$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/F2DDF3C2A09011F096CB321AC4F9AE02.roa File: F2DDF3C2A09011F096CB321AC4F9AE02.roa (raw, json) Hash identifier: 67Z/YlrcqHHZj0W+93RA9Qxh45bUqVdREsOo3Yb71wQ= Subject key identifier: A7:B0:5B:83:39:61:B6:E5:AC:BF:6E:F3:9F:31:4E:9D:98:7A:CA:19 Certificate issuer: /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206 Certificate serial: 39C1 Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/F2DDF3C2A09011F096CB321AC4F9AE02.roa Signing time: Fri 03 Oct 2025 19:42:46 +0000 ROA not before: Fri 03 Oct 2025 19:42:46 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 111.88.96.0/19 maxlen: 24 111.88.132.0/23 maxlen: 24 111.88.160.0/22 maxlen: 24 111.88.164.0/22 maxlen: 24 111.88.224.0/21 maxlen: 24 115.186.44.0/23 maxlen: 23 115.186.46.0/24 maxlen: 24 115.186.62.0/24 maxlen: 24 115.186.104.0/24 maxlen: 24 203.81.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Oct 2025 14:31:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14785 (0x39c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206 Validity Not Before: Oct 3 19:42:46 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=68e02736-e7f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:1b:46:7a:20:53:cb:68:8a:a6:8e:87:94:74: 3f:9b:d5:74:15:f7:22:ef:f1:a8:b2:00:57:c1:bd: 6f:f4:2d:19:de:9e:70:9c:aa:4f:93:7d:5d:20:9e: 98:d3:0a:d4:30:83:05:ab:7f:e9:8c:98:fa:c4:7b: ac:a6:9a:62:59:38:aa:8b:e6:ce:4a:f4:91:3a:83: 13:a3:f5:c4:cf:ce:ec:d8:48:11:ac:6c:16:0f:44: b2:32:d8:e2:42:b1:e6:58:f9:13:27:d6:2b:6a:d3: 49:36:82:26:75:06:f0:72:a1:63:69:eb:3f:90:c0: 63:22:a9:0f:22:9d:d9:29:ca:cc:55:3b:65:e2:12: a1:b0:2e:90:59:3a:c2:6c:11:4a:48:55:64:63:cb: 5b:91:a3:c1:69:cd:c1:37:fb:0b:b1:9d:96:fa:ba: 69:7c:de:b6:3e:9f:75:c8:b2:71:98:ec:0c:d8:d2: 14:e9:27:84:2c:97:7b:ed:b0:09:5e:42:1a:8e:c4: 39:27:13:ca:82:3d:78:ec:a0:74:d2:61:da:74:0c: ca:df:7b:6b:56:7f:58:9e:f0:d4:e1:f6:44:e5:87: 34:72:0b:42:67:34:35:5e:e8:b3:17:1c:ed:69:98: d0:0e:43:f8:19:d6:a4:62:d6:ef:83:e3:9f:66:2e: 00:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:B0:5B:83:39:61:B6:E5:AC:BF:6E:F3:9F:31:4E:9D:98:7A:CA:19 X509v3 Authority Key Identifier: keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/F2DDF3C2A09011F096CB321AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 111.88.96.0/19 111.88.132.0/23 111.88.160.0/21 111.88.224.0/21 115.186.44.0-115.186.46.255 115.186.62.0/24 115.186.104.0/24 203.81.235.0/24 Signature Algorithm: sha256WithRSAEncryption 94:9f:13:74:09:c6:78:17:2d:ac:39:6f:60:4b:36:35:42:15: 