$ rpki-client -vvf rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/0C21BBAC373711F08FA9BD3DC4F9AE02.roa File: 0C21BBAC373711F08FA9BD3DC4F9AE02.roa (raw, json) Hash identifier: ye1UKpo8u7ojDH21WRiG292JL5bV63l2uZsql1JK7Ms= Subject key identifier: 5F:74:FE:A5:0A:53:AC:F9:DE:FD:2E:6F:1D:43:89:9E:DF:9E:B1:C7 Certificate issuer: /CN=A917748E/serialNumber=4B3B5A01A8952FB5642D2484B7F0205AE7DCC761 Certificate serial: 024B Authority key identifier: 4B:3B:5A:01:A8:95:2F:B5:64:2D:24:84:B7:F0:20:5A:E7:DC:C7:61 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/0C21BBAC373711F08FA9BD3DC4F9AE02.roa Signing time: Fri 31 Oct 2025 02:16:07 +0000 ROA not before: Fri 31 Oct 2025 02:16:07 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 31898 IP address blocks: 66.116.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.crl rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 02:09:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 587 (0x24b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917748E, serialNumber=4B3B5A01A8952FB5642D2484B7F0205AE7DCC761 Validity Not Before: Oct 31 02:16:07 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69041be7-1fc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:32:ee:f1:18:3d:76:5a:60:31:0c:e0:dc:d5: 8c:27:9d:3d:15:3e:27:43:36:21:ec:8b:6e:01:7c: 82:54:05:d0:fd:b5:02:57:a4:f6:3c:c9:2d:be:54: f8:02:31:43:ac:1d:b2:e2:bc:c6:e6:f2:15:9b:30: 03:e1:c1:1e:e0:96:a2:c6:65:8a:39:b9:60:e8:b4: 8a:98:fe:60:40:43:34:61:58:0c:bf:97:3d:21:d2: d2:0a:db:d5:cc:8a:b8:16:86:42:87:49:c0:c9:c0: 13:64:57:94:1c:a3:f1:98:42:f5:47:b8:01:60:3c: 43:97:4b:77:14:d8:9f:7f:35:a5:f5:e0:2d:f7:dc: d0:03:c6:50:c8:0b:9f:7f:7f:f1:b7:8c:98:3c:98: c2:f7:6b:8a:69:57:e5:1f:9b:de:ed:0e:2f:51:ce: 66:aa:08:ce:9d:32:e6:6c:17:17:bd:94:45:93:33: 19:b6:c8:43:68:08:e9:96:ca:1c:57:89:fb:bd:59: 43:10:dc:54:2d:ac:27:4f:81:70:df:27:9f:37:35: cd:3c:ad:d9:13:29:f9:80:76:4e:c8:a5:27:66:be: 76:b2:ed:2e:a9:9d:56:5a:38:ae:47:9e:35:03:c4: 8d:4b:1c:19:e1:51:85:8b:8e:93:f7:84:e8:52:ef: 62:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:74:FE:A5:0A:53:AC:F9:DE:FD:2E:6F:1D:43:89:9E:DF:9E:B1:C7 X509v3 Authority Key Identifier: keyid:4B:3B:5A:01:A8:95:2F:B5:64:2D:24:84:B7:F0:20:5A:E7:DC:C7:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/0C21BBAC373711F08FA9BD3DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 66.116.192.0/18 Signature Algorithm: sha256WithRSAEncryption 