$ rpki-client -vvf rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/E73A5E40A28C11F0A6491A72C4F9AE02.roa File: E73A5E40A28C11F0A6491A72C4F9AE02.roa (raw, json) Hash identifier: tcOXOuYgGu+RB0bUc2Sne4w/DApsR3iV2dNestsnCuc= Subject key identifier: 55:4A:60:E6:4B:B9:2A:0B:AD:46:70:F4:76:EF:85:28:13:10:52:42 Certificate issuer: /CN=A911DFC9/serialNumber=7665E2835D160085E31EC245222D4B2F7E484409 Certificate serial: 59 Authority key identifier: 76:65:E2:83:5D:16:00:85:E3:1E:C2:45:22:2D:4B:2F:7E:48:44:09 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dmXig10WAIXjHsJFIi1LL35IRAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/E73A5E40A28C11F0A6491A72C4F9AE02.roa Signing time: Mon 06 Oct 2025 08:17:31 +0000 ROA not before: Mon 06 Oct 2025 08:17:31 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 401701 IP address blocks: 165.99.42.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.crl rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dmXig10WAIXjHsJFIi1LL35IRAk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:08:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 89 (0x59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DFC9, serialNumber=7665E2835D160085E31EC245222D4B2F7E484409 Validity Not Before: Oct 6 08:17:31 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=68e37b1a-5e8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e7:d3:95:cb:c2:dd:d9:70:5d:66:c8:34:e6: bc:36:3b:b9:fe:4c:ba:04:c3:45:e1:83:31:b1:99: 92:c9:b7:b3:e1:dc:2e:43:89:f1:c5:51:7d:9b:49: 59:72:a1:ad:c7:c6:f0:21:ab:c5:be:02:73:7d:93: 27:c3:c0:2b:e4:fb:a8:30:45:04:63:2f:45:ac:df: bc:40:eb:fd:08:b8:33:64:38:4a:60:fd:a2:88:3a: 36:d7:dc:98:23:ac:a9:ae:e2:7a:fa:1f:ca:18:fe: 12:63:d9:0b:f8:0f:9d:0c:5e:02:98:19:e8:99:f2: 22:16:9f:d9:58:d9:a1:7d:5b:0b:8a:f3:3d:f3:f3: 54:98:24:7e:da:fb:1d:4e:1a:40:23:7d:fc:16:90: 88:57:81:72:fd:b1:90:4e:73:58:d7:3c:51:85:bc: 61:f7:eb:f7:a2:1f:60:b5:f3:dc:59:9e:56:9f:f2: d8:24:8a:15:26:e0:d3:3b:2f:8d:6e:e5:1c:eb:df: 02:f5:20:2d:14:9a:5c:72:21:44:29:db:e0:33:0a: d6:cc:99:04:01:b1:88:ae:f1:23:67:c3:07:04:53: 10:6e:af:1c:d1:20:59:33:7f:ee:a4:4a:39:13:8d: d9:89:7c:10:ad:34:64:ff:50:dc:f0:88:e7:0b:7a: d0:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:4A:60:E6:4B:B9:2A:0B:AD:46:70:F4:76:EF:85:28:13:10:52:42 X509v3 Authority Key Identifier: keyid:76:65:E2:83:5D:16:00:85:E3:1E:C2:45:22:2D:4B:2F:7E:48:44:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dmXig10WAIXjHsJFIi1LL35IRAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/E73A5E40A28C11F0A6491A72C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 