$ rpki-client -vvf rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/C13356C0921511F089DDCF39C4F9AE02.roa File: C13356C0921511F089DDCF39C4F9AE02.roa (raw, json) Hash identifier: xKO8f4vIOBPlV36RLVMQ2Mn7ZysoWA4NDFm+p2c2Wvo= Subject key identifier: 57:09:94:38:BA:E9:EC:63:15:09:E0:37:5A:DA:D4:5D:C7:DC:74:45 Certificate issuer: /CN=A919C3BE/serialNumber=C467CB2CCB9C21A707B5DFBCEABA054C190523AE Certificate serial: 0CB2 Authority key identifier: C4:67:CB:2C:CB:9C:21:A7:07:B5:DF:BC:EA:BA:05:4C:19:05:23:AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGfLLMucIacHtd-86roFTBkFI64.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/C13356C0921511F089DDCF39C4F9AE02.roa Signing time: Thu 18 Sep 2025 08:18:45 +0000 ROA not before: Thu 18 Sep 2025 08:18:45 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 135037 IP address blocks: 220.247.129.0/24 maxlen: 24 2407:7380:a::/48 maxlen: 48 2407:7380:a000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.crl rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGfLLMucIacHtd-86roFTBkFI64.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 18:39:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3250 (0xcb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C3BE, serialNumber=C467CB2CCB9C21A707B5DFBCEABA054C190523AE Validity Not Before: Sep 18 08:18:45 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=68cbc065-4d36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:24:ad:28:aa:01:b4:40:d5:4e:34:0e:48:88: cf:71:a6:23:2b:ee:79:c0:ab:fb:9d:11:26:12:4d: 66:83:66:da:d1:1a:ca:3d:05:15:c4:9f:a9:67:fb: d5:fd:28:ea:28:6b:81:de:10:2d:25:94:bf:1b:b8: 32:c0:84:de:c7:33:e1:9f:37:40:17:44:c6:dc:ce: 20:97:91:69:63:39:d2:b4:46:b4:37:c0:12:4a:39: 9e:14:8f:b9:63:db:62:bd:35:e0:49:be:43:24:46: fd:1d:a8:44:c4:89:51:8f:2a:e1:c1:a9:c4:2e:c9: a7:d3:ba:bd:71:b8:28:a8:d2:25:2b:fb:2a:df:34: bf:e1:fc:e1:14:e5:6b:9d:8f:4f:b7:cc:81:28:f8: 77:30:d2:66:47:e9:45:4b:f6:a1:11:6e:7a:a6:2c: 20:4d:2f:a1:a0:8b:8b:7c:25:2b:9c:fd:2f:38:57: c1:35:17:34:f0:ad:be:60:20:7f:e3:ff:63:26:72: 84:3b:b2:50:b7:2e:7c:e6:10:b9:15:c3:be:49:36: 96:b1:3d:38:16:3e:30:f1:6a:f3:f2:6a:d2:28:41: b5:7f:00:06:fc:4d:97:3b:64:ec:7b:fa:cc:5d:96: 24:e7:59:9d:78:41:ad:0f:15:73:a8:53:a7:fc:f0: e5:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:09:94:38:BA:E9:EC:63:15:09:E0:37:5A:DA:D4:5D:C7:DC:74:45 X509v3 Authority Key Identifier: keyid:C4:67:CB:2C:CB:9C:21:A7:07:B5:DF:BC:EA:BA:05:4C:19:05:23:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGfLLMucIacHtd-86roFTBkFI64.