$ rpki-client -vvf rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/1B2EC2A457E411EEB143C80EC4F9AE02.roa File: 1B2EC2A457E411EEB143C80EC4F9AE02.roa (raw, json) Hash identifier: PcZoN3ci4co6UnsxaZnIha4fixwPCG4/IAXAIlyDexU= Subject key identifier: B2:D4:EA:D6:46:C6:F5:22:4D:2C:3E:59:9E:1D:92:58:05:61:C4:CD Certificate issuer: /CN=A911ABCE/serialNumber=300742E4AD547AE49DD82C82F7ECEB095B902A20 Certificate serial: 0199 Authority key identifier: 30:07:42:E4:AD:54:7A:E4:9D:D8:2C:82:F7:EC:EB:09:5B:90:2A:20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MAdC5K1UeuSd2CyC9-zrCVuQKiA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/1B2EC2A457E411EEB143C80EC4F9AE02.roa Signing time: Thu 23 Oct 2025 05:19:01 +0000 ROA not before: Thu 23 Oct 2025 05:19:01 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 174 IP address blocks: 43.239.250.0/24 maxlen: 24 114.31.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.crl rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MAdC5K1UeuSd2CyC9-zrCVuQKiA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:30:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 409 (0x199) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911ABCE, serialNumber=300742E4AD547AE49DD82C82F7ECEB095B902A20 Validity Not Before: Oct 23 05:19:01 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68f9bac5-1b3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:92:49:f7:66:90:f6:81:1e:8e:9f:a9:c9:cd: e9:16:82:72:ed:fe:a5:0d:55:2c:09:6b:e5:77:46: c0:a4:22:75:b0:d1:f1:a9:81:f6:89:f1:a1:c4:71: a8:4f:fb:3b:00:ae:ef:c8:e3:0a:f4:5e:7c:e4:f0: b3:52:04:a5:61:30:45:d6:89:7d:4d:02:73:a6:ab: 55:3b:a6:0b:8a:81:42:82:48:e6:75:1e:24:b1:57: 50:13:6d:8d:d7:f0:82:16:31:b3:70:b3:71:a8:02: ba:6c:36:8d:c9:da:86:2c:98:b5:40:32:12:05:d1: 9d:a6:2c:8c:05:06:c7:df:a9:c5:79:99:21:ae:e7: f0:20:77:b1:f9:b0:34:5d:8c:af:66:2c:c2:39:12: a8:81:b8:5b:c4:e7:e1:2b:33:f0:f1:aa:d3:11:6a: 3a:e2:7a:51:f6:4b:c0:83:c2:f7:ff:dc:a5:d9:a9: a0:f8:fc:ce:f5:32:37:f1:08:a9:68:98:4a:8e:69: a6:0f:74:0b:53:f4:b8:e7:33:5e:c7:2e:67:b5:3f: b8:d6:31:71:24:76:6e:a3:47:78:1c:1d:2e:d5:fa: 93:5e:20:f2:3c:69:9d:6f:48:90:3e:66:ab:db:03: 8d:84:68:ba:eb:14:e0:6d:27:ab:18:5d:95:80:b2: 30:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:D4:EA:D6:46:C6:F5:22:4D:2C:3E:59:9E:1D:92:58:05:61:C4:CD X509v3 Authority Key Identifier: keyid:30:07:42:E4:AD:54:7A:E4:9D:D8:2C:82:F7:EC:EB:09:5B:90:2A:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MAdC5K1UeuSd2CyC9-zrCVuQKiA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/1B2EC2A457E411EEB143C80EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.239.250.0/24 