$ rpki-client -vvf rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/993B537CDD1911EA96723D11C4F9AE02.roa File: 993B537CDD1911EA96723D11C4F9AE02.roa (raw, json) Hash identifier: vA7HKvgBqUtKU6RnBJfYOYMqqSGwytosVz33rGyKDus= Subject key identifier: 61:5E:86:78:E6:AC:B1:A6:3A:E6:F3:36:B0:0F:6B:E5:D5:51:78:66 Certificate issuer: /CN=A9194E03/serialNumber=E39AB1D07B50DBB9ABE2CB51CD9B1E3A5A854521 Certificate serial: 34E9 Authority key identifier: E3:9A:B1:D0:7B:50:DB:B9:AB:E2:CB:51:CD:9B:1E:3A:5A:85:45:21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/993B537CDD1911EA96723D11C4F9AE02.roa Signing time: Thu 02 Oct 2025 15:41:10 +0000 ROA not before: Thu 02 Oct 2025 15:41:10 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 139468 IP address blocks: 101.0.28.0/24 maxlen: 24 101.0.29.0/24 maxlen: 24 101.0.30.0/24 maxlen: 24 101.0.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.crl rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:14:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13545 (0x34e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194E03, serialNumber=E39AB1D07B50DBB9ABE2CB51CD9B1E3A5A854521 Validity Not Before: Oct 2 15:41:10 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68de9d16-7154 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c6:24:b2:e6:06:ef:97:bc:88:7b:bb:ee:9a: 0c:94:9b:a1:8c:cd:bb:94:b4:1b:52:bc:ad:ab:4d: 52:ee:5e:0c:00:54:de:f9:77:94:50:3d:90:dc:3f: 00:3c:d6:c2:cb:23:5f:a6:6f:27:72:80:13:0b:a1: 9c:f7:1f:71:ef:b6:2d:2a:5e:9c:68:50:5e:96:31: c7:84:12:5f:f9:39:4c:c4:a3:02:c7:35:54:68:7a: 1f:77:23:ed:b8:03:83:bf:cd:62:a1:65:73:25:b8: 53:fe:40:82:3c:79:00:25:66:60:c6:ef:e6:b2:73: e3:83:f4:24:da:25:29:d8:a9:ac:33:e7:b3:e9:2f: 4b:bb:da:90:47:da:0e:96:28:e9:98:8e:b1:e3:e2: d6:f2:ce:7c:db:e5:1a:d9:e9:e8:c9:01:41:22:61: fa:6f:8a:de:a5:c9:b3:08:72:6c:e1:cf:6c:69:dd: c2:cb:13:48:32:10:fa:d6:18:66:a0:aa:0c:6b:eb: 07:e4:b0:9e:c6:80:3c:14:6d:a8:de:41:b1:55:d0: 3c:cc:f4:39:c4:69:22:12:7a:16:13:38:39:2c:13: b1:09:cd:fb:1c:63:7d:29:fe:c8:40:56:3a:28:ab: c3:be:5c:85:61:5b:58:1e:b2:bc:0c:41:4d:d5:28: 1a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:5E:86:78:E6:AC:B1:A6:3A:E6:F3:36:B0:0F:6B:E5:D5:51:78:66 X509v3 Authority Key Identifier: keyid:E3:9A:B1:D0:7B:50:DB:B9:AB:E2:CB:51:CD:9B:1E:3A:5A:85:45:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/993B537CDD1911EA96723D11C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 101.0.28.0/22 