$ rpki-client -vvf rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/D5C48F3A87C711F0BC29E84FC4F9AE02.roa File: D5C48F3A87C711F0BC29E84FC4F9AE02.roa (raw, json) Hash identifier: bdaLJLKxC3XF+4w/6l+lT4/RvdyraLqiIX8kq6B1wqo= Subject key identifier: 3C:D5:6D:82:06:EE:DC:DD:A9:DD:02:7A:5B:02:82:82:AB:24:73:75 Certificate issuer: /CN=A915FDD9/serialNumber=967B97D9E311250D82942D27E4C5F90D98138058 Certificate serial: A9 Authority key identifier: 96:7B:97:D9:E3:11:25:0D:82:94:2D:27:E4:C5:F9:0D:98:13:80:58 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/D5C48F3A87C711F0BC29E84FC4F9AE02.roa Signing time: Tue 02 Sep 2025 06:41:45 +0000 ROA not before: Tue 02 Sep 2025 06:41:45 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 153531 IP address blocks: 161.248.218.0/24 maxlen: 24 161.248.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.crl rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 07:17:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 169 (0xa9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FDD9, serialNumber=967B97D9E311250D82942D27E4C5F90D98138058 Validity Not Before: Sep 2 06:41:45 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=68b691a9-d6f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b8:88:83:cf:c5:d8:87:91:e4:d9:d5:86:96: c2:bd:a5:bc:3b:dc:9d:67:2e:71:9f:90:36:d0:fe: f3:e5:6c:ae:3f:26:b8:82:30:e8:d9:30:ae:28:b2: 89:1f:1c:bd:f3:7b:12:0e:53:5d:1a:18:3b:1d:69: 79:62:f1:20:d0:1a:7b:8e:41:1d:77:91:f1:25:1c: c5:f7:6d:10:22:74:96:9c:5d:ab:3e:5e:b2:16:fc: 6c:c6:ec:0c:44:74:85:47:f2:01:24:6b:b5:2a:7c: 4b:da:e4:db:4d:c0:ac:ac:74:89:33:4a:e7:a2:f7: 96:df:d6:a5:9a:f5:05:90:1a:2f:98:cf:62:0a:db: e3:45:70:07:4d:d5:a4:b0:97:f1:81:8d:ce:67:f8: 0f:17:a1:4e:12:f7:a6:a2:18:68:1f:37:a4:dc:50: 08:56:48:3f:22:31:28:d1:02:4e:d9:db:e6:0d:dc: 0a:ae:f4:be:c9:58:c7:8f:8b:29:43:17:75:2d:30: 61:b4:f1:42:ac:7e:9f:04:b8:cd:93:e6:51:aa:a4: 3a:b1:54:af:39:5c:d1:f3:bc:af:5e:88:1a:dd:d3: 69:a2:6d:e9:40:e2:f2:7b:1a:bd:ce:2b:34:33:eb: 45:2f:6e:3c:c6:9e:05:b5:2b:f4:e3:dd:a0:f2:81: 39:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:D5:6D:82:06:EE:DC:DD:A9:DD:02:7A:5B:02:82:82:AB:24:73:75 X509v3 Authority Key Identifier: keyid:96:7B:97:D9:E3:11:25:0D:82:94:2D:27:E4:C5:F9:0D:98:13:80:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/D5C48F3A87C711F0BC29E84FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 161.248.218.0/23 Signature Algorithm: