$ rpki-client -vvf rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/897E89B4D56B11EFBE0EB053C4F9AE02.roa File: 897E89B4D56B11EFBE0EB053C4F9AE02.roa (raw, json) Hash identifier: 7yly3hdDUnooff1AD5UaEbPn8g4l5l4qpcVVzY6AZJk= Subject key identifier: CE:F3:10:9D:F9:6B:EE:63:F7:E7:AA:BB:81:81:89:84:3A:85:A7:43 Certificate issuer: /CN=A918D1A4/serialNumber=B2DBAD05B69F4797EEF71F03D65ABEADD2892C80 Certificate serial: 0367 Authority key identifier: B2:DB:AD:05:B6:9F:47:97:EE:F7:1F:03:D6:5A:BE:AD:D2:89:2C:80 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stutBbafR5fu9x8D1lq-rdKJLIA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/897E89B4D56B11EFBE0EB053C4F9AE02.roa Signing time: Wed 03 Sep 2025 01:46:45 +0000 ROA not before: Wed 03 Sep 2025 01:46:45 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 153494 IP address blocks: 43.239.164.0/22 maxlen: 24 103.35.84.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.crl rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stutBbafR5fu9x8D1lq-rdKJLIA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 02:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 871 (0x367) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D1A4, serialNumber=B2DBAD05B69F4797EEF71F03D65ABEADD2892C80 Validity Not Before: Sep 3 01:46:45 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68b79e05-39a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:60:bb:cc:e3:22:e2:e5:35:2a:cb:c3:06:30: b3:49:8d:97:98:f4:6b:d6:a8:10:6b:4f:2f:8e:35: df:d8:1c:1e:1e:ae:93:4e:a7:da:54:5b:e7:be:cf: 72:c9:52:c0:d9:28:27:c1:d5:95:b0:da:c7:dd:8a: fb:1f:95:0f:9c:81:de:75:5b:ea:c1:ac:91:ee:29: 88:3b:c8:89:48:97:5b:d6:55:78:0e:c1:a1:42:d6: 3e:40:eb:5f:c4:96:17:a2:a1:3e:68:19:86:02:6b: 23:75:59:f7:4e:42:69:ac:64:0d:21:59:c1:ef:e0: e3:a7:18:42:6a:75:99:c7:03:68:81:bc:64:f1:21: 9f:ca:31:81:dc:c6:b1:10:c5:e7:74:a0:53:e2:f3: 7e:24:38:57:9a:3f:2f:bb:5f:a3:74:fe:f7:98:8c: 2b:f3:6e:cd:fb:aa:e5:eb:d9:aa:0e:3d:06:df:ed: 21:69:54:9a:24:7a:14:be:3d:58:80:d2:0f:1d:ea: e8:31:5f:17:15:fd:46:8c:c3:20:2b:83:86:44:6c: 01:2f:58:71:d4:f5:3f:d8:c9:1b:ae:3b:21:8e:7c: 47:64:df:35:cf:5d:4e:b4:a8:24:3a:ef:e6:d3:47: ac:16:a7:cc:9c:c4:54:cc:fb:5d:bb:2a:ea:0c:f7: d4:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:F3:10:9D:F9:6B:EE:63:F7:E7:AA:BB:81:81:89:84:3A:85:A7:43 X509v3 Authority Key Identifier: keyid:B2:DB:AD:05:B6:9F:47:97:EE:F7:1F:03:D6:5A:BE:AD:D2:89:2C:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stutBbafR5fu9x8D1lq-rdKJLIA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/897E89B4D56B11EFBE0EB053C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.239.164.0/22 