165.99.42.0/23 Signature Algorithm: sha256WithRSAEncryption 8d:43:a3:e3:08:57:3d:1e:24:57:90:43:04:e6:43:11:34:92: fb:00:56:de:df:91:f6:07:4c:c9:eb:90:0c:6c:a2:71:67:67: d9:66:9b:b2:6b:46:9b:cd:dd:53:dd:bc:90:06:53:1a:a7:1a: d4:fd:94:4e:bf:e1:6e:d4:58:df:2a:9f:10:80:fd:df:9b:c6: 1b:fd:18:89:b3:54:5c:ab:b9:3f:66:11:1c:08:2b:73:05:6d: 77:e8:a6:34:b2:7b:2f:b0:1c:ed:3f:47:7b:86:3a:41:9a:49: 80:1a:dd:3c:2d:96:9d:ad:40:e7:e0:b1:bc:83:e0:c6:33:7e: 95:86:b3:96:e0:83:78:3e:36:2d:f4:73:1b:7c:1c:d4:e4:d3: bd:11:22:c4:d0:49:80:17:27:ca:4e:f6:bc:96:fd:f8:2c:fd: a3:f8:bc:bf:3f:04:c0:d7:31:78:d5:56:b2:fa:d8:fd:7e:5a: 67:0e:60:5b:fa:4b:d0:c8:62:f8:86:d3:7a:3c:2c:96:a2:68: 07:3d:ea:3b:e3:1a:00:43:02:db:be:75:67:dc:72:50:4d:6d: 23:70:95:75:9b:6f:cb:e9:67:68:5f:8a:36:aa:1e:bd:05:df: 5d:65:b3:aa:50:a1:19:3e:1f:e6:c3:03:bd:a2:88:b2:b2:62: f3:9a:3a:4a -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBWTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx REZDOTExMC8GA1UEBRMoNzY2NUUyODM1RDE2MDA4NUUzMUVDMjQ1MjIyRDRCMkY3 RTQ4NDQwOTAeFw0yNTEwMDYwODE3MzFaFw0yNjA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4ZTM3YjFhLTVlOGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDX59OVy8Ld2XBdZsg05rw2O7n+TLoEw0XhgzGxmZLJt7Ph3C5DifHFUX2bSVly oa3HxvAhq8W+AnN9kyfDwCvk+6gwRQRjL0Ws37xA6/0IuDNkOEpg/aKIOjbX3Jgj rKmu4nr6H8oY/hJj2Qv4D50MXgKYGeiZ8iIWn9lY2aF9WwuK8z3z81SYJH7a+x1O GkAjffwWkIhXgXL9sZBOc1jXPFGFvGH36/eiH2C189xZnlaf8tgkihUm4NM7L41u 5Rzr3wL1IC0UmlxyIUQp2+AzCtbMmQQBsYiu8SNnwwcEUxBurxzRIFkzf+6kSjkT jdmJfBCtNGT/UNzwiOcLetAtAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUVUpg5ku5 KgutRnD0du+FKBMQUkIwHwYDVR0jBBgwFoAUdmXig10WAIXjHsJFIi1LL35IRAkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFERkM5LzhEMzVFODJFMzAy QzExRjA4Nzc2NEEyQkM0RjlBRTAyL2RtWGlnMTBXQUlYakhzSkZJaTFMTDM1SVJB ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZG1YaWcxMFdBSVhqSHNKRklpMUxMMzVJUkFrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REZDOS84RDM1RTgyRTMwMkMxMUYwODc3NjRBMkJDNEY5QUUwMi9FNzNBNUU0MEEy OEMxMUYwQTY0OTFBNzJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaVjKjANBgkqhkiG9w0BAQsFAAOCAQEAjUOj4whXPR4kV5BD BOZDETSS+wBW3t+R9gdMyeuQDGyicWdn2WabsmtGm83dU928kAZTGqca1P2UTr/h btRY3yqfEID935vGG/0YibNUXKu5P2YRHAgrcwVtd+imNLJ7L7Ac7T9He4Y6QZpJ gBrdPC2Wna1A5+CxvIPgxjN+lYazluCDeD42LfRzG3wc1OTTvREixNBJgBcnyk72 vJb9+Cz9o/i8vz8EwNcxeNVWsvrY/X5aZw5gW/pL0Mhi+IbTejwslqJoBz3qO+Ma AEMC2751Z9xyUE1tI3CVdZtvy+lnaF+KNqoevQXfXWWzqlChGT4f5sMDvaKIsrJi 85o6Sg== -----END CERTIFICATE-----Generated at Tue Nov 4 21:33:55 2025 by rpki-client