$ rpki-client -vvf rpki.apnic.net/member_repository/A9197CBC/952BAE2E5DF011EFAC70ED0AC4F9AE02/13435546ABF211F0BA77FA0DC4F9AE02.roa File: 13435546ABF211F0BA77FA0DC4F9AE02.roa (raw, json) Hash identifier: q/F51LSqhdUzQ5wuFfu2jC3x+BTiobOoytHd+JzEAJQ= Subject key identifier: 28:ED:8B:C4:27:00:3B:1F:0B:B1:D3:58:95:AE:C2:28:2C:90:51:77 Certificate issuer: /CN=A9197CBC/serialNumber=D398474714257BBEF3A5A975D90CD0DC65BDDBEF Certificate serial: E2 Authority key identifier: D3:98:47:47:14:25:7B:BE:F3:A5:A9:75:D9:0C:D0:DC:65:BD:DB:EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05hHRxQle77zpal12QzQ3GW92-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197CBC/952BAE2E5DF011EFAC70ED0AC4F9AE02/13435546ABF211F0BA77FA0DC4F9AE02.roa Signing time: Sat 18 Oct 2025 07:14:24 +0000 ROA not before: Sat 18 Oct 2025 07:14:24 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 26658 IP address blocks: 43.246.116.0/22 maxlen: 24 103.35.184.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197CBC/952BAE2E5DF011EFAC70ED0AC4F9AE02/05hHRxQle77zpal12QzQ3GW92-8.crl rsync://rpki.apnic.net/member_repository/A9197CBC/952BAE2E5DF011EFAC70ED0AC4F9AE02/05hHRxQle77zpal12QzQ3GW92-8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05hHRxQle77zpal12QzQ3GW92-8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 07:39:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 226 (0xe2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197CBC, serialNumber=D398474714257BBEF3A5A975D90CD0DC65BDDBEF Validity Not Before: Oct 18 07:14:24 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68f33e50-ce54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:49:e7:18:1f:ba:92:1c:51:fd:ab:34:86:9b: 0b:ce:57:b6:a4:99:32:1d:38:d4:f7:c5:e3:4e:3c: e5:d6:18:c2:bc:1a:64:f2:ab:ce:78:5e:07:08:4d: d1:08:fa:0a:b5:a1:ea:6b:11:f9:4e:01:0f:75:bb: 3b:51:0e:05:4a:69:86:bc:6f:6a:26:e5:ab:1f:7b: b4:de:e8:f0:e1:d7:d3:b6:0a:52:4c:20:5b:f8:2d: d7:25:1a:9e:fa:9f:e7:90:eb:ff:43:70:ed:1b:52: 4e:88:ea:25:ef:a9:48:c7:8c:3c:e8:72:88:87:1b: 55:98:b1:da:23:d8:36:c6:ea:c5:59:97:ee:82:6c: 59:28:eb:ca:5c:6c:21:1f:d0:1d:30:fd:bc:d6:75: d3:b3:48:87:56:b2:34:b4:7b:53:73:15:00:7b:7c: f3:27:60:e1:10:6a:9c:01:f8:4f:42:b5:1f:ca:02: ed:18:90:46:5e:6f:a8:57:12:b6:03:39:d3:3c:c7: ef:69:51:83:a1:54:a4:5b:df:b9:09:8f:cb:10:50: cf:c6:82:ea:68:d1:46:e3:c6:71:0b:a7:d7:e0:d4: 2c:90:31:39:98:be:e7:bc:0c:80:dc:e2:90:3c:58: 84:4c:b6:01:58:a3:79:10:96:d7:6c:f9:aa:09:a1: 52:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:ED:8B:C4:27:00:3B:1F:0B:B1:D3:58:95:AE:C2:28:2C:90:51:77 X509v3 Authority Key Identifier: