$ rpki-client -vvf rpki.apnic.net/member_repository/A9193388/E0E7360A89F411EFA913B952C4F9AE02/02B9688489EF11F0850AA959C4F9AE02.roa File: 02B9688489EF11F0850AA959C4F9AE02.roa (raw, json) Hash identifier: PvYR9h4WJHkSiwS+OrBISxOSGbPqpgxFMJU0vcVA8b8= Subject key identifier: FB:25:E4:88:CA:DB:B9:20:16:40:92:79:F7:51:F7:35:89:72:DA:24 Certificate issuer: /CN=A9193388/serialNumber=3C3775D9F87F0EAA296866774EA62F6274D066CB Certificate serial: B1 Authority key identifier: 3C:37:75:D9:F8:7F:0E:AA:29:68:66:77:4E:A6:2F:62:74:D0:66:CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PDd12fh_DqopaGZ3TqYvYnTQZss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193388/E0E7360A89F411EFA913B952C4F9AE02/02B9688489EF11F0850AA959C4F9AE02.roa Signing time: Fri 05 Sep 2025 00:26:49 +0000 ROA not before: Fri 05 Sep 2025 00:26:48 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 4658 IP address blocks: 202.89.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193388/E0E7360A89F411EFA913B952C4F9AE02/PDd12fh_DqopaGZ3TqYvYnTQZss.crl rsync://rpki.apnic.net/member_repository/A9193388/E0E7360A89F411EFA913B952C4F9AE02/PDd12fh_DqopaGZ3TqYvYnTQZss.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PDd12fh_DqopaGZ3TqYvYnTQZss.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 06:43:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 177 (0xb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193388, serialNumber=3C3775D9F87F0EAA296866774EA62F6274D066CB Validity Not Before: Sep 5 00:26:48 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68ba2e48-b1ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:09:5f:66:ad:b2:8a:9b:d9:f0:19:d0:52:a1: 3c:b0:80:c9:27:d0:18:f1:88:c4:f4:c8:f1:15:95: a3:0f:de:6f:96:e9:ad:c9:6a:ad:e7:a0:2e:3b:b7: 0d:8a:91:d5:5f:1e:85:28:e6:6d:b2:5b:6b:8f:4f: c1:d7:f9:b3:f2:5d:ac:dd:42:78:db:e7:02:c6:3a: 33:5f:b0:5d:dd:76:37:a1:3f:f8:e1:b2:99:e3:c7: 12:31:0f:bc:a1:2e:56:cc:47:6f:12:a3:74:df:c0: 30:39:2b:34:01:8c:94:33:0f:b8:22:2e:8d:0c:31: 32:f0:82:0a:72:83:d1:3c:64:47:46:6b:66:5e:f5: ac:93:78:82:35:15:40:e2:27:d0:70:49:77:cd:98: c5:23:01:ed:44:39:6f:b1:6e:79:14:b9:12:33:3e: 24:dd:bd:69:ce:bd:d2:8f:42:41:11:be:5e:53:bb: 8c:d6:b3:4c:37:78:9f:8d:be:66:4f:4d:91:60:bd: 2f:a1:21:87:75:ee:a6:4d:d6:39:95:78:56:56:4a: 12:6d:8a:8b:93:bc:11:54:b9:8e:ed:17:ce:25:bd: b6:81:10:25:e8:a6:29:8d:e1:53:50:1d:fa:5d:0e: 96:3e:4e:a8:59:49:79:a8:e1:cb:ca:27:1e:4a:80: 6e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:25:E4:88:CA:DB:B9:20:16:40:92:79:F7:51:F7:35:89:72:DA:24 X509v3 Authority Key Identifier: