$ rpki-client -vvf rpki.apnic.net/member_repository/A9147DCA/1C75EDA67D6A11EBA4A5980CC4F9AE02/0463FF50526C11EC80A31615C4F9AE02.roa File: 0463FF50526C11EC80A31615C4F9AE02.roa (raw, json) Hash identifier: mMd+OVrFW5GAoQGXV5q8W888lgwtgTWX8rE/7aryuNU= Subject key identifier: 3B:C3:EE:54:1D:D5:F5:7E:58:6F:DB:29:7A:AC:0B:EE:1E:4A:19:34 Certificate issuer: /CN=A9147DCA/serialNumber=2C3A2A8121CCF8A9BFC7CB6691854AF5E4D219F9 Certificate serial: 068D Authority key identifier: 2C:3A:2A:81:21:CC:F8:A9:BF:C7:CB:66:91:85:4A:F5:E4:D2:19:F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDoqgSHM-Km_x8tmkYVK9eTSGfk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147DCA/1C75EDA67D6A11EBA4A5980CC4F9AE02/0463FF50526C11EC80A31615C4F9AE02.roa Signing time: Wed 02 Jul 2025 23:02:27 +0000 ROA not before: Wed 02 Jul 2025 23:02:27 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 36351 IP address blocks: 43.245.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147DCA/1C75EDA67D6A11EBA4A5980CC4F9AE02/LDoqgSHM-Km_x8tmkYVK9eTSGfk.crl rsync://rpki.apnic.net/member_repository/A9147DCA/1C75EDA67D6A11EBA4A5980CC4F9AE02/LDoqgSHM-Km_x8tmkYVK9eTSGfk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDoqgSHM-Km_x8tmkYVK9eTSGfk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 23 Nov 2025 20:52:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1677 (0x68d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147DCA, serialNumber=2C3A2A8121CCF8A9BFC7CB6691854AF5E4D219F9 Validity Not Before: Jul 2 23:02:27 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=6865ba83-0d26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:64:af:dc:d9:6c:60:85:d9:41:bf:ad:ca:23: 2a:30:58:49:6e:63:09:5b:16:9d:8a:89:eb:3d:5b: 5b:12:5e:a6:18:ca:66:65:d6:a0:64:5c:e7:64:82: d9:3b:99:5e:11:7e:d8:d5:9f:91:b2:cb:40:f3:8a: 56:9a:ea:e9:3b:1c:5e:ec:0b:da:2c:c8:e8:cb:75: 43:d8:f3:a4:ca:7c:b6:56:de:3c:b7:04:e7:5a:ec: df:40:b7:4c:5c:ad:bf:46:7c:d1:d4:41:c0:2f:c0: 8d:66:f3:f0:97:e9:09:da:f0:8a:d9:cd:7a:2d:a8: 86:3f:18:ce:0a:21:04:d4:eb:d7:a9:01:fd:42:21: 94:84:f5:1b:21:c0:c5:dc:c6:72:31:d9:a1:01:97: 7a:a4:e8:01:20:f9:59:8b:56:79:51:03:bb:47:1e: 1c:bd:3f:69:9b:86:02:83:9b:1f:f9:12:b9:26:b7: 51:d6:67:e8:91:18:34:7d:fe:99:5e:8b:47:14:50: ba:ce:f2:62:d4:36:f5:b2:6f:bc:80:22:4c:58:cb: d7:c1:2e:bf:4b:9c:b5:51:2f:0e:13:07:0a:07:b1: 8e:66:4b:69:36:02:94:d4:42:c9:b3:6a:f0:e6:ce: f4:ed:12:f0:ad:a6:1b:b3:11:43:0b:b5:05:49:11: fb:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:C3:EE:54:1D:D5:F5:7E:58:6F:DB:29:7A:AC:0B:EE:1E:4A:19:34 X509v3 Authority Key Identifier: keyid:2C:3A:2A:81:21:CC:F8:A9:BF:C7:CB:66:91:85:4A:F5:E4:D2:19:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147DCA/1C75EDA67D6A11EBA4A5980CC4F9AE02/LDoqgSHM-Km_x8tmkYVK9eTSGfk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDoqgSHM-Km_x8tmkYVK9eTSGfk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147DCA/1C75EDA67D6A11EBA4A5980CC4F9AE02/0463FF50526C11EC80A31615C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.245.168.