$ rpki-client -vvf rpki.apnic.net/member_repository/A9157615/BAF38E8A91F511F0B36B093CC4F9AE02/9F56DCE491F611F099771D3FC4F9AE02.roa File: 9F56DCE491F611F099771D3FC4F9AE02.roa (raw, json) Hash identifier: MYr0RnnESBBRDJ22pf9EsF5pYGHY7f5iA1+28nEzneQ= Subject key identifier: C7:F2:CE:7F:E9:10:E8:9A:F7:75:54:32:77:26:A8:69:FB:D8:05:32 Certificate issuer: /CN=A9157615/serialNumber=2374786E87C4A0EC3D6FA4C0B784E42FEE003A6D Certificate serial: 0B Authority key identifier: 23:74:78:6E:87:C4:A0:EC:3D:6F:A4:C0:B7:84:E4:2F:EE:00:3A:6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3R4bofEoOw9b6TAt4TkL-4AOm0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157615/BAF38E8A91F511F0B36B093CC4F9AE02/9F56DCE491F611F099771D3FC4F9AE02.roa Signing time: Mon 15 Sep 2025 05:48:51 +0000 ROA not before: Mon 15 Sep 2025 05:48:51 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 154228 IP address blocks: 144.48.248.0/23 maxlen: 23 144.48.248.0/24 maxlen: 24 144.48.249.0/24 maxlen: 24 2001:df6:1e40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157615/BAF38E8A91F511F0B36B093CC4F9AE02/I3R4bofEoOw9b6TAt4TkL-4AOm0.crl rsync://rpki.apnic.net/member_repository/A9157615/BAF38E8A91F511F0B36B093CC4F9AE02/I3R4bofEoOw9b6TAt4TkL-4AOm0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3R4bofEoOw9b6TAt4TkL-4AOm0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 08:56:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157615, serialNumber=2374786E87C4A0EC3D6FA4C0B784E42FEE003A6D Validity Not Before: Sep 15 05:48:51 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68c7a8c3-f051 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:c5:4a:c4:a5:92:e1:b3:f5:97:a7:7c:d2:4e: 83:47:6a:73:61:d4:57:6b:5b:2e:fe:30:55:2b:f8: 1a:03:d9:9e:c3:ef:9c:14:75:50:36:7e:b6:70:b4: 4f:88:69:c5:ea:17:2c:3a:96:2c:9e:8b:27:78:14: 11:fe:a6:34:d0:e7:4d:55:48:60:eb:09:39:65:f4: 84:a8:48:2f:a8:79:22:d3:3a:84:e9:3a:7f:31:b2: c7:21:93:f2:fc:21:7f:c1:f1:97:54:95:04:4d:f8: 26:81:86:81:91:f5:48:43:97:19:40:ee:29:36:cc: bf:53:75:08:cd:43:52:95:7c:3c:19:9b:d5:d1:c4: 43:e3:63:9e:19:32:04:3c:3f:58:ca:ad:bd:55:d2: 6a:e8:2e:68:d3:7b:31:1f:92:c5:fa:c5:0d:61:c0: 04:62:b5:9b:6c:7d:cd:19:e8:bc:75:00:8c:f8:c3: 5a:96:fb:32:59:91:58:bc:76:00:d1:43:86:9c:22: 8e:0b:0d:f7:5b:ea:24:c6:a7:b9:8e:61:4a:f6:51: 6b:b6:c9:6c:5c:28:0b:5f:d7:31:ba:11:5a:c8:d5: 28:26:21:cc:5c:10:7a:fd:02:54:7d:ed:e9:bb:10: 18:96:72:56:f0:ca:34:57:ed:3c:47:c6:3d:64:72: b0:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:F2:CE:7F:E9:10:E8:9A:F7:75:54:32:77:26:A8:69:FB:D8:05:32 X509v3 Authority Key Identifier: