$ rpki-client -vvf rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/6688CA76535F11EE9BC85F83C4F9AE02.roa File: 6688CA76535F11EE9BC85F83C4F9AE02.roa (raw, json) Hash identifier: 2TDhWa5aEDfj/OSlXTwrUwhI6/Fx1H9p120AVX8QFaw= Subject key identifier: BA:7E:DD:99:6C:9F:4A:08:DD:DC:1C:CD:BC:6F:9F:3D:88:0A:84:AD Certificate issuer: /CN=A911CA78/serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6 Certificate serial: 0D4B Authority key identifier: 40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/6688CA76535F11EE9BC85F83C4F9AE02.roa Signing time: Sun 02 Nov 2025 19:08:10 +0000 ROA not before: Sun 02 Nov 2025 19:08:10 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 4202202111 IP address blocks: 112.137.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:05:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3403 (0xd4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CA78, serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6 Validity Not Before: Nov 2 19:08:10 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6907ac1a-2a85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:49:2f:52:21:d9:bd:77:71:38:5b:27:c7:04: e3:b8:1b:f3:95:ed:82:66:c0:19:b6:e8:7d:d1:01: f1:3d:19:2c:39:11:15:f9:7d:14:77:01:2e:dd:0a: 8d:cd:33:e0:ca:9b:63:8d:5a:70:6b:29:f7:f2:26: 30:66:07:03:35:a6:72:bc:d0:be:6f:86:a5:f1:5e: d6:62:56:9a:dd:ca:ec:57:2f:d5:e0:05:79:c8:b9: 89:80:7d:99:2d:a0:0e:9a:1b:1a:3e:eb:33:cb:a3: 1f:e3:32:06:1d:66:a9:26:17:54:4c:13:21:ca:50: bc:46:fc:d8:da:8d:a5:f7:f9:3d:15:3f:f4:19:30: 04:a8:59:0e:d9:36:e7:b0:bc:bb:f1:f5:7a:af:85: 71:24:c5:c2:37:3a:a5:ec:b6:94:de:6f:fc:f7:a1: 16:a7:79:47:35:5a:44:1f:8b:ea:97:c4:f9:aa:82: 2a:1f:69:4f:9d:08:ce:9d:58:1c:01:85:ed:d1:17: e7:f8:d6:70:40:52:d3:b4:b5:5d:1c:34:6b:56:48: 98:e9:47:dc:c2:0f:63:5f:39:cc:c6:0f:11:31:5d: 54:36:05:f7:0f:c7:09:d2:62:29:29:19:79:8e:e8: 66:d2:1d:db:26:12:73:a9:f0:55:8a:63:76:38:7e: 0d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:7E:DD:99:6C:9F:4A:08:DD:DC:1C:CD:BC:6F:9F:3D:88:0A:84:AD X509v3 Authority Key Identifier: keyid:40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/6688CA76535F11EE9BC85F83C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 112.137.160.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:9e:0f:12:cf:49:01:31:76:f8:f1:ec:51:23:9b:90:ad:b7: 7b:1f:7d:f7:ce:2e:80:ec:44:58:aa:c4:a7:cf:5b:0f:42:8d: c0:d3:2a:1d:e5:d7:00:51:14:90:37:aa:97:d3:7d:ed:86:0b: 28:eb:7a:3d:a5:72:d5:6c:ea:e7:1e:fa:ea:cd:74:f9:05:c2: 46:87:d3:93:53:43:c5:8a:22:f7:61:e9:d2:48:fd:cc:46:34: 58:51:b0:38:a0:6c:0c:38:e1:6e:44:db:a2:1b:94:bd:d5:d2: 70:83:87:b2:7d:d8:1e:d8:8f:72:97:a6:a6:62:ff:95:f8:3c: c2:06:85:98:be:05:c6:72:26:d4:4a:60:74:21:b9:19:cd:6f: 77:04:49:63:31:3c:f3:c3:43:36:6b:ff:7c:54:4f:e2:7c:45: a4:e4:1d:08:85:c6:28:e8:f6:f3:21:de:75:54:c1:10:29:fb: 5e:18:9d:a9:49:a5:cc:62:3b:86:d9:dd:02:c1:c5:95:c0:d1: d2:a4:82:49:48:aa:cd:c2:8d:46:97:7c:44:ae:02:d5:78:6b: 7f:72:66:e1:67:f0:6b:45:f6:f8:7c:18:21:05:41:a3:01:48: 4e:ad:96:58:95:fe:20:c0:cf:81:a8:00:c0:e4:cc:9c:19:8a: c1:4a:5c:2c -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUNBNzgxMTAvBgNVBAUTKDQwNTYyQzE0M0EyOUNCMTlDNzBGRkM5Qjk5QjYwQkJF Q0QxRDczQjYwHhcNMjUxMTAyMTkwODEwWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OTA3YWMxYS0yYTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvkkvUiHZvXdxOFsnxwTjuBvzle2CZsAZtuh90QHxPRksOREV+X0UdwEu3QqN zTPgyptjjVpwayn38iYwZgcDNaZyvNC+b4al8V7WYlaa3crsVy/V4AV5yLmJgH2Z LaAOmhsaPuszy6Mf4zIGHWapJhdUTBMhylC8RvzY2o2l9/k9FT/0GTAEqFkO2Tbn sLy78fV6r4VxJMXCNzql7LaU3m/896EWp3lHNVpEH4vql8T5qoIqH2lPnQjOnVgc AYXt0Rfn+NZwQFLTtLVdHDRrVkiY6Ufcwg9jXznMxg8RMV1UNgX3D8cJ0mIpKRl5 juhm0h3bJhJzqfBVimN2OH4N+QIDAQABo4IClTCCApEwHQYDVR0OBBYEFLp+3Zls n0oI3dwczbxvnz2ICoStMB8GA1UdIwQYMBaAFEBWLBQ6KcsZxw/8m5m2C77NHXO2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0E3OC9CRTg4NDZEMjM1 RDgxMUVBQTczMEVDNDZDNEY5QUUwMi9RRllzRkRvcHl4bkhEX3libWJZTHZzMGRj N1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FGWXNGRG9weXhuSERfeWJtYllMdnMwZGM3WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUNBNzgvQkU4ODQ2RDIzNUQ4MTFFQUE3MzBFQzQ2QzRGOUFFMDIvNjY4OENBNzY1 MzVGMTFFRTlCQzg1RjgzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABwiaAwDQYJKoZIhvcNAQELBQADggEBAGyeDxLPSQExdvjx 7FEjm5Ctt3sffffOLoDsRFiqxKfPWw9CjcDTKh3l1wBRFJA3qpfTfe2GCyjrej2l ctVs6uce+urNdPkFwkaH05NTQ8WKIvdh6dJI/cxGNFhRsDigbAw44W5E26IblL3V 0nCDh7J92B7Yj3KXpqZi/5X4PMIGhZi+BcZyJtRKYHQhuRnNb3cESWMxPPPDQzZr /3xUT+J8RaTkHQiFxijo9vMh3nVUwRAp+14YnalJpcxiO4bZ3QLBxZXA0dKkgklI qs3CjUaXfESuAtV4a39yZuFn8GtF9vh8GCEFQaMBSE6tlliV/iDAz4GoAMDkzJwZ isFKXCw= -----END CERTIFICATE-----Generated at Wed Nov 5 05:14:58 2025 by rpki-client