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/C13356C0921511F089DDCF39C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.247.129.0/24 IPv6: 2407:7380:a::/48 2407:7380:a000::/48 Signature Algorithm: sha256WithRSAEncryption 23:14:55:d1:ad:73:03:7b:31:0b:2f:7f:87:11:ea:d1:46:a4: 8a:64:36:4e:56:1e:e2:ee:3a:6c:d3:e5:d9:42:3c:b8:6e:da: 12:0d:6d:e0:74:b0:17:84:68:4b:48:1e:61:14:84:b7:cd:90: 19:76:63:04:87:78:f0:d4:ef:80:91:71:2a:90:5a:bd:0a:a8: 57:06:62:11:0c:d7:fc:6c:79:02:7e:a4:2f:05:6d:91:3c:73: 69:bf:27:07:c1:3e:5b:61:80:8b:36:93:35:d3:80:18:e1:0a: 8f:06:fb:08:5f:e8:ea:85:74:bf:63:57:c2:2d:3a:f5:b6:6e: c7:02:81:0a:d8:05:b6:2f:88:9c:be:78:09:34:3c:12:05:e8: 2b:e3:26:9f:1d:1b:df:02:cf:6d:1c:ee:0b:2c:fd:fd:41:da: 0f:e9:70:72:8d:4c:d7:4f:7c:fa:74:e0:fe:1a:50:e3:15:58: 43:c5:36:03:dc:a3:93:e8:72:1f:8d:c5:90:08:92:18:84:2c: 19:91:83:7f:08:03:be:02:43:91:be:0f:70:2d:e8:e9:52:54: 06:1a:45:6e:f7:0e:1b:a7:3f:68:44:76:22:ab:ba:fd:5f:7f: b1:06:72:e4:d1:d7:23:3f:8f:96:15:47:07:86:8f:b3:7e:81: 55:b6:a4:53 -----BEGIN CERTIFICATE----- MIIFizCCBHOgAwIBAgICDLIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUMzQkUxMTAvBgNVBAUTKEM0NjdDQjJDQ0I5QzIxQTcwN0I1REZCQ0VBQkEwNTRD MTkwNTIzQUUwHhcNMjUwOTE4MDgxODQ1WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGNiYzA2NS00ZDM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtSStKKoBtEDVTjQOSIjPcaYjK+55wKv7nREmEk1mg2ba0RrKPQUVxJ+pZ/vV /SjqKGuB3hAtJZS/G7gywITexzPhnzdAF0TG3M4gl5FpYznStEa0N8ASSjmeFI+5 Y9tivTXgSb5DJEb9HahExIlRjyrhwanELsmn07q9cbgoqNIlK/sq3zS/4fzhFOVr nY9Pt8yBKPh3MNJmR+lFS/ahEW56piwgTS+hoIuLfCUrnP0vOFfBNRc08K2+YCB/ 4/9jJnKEO7JQty585hC5FcO+STaWsT04Fj4w8Wrz8mrSKEG1fwAG/E2XO2Tse/rM XZYk51mdeEGtDxVzqFOn/PDlrwIDAQABo4ICrzCCAqswHQYDVR0OBBYEFFcJlDi6 6exjFQngN1ra1F3H3HRFMB8GA1UdIwQYMBaAFMRnyyzLnCGnB7XfvOq6BUwZBSOu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzNCRS85NDdCMzUwNjA5 MzgxMUVBOTVDQTMxMjlDNEY5QUUwMi94R2ZMTE11Y0lhY0h0ZC04NnJvRlRCa0ZJ NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hHZkxMTXVjSWFjSHRkLTg2cm9GVEJrRkk2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUMzQkUvOTQ3QjM1MDYwOTM4MTFFQTk1Q0EzMTI5QzRGOUFFMDIvQzEzMzU2QzA5 MjE1MTFGMDg5RERDRjM5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOQYIKwYBBQUHAQcBAf8E KjAoMAwEAgABMAYDBADc94EwGAQCAAIwEgMHACQHc4AACgMHACQHc4CgADANBgkq hkiG9w0BAQsFAAOCAQEAIxRV0a1zA3sxCy9/hxHq0UakimQ2TlYe4u46bNPl2UI8 uG7aEg1t4HSwF4RoS0geYRSEt82QGXZjBId48NTvgJFxKpBavQqoVwZiEQzX/Gx5 An6kLwVtkTxzab8nB8E+W2GAizaTNdOAGOEKjwb7CF/o6oV0v2NXwi069bZuxwKB CtgFti+InL54CTQ8EgXoK+Mmnx0b3wLPbRzuCyz9/UHaD+lwco1M1098+nTg/hpQ 4xVYQ8U2A9yjk+hyH43FkAiSGIQsGZGDfwgDvgJDkb4PcC3o6VJUBhpFbvcOG6c/ aER2Iqu6/V9/sQZy5NHXIz+PlhVHB4aPs36BVbakUw== -----END CERTIFICATE-----Generated at Thu Sep 18 22:16:38 2025 by rpki-client