$ rpki-client -vvf rpki.apnic.net/member_repository/A911AF72/809CC4BA97AC11F0915E4E28C4F9AE02/2037C39497AD11F0A7426829C4F9AE02.roa File: 2037C39497AD11F0A7426829C4F9AE02.roa (raw, json) Hash identifier: EeQroM7h0HiM3TepBIA0OkKXFhjGOzZPkF8XVUpit7I= Subject key identifier: 2E:65:14:9E:62:0F:89:E7:EB:3C:0F:DF:91:CC:77:B0:10:FC:B9:D4 Certificate issuer: /CN=A911AF72/serialNumber=8A51EA58C45C2F4460E3AB13EB6A6745465DAF8B Certificate serial: 02 Authority key identifier: 8A:51:EA:58:C4:5C:2F:44:60:E3:AB:13:EB:6A:67:45:46:5D:AF:8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ilHqWMRcL0Rg46sT62pnRUZdr4s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AF72/809CC4BA97AC11F0915E4E28C4F9AE02/2037C39497AD11F0A7426829C4F9AE02.roa Signing time: Mon 22 Sep 2025 12:10:27 +0000 ROA not before: Mon 22 Sep 2025 12:10:27 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 142647 IP address blocks: 45.115.42.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AF72/809CC4BA97AC11F0915E4E28C4F9AE02/ilHqWMRcL0Rg46sT62pnRUZdr4s.crl rsync://rpki.apnic.net/member_repository/A911AF72/809CC4BA97AC11F0915E4E28C4F9AE02/ilHqWMRcL0Rg46sT62pnRUZdr4s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ilHqWMRcL0Rg46sT62pnRUZdr4s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:52:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AF72, serialNumber=8A51EA58C45C2F4460E3AB13EB6A6745465DAF8B Validity Not Before: Sep 22 12:10:27 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68d13cb3-4cfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:d1:17:6f:f3:64:c0:ea:cd:65:78:0e:db:4f: a5:d2:6f:78:70:99:fd:3a:46:5f:58:3d:3a:b3:7b: 4d:f2:91:48:1d:8b:ef:82:aa:65:48:35:d9:44:88: f2:f3:73:07:db:4a:0a:56:74:7f:19:4c:4f:27:7b: 98:78:fe:b6:12:93:d8:3d:b0:66:34:16:e6:e4:7c: 62:6f:73:e2:b4:90:52:e3:7d:29:4d:1f:a4:7e:b8: 87:01:44:69:66:d2:ae:11:14:7e:e3:bb:58:f7:45: 95:74:09:c2:85:28:78:7d:5c:4d:7d:51:d8:60:d4: 6b:e0:6f:3b:9d:04:cd:7a:ce:21:ab:26:ae:02:5e: 97:03:fd:2c:6b:59:44:32:e8:5a:09:f6:dd:b2:fd: a1:7b:0c:bb:0d:8c:7e:55:be:c3:3c:eb:af:ba:de: 37:8c:6a:e1:8a:42:bf:4e:a7:c5:37:ea:5e:e4:94: 94:38:50:4d:05:8b:fa:0e:f5:17:5a:44:56:77:42: d6:90:8c:c3:52:dd:ef:d2:fc:5c:e7:f1:75:1b:15: 55:cd:0c:81:40:13:24:0a:0b:ff:b5:51:5f:82:be: f4:20:c7:c0:85:0f:83:8c:84:7b:52:56:a1:6e:92: 0e:07:c3:13:fa:b2:49:be:a9:90:d7:e3:f5:91:df: a6:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:65:14:9E:62:0F:89:E7:EB:3C:0F:DF:91:CC:77:B0:10:FC:B9:D4 X509v3 Authority Key Identifier: keyid:8A:51:EA:58:C4:5C:2F:44:60:E3:AB:13:EB:6A:67:45:46:5D:AF:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AF72/809CC4BA97AC11F0915E4E28C4F9AE02/ilHqWMRcL0Rg46sT62pnRUZdr4s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ilHqWMRcL0Rg46sT62pnRUZdr4s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AF72/809CC4BA97AC11F0915E4E28C4F9AE02/2037C39497AD11F0A7426829C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.115.42.0/23 Signature Algorithm: sha256WithRSAEncryption 0f:58:13:79:d7:c7:9a:f9:e3:27:f3:1b:ef:20:fb:d3:82:9c: e4:f3:60:81:a7:ff:3f:ed:e6:c0:0e:3c:0f:b4:d2:8a:c7:8c: 18:c2:f9:d7:9a:ee:4e:a7:7c:ac:c1:a6:7e:9d:f1:99:f5:87: be:57:46:51:c4:94:66:74:d8:53:12:ca:ea:9d:d8:6c:db:c9: 76:d9:d8:d9:26:0a:e5:0c:24:c7:84:3f:f9:e0:02:03:69:61: 15:40:0a:bc:e9:af:95:cf:ea:e4:b0:4a:ef:50:6a:b5:c5:e0: d4:f2:0b:ea:ae:c6:69:eb:82:61:50:40:7f:88:2e:8c:f9:0d: fd:ee:ed:69:55:ee:db:68:7c:a0:f3:3f:b3:10:02:e5:c9:ef: 79:47:bd:e5:ea:af:a9:cd:7e:93:4a:89:db:21:d6:8d:cf:f6: c4:6c:b7:bc:6e:ac:fe:b3:66:d8:40:7f:99:58:0d:b5:ca:d3: 9e:07:1d:10:82:99:87:68:f2:cb:a0:df:a8:c4:86:11:92:3c: ba:b5:b0:5e:b1:9b:4e:2e:b6:c6:88:f5:9c:bc:31:85:d8:09: 9e:c4:85:d7:3b:4e:96:f9:72:20:f1:d7:88:6f:d0:55:74:81: 72:29:88:08:18:ae:40:e9:3c:20:23:29:71:d3:41:29:44:de: 69:dc:71:0d -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QUY3MjExMC8GA1UEBRMoOEE1MUVBNThDNDVDMkY0NDYwRTNBQjEzRUI2QTY3NDU0 NjVEQUY4QjAeFw0yNTA5MjIxMjEwMjdaFw0yNjEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY4ZDEzY2IzLTRjZmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDc0Rdv82TA6s1leA7bT6XSb3hwmf06Rl9YPTqze03ykUgdi++CqmVINdlEiPLz cwfbSgpWdH8ZTE8ne5h4/rYSk9g9sGY0FubkfGJvc+K0kFLjfSlNH6R+uIcBRGlm 0q4RFH7ju1j3RZV0CcKFKHh9XE19Udhg1GvgbzudBM16ziGrJq4CXpcD/SxrWUQy 6FoJ9t2y/aF7DLsNjH5VvsM866+63jeMauGKQr9Op8U36l7klJQ4UE0Fi/oO9Rda RFZ3QtaQjMNS3e/S/Fzn8XUbFVXNDIFAEyQKC/+1UV+CvvQgx8CFD4OMhHtSVqFu kg4HwxP6skm+qZDX4/WR36Z9AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQULmUUnmIP iefrPA/fkcx3sBD8udQwHwYDVR0jBBgwFoAUilHqWMRcL0Rg46sT62pnRUZdr4sw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFBRjcyLzgwOUNDNEJBOTdB QzExRjA5MTVFNEUyOEM0RjlBRTAyL2lsSHFXTVJjTDBSZzQ2c1Q2MnBuUlVaZHI0 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaWxIcVdNUmNMMFJnNDZzVDYycG5SVVpkcjRzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUY3Mi84MDlDQzRCQTk3QUMxMUYwOTE1RTRFMjhDNEY5QUUwMi8yMDM3QzM5NDk3 QUQxMUYwQTc0MjY4MjlDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAS1zKjANBgkqhkiG9w0BAQsFAAOCAQEAD1gTedfHmvnjJ/Mb 7yD704Kc5PNggaf/P+3mwA48D7TSiseMGML515ruTqd8rMGmfp3xmfWHvldGUcSU ZnTYUxLK6p3YbNvJdtnY2SYK5Qwkx4Q/+eACA2lhFUAKvOmvlc/q5LBK71BqtcXg 1PIL6q7GaeuCYVBAf4gujPkN/e7taVXu22h8oPM/sxAC5cnveUe95eqvqc1+k0qJ 2yHWjc/2xGy3vG6s/rNm2EB/mVgNtcrTngcdEIKZh2jyy6DfqMSGEZI8urWwXrGb Ti62xoj1nLwxhdgJnsSF1ztOlvlyIPHXiG/QVXSBcimICBiuQOk8ICMpcdNBKUTe adxxDQ== -----END CERTIFICATE-----Generated at Tue Nov 4 21:46:15 2025 by rpki-client