$ rpki-client -vvf rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/3BC4C576426D11EFAD9E7D10C4F9AE02.roa File: 3BC4C576426D11EFAD9E7D10C4F9AE02.roa (raw, json) Hash identifier: BDVB4NGwuoV9jd6p0mq+EV/AIWqBPxsn1M/JVs61jFc= Subject key identifier: B4:44:A0:8A:04:D2:0B:92:89:70:24:54:49:3B:7C:8C:DB:35:45:C1 Certificate issuer: /CN=A919A998/serialNumber=5EA1A7B802E7E7EFC77CA1A38E52F72ACD463930 Certificate serial: 0D40 Authority key identifier: 5E:A1:A7:B8:02:E7:E7:EF:C7:7C:A1:A3:8E:52:F7:2A:CD:46:39:30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/3BC4C576426D11EFAD9E7D10C4F9AE02.roa Signing time: Sat 04 Oct 2025 18:17:41 +0000 ROA not before: Sat 04 Oct 2025 18:17:41 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 137531 IP address blocks: 59.152.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.crl rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 18:34:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3392 (0xd40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A998, serialNumber=5EA1A7B802E7E7EFC77CA1A38E52F72ACD463930 Validity Not Before: Oct 4 18:17:41 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68e164c5-3c56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:9c:55:00:27:36:5b:1e:24:c3:0a:ba:46:e6: ce:cb:7a:19:b6:fd:12:6c:a9:71:31:67:0b:a1:0c: a5:49:e4:72:0b:1c:97:c2:88:9d:d0:8c:e5:25:d6: 9a:d1:df:e8:8f:1b:ef:5e:fa:7f:33:a6:fe:cf:9c: 95:3e:ef:d3:42:83:7a:1f:f2:b3:59:83:a8:73:e0: c7:0d:ba:c7:68:58:a1:c0:3b:10:45:b6:83:dd:f5: d5:ab:8b:e9:83:2c:c0:ab:41:37:de:a2:0b:0b:a5: e5:74:f2:f2:1a:05:72:ba:14:d8:8a:dc:4d:31:98: 22:48:99:be:fb:c5:8d:44:36:89:c0:7d:9a:bc:a0: 1e:d1:91:66:58:77:b5:cd:a3:19:41:3c:d2:e7:88: 50:98:74:8c:4f:f3:f6:f7:59:f4:17:e8:35:f9:a3: 47:d7:59:18:11:ef:a3:81:df:a4:2f:5c:d8:4f:22: 5a:6c:c4:73:71:b6:7e:12:6d:50:50:05:3d:07:9c: c8:40:04:d6:f9:58:fe:1d:cf:72:ca:57:48:6f:c1: ec:48:d0:42:04:24:9a:09:68:e7:77:cd:c0:48:f4: 00:b0:4e:2b:12:b7:fc:30:ed:3b:4f:36:95:89:71: 52:ca:f2:ce:68:e2:52:b1:f4:72:c3:6e:ed:84:3d: cd:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:44:A0:8A:04:D2:0B:92:89:70:24:54:49:3B:7C:8C:DB:35:45:C1 X509v3 Authority Key Identifier: keyid:5E:A1:A7:B8:02:E7:E7:EF:C7:7C:A1:A3:8E:52:F7:2A:CD:46:39:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/3BC4C576426D11EFAD9E7D10C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 59.152.108.