$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/93EE047E4BB511EE9309AA4EC4F9AE02.roa File: 93EE047E4BB511EE9309AA4EC4F9AE02.roa (raw, json) Hash identifier: vQWuHkxNO3W+64VKIpJFVWJTeNRMIc+wKzNHsAhde4Q= Subject key identifier: 6C:5A:0C:C5:9C:1E:CD:C5:1A:00:89:99:DF:93:C9:CA:FB:B2:10:B9 Certificate issuer: /CN=A9157D67/serialNumber=39C43967570087F583E425A9FE9B69B9506A59BD Certificate serial: 0B54 Authority key identifier: 39:C4:39:67:57:00:87:F5:83:E4:25:A9:FE:9B:69:B9:50:6A:59:BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/93EE047E4BB511EE9309AA4EC4F9AE02.roa Signing time: Thu 10 Jul 2025 09:17:46 +0000 ROA not before: Thu 10 Jul 2025 09:17:46 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 21859 IP address blocks: 43.152.178.0/24 maxlen: 24 43.174.120.0/24 maxlen: 24 43.174.121.0/24 maxlen: 24 101.33.12.0/24 maxlen: 24 101.33.13.0/24 maxlen: 24 101.33.14.0/24 maxlen: 24 101.33.15.0/24 maxlen: 24 240d:c010:14b::/48 maxlen: 48 240d:c010:14c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 21:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2900 (0xb54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157D67, serialNumber=39C43967570087F583E425A9FE9B69B9506A59BD Validity Not Before: Jul 10 09:17:46 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=686f853a-683c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:11:7d:26:99:95:90:66:75:ea:58:21:7f:b3: 1c:29:5b:fc:d8:34:42:d0:7e:9c:54:48:7d:5d:84: 19:2c:28:c1:28:e9:10:69:2e:e4:b6:cd:33:c1:ec: 1d:24:91:fd:b8:09:9c:11:d9:6b:05:9d:09:79:0b: c7:df:e0:f5:9d:7a:3a:f6:20:99:f3:0c:f5:63:e9: 13:22:a1:72:e2:41:4a:71:01:da:cd:0a:b1:b9:c8: 17:1c:9e:9d:41:e5:b4:8e:97:4b:ef:96:df:fe:46: ee:8d:91:c0:01:34:14:11:60:09:4c:1a:32:f6:cc: ee:f6:c0:e9:01:83:ae:b7:05:f1:60:ef:26:14:eb: 21:77:ac:ab:4a:95:38:de:cb:52:08:dc:fe:d1:fb: 5f:9b:4d:24:c5:b2:e2:28:7a:95:d6:86:c9:bc:da: 05:08:d0:b8:11:37:91:aa:03:cf:3a:0b:b9:db:b6: 61:d5:68:48:8f:ad:09:a7:c0:86:38:a2:c5:ed:09: 2d:56:6f:d3:89:10:6c:ce:af:64:1b:c4:e6:f8:26: 56:ef:a8:b3:74:47:f6:80:5e:34:f7:76:ee:7a:8a: dd:2c:84:fa:64:7e:4c:f3:12:12:4f:71:7a:f1:b8: 46:ce:94:36:be:ef:bb:fc:5a:8a:de:01:32:8e:b3: 7a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:5A:0C:C5:9C:1E:CD:C5:1A:00:89:99:DF:93:C9:CA:FB:B2:10:B9 X509v3 Authority Key Identifier: keyid:39:C4:39:67:57:00:87:F5:83:E4:25:A9:FE:9B:69:B9:50:6A:59:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/93EE047E4BB511EE9309AA4EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.152.178.0/24 43.174.120.0/23 101.33.12.0/22 IPv6: 