$ rpki-client -vvf rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/8E2676DC17DC11EE959DE671C4F9AE02.roa File: 8E2676DC17DC11EE959DE671C4F9AE02.roa (raw, json) Hash identifier: ba+G7MIs0RgCQosv/d6yBO5KvwyRloGnmrJta7ui9GM= Subject key identifier: AA:4F:38:AA:7B:C9:84:42:51:5F:2E:E6:6F:F8:C8:42:93:A3:6B:69 Certificate issuer: /CN=A911CA78/serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6 Certificate serial: 0D55 Authority key identifier: 40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/8E2676DC17DC11EE959DE671C4F9AE02.roa Signing time: Sun 02 Nov 2025 19:08:19 +0000 ROA not before: Sun 02 Nov 2025 19:08:19 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 65077 IP address blocks: 1.9.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:05:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3413 (0xd55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CA78, serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6 Validity Not Before: Nov 2 19:08:19 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6907ac23-2859 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5b:b1:f3:74:a4:23:04:9d:c0:32:6f:9d:95: ee:f1:6c:41:a5:cf:22:70:23:ca:0e:91:6f:d5:c8: 0d:74:60:d0:08:e2:68:cb:55:77:24:52:1f:3d:cf: 9e:a8:4d:c6:6d:9e:75:4f:48:e9:72:0a:1c:4e:09: c0:ab:e4:10:7e:ae:11:04:12:de:74:55:84:49:f8: bd:ff:4f:89:16:7b:f0:96:7a:d1:47:75:b9:29:0e: aa:86:cf:fa:83:54:c6:43:1e:cb:72:25:b0:ec:4a: a6:01:7d:45:25:8d:94:16:36:f7:2a:01:4b:b3:82: f0:7f:60:2b:0a:ec:3e:02:bb:46:a9:ee:1b:85:26: e7:77:ea:04:ea:20:6b:59:8f:4a:5e:e1:14:74:8f: ce:c2:38:c1:d7:52:fd:58:81:01:ee:f8:4f:96:14: f0:dc:ea:04:c2:aa:87:29:48:05:eb:2e:bb:fd:0e: f9:96:f3:cb:fd:5f:42:ad:37:05:8a:2e:87:fd:c3: ac:42:e0:bd:74:48:24:e7:a2:9d:f3:49:4e:ee:85: 31:71:69:24:7d:48:02:44:0e:df:c8:a5:a4:9e:bc: 93:a4:dc:91:c8:b4:14:45:9d:b3:f6:96:b0:06:31: 43:2e:55:f9:b4:4f:9c:19:85:30:db:da:1f:5c:39: a6:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:4F:38:AA:7B:C9:84:42:51:5F:2E:E6:6F:F8:C8:42:93:A3:6B:69 X509v3 Authority Key Identifier: keyid:40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/8E2676DC17DC11EE959DE671C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.9.31.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:89:51:3c:89:06:7f:35:3d:9a:68:47:bf:2c:4a:70:b4:af: 08:82:ae:f0:e8:59:96:bc:4f:ea:9d:28:c5:33:d6:d2:ff:0b: a8:b0:0e:15:84:b7:fa:a9:1b:27:89:78:28:a2:3b:10:3d:a7: d7:e7:a7:9c:5f:cb:4e:67:4d:f7:b5:cd:78:4f:fc:8d:56:61: f0:59:09:75:73:eb:bc:69:f5:1b:33:37:c3:68:fe:cd:a3:2b: 16:df:24:40:95:aa:3f:9f:fd:db:5d:4f:ab:48:68:10:ec:11: 2f:db:d8:bb:35:8a:95:c3:27:ea:db:3b:b4:d4:c7:94:56:cc: 6a:5c:bc:b0:9e:d6:df:2a:dc:b0:79:f1:8b:5a:bc:57:ad:05: 15:c8:cf:ca:64:be:3b:98:df:e8:4c:b7:a4:10:7a:bd:53:f7: ca:1a:d9:c5:72:a8:d9:6b:3f:1f:a6:3f:a1:1b:b5:72:f8:98: 70:09:24:fc:74:42:57:1b:53:cb:f1:93:0f:8d:2d:fb:6b:09: 4e:84:da:b9:14:1c:c3:55:48:53:ac:8d:4a:aa:61:7b:7a:73: 59:c4:25:85:88:ed:2a:8a:c5:3f:1d:1c:39:5c:3a:a7:08:6e: 56:7f:f2:ff:4e:21:6a:8f:49:74:c2:62:95:8e:79:ee:a8:92: 91:be:3f:f4 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUNBNzgxMTAvBgNVBAUTKDQwNTYyQzE0M0EyOUNCMTlDNzBGRkM5Qjk5QjYwQkJF Q0QxRDczQjYwHhcNMjUxMTAyMTkwODE5WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OTA3YWMyMy0yODU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsVux83SkIwSdwDJvnZXu8WxBpc8icCPKDpFv1cgNdGDQCOJoy1V3JFIfPc+e qE3GbZ51T0jpcgocTgnAq+QQfq4RBBLedFWESfi9/0+JFnvwlnrRR3W5KQ6qhs/6 g1TGQx7LciWw7EqmAX1FJY2UFjb3KgFLs4Lwf2ArCuw+ArtGqe4bhSbnd+oE6iBr WY9KXuEUdI/OwjjB11L9WIEB7vhPlhTw3OoEwqqHKUgF6y67/Q75lvPL/V9CrTcF ii6H/cOsQuC9dEgk56Kd80lO7oUxcWkkfUgCRA7fyKWknryTpNyRyLQURZ2z9paw BjFDLlX5tE+cGYUw29ofXDmmgQIDAQABo4IClTCCApEwHQYDVR0OBBYEFKpPOKp7 yYRCUV8u5m/4yEKTo2tpMB8GA1UdIwQYMBaAFEBWLBQ6KcsZxw/8m5m2C77NHXO2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0E3OC9CRTg4NDZEMjM1 RDgxMUVBQTczMEVDNDZDNEY5QUUwMi9RRllzRkRvcHl4bkhEX3libWJZTHZzMGRj N1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FGWXNGRG9weXhuSERfeWJtYllMdnMwZGM3WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUNBNzgvQkU4ODQ2RDIzNUQ4MTFFQUE3MzBFQzQ2QzRGOUFFMDIvOEUyNjc2REMx N0RDMTFFRTk1OURFNjcxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAABCR8wDQYJKoZIhvcNAQELBQADggEBAE+JUTyJBn81PZpo R78sSnC0rwiCrvDoWZa8T+qdKMUz1tL/C6iwDhWEt/qpGyeJeCiiOxA9p9fnp5xf y05nTfe1zXhP/I1WYfBZCXVz67xp9RszN8No/s2jKxbfJECVqj+f/dtdT6tIaBDs ES/b2Ls1ipXDJ+rbO7TUx5RWzGpcvLCe1t8q3LB58YtavFetBRXIz8pkvjuY3+hM t6QQer1T98oa2cVyqNlrPx+mP6EbtXL4mHAJJPx0QlcbU8vxkw+NLftrCU6E2rkU HMNVSFOsjUqqYXt6c1nEJYWI7SqKxT8dHDlcOqcIblZ/8v9OIWqPSXTCYpWOee6o kpG+P/Q= -----END CERTIFICATE-----Generated at Wed Nov 5 13:36:26 2025 by rpki-client