2b:42:52:ce:fa:c3:ab:cb:10:b2:89:64:44:96:0b:6d:d2:ad: 78:04:57:d3:5f:11:86:18:ff:f2:d4:1d:ad:3e:d2:14:8f:07: 04:0f:b2:6c:4a:4b:55:12:fa:4d:5d:49:62:3a:1d:3d:72:1c: 47:c8:1a:91:ef:ea:af:93:b0:2c:25:57:ca:2e:c9:dc:c8:4e: 6f:52:23:c0:bd:7e:48:64:b1:3d:54:77:0e:2f:f1:e4:31:73: 36:3d:b3:c8:23:06:41:78:e5:b2:be:3d:7f:c8:fb:ee:f4:ea: 26:3a:1c:b8:29:84:64:4b:b9:11:7a:c3:95:0f:11:f2:1a:cc: 8a:a3:3f:08:fe:5d:66:e9:22:5f:27:de:32:a4:71:82:42:e0: bf:9c:f6:93:87:e3:02:8e:e0:80:e1:20:72:76:e4:7b:6b:0e: f2:0b:ea:95:89:7f:c1:1e:e2:01:ea:5b:50:91:5c:56:fe:03: 0a:fb:88:f5:2d:7b:f9:84:49:5e:9a:17:57:c3:a2:63:01:a6: 31:60:21:ed:45:a5:68:cf:6c:3e:19:52:2a:ad:cc:13:6b:60: 3e:02:a6:fd:b4:99:32:36:09:1c:53:69:ac:d1:3a:04:93:c8: a7:96:1d:79 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgICOcEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM4M0IxMTAvBgNVBAUTKEU3NkVCMjU2QzBGQ0IwN0UyOTA3OTc4MzQzRTlBRDlE RDIxRkUyMDYwHhcNMjUxMDAzMTk0MjQ2WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGUwMjczNi1lN2YzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzRtGeiBTy2iKpo6HlHQ/m9V0Ffci7/GosgBXwb1v9C0Z3p5wnKpPk31dIJ6Y 0wrUMIMFq3/pjJj6xHuspppiWTiqi+bOSvSROoMTo/XEz87s2EgRrGwWD0SyMtji QrHmWPkTJ9YratNJNoImdQbwcqFjaes/kMBjIqkPIp3ZKcrMVTtl4hKhsC6QWTrC bBFKSFVkY8tbkaPBac3BN/sLsZ2W+rppfN62Pp91yLJxmOwM2NIU6SeELJd77bAJ XkIajsQ5JxPKgj147KB00mHadAzK33trVn9YnvDU4fZE5Yc0cgtCZzQ1XuizFxzt aZjQDkP4GdakYtbvg+OfZi4ALQIDAQABo4ICxzCCAsMwHQYDVR0OBBYEFKewW4M5 YbblrL9u858xTp2YesoZMB8GA1UdIwQYMBaAFOduslbA/LB+KQeXg0PprZ3SH+IG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzgzQi9FNEUxMEI0QTFE ODgxMUUyQTAxMkNCRTEwOEIwMkNEMi81MjZ5VnNEOHNINHBCNWVEUS1tdG5kSWY0 Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzUyNnlWc0Q4c0g0cEI1ZURRLW10bmRJZjRnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkM4M0IvRTRFMTBCNEExRDg4MTFFMkEwMTJDQkUxMDhCMDJDRDIvRjJEREYzQzJB MDkwMTFGMDk2Q0IzMjFBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwUQYIKwYBBQUHAQcBAf8E QjBAMD4EAgABMDgDBAVvWGADBAFvWIQDBANvWKADBANvWOAwDAMEAnO6LAMEAHO6 LgMEAHO6PgMEAHO6aAMEAMtR6zANBgkqhkiG9w0BAQsFAAOCAQEAlJ8TdAnGeBct rDlvYEs2NUIVK0JSzvrDq8sQsolkRJYLbdKteARX018Rhhj/8tQdrT7SFI8HBA+y bEpLVRL6TV1JYjodPXIcR8gake/qr5OwLCVXyi7J3MhOb1IjwL1+SGSxPVR3Di/x 5DFzNj2zyCMGQXjlsr49f8j77vTqJjocuCmEZEu5EXrDlQ8R8hrMiqM/CP5dZuki XyfeMqRxgkLgv5z2k4fjAo7ggOEgcnbke2sO8gvqlYl/wR7iAepbUJFcVv4DCvuI 9S17+YRJXpoXV8OiYwGmMWAh7UWlaM9sPhlSKq3ME2tgPgKm/bSZMjYJHFNprNE6 BJPIp5YdeQ== -----END CERTIFICATE-----Generated at Wed Oct 8 14:06:42 2025 by rpki-client