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:6f:13:1a:89:22:14:6a:f0:13:da:06:6a:c7:3a:84:48:83: cd:4d:9f:83:f6:8a:15:b9:91:69:ad:8e:4d:5d:d1:5c:d6:e9: d3:31:ce:d0:76:90:1e:28:ff:e8:e5:cc:07:5a:8d:40:68:14: 7f:dc:8e:f9:62:3b:7f:66:29:99:d6:52:7b:b9:75:34:18:5d: 3a:bd:6f:39:89:b5:1f:b5:9a:55:93:0e:62:08:9f:e8:4d:30: 99:7a:9e:85:cd:33:b4:cc:c5:f3:02:ae:d5:d5:ff:ce:14:91: e7:5e:f2:00:53:b9:31:b1:50:bf:05:f7:3a:89:a6:a3:1a:68: f2:e1:0a:51:f6:a2:51:a6:df:95:c3:ca:49:53:e4:06:bd:7d: 73:da:50:ea:a3:94:01:53:8f:07:a3:94:0c:f1:a4:37:23:b2: 61:71:85:b9:a5:54:63:b4:b4:df:aa:2e:00:fd:29:a0:b4:f5: 50:16:97:15:ef:c5:11:a1:66:b6:44:89:b1:43:e7:ce:bc:12: 49:67:25:b6:5e:9a:75:ee:a1:25:67:a3:9f:49:6e:a9:82:b9: b1:68:7f:90:ad:c9:2d:58:ce:00:8b:16:0d:37:99:3e:7f:44: c2:ac:16:49:84:35:36:8b:dd:6a:2d:6a:ed:4e:01:bd:19:09: b4:28:26:f5 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBo0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDdEQ0ExMTAvBgNVBAUTKDJDM0EyQTgxMjFDQ0Y4QTlCRkM3Q0I2NjkxODU0QUY1 RTREMjE5RjkwHhcNMjUwNzAyMjMwMjI3WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODY1YmE4My0wZDI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnGSv3NlsYIXZQb+tyiMqMFhJbmMJWxadionrPVtbEl6mGMpmZdagZFznZILZ O5leEX7Y1Z+RsstA84pWmurpOxxe7AvaLMjoy3VD2POkyny2Vt48twTnWuzfQLdM XK2/RnzR1EHAL8CNZvPwl+kJ2vCK2c16LaiGPxjOCiEE1OvXqQH9QiGUhPUbIcDF 3MZyMdmhAZd6pOgBIPlZi1Z5UQO7Rx4cvT9pm4YCg5sf+RK5JrdR1mfokRg0ff6Z XotHFFC6zvJi1Db1sm+8gCJMWMvXwS6/S5y1US8OEwcKB7GOZktpNgKU1ELJs2rw 5s707RLwraYbsxFDC7UFSRH7gQIDAQABo4IClTCCApEwHQYDVR0OBBYEFDvD7lQd 1fV+WG/bKXqsC+4eShk0MB8GA1UdIwQYMBaAFCw6KoEhzPipv8fLZpGFSvXk0hn5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0RDQS8xQzc1RURBNjdE NkExMUVCQTRBNTk4MENDNEY5QUUwMi9MRG9xZ1NITS1LbV94OHRta1lWSzllVFNH ZmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xEb3FnU0hNLUttX3g4dG1rWVZLOWVUU0dmay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDdEQ0EvMUM3NUVEQTY3RDZBMTFFQkE0QTU5ODBDQzRGOUFFMDIvMDQ2M0ZGNTA1 MjZDMTFFQzgwQTMxNjE1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAr9agwDQYJKoZIhvcNAQELBQADggEBAEtvExqJIhRq8BPa BmrHOoRIg81Nn4P2ihW5kWmtjk1d0VzW6dMxztB2kB4o/+jlzAdajUBoFH/cjvli O39mKZnWUnu5dTQYXTq9bzmJtR+1mlWTDmIIn+hNMJl6noXNM7TMxfMCrtXV/84U kede8gBTuTGxUL8F9zqJpqMaaPLhClH2olGm35XDyklT5Aa9fXPaUOqjlAFTjwej lAzxpDcjsmFxhbmlVGO0tN+qLgD9KaC09VAWlxXvxRGhZrZEibFD5868EklnJbZe mnXuoSVno59JbqmCubFof5CtyS1YzgCLFg03mT5/RMKsFkmENTaL3Wotau1OAb0Z CbQoJvU= -----END CERTIFICATE-----Generated at Mon Nov 17 12:58:24 2025 by rpki-client