$ rpki-client -vvf rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/C9F37B86584111F09E8EC450C4F9AE02.roa File: C9F37B86584111F09E8EC450C4F9AE02.roa (raw, json) Hash identifier: KrEmXnI7T+V4fJrByDl+yUXAqLDUTHQO1G1OMCM+LiE= Subject key identifier: 09:B0:11:41:BF:8B:A7:B9:FD:5B:FE:32:AF:98:2B:2A:F5:B5:9F:03 Certificate issuer: /CN=A9115C2E/serialNumber=392FC227EECC5A621572FADAAC651A3CEBB2163C Certificate serial: 09E5 Authority key identifier: 39:2F:C2:27:EE:CC:5A:62:15:72:FA:DA:AC:65:1A:3C:EB:B2:16:3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS_CJ-7MWmIVcvrarGUaPOuyFjw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/C9F37B86584111F09E8EC450C4F9AE02.roa Signing time: Thu 03 Jul 2025 19:13:23 +0000 ROA not before: Thu 03 Jul 2025 19:13:23 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 134220 IP address blocks: 45.118.188.0/22 maxlen: 24 103.58.228.0/22 maxlen: 24 103.246.52.0/22 maxlen: 24 2402:6f80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.crl rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS_CJ-7MWmIVcvrarGUaPOuyFjw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:54:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2533 (0x9e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9115C2E, serialNumber=392FC227EECC5A621572FADAAC651A3CEBB2163C Validity Not Before: Jul 3 19:13:23 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=6866d653-9ebf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:9a:39:36:c0:8d:37:72:2b:14:11:dc:4b:fe: f3:5e:6c:b9:c4:a3:d2:62:17:84:03:7e:e7:92:10: 1d:9c:de:5d:af:a1:9d:cc:f2:c4:11:76:56:54:6d: 11:75:0a:df:f5:67:ee:da:f1:7a:8d:43:a7:83:1f: 95:2c:a8:1d:5e:81:60:ee:bd:12:67:4e:76:44:2c: 00:a5:35:dd:e5:fb:55:16:8f:8c:d0:40:41:ad:ca: f1:03:bc:3b:4d:0c:97:4e:d7:2e:0a:67:0c:27:ac: f6:b6:3c:eb:61:f9:0c:2a:25:e4:52:c6:2b:e1:4b: 3c:4b:fc:5b:ab:6c:f0:ff:43:0f:2e:81:78:3c:44: dc:76:cb:6f:08:d8:7e:6f:21:1e:50:0e:05:c5:65: a3:a6:65:c4:02:87:68:82:36:8d:4d:45:31:58:b6: 48:45:a0:a7:43:3d:a9:70:45:f6:3e:ea:bf:bb:c1: 2a:db:c2:50:fe:59:85:3a:0e:4f:fc:bc:e8:98:5a: 2f:39:a3:08:6a:bc:f7:7e:49:e1:4f:65:56:5f:24: 50:e2:d1:6d:94:f8:57:6f:27:3b:06:81:31:12:e9: 9b:62:92:bc:65:d2:ac:42:60:5b:d9:48:b1:01:78: 97:4d:c7:ae:f9:bc:97:c7:69:86:d4:99:af:8e:7a: 5f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:B0:11:41:BF:8B:A7:B9:FD:5B:FE:32:AF:98:2B:2A:F5:B5:9F:03 X509v3 Authority Key Identifier: keyid:39:2F:C2:27:EE:CC:5A:62:15:72:FA:DA:AC:65:1A:3C:EB:B2:16:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS_CJ-7MWmIVcvrarGUaPOuyFjw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/C9F37B86584111F09E8EC450C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.118.188.0/22 