$ rpki-client -vvf rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/22613D48AC7311EE8A97A86FC4F9AE02.roa File: 22613D48AC7311EE8A97A86FC4F9AE02.roa (raw, json) Hash identifier: hZwCg3vX+8I7iA0U478ju0al4yPcr8BJq7DCP5lsMTw= Subject key identifier: 11:F4:C9:5B:0C:26:19:D9:3A:A2:DA:25:25:DD:98:7A:4B:5D:13:B8 Certificate issuer: /CN=A911ABCE/serialNumber=300742E4AD547AE49DD82C82F7ECEB095B902A20 Certificate serial: 019B Authority key identifier: 30:07:42:E4:AD:54:7A:E4:9D:D8:2C:82:F7:EC:EB:09:5B:90:2A:20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MAdC5K1UeuSd2CyC9-zrCVuQKiA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/22613D48AC7311EE8A97A86FC4F9AE02.roa Signing time: Thu 23 Oct 2025 05:19:03 +0000 ROA not before: Thu 23 Oct 2025 05:19:03 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 2914 IP address blocks: 43.239.250.0/24 maxlen: 24 114.31.208.0/22 maxlen: 22 2404:3600::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.crl rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MAdC5K1UeuSd2CyC9-zrCVuQKiA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:30:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 411 (0x19b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911ABCE, serialNumber=300742E4AD547AE49DD82C82F7ECEB095B902A20 Validity Not Before: Oct 23 05:19:03 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68f9bac7-5b11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:aa:2c:07:75:e2:f9:5d:e9:86:da:79:59:f7: 4e:7a:17:d7:27:3f:e7:a7:39:e9:45:db:1f:ad:45: 64:00:82:19:b0:1e:bb:0f:2d:99:ef:c8:5a:f8:b9: d2:62:6b:7c:88:cd:e1:8e:71:47:8f:b4:b5:68:af: c4:82:da:88:75:80:11:19:34:2b:36:fe:15:56:c0: 50:66:12:44:e9:1c:dc:61:ad:d9:c8:90:b0:e2:9e: 02:e0:0b:f0:a5:bb:5c:c6:dd:05:f9:0b:57:32:51: 0a:3c:86:10:50:df:64:f1:ce:16:4c:8a:13:35:87: 6b:82:be:72:b2:4d:dd:3a:25:bc:75:fd:be:4d:98: 02:83:7b:3e:87:02:c4:a3:8f:05:01:28:21:4d:5c: b4:e4:80:b8:fd:9f:99:0e:f3:11:50:13:ae:ac:74: 4f:e0:a1:a9:03:27:d3:1d:8d:f4:b6:66:e1:04:fc: e8:45:27:47:7b:b9:b1:b7:59:3b:c3:ce:da:29:0c: 44:15:da:06:6e:1a:85:1b:bb:27:ba:75:11:75:d6: f1:89:c4:89:85:16:a3:bb:fb:32:ec:9b:df:67:c2: 88:24:ba:0f:83:25:00:7b:b2:e4:f5:13:20:4d:32: 3a:4b:f2:da:49:b4:62:c2:50:64:80:48:0d:7f:2c: b6:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:F4:C9:5B:0C:26:19:D9:3A:A2:DA:25:25:DD:98:7A:4B:5D:13:B8 X509v3 Authority Key Identifier: keyid:30:07:42:E4:AD:54:7A:E4:9D:D8:2C:82:F7:EC:EB:09:5B:90:2A:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MAdC5K1UeuSd2CyC9-zrCVuQKiA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/22613D48AC7311EE8A97A86FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.239.250.0/24 