$ rpki-client -vvf rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/9467361CFEAA11E89E73E75BC4F9AE02.roa File: 9467361CFEAA11E89E73E75BC4F9AE02.roa (raw, json) Hash identifier: a/gC4lAR8I+9GlaLEIrNcMq2t/2/TV0+WCxlGU4GibY= Subject key identifier: D9:8E:DC:09:B9:49:04:6E:FF:41:1C:68:A5:9E:4E:20:AE:48:0C:B5 Certificate issuer: /CN=A915D1F2/serialNumber=07532CF6D2BC4CA9D927F307D0E6B82877D8EE4D Certificate serial: 11C6 Authority key identifier: 07:53:2C:F6:D2:BC:4C:A9:D9:27:F3:07:D0:E6:B8:28:77:D8:EE:4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/9467361CFEAA11E89E73E75BC4F9AE02.roa Signing time: Thu 02 Oct 2025 17:46:28 +0000 ROA not before: Thu 02 Oct 2025 17:46:28 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 133043 IP address blocks: 43.245.172.0/22 maxlen: 24 103.240.184.0/22 maxlen: 24 2407:c300::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.crl rsync://rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:16:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4550 (0x11c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D1F2, serialNumber=07532CF6D2BC4CA9D927F307D0E6B82877D8EE4D Validity Not Before: Oct 2 17:46:28 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68deba74-8798 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e4:07:40:93:0f:b6:d4:07:b7:8e:32:90:ee: d5:25:7a:1f:a2:b5:60:13:9f:35:f9:7c:d5:6b:f3: e4:f8:45:97:57:30:20:1f:57:3c:a1:a9:c8:5a:1b: 98:a6:2e:0f:24:ed:4a:51:ad:51:90:f7:d9:d4:73: 6f:f2:d5:89:33:c0:5b:f6:f2:39:45:72:ad:24:9e: ef:78:5b:31:60:6b:74:c6:51:fd:39:f3:3b:a9:25: 0e:7f:2b:e3:9e:59:4f:df:bb:67:c0:d8:17:db:d5: 80:0e:9c:5b:8d:35:4f:4b:56:04:0e:51:e4:10:b0: 97:73:b8:46:bc:98:9c:1c:3d:fe:33:44:17:70:d6: d8:56:7b:8a:3d:6f:3b:4c:d9:f8:7a:81:9c:f8:a2: b2:f0:e4:83:f5:fe:43:9e:54:73:bb:0a:17:f7:75: f1:ba:ff:3f:33:bd:c0:f1:b0:bd:5e:e0:9e:41:3d: ee:7b:15:a5:e6:65:67:f0:d4:7d:f7:88:ba:68:dd: ef:7e:63:bf:7f:74:0c:00:d2:49:39:95:0e:e6:6e: 8f:2d:f3:8c:5c:c6:46:8c:a2:b5:45:e1:38:0a:82: c6:de:ba:06:98:b0:e2:2d:1c:0a:89:6b:8b:11:e9: 65:18:7a:79:a6:4c:a7:37:02:52:e4:08:93:28:ba: 01:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:8E:DC:09:B9:49:04:6E:FF:41:1C:68:A5:9E:4E:20:AE:48:0C:B5 X509v3 Authority Key Identifier: keyid:07:53:2C:F6:D2:BC:4C:A9:D9:27:F3:07:D0:E6:B8:28:77:D8:EE:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/9467361CFEAA11E89E73E75BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.245.172.0/22 103.240.184.0/22 IPv6: 2407:c300::/32 Signature Algorithm: sha256WithRSAEncryption 