103.58.228.0/22 103.246.52.0/22 IPv6: 2402:6f80::/32 Signature Algorithm: sha256WithRSAEncryption 2e:25:e8:83:b2:4a:3e:5a:8f:21:e3:7c:ce:ce:e0:10:d6:2e: 36:bc:00:46:2a:25:d2:09:e7:d7:9b:82:41:cf:7a:89:a2:83: 4a:42:de:83:1e:c0:8a:a8:7e:ca:45:bc:0c:f0:d2:0c:e4:2f: 3b:d3:fe:f7:da:9b:ba:be:66:92:f3:cc:52:ae:03:b6:e7:37: f9:b9:e8:60:27:69:0a:1d:9d:df:5e:48:ce:6e:30:d1:94:c6: 42:7a:b6:d1:52:c2:f0:04:a6:86:9b:77:1e:ba:9a:9e:e8:aa: 36:c3:db:b8:26:1b:bd:41:54:5b:82:82:2b:59:f8:66:fd:b8: d3:53:34:75:67:d5:ac:97:0d:ed:dd:d1:cd:62:4a:6f:8d:61: 79:0c:d8:f3:0d:1f:91:25:c5:21:db:e0:85:e8:8c:4c:50:1a: b1:c3:c0:60:af:cb:f6:54:89:a9:a7:b7:7c:0f:5b:a9:86:64: bc:90:98:27:a2:6a:20:d7:4c:b1:81:ef:9c:d7:39:db:af:03: 16:46:f5:bf:2b:f1:a3:0d:5e:fc:9e:f4:8e:81:37:19:61:3e: 79:a9:0e:47:05:9d:88:7f:c4:89:61:b2:f3:f8:6c:5e:57:f7: cf:5e:3a:f7:ed:f7:8c:c2:1f:3a:4c:d1:87:15:1a:e0:e4:1a: 5d:a5:17:50 -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICCeUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTVDMkUxMTAvBgNVBAUTKDM5MkZDMjI3RUVDQzVBNjIxNTcyRkFEQUFDNjUxQTND RUJCMjE2M0MwHhcNMjUwNzAzMTkxMzIzWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODY2ZDY1My05ZWJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4po5NsCNN3IrFBHcS/7zXmy5xKPSYheEA37nkhAdnN5dr6GdzPLEEXZWVG0R dQrf9Wfu2vF6jUOngx+VLKgdXoFg7r0SZ052RCwApTXd5ftVFo+M0EBBrcrxA7w7 TQyXTtcuCmcMJ6z2tjzrYfkMKiXkUsYr4Us8S/xbq2zw/0MPLoF4PETcdstvCNh+ byEeUA4FxWWjpmXEAodogjaNTUUxWLZIRaCnQz2pcEX2Puq/u8Eq28JQ/lmFOg5P /LzomFovOaMIarz3fknhT2VWXyRQ4tFtlPhXbyc7BoExEumbYpK8ZdKsQmBb2Uix AXiXTceu+byXx2mG1JmvjnpfowIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFAmwEUG/ i6e5/Vv+Mq+YKyr1tZ8DMB8GA1UdIwQYMBaAFDkvwifuzFpiFXL62qxlGjzrshY8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNUMyRS8zOEQxNDAxQzgz NDgxMUVBQTdDNDc1NzZDNEY5QUUwMi9PU19DSi03TVdtSVZjdnJhckdVYVBPdXlG ancuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09TX0NKLTdNV21JVmN2cmFyR1VhUE91eUZqdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTVDMkUvMzhEMTQwMUM4MzQ4MTFFQUE3QzQ3NTc2QzRGOUFFMDIvQzlGMzdCODY1 ODQxMTFGMDlFOEVDNDUwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E KzApMBgEAgABMBIDBAItdrwDBAJnOuQDBAJn9jQwDQQCAAIwBwMFACQCb4AwDQYJ KoZIhvcNAQELBQADggEBAC4l6IOySj5ajyHjfM7O4BDWLja8AEYqJdIJ59ebgkHP eomig0pC3oMewIqofspFvAzw0gzkLzvT/vfam7q+ZpLzzFKuA7bnN/m56GAnaQod nd9eSM5uMNGUxkJ6ttFSwvAEpoabdx66mp7oqjbD27gmG71BVFuCgitZ+Gb9uNNT NHVn1ayXDe3d0c1iSm+NYXkM2PMNH5ElxSHb4IXojExQGrHDwGCvy/ZUiamnt3wP W6mGZLyQmCeiaiDXTLGB75zXOduvAxZG9b8r8aMNXvye9I6BNxlhPnmpDkcFnYh/ xIlhsvP4bF5X989eOvft94zCHzpM0YcVGuDkGl2lF1A= -----END CERTIFICATE-----Generated at Wed Nov 5 14:33:02 2025 by rpki-client