$ rpki-client -vvf rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/4F9206BCF83511EF806C6D48C4F9AE02.roa File: 4F9206BCF83511EF806C6D48C4F9AE02.roa (raw, json) Hash identifier: doAb9os8UNFIdddSh7NdOjLO/AGIReHHcJtJLomJGmg= Subject key identifier: 9E:FA:1F:7F:DB:2E:EC:1D:5F:CD:99:18:7C:4E:38:DD:02:2F:7F:F0 Certificate issuer: /CN=A9175F18/serialNumber=3C8B2BDBCB155E2D2FECD45D062FB3699F034320 Certificate serial: 0793 Authority key identifier: 3C:8B:2B:DB:CB:15:5E:2D:2F:EC:D4:5D:06:2F:B3:69:9F:03:43:20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/4F9206BCF83511EF806C6D48C4F9AE02.roa Signing time: Mon 03 Mar 2025 13:42:13 +0000 ROA not before: Mon 03 Mar 2025 13:42:13 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 212233 IP address blocks: 43.225.56.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 21:57:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1939 (0x793) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175F18, serialNumber=3C8B2BDBCB155E2D2FECD45D062FB3699F034320 Validity Not Before: Mar 3 13:42:13 2025 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=67c5b1b4-b615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:95:07:31:7f:43:0e:66:af:2c:69:dc:1e:c9: 5c:5c:09:04:dc:34:dd:1e:5b:bb:4d:98:b3:ec:26: 37:7a:da:8e:da:56:39:37:5d:7b:1f:39:2a:e2:e8: 54:b3:2f:78:6b:17:60:a1:41:e4:88:21:dd:fc:f4: 4d:29:bd:51:98:f6:74:43:48:f3:48:4a:79:1c:7e: 11:f1:2d:de:df:96:c9:0a:07:0b:ad:17:ed:be:b2: 3d:8e:e7:05:eb:59:0e:b0:24:76:35:d6:19:9f:d8: 25:47:fb:c6:51:96:ac:9d:2e:74:e1:df:56:29:5d: b3:f0:f1:b5:45:b3:2d:1d:38:69:2c:1e:1d:60:72: 2b:bd:5e:25:ac:28:57:2b:9b:85:d7:33:d5:6e:46: 48:a9:34:93:25:fc:3f:fc:82:c8:a3:cc:d1:4d:ab: 69:d7:d3:5a:24:b1:85:1f:66:e6:22:02:67:97:b7: 7b:4d:75:3f:06:65:95:10:01:7e:f0:a5:0a:6c:dc: bd:6f:1a:19:f4:c0:89:7d:83:be:ca:31:bb:1b:39: 02:31:41:1c:b1:95:3d:15:ff:06:69:24:0a:4d:e1: 24:21:7a:d8:61:5b:73:98:2a:bd:e5:7a:94:bf:25: 32:3e:34:b8:a8:0a:b8:bd:a3:13:87:15:4b:27:88: 3d:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:FA:1F:7F:DB:2E:EC:1D:5F:CD:99:18:7C:4E:38:DD:02:2F:7F:F0 X509v3 Authority Key Identifier: keyid:3C:8B:2B:DB:CB:15:5E:2D:2F:EC:D4:5D:06:2F:B3:69:9F:03:43:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/4F9206BCF83511EF806C6D48C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.225.56.0/23 Signature Algorithm: sha256WithRSAEncryption 75:43:01:6e:9f:4e:16:5b:ca:ba:ad:87:d3:1b:f0:99:fa:cd: 