keyid:3C:37:75:D9:F8:7F:0E:AA:29:68:66:77:4E:A6:2F:62:74:D0:66:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193388/E0E7360A89F411EFA913B952C4F9AE02/PDd12fh_DqopaGZ3TqYvYnTQZss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PDd12fh_DqopaGZ3TqYvYnTQZss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193388/E0E7360A89F411EFA913B952C4F9AE02/02B9688489EF11F0850AA959C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.89.253.0/24 Signature Algorithm: sha256WithRSAEncryption bd:be:9a:37:48:29:df:d8:8f:a9:c4:cb:4b:c6:8f:ed:5c:d0: d3:b9:56:78:81:9b:06:12:d7:46:0c:e1:7a:1a:50:c1:f7:01: de:01:75:0c:69:0f:cc:d4:56:ff:38:6c:7f:f2:ce:50:32:b3: 27:8f:cc:37:39:f1:32:fc:e3:18:a6:6b:b4:f7:c5:a2:9e:29: 7f:89:e4:d5:96:44:5a:f6:f7:f6:01:93:4d:9f:a6:b6:59:a6: 10:b0:8d:64:3a:a3:d7:14:cf:cc:eb:86:ea:2f:24:ba:c5:41: 27:15:39:e2:a0:a7:c0:36:8c:b6:58:da:ea:b6:85:a2:8a:26: f7:c6:ad:1c:65:a3:bf:ed:db:74:bb:4e:d5:c6:1b:90:1a:1b: 80:e5:97:e3:92:97:f1:52:5b:8c:8a:aa:3a:80:04:6a:31:9e: d8:a9:c6:03:b6:e4:60:1a:98:a0:18:3a:03:53:08:ec:fe:62: b2:67:a9:68:ab:93:dc:ba:fa:7a:e9:e2:a3:85:71:dc:d5:c0: ef:0d:3a:b4:f2:3e:0b:07:1e:a9:75:60:ef:b6:63:2f:f2:5c: 99:9f:ef:58:b9:44:c1:34:7d:77:b8:d5:de:9e:4d:14:f3:97: 22:6d:27:bc:9e:62:32:ee:a2:00:7b:d5:b6:75:18:cf:18:68: 92:81:52:8f -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICALEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMzODgxMTAvBgNVBAUTKDNDMzc3NUQ5Rjg3RjBFQUEyOTY4NjY3NzRFQTYyRjYy NzREMDY2Q0IwHhcNMjUwOTA1MDAyNjQ4WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGJhMmU0OC1iMWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5glfZq2yipvZ8BnQUqE8sIDJJ9AY8YjE9MjxFZWjD95vlumtyWqt56AuO7cN ipHVXx6FKOZtsltrj0/B1/mz8l2s3UJ42+cCxjozX7Bd3XY3oT/44bKZ48cSMQ+8 oS5WzEdvEqN038AwOSs0AYyUMw+4Ii6NDDEy8IIKcoPRPGRHRmtmXvWsk3iCNRVA 4ifQcEl3zZjFIwHtRDlvsW55FLkSMz4k3b1pzr3Sj0JBEb5eU7uM1rNMN3ifjb5m T02RYL0voSGHde6mTdY5lXhWVkoSbYqLk7wRVLmO7RfOJb22gRAl6KYpjeFTUB36 XQ6WPk6oWUl5qOHLyiceSoBu1QIDAQABo4IClTCCApEwHQYDVR0OBBYEFPsl5IjK 27kgFkCSefdR9zWJctokMB8GA1UdIwQYMBaAFDw3ddn4fw6qKWhmd06mL2J00GbL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzM4OC9FMEU3MzYwQTg5 RjQxMUVGQTkxM0I5NTJDNEY5QUUwMi9QRGQxMmZoX0Rxb3BhR1ozVHFZdlluVFFa c3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BEZDEyZmhfRHFvcGFHWjNUcVl2WW5UUVpzcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTMzODgvRTBFNzM2MEE4OUY0MTFFRkE5MTNCOTUyQzRGOUFFMDIvMDJCOTY4ODQ4 OUVGMTFGMDg1MEFBOTU5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADKWf0wDQYJKoZIhvcNAQELBQADggEBAL2+mjdIKd/Yj6nE y0vGj+1c0NO5VniBmwYS10YM4XoaUMH3Ad4BdQxpD8zUVv84bH/yzlAysyePzDc5 8TL84xima7T3xaKeKX+J5NWWRFr29/YBk02fprZZphCwjWQ6o9cUz8zrhuovJLrF QScVOeKgp8A2jLZY2uq2haKKJvfGrRxlo7/t23S7TtXGG5AaG4Dll+OSl/FSW4yK qjqABGoxntipxgO25GAamKAYOgNTCOz+YrJnqWirk9y6+nrp4qOFcdzVwO8NOrTy PgsHHql1YO+2Yy/yXJmf71i5RME0fXe41d6eTRTzlyJtJ7yeYjLuogB71bZ1GM8Y aJKBUo8= -----END CERTIFICATE-----Generated at Sat Sep 20 01:16:51 2025 by rpki-client