$ rpki-client -vvf rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/7D0F62FAF3EF11EA82F3C251C4F9AE02.roa File: 7D0F62FAF3EF11EA82F3C251C4F9AE02.roa (raw, json) Hash identifier: mDiyXguFaGa3vR8D07iQ+K1O3uq6pL2JeIG9VyLGezQ= Subject key identifier: 33:9F:CE:E3:CF:9C:3F:E7:AC:62:AF:EF:4E:98:3B:F9:B3:D3:59:C1 Certificate issuer: /CN=A917138D/serialNumber=AE0F0E9ED4A6706E92E10B789BAC2C625A565156 Certificate serial: 0838 Authority key identifier: AE:0F:0E:9E:D4:A6:70:6E:92:E1:0B:78:9B:AC:2C:62:5A:56:51:56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rg8OntSmcG6S4Qt4m6wsYlpWUVY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/7D0F62FAF3EF11EA82F3C251C4F9AE02.roa Signing time: Thu 30 Oct 2025 21:10:42 +0000 ROA not before: Thu 30 Oct 2025 21:10:42 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 17458 IP address blocks: 202.44.112.0/22 maxlen: 22 202.44.113.0/24 maxlen: 24 202.44.115.0/24 maxlen: 24 203.83.48.0/21 maxlen: 21 203.83.48.0/24 maxlen: 24 203.83.49.0/24 maxlen: 24 203.83.50.0/24 maxlen: 24 203.83.51.0/24 maxlen: 24 203.83.52.0/24 maxlen: 24 203.83.53.0/24 maxlen: 24 203.83.54.0/24 maxlen: 24 203.83.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/rg8OntSmcG6S4Qt4m6wsYlpWUVY.crl rsync://rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/rg8OntSmcG6S4Qt4m6wsYlpWUVY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rg8OntSmcG6S4Qt4m6wsYlpWUVY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 20:50:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2104 (0x838) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917138D, serialNumber=AE0F0E9ED4A6706E92E10B789BAC2C625A565156 Validity Not Before: Oct 30 21:10:42 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=6903d452-0551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:3f:59:08:8b:8e:95:06:78:68:ea:ce:56:16: 93:a3:5b:fb:25:4c:c4:9c:62:22:58:58:c7:10:ff: fe:c1:00:93:ce:af:78:f0:7e:57:7c:4e:df:ec:66: f1:62:1d:24:d5:77:93:d1:c1:1e:f3:37:1e:49:ed: 85:03:21:8a:29:eb:10:03:9d:14:0d:a0:c0:90:b7: 51:04:03:f8:cf:72:27:76:54:9e:ac:5b:80:29:66: 0b:b4:24:b9:b6:74:cb:ce:04:4f:a4:67:ad:43:dc: b8:a9:1a:62:21:b3:cc:a1:15:4b:f9:b3:22:82:04: 64:a2:ae:4a:a8:21:49:72:82:c3:44:a5:60:2c:3e: 08:40:50:09:9d:ff:e7:99:fd:7a:67:1e:97:1b:6d: 5e:a3:60:15:76:85:82:72:7d:38:a7:d5:a8:67:bb: 03:8e:06:16:41:dc:42:53:4c:a4:12:99:eb:b3:55: 5a:41:81:72:8f:82:1e:02:29:3f:ba:d4:62:de:8a: 00:ca:f9:1c:94:86:28:13:cd:65:26:13:19:cf:19: 2c:d3:a9:73:a6:b4:f8:7b:bb:ed:11:4a:88:5b:8d: c4:6e:b3:2a:6a:cb:df:8f:89:ce:8f:76:1f:7e:98: 7e:2e:c7:ed:59:dd:ca:c2:f1:2a:d0:0e:0c:6a:e2: 8f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:9F:CE:E3:CF:9C:3F:E7:AC:62:AF:EF:4E:98:3B:F9:B3:D3:59:C1 X509v3 Authority Key Identifier: