$ rpki-client -vvf rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/0333AD1461FE11ECBD833921C4F9AE02.roa File: 0333AD1461FE11ECBD833921C4F9AE02.roa (raw, json) Hash identifier: afMkh+nThhAtZWr5uZa/M537SW67iX+SaWwO2XmeAUU= Subject key identifier: 0F:A7:CE:9E:90:BA:C9:74:32:B1:E8:D5:23:67:71:76:D7:3E:64:09 Certificate issuer: /CN=A9153AE1/serialNumber=F664AC026BF4F47C08757CDE7F21EC3CF2A4E64E Certificate serial: 194E Authority key identifier: F6:64:AC:02:6B:F4:F4:7C:08:75:7C:DE:7F:21:EC:3C:F2:A4:E6:4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mSsAmv09HwIdXzefyHsPPKk5k4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/0333AD1461FE11ECBD833921C4F9AE02.roa Signing time: Thu 02 Oct 2025 16:44:52 +0000 ROA not before: Thu 02 Oct 2025 16:44:52 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 16625 IP address blocks: 126.147.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.crl rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mSsAmv09HwIdXzefyHsPPKk5k4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 16:47:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6478 (0x194e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153AE1, serialNumber=F664AC026BF4F47C08757CDE7F21EC3CF2A4E64E Validity Not Before: Oct 2 16:44:52 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68deac04-6701 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c4:1d:66:1a:e7:3d:23:77:e0:96:6c:d7:aa: 32:60:d7:d6:ee:d8:1c:65:53:f1:ac:12:88:4f:cc: fd:21:ed:32:1a:b0:c3:c2:9a:02:32:27:a2:9b:88: 08:5f:76:85:87:b0:ff:15:44:32:f4:5d:fe:af:93: ec:a8:a9:23:20:27:23:82:1f:4e:59:aa:4f:95:be: fd:cd:a6:c0:1b:18:98:47:84:7e:ac:a9:75:16:ab: 03:98:a2:ae:3f:5a:ab:a5:3e:78:c1:95:11:14:b3: 0d:6d:83:04:ea:50:45:83:df:57:41:22:ad:90:33: 42:b9:74:3c:4f:b8:2d:5e:a8:80:0f:5e:47:e7:f8: 56:84:e7:56:51:47:08:12:51:2c:be:71:9f:96:d5: 82:0c:ad:90:23:23:d0:83:6f:1c:7a:37:74:2e:6c: 7f:14:4f:9d:7b:7c:45:8e:7f:65:95:06:00:b2:c8: 4a:1f:01:73:9d:94:1b:bb:44:9f:8f:cf:07:ca:6d: 9e:e5:b6:05:27:71:51:9e:76:2a:c2:e1:50:ce:45: 8c:2f:d7:ec:f4:6d:b2:c9:44:cc:90:6f:38:47:cf: bf:6f:f3:90:b6:7f:29:55:b7:09:59:e4:36:cb:31: 2d:f5:ab:4c:ee:8b:ed:f8:4c:c6:39:80:c9:13:e5: 01:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:A7:CE:9E:90:BA:C9:74:32:B1:E8:D5:23:67:71:76:D7:3E:64:09 X509v3 Authority Key Identifier: keyid:F6:64:AC:02:6B:F4:F4:7C:08:75:7C:DE:7F:21:EC:3C:F2:A4:E6:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mSsAmv09HwIdXzefyHsPPKk5k4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/0333AD1461FE11ECBD833921C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 