$ rpki-client -vvf rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/40D0157A4E6A11F088256D4EC4F9AE02.roa File: 40D0157A4E6A11F088256D4EC4F9AE02.roa (raw, json) Hash identifier: ZjKANzm7zReBCIok2fJWs9C78AGhsAM7u7/O7bhMPec= Subject key identifier: F1:39:53:CF:85:99:1E:AB:EA:99:B4:CA:3E:17:BA:41:30:83:40:98 Certificate issuer: /CN=A9169A9C/serialNumber=D520192A95AFC8D5F27374D9A34C4633CE7DAC44 Certificate serial: 017D Authority key identifier: D5:20:19:2A:95:AF:C8:D5:F2:73:74:D9:A3:4C:46:33:CE:7D:AC:44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1SAZKpWvyNXyc3TZo0xGM859rEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/40D0157A4E6A11F088256D4EC4F9AE02.roa Signing time: Sat 21 Jun 2025 06:38:41 +0000 ROA not before: Sat 21 Jun 2025 06:38:41 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 151633 IP address blocks: 45.249.226.0/24 maxlen: 32 2401:e560::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.crl rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1SAZKpWvyNXyc3TZo0xGM859rEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 03:06:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 381 (0x17d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169A9C, serialNumber=D520192A95AFC8D5F27374D9A34C4633CE7DAC44 Validity Not Before: Jun 21 06:38:41 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=68565370-a937 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:88:be:f3:9c:c4:a6:fe:db:7b:f3:e3:38:3a: 20:5d:97:bb:6b:95:c7:e2:a1:51:6d:95:2a:8c:32: d8:b0:42:a5:09:e9:bf:1e:1e:6b:b8:51:ca:66:d6: fd:e9:12:0b:58:96:b6:e4:a4:e6:08:7f:02:e8:84: 33:7e:0f:64:fd:a0:65:1a:9a:ea:d2:63:9c:3f:9f: 08:92:3e:ea:f7:d9:61:08:25:4a:46:91:3e:55:e4: 61:3f:4f:17:59:7c:cf:18:cc:c5:a6:be:be:1c:ea: 56:6c:c8:26:16:b0:77:c4:46:0e:9a:4e:1f:08:8c: 59:77:10:14:22:4b:8c:7c:09:bc:ad:f2:42:29:c0: ee:0c:9e:e3:7f:4f:37:61:d4:5d:c4:d5:ce:c0:d5: 71:d4:39:20:6d:2f:16:7c:ee:6a:88:7e:9c:dc:25: 1f:50:c3:95:1b:93:e7:dd:2c:ed:19:09:c6:10:5f: 35:e5:bd:26:1e:df:60:2f:87:a8:33:f8:00:29:5c: dc:6b:e6:bf:11:c2:d6:80:b4:a5:bd:2a:25:fb:6f: 97:f4:61:57:20:06:25:3e:e4:22:87:69:4a:90:9c: aa:49:b4:3d:80:66:92:87:06:c3:30:b8:e0:df:c1: df:93:58:94:f2:96:ed:d9:53:70:96:b0:44:a7:ee: f3:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:39:53:CF:85:99:1E:AB:EA:99:B4:CA:3E:17:BA:41:30:83:40:98 X509v3 Authority Key Identifier: keyid:D5:20:19:2A:95:AF:C8:D5:F2:73:74:D9:A3:4C:46:33:CE:7D:AC:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1SAZKpWvyNXyc3TZo0xGM859rEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/40D0157A4E6A11F088256D4EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.249.226.0/24 