114.31.208.0/22 IPv6: 2404:3600::/32 Signature Algorithm: sha256WithRSAEncryption 50:02:74:d4:1c:96:b9:94:a4:ca:c1:fd:18:ea:e5:a9:f7:68: 42:61:85:58:4a:7d:b3:0d:38:05:1d:a8:6f:d2:97:20:a6:52: 85:47:52:b6:ac:8c:13:3e:f1:ed:ea:83:5a:82:dd:35:9e:6f: fc:89:07:5b:ee:be:43:7c:13:f0:2f:c4:ec:d4:a3:14:d3:6d: a3:eb:02:0a:3a:13:56:72:10:22:06:ee:43:32:e3:dc:eb:c1: f6:b8:0f:4c:91:97:71:86:b8:71:12:60:b8:b8:ee:18:88:88: e2:17:68:12:aa:72:8b:ac:19:a3:fe:1c:40:c4:37:f0:54:ff: b5:50:20:dc:57:78:43:f5:6e:53:1c:bf:34:2d:f3:a5:bb:90: 7d:59:69:70:20:46:a3:ba:22:cd:31:3e:a4:8f:2b:27:a0:9a: 53:db:60:a7:52:d6:46:90:44:a5:36:8f:7f:2f:02:a8:dd:ca: 31:4c:89:2b:61:52:64:08:00:db:d0:7b:bc:60:b5:97:3c:15: b9:d4:2c:7e:53:28:61:24:c7:7f:32:06:bc:61:85:7a:00:db: 58:6c:0f:a6:3f:a0:ac:e6:a0:fb:b0:98:fb:7f:15:2e:9d:1c: 18:5d:d9:3a:8b:2a:64:da:c9:20:da:f1:a6:19:e9:01:36:59: d0:bf:3a:69 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICAZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFCQ0UxMTAvBgNVBAUTKDMwMDc0MkU0QUQ1NDdBRTQ5REQ4MkM4MkY3RUNFQjA5 NUI5MDJBMjAwHhcNMjUxMDIzMDUxOTAzWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGY5YmFjNy01YjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyKosB3Xi+V3phtp5WfdOehfXJz/npznpRdsfrUVkAIIZsB67Dy2Z78ha+LnS Ymt8iM3hjnFHj7S1aK/EgtqIdYARGTQrNv4VVsBQZhJE6RzcYa3ZyJCw4p4C4Avw pbtcxt0F+QtXMlEKPIYQUN9k8c4WTIoTNYdrgr5ysk3dOiW8df2+TZgCg3s+hwLE o48FASghTVy05IC4/Z+ZDvMRUBOurHRP4KGpAyfTHY30tmbhBPzoRSdHe7mxt1k7 w87aKQxEFdoGbhqFG7snunURddbxicSJhRaju/sy7JvfZ8KIJLoPgyUAe7Lk9RMg TTI6S/LaSbRiwlBkgEgNfyy2WwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFBH0yVsM JhnZOqLaJSXdmHpLXRO4MB8GA1UdIwQYMBaAFDAHQuStVHrkndgsgvfs6wlbkCog MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUJDRS85MDA5OUM0MDU3 REQxMUVFQkFGRkU0MkRDNEY5QUUwMi9NQWRDNUsxVWV1U2QyQ3lDOS16ckNWdVFL aUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01BZEM1SzFVZXVTZDJDeUM5LXpyQ1Z1UUtpQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUFCQ0UvOTAwOTlDNDA1N0REMTFFRUJBRkZFNDJEQzRGOUFFMDIvMjI2MTNENDhB QzczMTFFRThBOTdBODZGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAAr7/oDBAJyH9AwDQQCAAIwBwMFACQENgAwDQYJKoZIhvcN AQELBQADggEBAFACdNQclrmUpMrB/Rjq5an3aEJhhVhKfbMNOAUdqG/SlyCmUoVH UrasjBM+8e3qg1qC3TWeb/yJB1vuvkN8E/AvxOzUoxTTbaPrAgo6E1ZyECIG7kMy 49zrwfa4D0yRl3GGuHESYLi47hiIiOIXaBKqcousGaP+HEDEN/BU/7VQINxXeEP1 blMcvzQt86W7kH1ZaXAgRqO6Is0xPqSPKyegmlPbYKdS1kaQRKU2j38vAqjdyjFM iSthUmQIANvQe7xgtZc8FbnULH5TKGEkx38yBrxhhXoA21hsD6Y/oKzmoPuwmPt/ FS6dHBhd2TqLKmTaySDa8aYZ6QE2WdC/Omk= -----END CERTIFICATE-----Generated at Wed Nov 5 05:11:42 2025 by rpki-client