126.147.252.0/22 Signature Algorithm: sha256WithRSAEncryption 2a:07:a7:06:9a:6f:de:27:59:14:df:ea:39:f8:8a:7d:d2:58: a3:5d:7b:25:11:9b:34:21:87:91:e1:ed:cc:40:aa:cf:b6:5d: 3c:69:9c:b6:52:06:a7:6e:bf:16:24:11:08:ab:ba:01:9f:ca: 47:b5:cc:08:9d:f0:11:65:f1:fc:ae:2e:d9:63:25:90:05:87: 63:02:a4:17:f3:5b:db:88:41:bb:a4:d6:d7:61:a3:32:e4:32: 9b:65:f7:e6:26:9a:d1:8d:89:c7:f3:4f:7b:d0:f4:4c:4e:68: ab:05:ed:44:32:68:4a:44:3e:58:e2:bb:e0:99:13:a2:73:83: 9a:f4:25:6b:a3:8b:ba:82:3e:37:1d:35:8d:a4:9f:db:ae:4c: 93:2d:9e:3d:70:3a:c0:a8:e6:fa:e6:bb:64:20:1d:66:ed:ec: dc:ac:df:a8:c3:61:e6:16:78:82:af:72:ff:f5:a3:be:84:44: c1:38:f0:3a:a3:b9:71:25:ff:58:45:a9:30:45:41:00:cc:af: 62:63:af:29:2a:8d:66:e4:d8:7b:6b:1f:e1:e7:43:ec:27:07: ab:6c:78:d2:25:d5:67:8f:20:e4:ba:75:e7:13:57:ce:ff:9e: 81:cd:5d:60:3e:b2:2b:12:73:1d:e0:35:1b:c2:01:35:7c:8d: dd:72:88:a7 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICGU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTNBRTExMTAvBgNVBAUTKEY2NjRBQzAyNkJGNEY0N0MwODc1N0NERTdGMjFFQzND RjJBNEU2NEUwHhcNMjUxMDAyMTY0NDUyWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGRlYWMwNC02NzAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2cQdZhrnPSN34JZs16oyYNfW7tgcZVPxrBKIT8z9Ie0yGrDDwpoCMieim4gI X3aFh7D/FUQy9F3+r5PsqKkjICcjgh9OWapPlb79zabAGxiYR4R+rKl1FqsDmKKu P1qrpT54wZURFLMNbYME6lBFg99XQSKtkDNCuXQ8T7gtXqiAD15H5/hWhOdWUUcI ElEsvnGfltWCDK2QIyPQg28cejd0Lmx/FE+de3xFjn9llQYAsshKHwFznZQbu0Sf j88Hym2e5bYFJ3FRnnYqwuFQzkWML9fs9G2yyUTMkG84R8+/b/OQtn8pVbcJWeQ2 yzEt9atM7ovt+EzGOYDJE+UBvwIDAQABo4IClTCCApEwHQYDVR0OBBYEFA+nzp6Q usl0MrHo1SNncXbXPmQJMB8GA1UdIwQYMBaAFPZkrAJr9PR8CHV83n8h7DzypOZO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1M0FFMS82Mzg0M0VEMDk0 NDAxMUU3QkM5OUMxMUFDNEY5QUUwMi85bVNzQW12MDlId0lkWHplZnlIc1BQS2s1 azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzltU3NBbXYwOUh3SWRYemVmeUhzUFBLazVrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTNBRTEvNjM4NDNFRDA5NDQwMTFFN0JDOTlDMTFBQzRGOUFFMDIvMDMzM0FEMTQ2 MUZFMTFFQ0JEODMzOTIxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJ+k/wwDQYJKoZIhvcNAQELBQADggEBACoHpwaab94nWRTf 6jn4in3SWKNdeyURmzQhh5Hh7cxAqs+2XTxpnLZSBqduvxYkEQirugGfyke1zAid 8BFl8fyuLtljJZAFh2MCpBfzW9uIQbuk1tdhozLkMptl9+YmmtGNicfzT3vQ9ExO aKsF7UQyaEpEPljiu+CZE6Jzg5r0JWuji7qCPjcdNY2kn9uuTJMtnj1wOsCo5vrm u2QgHWbt7Nys36jDYeYWeIKvcv/1o76ERME48DqjuXEl/1hFqTBFQQDMr2Jjrykq jWbk2HtrH+HnQ+wnB6tseNIl1WePIOS6decTV87/noHNXWA+sisScx3gNRvCATV8 jd1yiKc= -----END CERTIFICATE-----Generated at Wed Oct 22 16:23:45 2025 by rpki-client