sha256WithRSAEncryption 78:1a:c4:11:df:ca:62:73:f7:63:04:a5:9a:9c:db:22:47:3c: 3c:59:1d:ce:03:52:ac:4a:ea:cc:10:86:e7:3b:0d:88:1b:ad: 5b:0d:9f:3a:be:d9:67:dc:c4:17:9c:88:9d:12:b3:94:ae:3c: b7:62:bc:d6:91:c9:35:b7:42:36:72:01:ac:c3:c1:c5:ac:ea: e6:7c:e0:58:36:c7:55:f0:9f:36:f7:c1:9d:3c:8e:e0:27:f6: 1e:fc:04:37:a4:e1:5e:3c:b6:3a:51:ce:3c:c7:e7:7c:6e:4e: b4:3d:e8:cc:c6:f1:09:01:91:f7:8a:32:95:ad:ae:d0:e5:4c: 52:2e:91:57:8a:10:b4:71:9f:95:7e:f9:88:3d:2d:4c:8b:67: 74:38:40:7d:3c:6d:30:9d:31:53:67:9e:13:88:bf:ba:69:44: c9:44:27:81:e4:a3:76:31:33:a7:19:6f:e1:1e:3d:66:1c:83: 53:44:06:ad:29:7a:7a:f6:f8:3c:4d:a3:67:9a:0f:8f:5e:08: 04:dd:76:19:a6:7c:1a:1c:1f:05:76:95:bb:9f:55:ae:a7:3e: 3d:06:17:88:91:39:d7:34:34:e2:56:42:03:c8:5b:ed:01:c8: ce:43:16:c2:67:1c:be:42:46:44:b2:52:ed:2a:9f:36:74:97: 3d:22:b3:1f -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZERDkxMTAvBgNVBAUTKDk2N0I5N0Q5RTMxMTI1MEQ4Mjk0MkQyN0U0QzVGOTBE OTgxMzgwNTgwHhcNMjUwOTAyMDY0MTQ1WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGI2OTFhOS1kNmYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwbiIg8/F2IeR5NnVhpbCvaW8O9ydZy5xn5A20P7z5WyuPya4gjDo2TCuKLKJ Hxy983sSDlNdGhg7HWl5YvEg0Bp7jkEdd5HxJRzF920QInSWnF2rPl6yFvxsxuwM RHSFR/IBJGu1KnxL2uTbTcCsrHSJM0rnoveW39almvUFkBovmM9iCtvjRXAHTdWk sJfxgY3OZ/gPF6FOEvemohhoHzek3FAIVkg/IjEo0QJO2dvmDdwKrvS+yVjHj4sp Qxd1LTBhtPFCrH6fBLjNk+ZRqqQ6sVSvOVzR87yvXoga3dNpom3pQOLyexq9zis0 M+tFL248xp4FtSv0492g8oE51wIDAQABo4IClTCCApEwHQYDVR0OBBYEFDzVbYIG 7tzdqd0CelsCgoKrJHN1MB8GA1UdIwQYMBaAFJZ7l9njESUNgpQtJ+TF+Q2YE4BY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkREOS9CNjIyRkE4QUQ2 REUxMUVGQjA0NzRFMUJDNEY5QUUwMi9sbnVYMmVNUkpRMkNsQzBuNU1YNURaZ1Rn RmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xudVgyZU1SSlEyQ2xDMG41TVg1RFpnVGdGZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUZERDkvQjYyMkZBOEFENkRFMTFFRkIwNDc0RTFCQzRGOUFFMDIvRDVDNDhGM0E4 N0M3MTFGMEJDMjlFODRGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGh+NowDQYJKoZIhvcNAQELBQADggEBAHgaxBHfymJz92ME pZqc2yJHPDxZHc4DUqxK6swQhuc7DYgbrVsNnzq+2WfcxBeciJ0Ss5SuPLdivNaR yTW3QjZyAazDwcWs6uZ84Fg2x1Xwnzb3wZ08juAn9h78BDek4V48tjpRzjzH53xu TrQ96MzG8QkBkfeKMpWtrtDlTFIukVeKELRxn5V++Yg9LUyLZ3Q4QH08bTCdMVNn nhOIv7ppRMlEJ4Hko3YxM6cZb+EePWYcg1NEBq0penr2+DxNo2eaD49eCATddhmm fBocHwV2lbufVa6nPj0GF4iROdc0NOJWQgPIW+0ByM5DFsJnHL5CRkSyUu0qnzZ0 lz0isx8= -----END CERTIFICATE-----Generated at Sun Sep 7 19:08:35 2025 by rpki-client