$ rpki-client -vvf rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/2434E2E24FAD11EDA19F8316C4F9AE02.roa File: 2434E2E24FAD11EDA19F8316C4F9AE02.roa (raw, json) Hash identifier: QKPxnsl5W/cKLCZuMQFferj3l2oedmhBT9kPnPZhJg4= Subject key identifier: D8:81:E4:65:52:9A:A3:30:10:20:38:BF:1C:84:3E:4C:25:37:7E:54 Certificate issuer: /CN=A917748E/serialNumber=4B3B5A01A8952FB5642D2484B7F0205AE7DCC761 Certificate serial: 024C Authority key identifier: 4B:3B:5A:01:A8:95:2F:B5:64:2D:24:84:B7:F0:20:5A:E7:DC:C7:61 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/2434E2E24FAD11EDA19F8316C4F9AE02.roa Signing time: Fri 31 Oct 2025 02:16:08 +0000 ROA not before: Fri 31 Oct 2025 02:16:08 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 38719 IP address blocks: 65.254.92.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.crl rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 02:09:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 588 (0x24c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917748E, serialNumber=4B3B5A01A8952FB5642D2484B7F0205AE7DCC761 Validity Not Before: Oct 31 02:16:08 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69041be8-0980 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d1:c9:93:bc:d6:7d:17:b2:88:73:82:14:ca: b8:dd:92:17:4e:ea:bb:ed:d9:88:69:4b:69:26:28: d5:80:45:77:53:4e:f8:2f:f5:91:04:d1:8f:1f:e7: 64:6a:3d:14:8a:79:fc:55:2a:da:23:4e:aa:d9:7a: df:59:1f:3e:f1:f8:8d:37:44:2a:2c:7a:f8:bd:ec: ac:a7:c6:60:07:85:2a:ed:b4:0c:e2:48:72:7d:df: 19:bd:fe:7d:cb:62:77:6c:78:27:de:6c:5e:24:9e: 22:04:c9:46:26:a7:92:fe:94:01:11:47:9a:4f:52: 40:1b:c2:91:72:eb:39:d6:9c:d0:91:2e:4b:8d:71: 67:f2:fe:ca:2d:34:32:18:98:29:93:9f:90:fe:00: 40:9a:05:63:91:d8:75:76:c6:e3:66:4a:54:d2:f5: 3e:56:14:91:15:81:9b:02:aa:dc:9d:e9:f8:ac:e8: db:a2:ce:3a:8b:55:ef:81:91:23:ea:c0:3b:10:da: 25:b1:c3:ae:ef:cd:a0:87:37:01:51:7c:e5:44:9b: 30:82:dc:d3:17:e9:d5:21:a4:9c:a5:fb:10:15:13: a3:25:f0:e9:82:f6:0f:b2:ad:1f:2b:11:2a:52:45: b2:ad:43:63:1a:17:87:f6:a9:4d:fe:96:9e:70:fc: d5:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:81:E4:65:52:9A:A3:30:10:20:38:BF:1C:84:3E:4C:25:37:7E:54 X509v3 Authority Key Identifier: keyid:4B:3B:5A:01:A8:95:2F:B5:64:2D:24:84:B7:F0:20:5A:E7:DC:C7:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/2434E2E24FAD11EDA19F8316C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 65.254.92.0/22 Signature Algorithm: sha256WithRSAEncryption 