keyid:D3:98:47:47:14:25:7B:BE:F3:A5:A9:75:D9:0C:D0:DC:65:BD:DB:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197CBC/952BAE2E5DF011EFAC70ED0AC4F9AE02/05hHRxQle77zpal12QzQ3GW92-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05hHRxQle77zpal12QzQ3GW92-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197CBC/952BAE2E5DF011EFAC70ED0AC4F9AE02/13435546ABF211F0BA77FA0DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.246.116.0/22 103.35.184.0/22 Signature Algorithm: sha256WithRSAEncryption 0a:a0:bb:5b:2e:c8:83:46:10:f0:fe:56:56:62:32:fd:60:88: 8b:a0:8d:3a:19:c6:10:31:c5:04:e8:92:a3:97:29:82:98:85: 35:95:4d:0c:4a:0e:f7:53:0a:0d:e7:1d:b2:e6:56:73:0e:0f: 66:a3:92:a9:41:8a:1b:4e:39:11:01:27:53:8d:0e:f8:45:20: 85:41:64:39:5b:bb:3d:ff:14:18:1e:e5:82:0c:59:a1:c5:18: e7:d6:40:5c:35:85:11:83:03:d4:22:ce:36:68:6e:eb:c6:54: bd:a4:63:cc:95:b2:fd:45:16:b6:a9:40:8c:84:df:bc:31:1b: 81:53:a1:1e:b2:71:07:01:45:29:00:94:15:60:c1:c8:e0:7e: 31:15:44:a4:37:0b:68:83:6f:8d:47:f0:2e:91:e0:50:0f:50: fa:a8:fc:7b:14:22:9e:02:9a:ee:1c:68:b0:a1:1a:52:3a:7d: 03:c6:22:a0:24:60:f8:40:85:a3:80:f1:a3:5d:35:f5:97:fb: 88:e3:7d:47:ee:00:21:8c:dc:97:ae:4f:80:e9:9e:49:46:56: a9:b7:33:65:f7:be:c7:d3:c2:a3:3b:c7:54:d9:1b:bd:f3:0a: c4:52:20:22:90:3f:3b:7f:48:0e:d2:34:d9:35:8a:ed:8b:f8: 2a:45:d2:9f -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTdDQkMxMTAvBgNVBAUTKEQzOTg0NzQ3MTQyNTdCQkVGM0E1QTk3NUQ5MENEMERD NjVCRERCRUYwHhcNMjUxMDE4MDcxNDI0WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGYzM2U1MC1jZTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzknnGB+6khxR/as0hpsLzle2pJkyHTjU98XjTjzl1hjCvBpk8qvOeF4HCE3R CPoKtaHqaxH5TgEPdbs7UQ4FSmmGvG9qJuWrH3u03ujw4dfTtgpSTCBb+C3XJRqe +p/nkOv/Q3DtG1JOiOol76lIx4w86HKIhxtVmLHaI9g2xurFWZfugmxZKOvKXGwh H9AdMP281nXTs0iHVrI0tHtTcxUAe3zzJ2DhEGqcAfhPQrUfygLtGJBGXm+oVxK2 AznTPMfvaVGDoVSkW9+5CY/LEFDPxoLqaNFG48ZxC6fX4NQskDE5mL7nvAyA3OKQ PFiETLYBWKN5EJbXbPmqCaFSpwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFCjti8Qn ADsfC7HTWJWuwigskFF3MB8GA1UdIwQYMBaAFNOYR0cUJXu+86WpddkM0Nxlvdvv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5N0NCQy85NTJCQUUyRTVE RjAxMUVGQUM3MEVEMEFDNEY5QUUwMi8wNWhIUnhRbGU3N3pwYWwxMlF6UTNHVzky LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA1aEhSeFFsZTc3enBhbDEyUXpRM0dXOTItOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTdDQkMvOTUyQkFFMkU1REYwMTFFRkFDNzBFRDBBQzRGOUFFMDIvMTM0MzU1NDZB QkYyMTFGMEJBNzdGQTBEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAIr9nQDBAJnI7gwDQYJKoZIhvcNAQELBQADggEBAAqgu1su yINGEPD+VlZiMv1giIugjToZxhAxxQTokqOXKYKYhTWVTQxKDvdTCg3nHbLmVnMO D2ajkqlBihtOOREBJ1ONDvhFIIVBZDlbuz3/FBge5YIMWaHFGOfWQFw1hRGDA9Qi zjZobuvGVL2kY8yVsv1FFrapQIyE37wxG4FToR6ycQcBRSkAlBVgwcjgfjEVRKQ3 C2iDb41H8C6R4FAPUPqo/HsUIp4Cmu4caLChGlI6fQPGIqAkYPhAhaOA8aNdNfWX +4jjfUfuACGM3JeuT4DpnklGVqm3M2X3vsfTwqM7x1TZG73zCsRSICKQPzt/SA7S NNk1iu2L+CpF0p8= -----END CERTIFICATE-----Generated at Tue Oct 28 06:43:38 2025 by rpki-client