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:34:53:ec:48:a0:37:6e:1e:5a:2d:f8:23:ff:ce:44:4f:68: 52:7f:3e:28:7e:a7:63:46:15:59:43:63:76:70:66:69:2b:2c: 36:5e:d9:9c:6c:41:8d:8a:78:60:ef:c2:06:e5:00:8d:90:38: b6:55:e8:ff:c4:15:05:48:6f:4b:63:26:87:5f:1c:fa:6e:d0: 52:9e:d1:08:15:fd:ef:5e:8a:0b:22:8d:01:89:df:54:c0:c2: e6:f7:02:9a:a5:9e:5e:58:86:39:86:cd:cc:60:4c:ed:65:b6: ec:83:60:f6:a2:8c:d3:aa:6c:bf:b7:38:6d:19:8b:a4:c8:64: 17:72:3b:2a:9b:5e:db:7f:00:ae:ab:30:61:0e:aa:e3:3c:87: 7e:14:ed:0f:2a:e5:6d:a3:00:bd:92:94:0d:82:a8:1b:8d:3d: 5e:37:4b:76:4a:43:27:b1:43:6b:39:61:d5:0d:65:77:bc:a7: ef:8f:76:d5:0a:ad:5a:42:a0:d3:af:6c:1f:91:d2:be:b1:6c: 74:0e:9c:8f:2f:fb:82:38:9d:12:9f:13:3c:49:20:8e:34:8b: ef:6d:c3:21:f9:18:68:bc:f3:52:57:0b:3f:3e:40:64:19:36: d1:be:8c:6d:4d:5d:c3:25:d6:67:39:b5:79:65:c3:ff:1a:29: eb:a2:00:2b -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE5OTgxMTAvBgNVBAUTKDVFQTFBN0I4MDJFN0U3RUZDNzdDQTFBMzhFNTJGNzJB Q0Q0NjM5MzAwHhcNMjUxMDA0MTgxNzQxWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGUxNjRjNS0zYzU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsJxVACc2Wx4kwwq6RubOy3oZtv0SbKlxMWcLoQylSeRyCxyXwoid0IzlJdaa 0d/ojxvvXvp/M6b+z5yVPu/TQoN6H/KzWYOoc+DHDbrHaFihwDsQRbaD3fXVq4vp gyzAq0E33qILC6XldPLyGgVyuhTYitxNMZgiSJm++8WNRDaJwH2avKAe0ZFmWHe1 zaMZQTzS54hQmHSMT/P291n0F+g1+aNH11kYEe+jgd+kL1zYTyJabMRzcbZ+Em1Q UAU9B5zIQATW+Vj+Hc9yyldIb8HsSNBCBCSaCWjnd83ASPQAsE4rErf8MO07TzaV iXFSyvLOaOJSsfRyw27thD3N5wIDAQABo4IClTCCApEwHQYDVR0OBBYEFLREoIoE 0guSiXAkVEk7fIzbNUXBMB8GA1UdIwQYMBaAFF6hp7gC5+fvx3yho45S9yrNRjkw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTk5OC9BQjM0RkJENEYy NTgxMUU5Qjc1RTNDNzBDNEY5QUUwMi9YcUdudUFMbjUtX0hmS0dqamxMM0tzMUdP VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hxR251QUxuNS1fSGZLR2pqbEwzS3MxR09UQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUE5OTgvQUIzNEZCRDRGMjU4MTFFOUI3NUUzQzcwQzRGOUFFMDIvM0JDNEM1NzY0 MjZEMTFFRkFEOUU3RDEwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAA7mGwwDQYJKoZIhvcNAQELBQADggEBABs0U+xIoDduHlot +CP/zkRPaFJ/Pih+p2NGFVlDY3ZwZmkrLDZe2ZxsQY2KeGDvwgblAI2QOLZV6P/E FQVIb0tjJodfHPpu0FKe0QgV/e9eigsijQGJ31TAwub3Apqlnl5YhjmGzcxgTO1l tuyDYPaijNOqbL+3OG0Zi6TIZBdyOyqbXtt/AK6rMGEOquM8h34U7Q8q5W2jAL2S lA2CqBuNPV43S3ZKQyexQ2s5YdUNZXe8p++PdtUKrVpCoNOvbB+R0r6xbHQOnI8v +4I4nRKfEzxJII40i+9twyH5GGi881JXCz8+QGQZNtG+jG1NXcMl1mc5tXllw/8a KeuiACs= -----END CERTIFICATE-----Generated at Fri Oct 24 06:42:47 2025 by rpki-client