54:78:69:e1:95:5b:d7:37:26:e3:df:b9:7e:1b:45:5b:18:56: c7:72:2b:b8:1e:b5:7f:46:95:1e:72:79:5f:d5:de:f3:dd:a9: 80:7c:b5:9a:f7:12:0a:cf:fd:f9:ab:a6:bb:9f:89:05:19:c6: 8e:00:8f:5f:43:cc:d9:8c:ff:89:3d:e7:4e:c4:71:32:d1:61: fb:69:fe:22:c3:de:dd:83:67:e1:ac:2a:d5:9f:62:6a:c3:46: f2:99:d0:43:b1:15:09:53:81:69:fb:38:b9:04:a3:ad:9c:78: 4c:92:63:f7:8b:f6:77:c0:30:c3:9a:72:02:d0:dc:7c:e7:e3: 2e:dc:53:0a:6e:b7:d9:97:d8:ad:0a:b2:b2:6c:02:f9:5e:b0: 0e:82:f5:22:57:9e:f3:54:86:8c:6d:fb:b5:30:34:a3:1a:8e: d5:bb:76:a9:74:b0:a9:e3:3b:81:2b:ef:80:1f:70:70:ee:05: ab:35:a0:70:ec:b9:85:bf:11:48:26:d6:c2:c9:68:a3:06:58: 25:e9:9e:d3:b9:5d:aa:3f:e9:ae:0c:77:b7:02:57:87:65:c5: fa:9b:eb:7e:5f:f3:8b:47:0c:b1:ea:bf:33:72:82:11:96:f0: eb:7e:9f:74:c7:c2:46:2d:17:ca:f2:9b:25:2b:95:19:27:ce: fb:0b:62:c7 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAkwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc0OEUxMTAvBgNVBAUTKDRCM0I1QTAxQTg5NTJGQjU2NDJEMjQ4NEI3RjAyMDVB RTdEQ0M3NjEwHhcNMjUxMDMxMDIxNjA4WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTA0MWJlOC0wOTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtNHJk7zWfReyiHOCFMq43ZIXTuq77dmIaUtpJijVgEV3U074L/WRBNGPH+dk aj0Uinn8VSraI06q2XrfWR8+8fiNN0QqLHr4veysp8ZgB4Uq7bQM4khyfd8Zvf59 y2J3bHgn3mxeJJ4iBMlGJqeS/pQBEUeaT1JAG8KRcus51pzQkS5LjXFn8v7KLTQy GJgpk5+Q/gBAmgVjkdh1dsbjZkpU0vU+VhSRFYGbAqrcnen4rOjbos46i1XvgZEj 6sA7ENolscOu782ghzcBUXzlRJswgtzTF+nVIaScpfsQFROjJfDpgvYPsq0fKxEq UkWyrUNjGheH9qlN/paecPzVzwIDAQABo4IClTCCApEwHQYDVR0OBBYEFNiB5GVS mqMwECA4vxyEPkwlN35UMB8GA1UdIwQYMBaAFEs7WgGolS+1ZC0khLfwIFrn3Mdh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzQ4RS80RDc4OTI2QTRG QTkxMUVEQURFNTE1N0NDNEY5QUUwMi9TenRhQWFpVkw3VmtMU1NFdF9BZ1d1ZmN4 MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1N6dGFBYWlWTDdWa0xTU0V0X0FnV3VmY3gyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Nzc0OEUvNEQ3ODkyNkE0RkE5MTFFREFERTUxNTdDQzRGOUFFMDIvMjQzNEUyRTI0 RkFEMTFFREExOUY4MzE2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJB/lwwDQYJKoZIhvcNAQELBQADggEBAFR4aeGVW9c3JuPf uX4bRVsYVsdyK7getX9GlR5yeV/V3vPdqYB8tZr3EgrP/fmrprufiQUZxo4Aj19D zNmM/4k9507EcTLRYftp/iLD3t2DZ+GsKtWfYmrDRvKZ0EOxFQlTgWn7OLkEo62c eEySY/eL9nfAMMOacgLQ3Hzn4y7cUwput9mX2K0KsrJsAvlesA6C9SJXnvNUhoxt +7UwNKMajtW7dql0sKnjO4Er74AfcHDuBas1oHDsuYW/EUgm1sLJaKMGWCXpntO5 Xao/6a4Md7cCV4dlxfqb635f84tHDLHqvzNyghGW8Ot+n3THwkYtF8rymyUrlRkn zvsLYsc= -----END CERTIFICATE-----Generated at Sun Nov 2 01:52:01 2025 by rpki-client