$ rpki-client -vvf rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/BC36A3E8A67E11F0A35CBF40C4F9AE02.roa File: BC36A3E8A67E11F0A35CBF40C4F9AE02.roa (raw, json) Hash identifier: Zy1Cr+ByTtuPlrpGjoVSDT6QhmmfCIHpbLzangTlT68= Subject key identifier: A8:CE:4E:6D:AC:03:73:5E:7D:DD:26:F2:5B:EC:43:A1:7E:05:CC:03 Certificate issuer: /CN=A918F88D/serialNumber=DB1CB84854069E43CA1B725D42EA6BA9B539815B Certificate serial: 0CDD Authority key identifier: DB:1C:B8:48:54:06:9E:43:CA:1B:72:5D:42:EA:6B:A9:B5:39:81:5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xy4SFQGnkPKG3JdQuprqbU5gVs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/BC36A3E8A67E11F0A35CBF40C4F9AE02.roa Signing time: Sat 11 Oct 2025 08:49:17 +0000 ROA not before: Sat 11 Oct 2025 08:49:17 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 153523 IP address blocks: 116.212.186.0/24 maxlen: 24 116.212.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.crl rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xy4SFQGnkPKG3JdQuprqbU5gVs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:13:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3293 (0xcdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F88D, serialNumber=DB1CB84854069E43CA1B725D42EA6BA9B539815B Validity Not Before: Oct 11 08:49:17 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=68ea1a0c-4313 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:38:79:dd:f9:de:7f:8d:50:e5:c9:e7:c7:b1: e3:30:e1:56:40:df:70:a1:7d:ec:81:d7:55:1b:3e: f6:69:6d:99:3b:13:d3:45:58:68:de:65:08:d8:52: 42:ec:95:4b:89:2c:df:1c:fe:e6:56:2d:70:e8:03: 0c:14:c3:be:96:f9:3b:fc:b2:8f:a8:aa:e3:a8:97: d3:57:27:89:b2:e5:8c:22:78:43:96:a9:d8:2a:27: 4d:87:d4:58:16:ec:5d:28:d8:07:b0:2a:75:5d:44: 21:9d:22:0a:0b:c6:19:df:71:0b:fb:ae:14:d8:c3: 1b:29:17:cc:82:be:36:08:ad:09:43:38:00:6d:9d: 9f:f1:bc:5d:46:db:3e:ff:f1:6c:77:f2:73:39:c7: 65:4d:06:fe:d3:1b:60:c8:fe:02:02:f9:2d:44:6b: c8:bb:30:41:52:c2:11:6b:50:96:3b:3c:a0:db:c9: 6a:f5:23:22:46:29:88:9e:42:a4:d7:4e:cf:79:5b: 77:53:8a:a1:b0:be:31:ca:ca:67:38:08:ff:de:97: dc:6e:7f:d7:f4:7c:ef:23:3a:84:24:92:e7:ea:c2: cf:ac:1e:37:de:0d:30:df:49:29:f0:0c:b6:3e:5a: 56:f2:c1:b8:04:38:0a:3f:9f:b6:a4:10:4f:76:4a: af:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:CE:4E:6D:AC:03:73:5E:7D:DD:26:F2:5B:EC:43:A1:7E:05:CC:03 X509v3 Authority Key Identifier: keyid:DB:1C:B8:48:54:06:9E:43:CA:1B:72:5D:42:EA:6B:A9:B5:39:81:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xy4SFQGnkPKG3JdQuprqbU5gVs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/BC36A3E8A67E11F0A35CBF40C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 