keyid:23:74:78:6E:87:C4:A0:EC:3D:6F:A4:C0:B7:84:E4:2F:EE:00:3A:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157615/BAF38E8A91F511F0B36B093CC4F9AE02/I3R4bofEoOw9b6TAt4TkL-4AOm0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3R4bofEoOw9b6TAt4TkL-4AOm0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157615/BAF38E8A91F511F0B36B093CC4F9AE02/9F56DCE491F611F099771D3FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 144.48.248.0/23 IPv6: 2001:df6:1e40::/48 Signature Algorithm: sha256WithRSAEncryption 4c:64:15:97:f7:4c:0a:40:46:a2:b3:e3:aa:56:37:91:22:f4: bf:59:2c:6c:89:bf:41:79:f0:b2:4f:ab:91:bc:d7:d7:4c:45: 06:bd:31:8b:52:40:8a:ff:85:a9:10:17:75:0a:f2:83:aa:3e: 38:16:61:02:d3:b0:e4:ab:74:54:d6:6f:6b:e8:34:75:cb:8b: 04:3b:3a:34:72:fa:d2:6d:6e:dd:90:6e:d6:8d:78:8f:d6:38: 14:b2:f2:9d:f5:0d:b8:37:8f:2e:5f:7e:12:06:fa:39:e6:00: 50:06:79:ff:89:1c:a5:4c:8f:96:fb:a3:59:7b:66:9f:f5:20: df:e3:0c:6c:f2:9a:2d:d4:91:09:e5:9a:52:b9:48:68:0e:70: ee:f0:6a:c7:ec:13:1c:20:ab:07:6b:13:23:82:ba:6c:63:3d: 74:6c:91:f3:c7:11:58:48:0c:6f:be:e3:30:f9:d6:f0:18:72: a6:d4:b0:a8:5d:98:ed:c3:f6:cb:70:96:6d:02:38:c1:38:6a: 92:4e:ed:bd:ef:56:35:2e:41:fd:c2:e7:87:42:2e:72:3e:f4: e5:eb:35:28:85:da:cb:e1:1f:5c:65:dd:88:de:20:d5:27:2a: c3:5c:ac:0f:32:e8:ab:2b:ec:2f:43:39:b8:76:a8:04:4a:8f: e5:d8:45:13 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NzYxNTExMC8GA1UEBRMoMjM3NDc4NkU4N0M0QTBFQzNENkZBNEMwQjc4NEU0MkZF RTAwM0E2RDAeFw0yNTA5MTUwNTQ4NTFaFw0yNjEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY4YzdhOGMzLWYwNTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDYxUrEpZLhs/WXp3zSToNHanNh1FdrWy7+MFUr+BoD2Z7D75wUdVA2frZwtE+I acXqFyw6liyeiyd4FBH+pjTQ501VSGDrCTll9ISoSC+oeSLTOoTpOn8xsschk/L8 IX/B8ZdUlQRN+CaBhoGR9UhDlxlA7ik2zL9TdQjNQ1KVfDwZm9XRxEPjY54ZMgQ8 P1jKrb1V0mroLmjTezEfksX6xQ1hwARitZtsfc0Z6Lx1AIz4w1qW+zJZkVi8dgDR Q4acIo4LDfdb6iTGp7mOYUr2UWu2yWxcKAtf1zG6EVrI1SgmIcxcEHr9AlR97em7 EBiWclbwyjRX7TxHxj1kcrDjAgMBAAGjggKmMIICojAdBgNVHQ4EFgQUx/LOf+kQ 6Jr3dVQydyaoafvYBTIwHwYDVR0jBBgwFoAUI3R4bofEoOw9b6TAt4TkL+4AOm0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU3NjE1L0JBRjM4RThBOTFG NTExRjBCMzZCMDkzQ0M0RjlBRTAyL0kzUjRib2ZFb093OWI2VEF0NFRrTC00QU9t MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSTNSNGJvZkVvT3c5YjZUQXQ0VGtMLTRBT20wLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NzYxNS9CQUYzOEU4QTkxRjUxMUYwQjM2QjA5M0NDNEY5QUUwMi85RjU2RENFNDkx RjYxMUYwOTk3NzFEM0ZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEAZAw+DAPBAIAAjAJAwcAIAEN9h5AMA0GCSqGSIb3DQEBCwUA A4IBAQBMZBWX90wKQEais+OqVjeRIvS/WSxsib9BefCyT6uRvNfXTEUGvTGLUkCK /4WpEBd1CvKDqj44FmEC07Dkq3RU1m9r6DR1y4sEOzo0cvrSbW7dkG7WjXiP1jgU svKd9Q24N48uX34SBvo55gBQBnn/iRylTI+W+6NZe2af9SDf4wxs8pot1JEJ5ZpS uUhoDnDu8GrH7BMcIKsHaxMjgrpsYz10bJHzxxFYSAxvvuMw+dbwGHKm1LCoXZjt w/bLcJZtAjjBOGqSTu2971Y1LkH9wueHQi5yPvTl6zUohdrL4R9cZd2I3iDVJyrD XKwPMuirK+wvQzm4dqgESo/l2EUT -----END CERTIFICATE-----Generated at Fri Sep 19 02:29:31 2025 by rpki-client