240d:c010:14b::-240d:c010:14c:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 0b:b6:89:a3:47:a1:0e:dd:2d:11:ec:3e:c7:b9:e3:c9:3a:b8: 7f:e1:3c:3e:41:2c:05:bf:17:2d:a8:34:48:3a:90:38:02:c3: cd:8a:2f:cc:79:14:07:62:8d:be:26:79:6e:94:01:1e:23:7a: a2:1a:0f:17:42:c3:1b:b7:e9:e9:2e:2b:c4:da:bd:2e:e2:0e: 3d:46:e3:7e:f2:e1:41:42:db:2b:ff:12:1f:7d:63:8e:b6:3f: 9a:1b:3c:8c:2e:d1:b8:d5:35:18:65:f1:93:1e:cd:f2:ee:dd: 6c:bf:a0:4a:cd:b7:ec:8f:f7:0b:03:48:9f:e8:30:3d:a8:b5: 84:e2:fb:ef:a8:71:cf:4d:8e:b6:be:d7:7d:6e:79:44:e4:a2: 72:cb:bd:14:e3:52:cb:34:cd:7b:29:d2:ef:44:d1:45:6c:68: e0:a5:0f:39:62:ad:b2:d4:8e:3e:c8:4d:b1:c7:af:4f:e8:57: 45:00:fc:85:fd:47:91:24:0b:20:62:d2:a8:ab:33:fa:d4:ea: e4:49:7d:a6:7c:85:77:0f:2b:df:b3:1b:b8:79:44:30:41:33: 72:3a:fa:f6:4f:a8:57:b6:81:b0:20:2a:ab:74:48:4f:d7:23: 0d:0b:4b:33:18:b2:c6:3c:75:67:b5:9f:09:99:f0:28:93:fc: bb:6c:3a:62 -----BEGIN CERTIFICATE----- MIIFmTCCBIGgAwIBAgICC1QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdENjcxMTAvBgNVBAUTKDM5QzQzOTY3NTcwMDg3RjU4M0U0MjVBOUZFOUI2OUI5 NTA2QTU5QkQwHhcNMjUwNzEwMDkxNzQ2WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODZmODUzYS02ODNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwxF9JpmVkGZ16lghf7McKVv82DRC0H6cVEh9XYQZLCjBKOkQaS7kts0zwewd JJH9uAmcEdlrBZ0JeQvH3+D1nXo69iCZ8wz1Y+kTIqFy4kFKcQHazQqxucgXHJ6d QeW0jpdL75bf/kbujZHAATQUEWAJTBoy9szu9sDpAYOutwXxYO8mFOshd6yrSpU4 3stSCNz+0ftfm00kxbLiKHqV1obJvNoFCNC4ETeRqgPPOgu527Zh1WhIj60Jp8CG OKLF7QktVm/TiRBszq9kG8Tm+CZW76izdEf2gF4093bueordLIT6ZH5M8xIST3F6 8bhGzpQ2vu+7/FqK3gEyjrN6pQIDAQABo4ICvTCCArkwHQYDVR0OBBYEFGxaDMWc Hs3FGgCJmd+Tycr7shC5MB8GA1UdIwQYMBaAFDnEOWdXAIf1g+Qlqf6bablQalm9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0Q2Ny82OUU2QzE2QTQ0 MkExMUVCOTU5OUFEMzhDNEY5QUUwMi9PY1E1WjFjQWhfV0Q1Q1dwX3B0cHVWQnFX YjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09jUTVaMWNBaF9XRDVDV3BfcHRwdVZCcVdiMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTdENjcvNjlFNkMxNkE0NDJBMTFFQjk1OTlBRDM4QzRGOUFFMDIvOTNFRTA0N0U0 QkI1MTFFRTkzMDlBQTRFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRwYIKwYBBQUHAQcBAf8E ODA2MBgEAgABMBIDBAArmLIDBAErrngDBAJlIQwwGgQCAAIwFDASAwcAJA3AEAFL AwcAJA3AEAFMMA0GCSqGSIb3DQEBCwUAA4IBAQALtomjR6EO3S0R7D7HuePJOrh/ 4Tw+QSwFvxctqDRIOpA4AsPNii/MeRQHYo2+JnlulAEeI3qiGg8XQsMbt+npLivE 2r0u4g49RuN+8uFBQtsr/xIffWOOtj+aGzyMLtG41TUYZfGTHs3y7t1sv6BKzbfs j/cLA0if6DA9qLWE4vvvqHHPTY62vtd9bnlE5KJyy70U41LLNM17KdLvRNFFbGjg pQ85Yq2y1I4+yE2xx69P6FdFAPyF/UeRJAsgYtKoqzP61OrkSX2mfIV3Dyvfsxu4 eUQwQTNyOvr2T6hXtoGwICqrdEhP1yMNC0szGLLGPHVntZ8JmfAok/y7bDpi -----END CERTIFICATE-----Generated at Mon Nov 3 09:32:50 2025 by rpki-client