114.31.208.0/22 Signature Algorithm: sha256WithRSAEncryption 22:c5:37:e8:a5:38:a9:8a:08:9e:ac:58:e7:1f:01:b1:5a:8b: 42:bd:eb:0e:3e:cb:b7:79:37:ef:99:59:f6:91:91:c5:12:2f: 32:50:71:dc:54:90:52:2f:27:98:1c:2b:e9:2e:fd:4e:ba:27: 1e:84:8f:88:22:a4:e9:4f:49:7d:a5:31:02:fc:cf:74:da:8f: 84:81:16:33:6e:c8:23:6e:be:6c:bb:59:ce:b9:77:12:d2:5e: 28:bd:39:45:bd:13:74:50:45:d0:73:5a:e9:d9:f9:76:38:98: da:64:5b:6b:87:f5:c0:6d:94:d9:e4:f8:eb:2d:76:7e:8a:b1: a2:65:29:bd:22:c0:c2:16:f1:09:a8:72:85:14:b2:f1:dd:5f: 4e:b3:48:c7:d8:1d:59:0d:17:43:dc:e1:ad:ad:3d:5a:dc:75: fe:68:44:9d:5a:eb:21:bd:b5:d8:d5:2b:0d:d2:11:4a:1a:5a: ce:f9:2f:3e:05:af:4f:10:5a:11:55:9e:a9:05:cf:98:aa:98: 68:f2:b4:7b:82:22:b0:42:cd:bd:7c:87:ab:3a:2c:3d:69:d4: 3b:64:76:cc:b0:e3:aa:12:44:4a:ca:79:9d:e4:f3:4c:d3:f3: ce:28:c8:47:8d:93:ce:8b:13:96:4b:56:4d:ee:03:47:cc:14: b8:63:b8:36 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFCQ0UxMTAvBgNVBAUTKDMwMDc0MkU0QUQ1NDdBRTQ5REQ4MkM4MkY3RUNFQjA5 NUI5MDJBMjAwHhcNMjUxMDIzMDUxOTAxWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGY5YmFjNS0xYjNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ZJJ92aQ9oEejp+pyc3pFoJy7f6lDVUsCWvld0bApCJ1sNHxqYH2ifGhxHGo T/s7AK7vyOMK9F585PCzUgSlYTBF1ol9TQJzpqtVO6YLioFCgkjmdR4ksVdQE22N 1/CCFjGzcLNxqAK6bDaNydqGLJi1QDISBdGdpiyMBQbH36nFeZkhrufwIHex+bA0 XYyvZizCORKogbhbxOfhKzPw8arTEWo64npR9kvAg8L3/9yl2amg+PzO9TI38Qip aJhKjmmmD3QLU/S45zNexy5ntT+41jFxJHZuo0d4HB0u1fqTXiDyPGmdb0iQPmar 2wONhGi66xTgbSerGF2VgLIwtQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFLLU6tZG xvUiTSw+WZ4dklgFYcTNMB8GA1UdIwQYMBaAFDAHQuStVHrkndgsgvfs6wlbkCog MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUJDRS85MDA5OUM0MDU3 REQxMUVFQkFGRkU0MkRDNEY5QUUwMi9NQWRDNUsxVWV1U2QyQ3lDOS16ckNWdVFL aUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01BZEM1SzFVZXVTZDJDeUM5LXpyQ1Z1UUtpQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUFCQ0UvOTAwOTlDNDA1N0REMTFFRUJBRkZFNDJEQzRGOUFFMDIvMUIyRUMyQTQ1 N0U0MTFFRUIxNDNDODBFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAAr7/oDBAJyH9AwDQYJKoZIhvcNAQELBQADggEBACLFN+il OKmKCJ6sWOcfAbFai0K96w4+y7d5N++ZWfaRkcUSLzJQcdxUkFIvJ5gcK+ku/U66 Jx6Ej4gipOlPSX2lMQL8z3Taj4SBFjNuyCNuvmy7Wc65dxLSXii9OUW9E3RQRdBz WunZ+XY4mNpkW2uH9cBtlNnk+Ostdn6KsaJlKb0iwMIW8QmocoUUsvHdX06zSMfY HVkNF0Pc4a2tPVrcdf5oRJ1a6yG9tdjVKw3SEUoaWs75Lz4Fr08QWhFVnqkFz5iq mGjytHuCIrBCzb18h6s6LD1p1Dtkdsyw46oSRErKeZ3k80zT884oyEeNk86LE5ZL Vk3uA0fMFLhjuDY= -----END CERTIFICATE-----Generated at Wed Nov 5 03:59:34 2025 by rpki-client