$ rpki-client -vvf rpki.apnic.net/member_repository/A917EFA9/ED68B5F031A511EEBEF8BD2AC4F9AE02/1468305C31A811EE939F1D33C4F9AE02.roa File: 1468305C31A811EE939F1D33C4F9AE02.roa (raw, json) Hash identifier: dz+eMFL8jhyEuvX0L5AAkhWL05erMvJityZS8nH7Mjo= Subject key identifier: 89:06:D3:D3:AC:B7:F2:24:BA:76:BC:C1:22:C4:52:16:1C:07:B2:0A Certificate issuer: /CN=A917EFA9/serialNumber=7B91A8B011D619C4271D45203A0E33D9185EF781 Certificate serial: 01A2 Authority key identifier: 7B:91:A8:B0:11:D6:19:C4:27:1D:45:20:3A:0E:33:D9:18:5E:F7:81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5GosBHWGcQnHUUgOg4z2Rhe94E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917EFA9/ED68B5F031A511EEBEF8BD2AC4F9AE02/1468305C31A811EE939F1D33C4F9AE02.roa Signing time: Wed 03 Sep 2025 04:22:34 +0000 ROA not before: Wed 03 Sep 2025 04:22:34 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 23878 IP address blocks: 182.16.152.0/22 maxlen: 22 182.16.152.0/24 maxlen: 24 182.16.153.0/24 maxlen: 24 182.16.154.0/24 maxlen: 24 182.16.155.0/24 maxlen: 24 202.62.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917EFA9/ED68B5F031A511EEBEF8BD2AC4F9AE02/e5GosBHWGcQnHUUgOg4z2Rhe94E.crl rsync://rpki.apnic.net/member_repository/A917EFA9/ED68B5F031A511EEBEF8BD2AC4F9AE02/e5GosBHWGcQnHUUgOg4z2Rhe94E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5GosBHWGcQnHUUgOg4z2Rhe94E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 04:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 418 (0x1a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917EFA9, serialNumber=7B91A8B011D619C4271D45203A0E33D9185EF781 Validity Not Before: Sep 3 04:22:34 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68b7c289-4cc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:10:da:a2:0a:93:c1:b0:7c:4b:fa:6d:bf:3e: 92:7f:74:fd:23:90:0a:99:15:bd:24:da:2f:3a:78: 1b:a7:27:e6:37:f0:c2:dc:b9:c8:70:1d:89:a5:06: 62:ea:6a:92:4a:b6:fb:16:f7:e9:61:66:a4:70:a8: 5d:31:66:a2:42:73:21:58:c2:ca:6d:64:58:8b:97: 3c:81:ee:a5:7c:4c:88:dd:f2:4e:e4:a3:d9:fc:dc: 97:3c:c2:32:87:e0:7c:ed:ef:7a:c8:0a:b8:5a:2a: 1a:33:1f:dc:51:af:02:b5:72:11:6e:e7:90:b5:0b: 27:28:05:c4:c4:f8:96:f3:ea:31:79:9a:66:2c:89: d4:c5:2b:8a:70:64:68:5f:3f:93:a8:8d:b4:79:9e: 79:48:e4:fb:1c:4e:5e:55:25:cf:f6:fe:a0:ab:31: f0:d8:1c:f8:83:6a:4b:c8:d6:d9:cb:71:59:96:83: ab:a4:4e:09:ce:10:50:ad:b9:67:22:39:c5:2c:69: ac:d8:c0:ef:26:1e:4c:20:b3:37:d4:c4:6e:cf:aa: 7d:a8:ff:e1:69:a1:f5:68:d5:79:a9:a0:00:0c:33: 00:b9:60:64:a2:37:90:2a:81:5f:a0:de:dd:b7:c5: bb:c1:91:0e:72:44:bd:97:28:e2:b5:c4:1c:1e:ad: 65:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:06:D3:D3:AC:B7:F2:24:BA:76:BC:C1:22:C4:52:16:1C:07:B2:0A X509v3 Authority Key Identifier: keyid:7B:91:A8:B0:11:D6:19:C4:27:1D:45:20:3A:0E:33:D9:18:5E:F7:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917EFA9/ED68B5F031A511EEBEF8BD2AC4F9AE02/e5GosBHWGcQnHUUgOg4z2Rhe94E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5GosBHWGcQnHUUgOg4z2Rhe94E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EFA9/ED68B5F031A511EEBEF8BD2AC4F9AE02/1468305C31A811EE939F1D33C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 182.16.152.0/22 202.62.245.0/24 Signature Algorithm: sha256WithRSAEncryption 71:7f:dc:de:9e:44:ba:ac:da:ea:51:98:4c:d9:60:48:21:31: 89:24:22:c6:32:4e:fc:99:9e:f8:d1:67:45:14:c9:77:37:74: 20:81:72:7f:ee:ea:c6:89:b0:d5:6c:41:e6:bb:06:ce:d0:ee: fa:4d:32:23:60:96:fe:ee:f9:4a:3b:00:b2:92:9a:07:94:06: 33:05:f8:43:cc:67:9f:18:97:eb:0d:1f:2d:92:91:ec:fb:7f: c2:cc:f9:eb:3a:36:99:34:7b:27:cf:95:e8:d3:de:00:5d:26: 24:14:86:da:f3:e5:5a:8a:d1:df:b7:b7:4b:ca:61:23:65:20: 6c:80:57:46:90:ce:2b:e8:86:b5:26:32:35:06:a6:fe:16:82: ad:19:52:be:c0:c9:26:67:ac:ed:7e:f7:0a:38:6a:f8:47:a8: 65:a5:f7:43:58:2a:da:9f:53:3a:46:8d:46:6f:b7:d6:d3:cd: 91:62:50:6d:68:23:28:3a:54:8c:3b:df:2a:13:ed:dc:a3:8f: 85:f3:4c:2e:1f:06:51:0a:9b:23:be:2c:ea:7e:86:5d:b0:19: 73:57:e1:ec:43:ff:4b:b1:94:f9:dd:e9:93:25:cc:90:1d:8d: 33:02:5e:2c:d2:16:c8:16:2a:4a:1d:64:72:7c:86:35:0b:35: 20:18:10:1d -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VGQTkxMTAvBgNVBAUTKDdCOTFBOEIwMTFENjE5QzQyNzFENDUyMDNBMEUzM0Q5 MTg1RUY3ODEwHhcNMjUwOTAzMDQyMjM0WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGI3YzI4OS00Y2MzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3RDaogqTwbB8S/ptvz6Sf3T9I5AKmRW9JNovOngbpyfmN/DC3LnIcB2JpQZi 6mqSSrb7FvfpYWakcKhdMWaiQnMhWMLKbWRYi5c8ge6lfEyI3fJO5KPZ/NyXPMIy h+B87e96yAq4WioaMx/cUa8CtXIRbueQtQsnKAXExPiW8+oxeZpmLInUxSuKcGRo Xz+TqI20eZ55SOT7HE5eVSXP9v6gqzHw2Bz4g2pLyNbZy3FZloOrpE4JzhBQrbln IjnFLGms2MDvJh5MILM31MRuz6p9qP/haaH1aNV5qaAADDMAuWBkojeQKoFfoN7d t8W7wZEOckS9lyjitcQcHq1lGwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFIkG09Os t/Ikuna8wSLEUhYcB7IKMB8GA1UdIwQYMBaAFHuRqLAR1hnEJx1FIDoOM9kYXveB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUZBOS9FRDY4QjVGMDMx QTUxMUVFQkVGOEJEMkFDNEY5QUUwMi9lNUdvc0JIV0djUW5IVVVnT2c0ejJSaGU5 NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2U1R29zQkhXR2NRbkhVVWdPZzR6MlJoZTk0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VGQTkvRUQ2OEI1RjAzMUE1MTFFRUJFRjhCRDJBQzRGOUFFMDIvMTQ2ODMwNUMz MUE4MTFFRTkzOUYxRDMzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAK2EJgDBADKPvUwDQYJKoZIhvcNAQELBQADggEBAHF/3N6e RLqs2upRmEzZYEghMYkkIsYyTvyZnvjRZ0UUyXc3dCCBcn/u6saJsNVsQea7Bs7Q 7vpNMiNglv7u+Uo7ALKSmgeUBjMF+EPMZ58Yl+sNHy2Skez7f8LM+es6Npk0eyfP lejT3gBdJiQUhtrz5VqK0d+3t0vKYSNlIGyAV0aQzivohrUmMjUGpv4Wgq0ZUr7A ySZnrO1+9wo4avhHqGWl90NYKtqfUzpGjUZvt9bTzZFiUG1oIyg6VIw73yoT7dyj j4XzTC4fBlEKmyO+LOp+hl2wGXNX4exD/0uxlPnd6ZMlzJAdjTMCXizSFsgWKkod ZHJ8hjULNSAYEB0= -----END CERTIFICATE-----Generated at Wed Sep 17 10:33:56 2025 by rpki-client