$ rpki-client -vvf rpki.apnic.net/member_repository/A9189337/3E09F0E4A81611F08498AE70C4F9AE02/97B6FD12A81611F0BBD11A74C4F9AE02.roa File: 97B6FD12A81611F0BBD11A74C4F9AE02.roa (raw, json) Hash identifier: GetDT8ar6UQGvcmvjsGOW3aX6ZiD1t+5sWscwddFzJM= Subject key identifier: B2:26:BE:8B:F2:20:64:4A:45:13:39:3D:5D:91:5A:6F:EA:10:BB:EA Certificate issuer: /CN=A9189337/serialNumber=AC3CCB7A401911C8E5153F30166A54C9A7163F7B Certificate serial: 05 Authority key identifier: AC:3C:CB:7A:40:19:11:C8:E5:15:3F:30:16:6A:54:C9:A7:16:3F:7B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rDzLekAZEcjlFT8wFmpUyacWP3s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189337/3E09F0E4A81611F08498AE70C4F9AE02/97B6FD12A81611F0BBD11A74C4F9AE02.roa Signing time: Tue 14 Oct 2025 12:45:48 +0000 ROA not before: Tue 14 Oct 2025 12:45:48 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 133323 IP address blocks: 138.252.0.0/23 maxlen: 23 138.252.0.0/24 maxlen: 24 138.252.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189337/3E09F0E4A81611F08498AE70C4F9AE02/rDzLekAZEcjlFT8wFmpUyacWP3s.crl rsync://rpki.apnic.net/member_repository/A9189337/3E09F0E4A81611F08498AE70C4F9AE02/rDzLekAZEcjlFT8wFmpUyacWP3s.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rDzLekAZEcjlFT8wFmpUyacWP3s.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 11:57:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189337, serialNumber=AC3CCB7A401911C8E5153F30166A54C9A7163F7B Validity Not Before: Oct 14 12:45:48 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68ee45fb-a5ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:28:44:21:19:c5:01:3a:e8:bd:59:84:c5:b9: dd:7e:09:7e:d8:cd:bc:ec:c7:18:b4:c4:62:c6:01: 02:7e:e6:ba:40:34:46:83:13:14:74:12:d3:da:89: ad:2c:b3:05:c1:0c:9c:16:5a:fe:c6:37:43:54:d0: ca:cf:55:01:76:fd:8d:65:18:5f:ae:12:83:d7:db: b5:39:e1:87:20:1e:f7:51:ad:92:2f:8c:aa:eb:df: fb:76:95:e5:8d:f9:1f:5e:f0:13:e5:2d:d2:da:da: 16:ee:b6:60:81:47:27:99:d0:81:8d:93:aa:46:3c: d1:0c:f2:18:bb:de:66:c4:e2:60:c0:f7:2b:c0:44: 23:de:72:a2:1e:4f:c8:cd:58:bb:20:f7:d9:a9:fc: 78:86:2e:66:ca:df:a0:63:74:a0:75:cf:02:1f:7e: 90:c7:51:0d:88:6b:f9:d4:03:0b:9f:cc:94:43:97: 6a:fa:0c:32:90:13:11:17:da:d4:37:e7:be:ae:9a: c3:e4:59:b5:d0:7e:34:08:0b:29:06:16:82:d5:8a: 6d:a1:da:16:c7:aa:a3:5c:5a:f9:d9:b2:49:82:b7: 2b:15:c8:6e:55:65:3b:83:6a:d5:bf:c0:a9:83:b6: 8b:f0:33:2b:02:4c:15:3b:d8:88:76:41:fc:2f:cc: 3d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:26:BE:8B:F2:20:64:4A:45:13:39:3D:5D:91:5A:6F:EA:10:BB:EA X509v3 Authority Key Identifier: keyid:AC:3C:CB:7A:40:19:11:C8:E5:15:3F:30:16:6A:54:C9:A7:16:3F:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189337/3E09F0E4A81611F08498AE70C4F9AE02/rDzLekAZEcjlFT8wFmpUyacWP3s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rDzLekAZEcjlFT8wFmpUyacWP3s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189337/3E09F0E4A81611F08498AE70C4F9AE02/97B6FD12A81611F0BBD11A74C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 138.252.0.0/23 Signature Algorithm: sha256WithRSAEncryption 97:ff:17:e6:4a:4b:81:af:0e:46:e6:79:03:e6:59:c8:f9:ed: 76:e2:f6:8a:f3:36:ae:ef:8d:fb:5f:79:ea:45:6b:8e:40:44: 13:32:21:fc:f2:93:e5:55:ed:38:08:5c:0d:b2:bb:b5:c7:f8: f5:d3:e9:f1:41:4d:0f:d5:7d:d3:87:7b:d4:8c:32:46:ae:f5: 10:3e:a2:2a:a8:70:9b:0e:a4:d3:dd:7d:6a:e4:5a:4d:94:b4: 8a:84:53:b1:b4:0f:5f:5f:d5:f6:8f:c2:e7:6b:20:24:62:0c: 9a:c3:e1:4f:c3:51:a3:77:4c:03:2c:d4:e8:3c:00:2c:75:57: e0:f6:6c:df:7f:fa:a7:8a:29:97:a4:fc:ce:36:9c:2c:20:18: 78:0c:fc:a1:46:57:27:c4:b5:fb:80:29:55:8a:fa:da:5f:2a: d9:39:fa:29:96:9a:94:47:c7:4a:9d:2e:2e:e7:1f:48:f3:89: 1f:ae:05:6a:1c:dd:6d:c9:3b:13:bb:35:de:4c:01:68:d8:6e: 23:49:71:5c:fa:0b:b7:cf:7b:71:f4:8c:ee:4a:a1:f9:ee:b4: 3a:db:b8:e2:a3:5d:db:c4:01:71:03:59:b7:dd:58:d2:ea:1c: 71:3f:8e:a1:db:b5:c7:d8:32:d1:ca:bc:56:dc:4e:15:20:10: 7b:3a:6f:fb -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 OTMzNzExMC8GA1UEBRMoQUMzQ0NCN0E0MDE5MTFDOEU1MTUzRjMwMTY2QTU0QzlB NzE2M0Y3QjAeFw0yNTEwMTQxMjQ1NDhaFw0yNjEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY4ZWU0NWZiLWE1YWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCKEQhGcUBOui9WYTFud1+CX7Yzbzsxxi0xGLGAQJ+5rpANEaDExR0EtPaia0s swXBDJwWWv7GN0NU0MrPVQF2/Y1lGF+uEoPX27U54YcgHvdRrZIvjKrr3/t2leWN +R9e8BPlLdLa2hbutmCBRyeZ0IGNk6pGPNEM8hi73mbE4mDA9yvARCPecqIeT8jN WLsg99mp/HiGLmbK36BjdKB1zwIffpDHUQ2Ia/nUAwufzJRDl2r6DDKQExEX2tQ3 576umsPkWbXQfjQICykGFoLVim2h2hbHqqNcWvnZskmCtysVyG5VZTuDatW/wKmD tovwMysCTBU72Ih2QfwvzD3lAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUsia+i/Ig ZEpFEzk9XZFab+oQu+owHwYDVR0jBBgwFoAUrDzLekAZEcjlFT8wFmpUyacWP3sw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg5MzM3LzNFMDlGMEU0QTgx NjExRjA4NDk4QUU3MEM0RjlBRTAyL3JEekxla0FaRWNqbEZUOHdGbXBVeWFjV1Az cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvckR6TGVrQVpFY2psRlQ4d0ZtcFV5YWNXUDNzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTMzNy8zRTA5RjBFNEE4MTYxMUYwODQ5OEFFNzBDNEY5QUUwMi85N0I2RkQxMkE4 MTYxMUYwQkJEMTFBNzRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAYr8ADANBgkqhkiG9w0BAQsFAAOCAQEAl/8X5kpLga8ORuZ5 A+ZZyPntduL2ivM2ru+N+1956kVrjkBEEzIh/PKT5VXtOAhcDbK7tcf49dPp8UFN D9V904d71IwyRq71ED6iKqhwmw6k0919auRaTZS0ioRTsbQPX1/V9o/C52sgJGIM msPhT8NRo3dMAyzU6DwALHVX4PZs33/6p4opl6T8zjacLCAYeAz8oUZXJ8S1+4Ap VYr62l8q2Tn6KZaalEfHSp0uLucfSPOJH64Fahzdbck7E7s13kwBaNhuI0lxXPoL t897cfSM7kqh+e60Otu44qNd28QBcQNZt91Y0uoccT+Oodu1x9gy0cq8VtxOFSAQ ezpv+w== -----END CERTIFICATE-----Generated at Sun Oct 19 07:05:57 2025 by rpki-client