86:03:b7:16:94:10:dd:64:4e:a9:f7:05:65:79:d6:d6:c0:b9: 84:d2:23:3f:fd:d9:95:6c:93:a2:13:84:d0:65:73:97:34:12: 5f:92:19:0e:52:99:00:e7:07:72:e0:55:2d:97:8b:c9:d1:a4: bf:35:69:bd:70:0e:e0:3d:33:25:1f:c6:16:f2:61:7d:d0:25: b3:54:98:d4:85:61:b0:c9:3c:36:f0:3b:53:4b:f5:31:06:7e: a7:13:a5:39:92:53:50:fa:96:4b:d9:1a:62:5d:0e:56:fe:d3: c5:e2:e8:06:c5:32:c4:04:50:58:ab:f5:50:98:84:7c:0a:69: 38:50:f5:9d:7f:0b:6a:33:ef:44:0d:46:53:68:36:59:1a:2e: 77:22:ec:97:3b:d4:b7:71:cf:ad:f1:78:66:59:4f:65:a0:8d: 74:ac:49:10:00:1a:94:35:b6:26:34:e3:36:4b:85:51:19:39: 22:d3:c9:74:d3:16:bb:1a:e6:75:a6:52:b5:b9:22:a4:79:aa: 4c:9d:ee:78:ae:80:0a:fd:73:07:07:df:a9:23:36:9f:ba:5f: f6:e4:42:5d:c2:d4:5a:3e:18:b5:a7:c3:58:45:e7:4b:28:a5: e7:06:6d:f0 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB5MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzVGMTgxMTAvBgNVBAUTKDNDOEIyQkRCQ0IxNTVFMkQyRkVDRDQ1RDA2MkZCMzY5 OUYwMzQzMjAwHhcNMjUwMzAzMTM0MjEzWhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2M1YjFiNC1iNjE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA55UHMX9DDmavLGncHslcXAkE3DTdHlu7TZiz7CY3etqO2lY5N117Hzkq4uhU sy94axdgoUHkiCHd/PRNKb1RmPZ0Q0jzSEp5HH4R8S3e35bJCgcLrRftvrI9jucF 61kOsCR2NdYZn9glR/vGUZasnS504d9WKV2z8PG1RbMtHThpLB4dYHIrvV4lrChX K5uF1zPVbkZIqTSTJfw//ILIo8zRTatp19NaJLGFH2bmIgJnl7d7TXU/BmWVEAF+ 8KUKbNy9bxoZ9MCJfYO+yjG7GzkCMUEcsZU9Ff8GaSQKTeEkIXrYYVtzmCq95XqU vyUyPjS4qAq4vaMThxVLJ4g9NwIDAQABo4IClTCCApEwHQYDVR0OBBYEFJ76H3/b LuwdX82ZGHxOON0CL3/wMB8GA1UdIwQYMBaAFDyLK9vLFV4tL+zUXQYvs2mfA0Mg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUYxOC9BMzg0MjkxQzBB QTAxMUVCODczMzM4ODJDNEY5QUUwMi9QSXNyMjhzVlhpMHY3TlJkQmktemFaOERR eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BJc3IyOHNWWGkwdjdOUmRCaS16YVo4RFF5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzVGMTgvQTM4NDI5MUMwQUEwMTFFQjg3MzMzODgyQzRGOUFFMDIvNEY5MjA2QkNG ODM1MTFFRjgwNkM2RDQ4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAEr4TgwDQYJKoZIhvcNAQELBQADggEBAHVDAW6fThZbyrqt h9Mb8Jn6zYYDtxaUEN1kTqn3BWV51tbAuYTSIz/92ZVsk6IThNBlc5c0El+SGQ5S mQDnB3LgVS2Xi8nRpL81ab1wDuA9MyUfxhbyYX3QJbNUmNSFYbDJPDbwO1NL9TEG fqcTpTmSU1D6lkvZGmJdDlb+08Xi6AbFMsQEUFir9VCYhHwKaThQ9Z1/C2oz70QN RlNoNlkaLnci7Jc71Ldxz63xeGZZT2WgjXSsSRAAGpQ1tiY04zZLhVEZOSLTyXTT Frsa5nWmUrW5IqR5qkyd7niugAr9cwcH36kjNp+6X/bkQl3C1Fo+GLWnw1hF50so pecGbfA= -----END CERTIFICATE-----Generated at Fri Oct 24 06:42:12 2025 by rpki-client