74:f7:b0:3e:04:33:32:85:c2:c7:8d:18:e7:8c:06:f9:25:19: b5:ff:1d:83:81:e3:03:04:29:08:2f:20:e0:0c:ec:98:ac:86: 16:31:85:5c:26:37:32:c5:4b:60:22:03:c2:88:52:2b:84:bf: 77:0f:0b:8a:7e:3b:00:85:4a:89:e5:2d:03:e6:2d:32:92:d7: 71:3c:df:a1:21:69:f3:fc:37:e5:11:89:5e:fd:d6:1b:6e:d1: 40:6a:cc:1a:57:11:b0:6c:0c:47:44:9e:ac:04:80:52:05:1c: 7f:a6:0d:db:83:e7:cf:7a:ab:00:ba:50:ec:2f:07:65:6f:76: e2:4a:7f:56:fe:50:18:d9:d1:26:61:dd:96:28:41:fd:fc:2a: 49:97:1b:04:a0:6f:b5:05:1b:5b:f0:9b:f3:05:22:2e:f6:45: 0a:d1:2a:8a:f5:4b:33:cd:39:51:be:d9:c2:14:cb:8d:e0:73: 0b:0e:a7:62:b8:93:28:48:07:77:dd:01:6e:ec:e1:67:d2:67: 6e:05:65:ef:f9:8c:bf:64:21:73:b4:9a:68:c5:88:18:97:d9: 0a:dd:35:f7:5f:f0:15:0a:1a:cd:5b:7c:78:00:19:ad:68:d4: e6:73:17:9d:a0:5d:d1:9e:b0:1b:74:1c:d2:97:70:d5:e3:58: 78:75:29:68 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICEcYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQxRjIxMTAvBgNVBAUTKDA3NTMyQ0Y2RDJCQzRDQTlEOTI3RjMwN0QwRTZCODI4 NzdEOEVFNEQwHhcNMjUxMDAyMTc0NjI4WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGRlYmE3NC04Nzk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAruQHQJMPttQHt44ykO7VJXoforVgE581+XzVa/Pk+EWXVzAgH1c8oanIWhuY pi4PJO1KUa1RkPfZ1HNv8tWJM8Bb9vI5RXKtJJ7veFsxYGt0xlH9OfM7qSUOfyvj nllP37tnwNgX29WADpxbjTVPS1YEDlHkELCXc7hGvJicHD3+M0QXcNbYVnuKPW87 TNn4eoGc+KKy8OSD9f5DnlRzuwoX93Xxuv8/M73A8bC9XuCeQT3uexWl5mVn8NR9 94i6aN3vfmO/f3QMANJJOZUO5m6PLfOMXMZGjKK1ReE4CoLG3roGmLDiLRwKiWuL EellGHp5pkynNwJS5AiTKLoBiwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFNmO3Am5 SQRu/0EcaKWeTiCuSAy1MB8GA1UdIwQYMBaAFAdTLPbSvEyp2SfzB9DmuCh32O5N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDFGMi9BRjMyMUQzQ0ZF N0MxMUU4ODY4OUM2NTVDNEY5QUUwMi9CMU1zOXRLOFRLblpKX01IME9hNEtIZlk3 azAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0IxTXM5dEs4VEtuWkpfTUgwT2E0S0hmWTdrMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUQxRjIvQUYzMjFEM0NGRTdDMTFFODg2ODlDNjU1QzRGOUFFMDIvOTQ2NzM2MUNG RUFBMTFFODlFNzNFNzVCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAIr9awDBAJn8LgwDQQCAAIwBwMFACQHwwAwDQYJKoZIhvcN AQELBQADggEBAHT3sD4EMzKFwseNGOeMBvklGbX/HYOB4wMEKQgvIOAM7JishhYx hVwmNzLFS2AiA8KIUiuEv3cPC4p+OwCFSonlLQPmLTKS13E836EhafP8N+URiV79 1htu0UBqzBpXEbBsDEdEnqwEgFIFHH+mDduD5896qwC6UOwvB2VvduJKf1b+UBjZ 0SZh3ZYoQf38KkmXGwSgb7UFG1vwm/MFIi72RQrRKor1SzPNOVG+2cIUy43gcwsO p2K4kyhIB3fdAW7s4WfSZ24FZe/5jL9kIXO0mmjFiBiX2QrdNfdf8BUKGs1bfHgA Ga1o1OZzF52gXdGesBt0HNKXcNXjWHh1KWg= -----END CERTIFICATE-----Generated at Wed Nov 5 13:29:29 2025 by rpki-client