keyid:AE:0F:0E:9E:D4:A6:70:6E:92:E1:0B:78:9B:AC:2C:62:5A:56:51:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/rg8OntSmcG6S4Qt4m6wsYlpWUVY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rg8OntSmcG6S4Qt4m6wsYlpWUVY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/7D0F62FAF3EF11EA82F3C251C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.44.112.0/22 203.83.48.0/21 Signature Algorithm: sha256WithRSAEncryption 38:e5:c1:42:7a:b2:a7:c0:8b:1a:2e:9d:7a:9b:97:fa:61:ba: f4:f6:a6:9a:cf:e2:27:6c:9f:9b:d6:19:ee:91:5c:40:0b:7a: 5d:01:11:39:0b:97:1b:6a:c0:e8:e7:5b:ae:b1:17:29:ab:8f: 83:d2:b1:67:9d:a0:33:16:52:32:57:ca:aa:14:25:cb:c7:23: 47:79:96:d3:32:e8:00:58:b4:60:ce:89:51:b7:37:43:76:08: 4b:da:10:36:f1:a8:77:ad:c5:55:9d:b9:a1:b8:3c:e7:11:e0: d5:ed:41:ca:52:d8:c3:1a:19:2a:7d:d9:30:e3:e1:96:52:a7: c8:db:7c:20:09:43:67:26:de:7f:22:6f:9c:55:01:40:30:41: 9c:46:46:c4:4d:9f:db:09:71:0a:a2:4f:20:3b:5f:86:6d:67: b0:a8:3d:2c:2f:68:13:2d:3d:8f:67:65:23:59:51:a6:72:f8: 45:19:ef:82:f0:cd:40:09:1b:c9:ee:11:29:86:b4:7d:bf:b1: 4e:7a:35:b6:ac:cd:ad:58:7a:d1:b6:dd:3e:a7:3e:b3:18:ab: 68:f9:42:e6:be:98:ad:05:44:2c:c4:0f:6a:e2:5b:fa:b8:2a: 09:b3:38:6f:da:b9:7b:8e:48:85:49:9a:b3:65:91:3c:0a:df: 60:4b:59:bd -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICCDgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzEzOEQxMTAvBgNVBAUTKEFFMEYwRTlFRDRBNjcwNkU5MkUxMEI3ODlCQUMyQzYy NUE1NjUxNTYwHhcNMjUxMDMwMjExMDQyWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTAzZDQ1Mi0wNTUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0z9ZCIuOlQZ4aOrOVhaTo1v7JUzEnGIiWFjHEP/+wQCTzq948H5XfE7f7Gbx Yh0k1XeT0cEe8zceSe2FAyGKKesQA50UDaDAkLdRBAP4z3IndlSerFuAKWYLtCS5 tnTLzgRPpGetQ9y4qRpiIbPMoRVL+bMiggRkoq5KqCFJcoLDRKVgLD4IQFAJnf/n mf16Zx6XG21eo2AVdoWCcn04p9WoZ7sDjgYWQdxCU0ykEpnrs1VaQYFyj4IeAik/ utRi3ooAyvkclIYoE81lJhMZzxks06lzprT4e7vtEUqIW43EbrMqasvfj4nOj3Yf fph+LsftWd3KwvEq0A4MauKPvQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFDOfzuPP nD/nrGKv706YO/mz01nBMB8GA1UdIwQYMBaAFK4PDp7UpnBukuELeJusLGJaVlFW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTM4RC80RjZFOTMxOEYz RUQxMUVBQTRBMUQ2NERDNEY5QUUwMi9yZzhPbnRTbWNHNlM0UXQ0bTZ3c1lscFdV VlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JnOE9udFNtY0c2UzRRdDRtNndzWWxwV1VWWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzEzOEQvNEY2RTkzMThGM0VEMTFFQUE0QTFENjREQzRGOUFFMDIvN0QwRjYyRkFG M0VGMTFFQTgyRjNDMjUxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBALKLHADBAPLUzAwDQYJKoZIhvcNAQELBQADggEBADjlwUJ6 sqfAixounXqbl/phuvT2pprP4idsn5vWGe6RXEALel0BETkLlxtqwOjnW66xFymr j4PSsWedoDMWUjJXyqoUJcvHI0d5ltMy6ABYtGDOiVG3N0N2CEvaEDbxqHetxVWd uaG4POcR4NXtQcpS2MMaGSp92TDj4ZZSp8jbfCAJQ2cm3n8ib5xVAUAwQZxGRsRN n9sJcQqiTyA7X4ZtZ7CoPSwvaBMtPY9nZSNZUaZy+EUZ74LwzUAJG8nuESmGtH2/ sU56Nbasza1YetG23T6nPrMYq2j5Qua+mK0FRCzED2riW/q4KgmzOG/auXuOSIVJ mrNlkTwK32BLWb0= -----END CERTIFICATE-----Generated at Tue Nov 4 07:23:44 2025 by rpki-client