Signature Algorithm: sha256WithRSAEncryption cd:7c:12:f0:f6:b0:50:ea:3e:66:e9:48:d2:d9:4c:0a:28:52: c2:d0:99:fa:8d:05:3b:6d:b6:18:fd:1c:4f:8e:de:f3:49:79: 86:9f:f9:5f:a1:de:94:8f:bb:ab:ba:9e:d2:e9:d5:ec:94:34: e2:c0:9b:7e:36:52:fc:f3:ec:6e:b4:a5:be:00:9a:08:86:06: fc:b4:31:56:ba:77:cd:d4:cc:2a:30:04:5e:ff:5e:1d:f1:a2: 9e:a0:58:c5:bf:31:18:0a:56:f4:75:00:84:cd:57:12:bf:22: 61:d4:e4:69:ef:61:4f:37:a2:45:fd:38:fc:3f:52:14:72:48: ec:0a:66:e0:09:db:38:b7:39:d8:1b:ea:18:15:3f:9a:3d:6f: 6c:54:2a:ad:3d:0d:d4:8e:9c:58:c3:0c:e8:07:c2:d0:cf:81: 9b:50:42:8e:26:2b:f4:a8:d2:fe:e0:0b:86:22:e2:9e:d3:33: 91:30:2d:04:db:08:18:03:5e:16:cf:03:f4:dc:9e:b9:5f:9e: 10:a3:53:f8:58:9f:dd:54:b3:23:0d:e4:0e:42:80:c1:dd:6b: 6f:d8:ae:87:65:7b:d4:2c:e6:78:50:99:be:55:6c:64:12:50: bf:d7:56:3e:c0:50:32:81:40:8a:c0:5d:56:64:a5:a3:6b:bc: 3f:c8:c1:56 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRFMDMxMTAvBgNVBAUTKEUzOUFCMUQwN0I1MERCQjlBQkUyQ0I1MUNEOUIxRTNB NUE4NTQ1MjEwHhcNMjUxMDAyMTU0MTEwWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGRlOWQxNi03MTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAysYksuYG75e8iHu77poMlJuhjM27lLQbUrytq01S7l4MAFTe+XeUUD2Q3D8A PNbCyyNfpm8ncoATC6Gc9x9x77YtKl6caFBeljHHhBJf+TlMxKMCxzVUaHofdyPt uAODv81ioWVzJbhT/kCCPHkAJWZgxu/msnPjg/Qk2iUp2KmsM+ez6S9Lu9qQR9oO lijpmI6x4+LW8s582+Ua2enoyQFBImH6b4repcmzCHJs4c9sad3CyxNIMhD61hhm oKoMa+sH5LCexoA8FG2o3kGxVdA8zPQ5xGkiEnoWEzg5LBOxCc37HGN9Kf7IQFY6 KKvDvlyFYVtYHrK8DEFN1SgaKwIDAQABo4IClTCCApEwHQYDVR0OBBYEFGFehnjm rLGmOubzNrAPa+XVUXhmMB8GA1UdIwQYMBaAFOOasdB7UNu5q+LLUc2bHjpahUUh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEUwMy8zRjQ4RjIyNDFE QTYxMUUyOUEwNzVEOUQwOEIwMkNEMi80NXF4MEh0UTI3bXI0c3RSelpzZU9scUZS U0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQ1cXgwSHRRMjdtcjRzdFJ6WnNlT2xxRlJTRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTRFMDMvM0Y0OEYyMjQxREE2MTFFMjlBMDc1RDlEMDhCMDJDRDIvOTkzQjUzN0NE RDE5MTFFQTk2NzIzRDExQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJlABwwDQYJKoZIhvcNAQELBQADggEBAM18EvD2sFDqPmbp SNLZTAooUsLQmfqNBTttthj9HE+O3vNJeYaf+V+h3pSPu6u6ntLp1eyUNOLAm342 Uvzz7G60pb4AmgiGBvy0MVa6d83UzCowBF7/Xh3xop6gWMW/MRgKVvR1AITNVxK/ ImHU5GnvYU83okX9OPw/UhRySOwKZuAJ2zi3Odgb6hgVP5o9b2xUKq09DdSOnFjD DOgHwtDPgZtQQo4mK/So0v7gC4Yi4p7TM5EwLQTbCBgDXhbPA/TcnrlfnhCjU/hY n91UsyMN5A5CgMHda2/Yrodle9Qs5nhQmb5VbGQSUL/XVj7AUDKBQIrAXVZkpaNr vD/IwVY= -----END CERTIFICATE-----Generated at Wed Nov 5 18:09:46 2025 by rpki-client