$ rpki-client -vvf rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/8CA2C07889D111EFAFEB2609C4F9AE02.roa File: 8CA2C07889D111EFAFEB2609C4F9AE02.roa (raw, json) Hash identifier: 7eWRkSZdf992QxbF3h3c0q+aJY3RkuNNtdN+bDuFcbA= Subject key identifier: 17:35:BB:52:84:A2:C1:91:47:33:75:5B:26:D9:C6:78:21:DA:89:9A Certificate issuer: /CN=A911CA78/serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6 Certificate serial: 0D4A Authority key identifier: 40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/8CA2C07889D111EFAFEB2609C4F9AE02.roa Signing time: Sun 02 Nov 2025 19:08:09 +0000 ROA not before: Sun 02 Nov 2025 19:08:09 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 4202202105 IP address blocks: 49.236.202.0/24 maxlen: 24 202.71.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:05:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3402 (0xd4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CA78, serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6 Validity Not Before: Nov 2 19:08:09 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6907ac19-ce60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d6:b3:7c:a0:a6:16:41:9a:5d:35:03:89:09: e2:85:54:65:fc:0b:d6:19:84:45:d9:b0:3c:ae:35: bf:9a:46:ff:22:34:7a:81:f0:c3:76:af:5a:1f:c5: 1f:ec:e8:b9:ea:49:89:95:c3:da:a2:37:ab:3a:de: 69:f2:50:04:41:07:e0:23:59:39:95:57:a4:1a:30: 8e:6e:fb:bd:83:a5:2b:87:a1:79:b3:34:ae:b8:d4: 34:ba:eb:70:ed:5e:22:ee:59:ee:0e:b4:a6:c5:72: 2a:2d:f9:6a:b1:a7:99:59:d2:be:00:7d:a7:33:ad: d9:c9:f9:a3:99:6e:99:b1:10:1e:9b:4e:3b:fb:25: a8:79:c5:5b:57:19:c6:8c:37:32:ad:80:6b:67:a7: da:e9:3b:8e:04:92:17:df:73:91:32:b9:17:d2:4f: 60:91:73:29:28:24:32:85:08:54:3f:7e:39:e4:0c: 94:41:47:df:75:9f:2d:80:92:4a:2d:76:2d:b7:ca: f0:4c:50:50:25:90:3a:c2:c4:1e:b7:6d:aa:2f:63: 03:30:cd:9a:9c:16:c9:20:1f:4e:84:cf:f1:22:0c: 1a:be:09:71:6e:0a:90:cd:ba:50:8a:a7:b9:a5:b1: 0a:b8:d0:b7:b4:25:ed:75:62:07:7b:9a:96:cf:9f: 22:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:35:BB:52:84:A2:C1:91:47:33:75:5B:26:D9:C6:78:21:DA:89:9A X509v3 Authority Key Identifier: keyid:40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/8CA2C07889D111EFAFEB2609C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.236.202.0/24 202.71.101.0/24 Signature Algorithm: sha256WithRSAEncryption 9d:68:7c:6c:62:e1:df:5d:e4:ac:9a:23:49:10:56:c6:d2:bf: e2:3e:d9:7b:4a:fc:c0:0a:f8:a7:93:d7:91:cb:df:41:45:f1: 8b:43:eb:29:75:47:c1:73:4e:ee:40:19:62:99:34:23:df:e9: 11:29:8d:f7:d6:3c:30:0a:8b:8a:19:e7:7d:c4:90:8f:61:a7: de:a3:70:9c:2a:99:57:85:10:ef:13:47:60:44:fe:a2:a4:87: 1b:a2:ca:28:7a:eb:a2:56:93:71:95:aa:62:31:89:3f:b9:34: fe:80:55:ae:a9:58:29:dd:05:3c:a9:7c:25:d5:ef:d6:12:2a: 52:52:fa:87:81:65:43:9a:bb:b0:46:d2:49:f8:63:83:4c:1c: b8:0a:05:b2:cc:e6:8d:b3:b1:dc:26:01:bc:47:cb:6c:84:7c: 71:e9:1a:68:cc:0d:36:73:a8:ff:56:c1:86:cb:48:1b:36:1d: 17:a0:bf:bb:bd:2b:2d:1d:5c:34:a9:6a:99:26:ce:6f:0f:0f: ab:6d:d9:85:af:69:04:c7:2e:c0:2c:0b:a1:dc:81:41:7f:5f: 9b:ea:c5:8a:b1:a0:86:83:06:05:82:ff:7f:74:86:51:3b:2d: 02:1f:3f:21:1a:77:e3:c1:9b:7f:1a:61:65:eb:ef:53:68:4c: 17:1e:33:96 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICDUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUNBNzgxMTAvBgNVBAUTKDQwNTYyQzE0M0EyOUNCMTlDNzBGRkM5Qjk5QjYwQkJF Q0QxRDczQjYwHhcNMjUxMTAyMTkwODA5WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OTA3YWMxOS1jZTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAptazfKCmFkGaXTUDiQnihVRl/AvWGYRF2bA8rjW/mkb/IjR6gfDDdq9aH8Uf 7Oi56kmJlcPaojerOt5p8lAEQQfgI1k5lVekGjCObvu9g6Urh6F5szSuuNQ0uutw 7V4i7lnuDrSmxXIqLflqsaeZWdK+AH2nM63ZyfmjmW6ZsRAem047+yWoecVbVxnG jDcyrYBrZ6fa6TuOBJIX33ORMrkX0k9gkXMpKCQyhQhUP3455AyUQUffdZ8tgJJK LXYtt8rwTFBQJZA6wsQet22qL2MDMM2anBbJIB9OhM/xIgwavglxbgqQzbpQiqe5 pbEKuNC3tCXtdWIHe5qWz58ilwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFBc1u1KE osGRRzN1WybZxngh2omaMB8GA1UdIwQYMBaAFEBWLBQ6KcsZxw/8m5m2C77NHXO2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0E3OC9CRTg4NDZEMjM1 RDgxMUVBQTczMEVDNDZDNEY5QUUwMi9RRllzRkRvcHl4bkhEX3libWJZTHZzMGRj N1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FGWXNGRG9weXhuSERfeWJtYllMdnMwZGM3WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUNBNzgvQkU4ODQ2RDIzNUQ4MTFFQUE3MzBFQzQ2QzRGOUFFMDIvOENBMkMwNzg4 OUQxMTFFRkFGRUIyNjA5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAAx7MoDBADKR2UwDQYJKoZIhvcNAQELBQADggEBAJ1ofGxi 4d9d5KyaI0kQVsbSv+I+2XtK/MAK+KeT15HL30FF8YtD6yl1R8FzTu5AGWKZNCPf 6REpjffWPDAKi4oZ533EkI9hp96jcJwqmVeFEO8TR2BE/qKkhxuiyih666JWk3GV qmIxiT+5NP6AVa6pWCndBTypfCXV79YSKlJS+oeBZUOau7BG0kn4Y4NMHLgKBbLM 5o2zsdwmAbxHy2yEfHHpGmjMDTZzqP9WwYbLSBs2HRegv7u9Ky0dXDSpapkmzm8P D6tt2YWvaQTHLsAsC6HcgUF/X5vqxYqxoIaDBgWC/390hlE7LQIfPyEad+PBm38a YWXr71NoTBceM5Y= -----END CERTIFICATE-----Generated at Wed Nov 5 17:07:38 2025 by rpki-client