09:55:fd:0b:10:15:5f:d1:f2:e6:41:66:95:64:66:63:6a:39: df:38:72:b6:3f:e5:46:77:72:61:4a:f1:d5:7f:87:79:68:ef: 3e:8c:d3:c3:9d:e1:b8:44:ad:b8:db:c8:78:3c:f5:8e:22:ae: 1f:a0:27:49:aa:08:57:d0:23:90:da:08:6c:52:6e:89:33:69: 11:0a:6c:fb:3e:ca:3f:01:92:44:ea:14:e0:93:81:44:74:67: 76:8c:ec:55:9f:a7:ea:69:d2:23:67:f5:a5:fe:5d:1a:ac:64: 8e:ca:30:9c:50:e0:61:e4:89:45:cd:93:72:db:6b:e8:07:ef: 95:66:84:4b:50:a2:4a:36:33:db:88:85:c7:6e:83:69:eb:c0: 1f:5b:73:56:76:7f:43:d5:40:9e:64:3f:0b:04:62:b5:a1:83: e9:a7:f2:dc:63:b0:7d:c4:49:b4:1b:33:5c:94:cd:24:6e:04: ca:9e:81:70:e1:a8:4b:1f:7a:4c:22:55:96:b5:4a:2e:30:af: 92:08:4b:dc:ad:34:41:02:5f:34:25:a4:b0:b4:50:dc:0b:39: f2:8a:31:b9:12:e9:cd:7d:05:6b:88:a0:14:01:39:bb:0c:17: a3:b4:5d:3b:5d:83:92:b4:8c:bd:04:08:2f:b0:40:60:63:08: 7f:1a:8c:a0 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAkswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc0OEUxMTAvBgNVBAUTKDRCM0I1QTAxQTg5NTJGQjU2NDJEMjQ4NEI3RjAyMDVB RTdEQ0M3NjEwHhcNMjUxMDMxMDIxNjA3WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTA0MWJlNy0xZmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5TLu8Rg9dlpgMQzg3NWMJ509FT4nQzYh7ItuAXyCVAXQ/bUCV6T2PMktvlT4 AjFDrB2y4rzG5vIVmzAD4cEe4JaixmWKOblg6LSKmP5gQEM0YVgMv5c9IdLSCtvV zIq4FoZCh0nAycATZFeUHKPxmEL1R7gBYDxDl0t3FNiffzWl9eAt99zQA8ZQyAuf f3/xt4yYPJjC92uKaVflH5ve7Q4vUc5mqgjOnTLmbBcXvZRFkzMZtshDaAjplsoc V4n7vVlDENxULawnT4Fw3yefNzXNPK3ZEyn5gHZOyKUnZr52su0uqZ1WWjiuR541 A8SNSxwZ4VGFi46T94ToUu9i4QIDAQABo4IClTCCApEwHQYDVR0OBBYEFF90/qUK U6z53v0ubx1DiZ7fnrHHMB8GA1UdIwQYMBaAFEs7WgGolS+1ZC0khLfwIFrn3Mdh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzQ4RS80RDc4OTI2QTRG QTkxMUVEQURFNTE1N0NDNEY5QUUwMi9TenRhQWFpVkw3VmtMU1NFdF9BZ1d1ZmN4 MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1N6dGFBYWlWTDdWa0xTU0V0X0FnV3VmY3gyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Nzc0OEUvNEQ3ODkyNkE0RkE5MTFFREFERTUxNTdDQzRGOUFFMDIvMEMyMUJCQUMz NzM3MTFGMDhGQTlCRDNEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAZCdMAwDQYJKoZIhvcNAQELBQADggEBAAlV/QsQFV/R8uZB ZpVkZmNqOd84crY/5UZ3cmFK8dV/h3lo7z6M08Od4bhErbjbyHg89Y4irh+gJ0mq CFfQI5DaCGxSbokzaREKbPs+yj8BkkTqFOCTgUR0Z3aM7FWfp+pp0iNn9aX+XRqs ZI7KMJxQ4GHkiUXNk3Lba+gH75VmhEtQoko2M9uIhcdug2nrwB9bc1Z2f0PVQJ5k PwsEYrWhg+mn8txjsH3ESbQbM1yUzSRuBMqegXDhqEsfekwiVZa1Si4wr5IIS9yt NEECXzQlpLC0UNwLOfKKMbkS6c19BWuIoBQBObsMF6O0XTtdg5K0jL0ECC+wQGBj CH8ajKA= -----END CERTIFICATE-----Generated at Sun Nov 2 01:57:07 2025 by rpki-client