116.212.186.0/23 Signature Algorithm: sha256WithRSAEncryption 8d:0b:2b:aa:4d:f2:1d:37:7e:13:7a:e8:9b:7c:92:7f:26:d7: e6:af:93:2c:bb:2e:c7:5e:5a:63:41:5f:57:9d:26:5e:ed:24: 4f:b9:a1:66:89:38:5c:4d:95:8b:cd:9b:40:f5:6e:5b:7b:f0: a6:df:aa:93:b2:22:98:b3:ce:14:38:1c:fe:7a:04:a3:e2:41: 51:d6:5f:56:83:b2:49:e4:b1:ff:94:b8:af:b9:6b:9c:d7:44: 84:78:62:63:1c:2f:10:34:ff:1a:d4:1b:c9:9c:35:b0:0a:21: ed:6a:e5:8c:c9:80:b1:28:ad:d2:54:1e:b2:9a:cc:05:06:81: 22:94:49:00:19:98:3b:af:e7:60:e1:26:44:54:3d:71:57:9e: ec:52:5e:24:54:03:6d:ab:ac:a3:64:a0:44:b4:2b:82:49:fc: 90:78:3c:32:3e:1a:e2:f6:f5:21:ca:69:45:fc:28:f9:83:f6: 10:ec:25:99:99:85:81:33:f7:c4:3f:06:ec:3c:10:d0:65:aa: 9e:da:56:69:32:c8:08:43:33:2a:09:6c:24:1b:2d:d7:7c:b4: 3a:55:89:30:66:b0:f7:9b:47:15:68:6b:8f:a4:48:f4:88:f2: 43:38:fa:c7:a4:db:51:87:a9:c9:6c:fd:ec:42:b1:0f:c5:23: 46:1e:1c:d9 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY4OEQxMTAvBgNVBAUTKERCMUNCODQ4NTQwNjlFNDNDQTFCNzI1RDQyRUE2QkE5 QjUzOTgxNUIwHhcNMjUxMDExMDg0OTE3WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OGVhMWEwYy00MzEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9Dh53fnef41Q5cnnx7HjMOFWQN9woX3sgddVGz72aW2ZOxPTRVho3mUI2FJC 7JVLiSzfHP7mVi1w6AMMFMO+lvk7/LKPqKrjqJfTVyeJsuWMInhDlqnYKidNh9RY FuxdKNgHsCp1XUQhnSIKC8YZ33EL+64U2MMbKRfMgr42CK0JQzgAbZ2f8bxdRts+ //Fsd/JzOcdlTQb+0xtgyP4CAvktRGvIuzBBUsIRa1CWOzyg28lq9SMiRimInkKk 107PeVt3U4qhsL4xyspnOAj/3pfcbn/X9HzvIzqEJJLn6sLPrB433g0w30kp8Ay2 PlpW8sG4BDgKP5+2pBBPdkqvdwIDAQABo4IClTCCApEwHQYDVR0OBBYEFKjOTm2s A3Nefd0m8lvsQ6F+BcwDMB8GA1UdIwQYMBaAFNscuEhUBp5DyhtyXULqa6m1OYFb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Rjg4RC8yQTE0QkUwODAw NUExMUVBOEZEQ0ExMzBDNEY5QUUwMi8yeHk0U0ZRR25rUEtHM0pkUXVwcnFiVTVn VnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ4eTRTRlFHbmtQS0czSmRRdXBycWJVNWdWcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEY4OEQvMkExNEJFMDgwMDVBMTFFQThGRENBMTMwQzRGOUFFMDIvQkMzNkEzRThB NjdFMTFGMEEzNUNCRjQwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAF01LowDQYJKoZIhvcNAQELBQADggEBAI0LK6pN8h03fhN6 6Jt8kn8m1+avkyy7LsdeWmNBX1edJl7tJE+5oWaJOFxNlYvNm0D1blt78KbfqpOy IpizzhQ4HP56BKPiQVHWX1aDsknksf+UuK+5a5zXRIR4YmMcLxA0/xrUG8mcNbAK Ie1q5YzJgLEordJUHrKazAUGgSKUSQAZmDuv52DhJkRUPXFXnuxSXiRUA22rrKNk oES0K4JJ/JB4PDI+GuL29SHKaUX8KPmD9hDsJZmZhYEz98Q/Buw8ENBlqp7aVmky yAhDMyoJbCQbLdd8tDpViTBmsPebRxVoa4+kSPSI8kM4+sek21GHqcls/exCsQ/F I0YeHNk= -----END CERTIFICATE-----Generated at Mon Nov 3 14:50:30 2025 by rpki-client