IPv6: 2401:e560::/32 Signature Algorithm: sha256WithRSAEncryption ac:06:a9:3b:64:d9:6f:22:bf:3b:cf:8d:7d:0f:33:7c:a1:56: 0f:c0:d1:4f:92:a0:3e:84:3c:a0:d7:6e:ff:2b:51:fd:37:35: e7:ad:b5:4f:37:72:a6:b8:f2:1b:7d:e5:e9:6d:0a:34:e2:d4: ae:94:13:09:4e:19:8b:29:c8:c3:df:32:11:ea:ec:49:76:8b: a9:a4:20:b0:51:72:60:c4:37:d0:da:d8:24:0c:f7:7f:67:1b: b5:bb:54:f2:36:1f:ab:24:28:97:f1:ab:50:9b:87:15:c2:74: a8:7a:20:64:5f:76:d8:3b:d9:9a:bc:29:27:4b:1f:17:47:8f: f9:39:99:dd:32:99:02:6d:08:1a:fe:06:29:eb:af:d0:8d:1e: c2:ea:d1:56:51:9f:c1:13:d5:8f:a6:e5:a9:81:ae:58:6f:05: d5:d4:e6:38:b2:4f:7d:58:a5:b3:4c:6d:7c:10:f9:6a:fe:bd: 1c:be:52:a2:80:28:62:d9:32:92:72:bb:7d:ea:7e:7a:b5:84: 7a:bc:55:b8:5d:a0:df:77:00:6b:b9:61:e3:1b:be:61:84:ed: ea:6a:78:e5:8f:2b:46:87:58:b1:c0:e6:06:2f:98:61:22:94: 60:90:5b:d5:c9:f0:dc:b3:a9:02:e9:a4:a8:4f:94:02:71:3e: 4f:63:f5:56 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICAX0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlBOUMxMTAvBgNVBAUTKEQ1MjAxOTJBOTVBRkM4RDVGMjczNzREOUEzNEM0NjMz Q0U3REFDNDQwHhcNMjUwNjIxMDYzODQxWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02ODU2NTM3MC1hOTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvoi+85zEpv7be/PjODogXZe7a5XH4qFRbZUqjDLYsEKlCem/Hh5ruFHKZtb9 6RILWJa25KTmCH8C6IQzfg9k/aBlGprq0mOcP58Ikj7q99lhCCVKRpE+VeRhP08X WXzPGMzFpr6+HOpWbMgmFrB3xEYOmk4fCIxZdxAUIkuMfAm8rfJCKcDuDJ7jf083 YdRdxNXOwNVx1DkgbS8WfO5qiH6c3CUfUMOVG5Pn3SztGQnGEF815b0mHt9gL4eo M/gAKVzca+a/EcLWgLSlvSol+2+X9GFXIAYlPuQih2lKkJyqSbQ9gGaShwbDMLjg 38Hfk1iU8pbt2VNwlrBEp+7zKQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFPE5U8+F mR6r6pm0yj4XukEwg0CYMB8GA1UdIwQYMBaAFNUgGSqVr8jV8nN02aNMRjPOfaxE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUE5Qy9DM0E4MDQwNDNG ODQxMUVFQjkwMEE5MEZDNEY5QUUwMi8xU0FaS3BXdnlOWHljM1RabzB4R004NTly RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFTQVpLcFd2eU5YeWMzVFpvMHhHTTg1OXJFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjlBOUMvQzNBODA0MDQzRjg0MTFFRUI5MDBBOTBGQzRGOUFFMDIvNDBEMDE1N0E0 RTZBMTFGMDg4MjU2RDRFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAAt+eIwDQQCAAIwBwMFACQB5WAwDQYJKoZIhvcNAQELBQAD ggEBAKwGqTtk2W8ivzvPjX0PM3yhVg/A0U+SoD6EPKDXbv8rUf03NeettU83cqa4 8ht95eltCjTi1K6UEwlOGYspyMPfMhHq7El2i6mkILBRcmDEN9Da2CQM939nG7W7 VPI2H6skKJfxq1CbhxXCdKh6IGRfdtg72Zq8KSdLHxdHj/k5md0ymQJtCBr+Binr r9CNHsLq0VZRn8ET1Y+m5amBrlhvBdXU5jiyT31YpbNMbXwQ+Wr+vRy+UqKAKGLZ MpJyu33qfnq1hHq8VbhdoN93AGu5YeMbvmGE7epqeOWPK0aHWLHA5gYvmGEilGCQ W9XJ8NyzqQLppKhPlAJxPk9j9VY= -----END CERTIFICATE-----Generated at Wed Oct 29 12:25:35 2025 by rpki-client