103.35.84.0/22 Signature Algorithm: sha256WithRSAEncryption 8a:96:d1:05:ba:c8:68:b2:48:2e:1a:b2:a2:cb:a7:dc:65:f0: cf:8f:05:6e:37:5c:ce:62:f0:35:79:f6:d8:95:b3:c0:8f:d7: cc:d7:84:ca:ac:35:24:c4:4d:ee:76:b6:2c:4a:d3:91:ab:16: 50:4a:82:04:3a:de:a6:26:ed:1d:90:a4:4f:79:e1:ab:ec:40: 1c:60:2b:33:12:d3:e6:ff:08:c8:f2:94:30:58:aa:ae:83:07: 67:88:02:53:6c:49:b3:20:1f:a6:49:b1:51:4c:cf:54:fb:4a: ab:78:3a:8b:8e:65:cf:75:1d:17:fd:b4:a8:d5:01:c5:56:f9: 17:fa:51:5a:64:dc:bf:5f:f3:90:af:46:9d:39:90:55:51:17: f5:c5:d5:cb:e8:83:b7:bb:21:bb:36:9d:6a:35:2e:73:c6:88: a9:cc:13:70:ae:91:cb:c5:17:97:8d:6e:33:93:db:8f:ef:ba: 71:62:9d:55:eb:2f:cf:ad:5f:1a:5c:f3:66:75:6e:0f:43:e4: 05:84:0f:2c:c8:ac:78:84:5b:24:dd:c5:73:a1:e4:77:bc:05: 53:c5:a2:51:6c:55:07:ca:50:8a:5d:ca:87:0a:dd:48:97:49: 2f:f2:21:52:83:44:9d:6a:63:43:bd:03:2d:6d:04:a5:83:1d: d5:f2:26:8f -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICA2cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQxQTQxMTAvBgNVBAUTKEIyREJBRDA1QjY5RjQ3OTdFRUY3MUYwM0Q2NUFCRUFE RDI4OTJDODAwHhcNMjUwOTAzMDE0NjQ1WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGI3OWUwNS0zOWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApGC7zOMi4uU1KsvDBjCzSY2XmPRr1qgQa08vjjXf2BweHq6TTqfaVFvnvs9y yVLA2SgnwdWVsNrH3Yr7H5UPnIHedVvqwayR7imIO8iJSJdb1lV4DsGhQtY+QOtf xJYXoqE+aBmGAmsjdVn3TkJprGQNIVnB7+DjpxhCanWZxwNogbxk8SGfyjGB3Max EMXndKBT4vN+JDhXmj8vu1+jdP73mIwr827N+6rl69mqDj0G3+0haVSaJHoUvj1Y gNIPHeroMV8XFf1GjMMgK4OGRGwBL1hx1PU/2MkbrjshjnxHZN81z11OtKgkOu/m 00esFqfMnMRUzPtduyrqDPfUIQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFM7zEJ35 a+5j9+equ4GBiYQ6hadDMB8GA1UdIwQYMBaAFLLbrQW2n0eX7vcfA9Zavq3SiSyA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDFBNC8xRUI5RTNBNkM2 QzAxMUVDOTZDMEREMjNDNEY5QUUwMi9zdHV0QmJhZlI1ZnU5eDhEMWxxLXJkS0pM SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3N0dXRCYmFmUjVmdTl4OEQxbHEtcmRLSkxJQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEQxQTQvMUVCOUUzQTZDNkMwMTFFQzk2QzBERDIzQzRGOUFFMDIvODk3RTg5QjRE NTZCMTFFRkJFMEVCMDUzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAIr76QDBAJnI1QwDQYJKoZIhvcNAQELBQADggEBAIqW0QW6 yGiySC4asqLLp9xl8M+PBW43XM5i8DV59tiVs8CP18zXhMqsNSTETe52tixK05Gr FlBKggQ63qYm7R2QpE954avsQBxgKzMS0+b/CMjylDBYqq6DB2eIAlNsSbMgH6ZJ sVFMz1T7Sqt4OouOZc91HRf9tKjVAcVW+Rf6UVpk3L9f85CvRp05kFVRF/XF1cvo g7e7Ibs2nWo1LnPGiKnME3CukcvFF5eNbjOT24/vunFinVXrL8+tXxpc82Z1bg9D 5AWEDyzIrHiEWyTdxXOh5He8BVPFolFsVQfKUIpdyocK3UiXSS/yIVKDRJ1qY0O9 Ay1tBKWDHdXyJo8= -----END CERTIFICATE-----Generated at Mon Oct 27 15:08:59 2025 by rpki-client