$ rpki-client -vvf rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/807EEE68281011ED9C81C50DC4F9AE02.roa File: 807EEE68281011ED9C81C50DC4F9AE02.roa (raw, json) Hash identifier: jD7jiIEoA0zrb6YHgdu7nodN7r96+edv/r/epjKwp04= Subject key identifier: 0E:AB:33:15:49:E7:EE:32:9C:B8:96:8A:3C:CC:A6:B0:21:B0:20:96 Certificate issuer: /CN=A9155AE4/serialNumber=3CF91608226819C3E9DA84D1195B5326F9249FBD Certificate serial: 0290 Authority key identifier: 3C:F9:16:08:22:68:19:C3:E9:DA:84:D1:19:5B:53:26:F9:24:9F:BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PPkWCCJoGcPp2oTRGVtTJvkkn70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/807EEE68281011ED9C81C50DC4F9AE02.roa Signing time: Sat 01 Mar 2025 03:55:12 +0000 ROA not before: Sat 01 Mar 2025 03:55:12 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 9716 IP address blocks: 203.18.236.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.crl rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PPkWCCJoGcPp2oTRGVtTJvkkn70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:24:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 656 (0x290) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155AE4, serialNumber=3CF91608226819C3E9DA84D1195B5326F9249FBD Validity Not Before: Mar 1 03:55:12 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67c28520-8b40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f1:19:d9:94:1b:40:e4:35:fc:b0:5f:e0:a1: e5:63:22:13:ef:c4:f2:91:e0:2f:a2:4d:89:8a:a6: 28:a5:08:fd:b4:e6:c6:e2:18:17:37:4d:24:34:d5: 27:7b:7f:74:08:ea:61:3f:59:cc:10:24:a0:97:e8: c9:69:77:7f:bd:71:ba:e1:72:21:84:01:45:58:85: a1:01:a4:49:41:cd:5b:d4:8e:95:3e:0c:cc:c2:b0: 86:d8:6a:7d:bf:6b:a8:43:67:7f:ba:0a:88:e0:7b: aa:24:eb:b1:f6:70:49:83:b3:36:09:29:b7:a2:9c: 62:3b:d1:18:fb:c2:23:78:8e:4b:56:28:86:19:84: 31:41:50:19:b5:87:aa:37:1f:de:ac:2f:11:86:00: 7a:06:26:10:79:a3:a0:70:55:ea:ea:4f:4d:a1:db: 64:a3:7b:fc:1e:8e:8f:b9:fd:5c:3a:ba:61:71:bc: 9a:87:7e:a7:ae:76:46:1b:9b:22:55:20:90:3a:ce: 97:cb:8c:9d:dd:65:9c:e3:1c:aa:ed:44:86:e4:17: e2:77:31:fe:1f:da:67:6d:79:6c:e8:cd:6e:3b:5d: 7a:99:20:7e:55:6b:89:ad:4a:a2:9a:68:7a:36:7c: 3b:c7:3a:61:09:2f:1a:63:8e:6f:a5:1f:11:46:c9: 51:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:AB:33:15:49:E7:EE:32:9C:B8:96:8A:3C:CC:A6:B0:21:B0:20:96 X509v3 Authority Key Identifier: keyid:3C:F9:16:08:22:68:19:C3:E9:DA:84:D1:19:5B:53:26:F9:24:9F:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PPkWCCJoGcPp2oTRGVtTJvkkn70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/807EEE68281011ED9C81C50DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.18.236.0/24 