$ rpki-client -vvf rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/8D2CC3EE17DC11EE959DE671C4F9AE02.roa File: 8D2CC3EE17DC11EE959DE671C4F9AE02.roa (raw, json) Hash identifier: zctn/DI/I3BOanvNBzpc9IpPDcrqCUE0GkQVT4ki+nE= Subject key identifier: 29:2C:5A:91:BD:06:4A:39:AB:71:BC:BA:6C:02:63:F5:36:CF:87:78 Certificate issuer: /CN=A911CA78/serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6 Certificate serial: 0D53 Authority key identifier: 40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/8D2CC3EE17DC11EE959DE671C4F9AE02.roa Signing time: Sun 02 Nov 2025 19:08:17 +0000 ROA not before: Sun 02 Nov 2025 19:08:17 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 65037 IP address blocks: 1.9.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:05:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3411 (0xd53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CA78, serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6 Validity Not Before: Nov 2 19:08:17 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6907ac21-15ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:96:a9:0a:3b:03:ea:fb:53:68:17:fd:ea:33: b7:4e:dd:12:84:ed:39:a4:40:86:e1:3f:29:57:dc: bf:5d:9d:c9:0d:f2:84:98:9f:c2:f4:58:55:ed:eb: a5:b6:91:24:7c:ca:af:3b:1b:40:0d:3e:47:3f:52: 3c:7b:16:d1:7a:93:cb:74:ec:69:3a:fc:88:2a:66: 4b:2a:47:55:de:62:f9:1e:3f:ca:ef:ec:39:ba:fe: f3:ca:97:55:63:06:41:fa:90:43:29:03:32:b6:c7: 81:91:6f:31:c2:f3:b4:54:73:ee:80:f1:29:9a:ec: 44:cf:0a:1b:61:5f:0c:22:f4:ca:af:88:5b:6d:a1: 2d:7b:eb:af:c2:2e:b9:cd:6d:a1:63:c0:60:67:24: d2:57:e5:d9:31:f8:d9:ae:4f:80:27:28:49:4f:82: ad:1d:fd:b8:fc:9c:c4:c0:59:49:97:c7:8f:70:8d: ea:78:6b:69:51:71:a7:b6:fb:de:a2:eb:75:96:39: fe:59:55:b1:df:c8:01:f0:9f:ac:2a:86:65:f1:c4: 6a:9d:28:fa:b2:07:96:93:9e:3e:6f:63:21:be:cb: 95:0b:7e:fb:24:ad:bb:12:a0:e2:73:22:1a:da:a3: c6:2e:90:ae:ce:25:9f:9b:92:eb:d7:e7:a3:49:04: 17:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:2C:5A:91:BD:06:4A:39:AB:71:BC:BA:6C:02:63:F5:36:CF:87:78 X509v3 Authority Key Identifier: keyid:40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/8D2CC3EE17DC11EE959DE671C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.9.12.0/24 Signature Algorithm: sha256WithRSAEncryption 27:51:05:64:b7:9c:c7:9c:0f:36:10:cb:cd:12:62:56:98:10: 58:b9:c9:30:41:05:ce:2b:12:f9:af:31:7b:38:37:0a:3c:d2: 3e:b7:d6:47:ff:1c:ef:3c:d5:1d:8d:26:1d:9c:aa:1f:f4:3a: 26:8d:c8:b3:dc:bc:4c:31:aa:a3:82:7f:5d:1b:f8:c6:a9:9c: 64:d5:8a:b3:59:27:51:1d:02:47:c2:7d:d3:bf:cf:12:6d:11: b5:60:f0:e9:cb:ca:4c:3a:fa:de:a1:39:ac:bb:a9:fe:ae:a0: 7a:d8:04:26:ad:ac:47:d8:bd:47:32:1b:b4:ba:1e:5b:e3:e7: b5:7b:32:01:ac:7b:c3:b0:04:ae:4b:c7:4c:a3:b2:15:57:ff: d5:ff:45:23:20:00:c8:e2:05:21:0c:92:39:b9:38:8c:9f:1d: d4:75:f5:54:82:65:42:72:6c:20:ad:38:b2:6a:35:d5:8a:37: fa:0b:45:fc:60:c0:c0:24:60:7c:65:63:2c:1f:73:44:06:24: b1:35:d9:20:92:18:77:dc:48:6c:eb:b8:87:a5:60:21:47:bf: 81:6f:5c:aa:9f:99:f7:32:0b:9b:51:9e:73:6e:56:57:ef:90: 01:91:47:f4:40:35:ff:07:c4:f0:cc:86:63:33:d0:9b:e9:45: 62:ec:8c:8e -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUNBNzgxMTAvBgNVBAUTKDQwNTYyQzE0M0EyOUNCMTlDNzBGRkM5Qjk5QjYwQkJF Q0QxRDczQjYwHhcNMjUxMTAyMTkwODE3WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OTA3YWMyMS0xNWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ZapCjsD6vtTaBf96jO3Tt0ShO05pECG4T8pV9y/XZ3JDfKEmJ/C9FhV7eul tpEkfMqvOxtADT5HP1I8exbRepPLdOxpOvyIKmZLKkdV3mL5Hj/K7+w5uv7zypdV YwZB+pBDKQMytseBkW8xwvO0VHPugPEpmuxEzwobYV8MIvTKr4hbbaEte+uvwi65 zW2hY8BgZyTSV+XZMfjZrk+AJyhJT4KtHf24/JzEwFlJl8ePcI3qeGtpUXGntvve out1ljn+WVWx38gB8J+sKoZl8cRqnSj6sgeWk54+b2MhvsuVC377JK27EqDicyIa 2qPGLpCuziWfm5Lr1+ejSQQXGwIDAQABo4IClTCCApEwHQYDVR0OBBYEFCksWpG9 Bko5q3G8umwCY/U2z4d4MB8GA1UdIwQYMBaAFEBWLBQ6KcsZxw/8m5m2C77NHXO2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0E3OC9CRTg4NDZEMjM1 RDgxMUVBQTczMEVDNDZDNEY5QUUwMi9RRllzRkRvcHl4bkhEX3libWJZTHZzMGRj N1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FGWXNGRG9weXhuSERfeWJtYllMdnMwZGM3WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUNBNzgvQkU4ODQ2RDIzNUQ4MTFFQUE3MzBFQzQ2QzRGOUFFMDIvOEQyQ0MzRUUx N0RDMTFFRTk1OURFNjcxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAABCQwwDQYJKoZIhvcNAQELBQADggEBACdRBWS3nMecDzYQ y80SYlaYEFi5yTBBBc4rEvmvMXs4Nwo80j631kf/HO881R2NJh2cqh/0OiaNyLPc vEwxqqOCf10b+MapnGTVirNZJ1EdAkfCfdO/zxJtEbVg8OnLykw6+t6hOay7qf6u oHrYBCatrEfYvUcyG7S6Hlvj57V7MgGse8OwBK5Lx0yjshVX/9X/RSMgAMjiBSEM kjm5OIyfHdR19VSCZUJybCCtOLJqNdWKN/oLRfxgwMAkYHxlYywfc0QGJLE12SCS GHfcSGzruIelYCFHv4FvXKqfmfcyC5tRnnNuVlfvkAGRR/RANf8HxPDMhmMz0Jvp RWLsjI4= -----END CERTIFICATE-----Generated at Wed Nov 5 05:17:35 2025 by rpki-client