier: keyid:7D:65:EB:E1:4C:30:46:E7:3E:39:86:95:73:02:A2:6E:08:1F:1A:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/BDA4E3289A8311EF8E25CE76C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 125.5.236.0/24 Signature Algorithm: sha256WithRSAEncryption 76:90:f0:16:91:a3:88:7f:1b:d9:63:5e:3a:79:02:93:4f:20: 02:93:74:a6:b6:dd:0a:ec:9d:3a:49:f5:e8:cc:3f:eb:94:5b: c5:82:7e:62:4e:54:60:01:b5:9c:13:35:5a:59:89:6b:85:c1: aa:3f:41:99:78:54:2d:4e:57:9b:bb:bb:fc:d6:95:dc:7c:30: d0:e5:57:c6:7b:28:b6:a3:0e:7d:2d:44:89:35:9e:34:67:35: 3c:25:c5:55:5c:13:6a:7a:e3:dd:43:b5:47:63:ea:12:71:b2: 15:bf:b6:a2:97:2e:29:53:96:30:d6:69:c4:f9:ff:93:11:25: 01:30:c7:dd:ca:4a:12:63:5c:1c:2d:d9:a6:23:64:3e:d5:9f: da:e3:62:19:d4:cd:b6:07:f0:8d:22:42:56:1e:8b:d9:b3:46: 6f:f7:f5:30:bc:e5:b9:3f:d8:51:ec:a9:0e:68:2e:8e:48:c5: d1:2d:5d:45:d0:d5:95:50:b4:b9:20:d6:a2:a0:13:1a:d4:08: ea:31:19:0c:e5:3e:59:c2:18:f9:cb:8a:3e:22:68:fe:43:b6: f3:5f:c7:cf:84:e5:09:ab:d4:9b:a1:6d:30:5a:d4:6e:46:7e: 0b:77:2c:af:49:52:a3:a0:24:4b:99:59:9c:42:4d:3e:8a:c1: f4:99:aa:e4 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICKEswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU0NDYxMTAvBgNVBAUTKDdENjVFQkUxNEMzMDQ2RTczRTM5ODY5NTczMDJBMjZF MDgxRjFBRjgwHhcNMjUwOTAyMTYwMzQyWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGI3MTU1ZS0yYTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8Pdn8wofY5YqIYpuXzftMI0DjCeAShzY09NzQwSkH1TMcABz5JqiKjWU9RYW 7uegv95PWDPFYanM2mCrQpKFpKcR2UxmzC1+KIDD5o5+fGKsuE5WfYyctZKDyNW2 mqijQG8PnMHTwjAsgdHM6Il2f+cWRgGZlbhhuDE59nyLCTAqK1lVUiXPz4oQuNvC N8sduE6NwZVKKvM8brJGcxS3Vjx4koZPJB5T4m51+YAcDeBTOQcO3W0GCao4Q6+I YqB+9DLgEm6PC5vkrBz5NF7dYEX7dV8fe0TbYjdMdK5DaQkWpMxNMm7RidGLgNJV 0TA+R226zFFcVE4Kw8pI1ShUqwIDAQABo4IClTCCApEwHQYDVR0OBBYEFP9zc0Ue pIXhEEKCaUbX+YhgxZIzMB8GA1UdIwQYMBaAFH1l6+FMMEbnPjmGlXMCom4IHxr4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTQ0Ni9BQ0EyRTc1QzFG QzUxMUU1QjQ1MERENjJDNEY5QUUwMi9mV1hyNFV3d1J1Yy1PWWFWY3dLaWJnZ2ZH dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZXWHI0VXd3UnVjLU9ZYVZjd0tpYmdnZkd2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDU0NDYvQUNBMkU3NUMxRkM1MTFFNUI0NTBERDYyQzRGOUFFMDIvQkRBNEUzMjg5 QTgzMTFFRjhFMjVDRTc2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAB9BewwDQYJKoZIhvcNAQELBQADggEBAHaQ8BaRo4h/G9lj Xjp5ApNPIAKTdKa23QrsnTpJ9ejMP+uUW8WCfmJOVGABtZwTNVpZiWuFwao/QZl4 VC1OV5u7u/zWldx8MNDlV8Z7KLajDn0tRIk1njRnNTwlxVVcE2p6491DtUdj6hJx shW/tqKXLilTljDWacT5/5MRJQEwx93KShJjXBwt2aYjZD7Vn9rjYhnUzbYH8I0i QlYei9mzRm/39TC85bk/2FHsqQ5oLo5IxdEtXUXQ1ZVQtLkg1qKgExrUCOoxGQzl PlnCGPnLij4iaP5DtvNfx8+E5Qmr1JuhbTBa1G5Gfgt3LK9JUqOgJEuZWZxCTT6K wfSZquQ= -----END CERTIFICATE-----Generated at Sat Oct 25 20:16:06 2025 by rpki-client