Signature Algorithm: sha256WithRSAEncryption 02:45:9a:e7:36:6e:31:e8:7c:48:05:35:eb:e8:c3:61:24:22: 79:c7:0a:09:51:8c:d7:26:87:f0:3b:c3:34:74:19:2c:87:a6: af:c6:e8:f4:8a:ad:e3:cb:f1:2a:8a:71:ed:1e:92:7b:9f:9c: 15:3b:de:7d:bb:21:db:4b:14:21:68:60:34:67:c3:56:5b:15: 4e:23:9a:99:38:70:27:fb:08:6b:28:8f:47:de:4f:ba:36:31: 46:bf:8e:fc:6d:db:b0:2f:75:c3:46:78:48:e5:31:8f:49:e2: ec:e6:40:9e:41:75:e1:45:47:87:97:87:5a:73:f5:69:98:42: 26:c2:cc:8b:64:d0:f1:91:04:13:21:9c:a6:9b:00:b5:53:50: 77:14:78:ae:41:f6:85:a0:5d:13:0c:ce:94:de:53:f6:af:a9: d7:eb:31:e8:49:95:0e:d2:00:9f:da:36:2a:93:02:fa:70:f2: d5:ee:09:6f:ca:b5:cd:a4:2d:e2:25:89:0c:7c:09:1c:05:5b: 08:29:6d:a8:af:15:b2:ea:5b:e5:5b:ff:5c:2f:e0:64:6b:27: 77:7d:67:2b:a0:be:03:de:ca:62:49:b5:99:58:cf:9d:ca:a6: 57:bb:d7:e7:bb:ec:ff:86:73:28:26:e7:29:74:f4:b0:51:23: cc:e3:1b:6a -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICApAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTVBRTQxMTAvBgNVBAUTKDNDRjkxNjA4MjI2ODE5QzNFOURBODREMTE5NUI1MzI2 RjkyNDlGQkQwHhcNMjUwMzAxMDM1NTEyWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2MyODUyMC04YjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw/EZ2ZQbQOQ1/LBf4KHlYyIT78TykeAvok2JiqYopQj9tObG4hgXN00kNNUn e390COphP1nMECSgl+jJaXd/vXG64XIhhAFFWIWhAaRJQc1b1I6VPgzMwrCG2Gp9 v2uoQ2d/ugqI4HuqJOux9nBJg7M2CSm3opxiO9EY+8IjeI5LViiGGYQxQVAZtYeq Nx/erC8RhgB6BiYQeaOgcFXq6k9Nodtko3v8Ho6Puf1cOrphcbyah36nrnZGG5si VSCQOs6Xy4yd3WWc4xyq7USG5BfidzH+H9pnbXls6M1uO116mSB+VWuJrUqimmh6 Nnw7xzphCS8aY45vpR8RRslRDwIDAQABo4IClTCCApEwHQYDVR0OBBYEFA6rMxVJ 5+4ynLiWijzMprAhsCCWMB8GA1UdIwQYMBaAFDz5FggiaBnD6dqE0RlbUyb5JJ+9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NUFFNC9FNUQ2RDBBQzA2 NTMxMUVEODI3QkVGNTRDNEY5QUUwMi9QUGtXQ0NKb0djUHAyb1RSR1Z0VEp2a2tu NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BQa1dDQ0pvR2NQcDJvVFJHVnRUSnZra243MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTVBRTQvRTVENkQwQUMwNjUzMTFFRDgyN0JFRjU0QzRGOUFFMDIvODA3RUVFNjgy ODEwMTFFRDlDODFDNTBEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADLEuwwDQYJKoZIhvcNAQELBQADggEBAAJFmuc2bjHofEgF Nevow2EkInnHCglRjNcmh/A7wzR0GSyHpq/G6PSKrePL8SqKce0eknufnBU73n27 IdtLFCFoYDRnw1ZbFU4jmpk4cCf7CGsoj0feT7o2MUa/jvxt27AvdcNGeEjlMY9J 4uzmQJ5BdeFFR4eXh1pz9WmYQibCzItk0PGRBBMhnKabALVTUHcUeK5B9oWgXRMM zpTeU/avqdfrMehJlQ7SAJ/aNiqTAvpw8tXuCW/Ktc2kLeIliQx8CRwFWwgpbaiv FbLqW+Vb/1wv4GRrJ3d9ZyugvgPeymJJtZlYz53Kple71+e77P+Gcygm5yl09LBR I8zjG2o= -----END CERTIFICATE-----Generated at Wed Nov 5 11:14:06 2025 by rpki-client