$ rpki-client -vvf rpki.apnic.net/member_repository/A9129757/32934CECB37A11EF9C07C65BC4F9AE02/46A6690EB41911EFA68E0826C4F9AE02.roa File: 46A6690EB41911EFA68E0826C4F9AE02.roa (raw, json) Hash identifier: PLX4kBW7Q6lIgEXicoBPIcX2q4HXvsbwpw0VmOF96dY= Subject key identifier: C2:A0:1B:81:D9:C4:49:97:BE:8E:FD:61:72:75:71:46:10:82:D9:29 Certificate issuer: /CN=A9129757/serialNumber=D3BA44DA5CBDC1CC5125E2C1007B6CDB7DDCDC85 Certificate serial: 25 Authority key identifier: D3:BA:44:DA:5C:BD:C1:CC:51:25:E2:C1:00:7B:6C:DB:7D:DC:DC:85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07pE2ly9wcxRJeLBAHts233c3IU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129757/32934CECB37A11EF9C07C65BC4F9AE02/46A6690EB41911EFA68E0826C4F9AE02.roa Signing time: Mon 03 Feb 2025 06:59:48 +0000 ROA not before: Mon 03 Feb 2025 06:59:48 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 17481 IP address blocks: 203.79.16.0/24 maxlen: 24 203.79.17.0/24 maxlen: 24 203.79.18.0/24 maxlen: 24 203.79.19.0/24 maxlen: 24 203.79.20.0/24 maxlen: 24 203.79.21.0/24 maxlen: 24 203.79.22.0/24 maxlen: 24 203.79.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129757/32934CECB37A11EF9C07C65BC4F9AE02/07pE2ly9wcxRJeLBAHts233c3IU.crl rsync://rpki.apnic.net/member_repository/A9129757/32934CECB37A11EF9C07C65BC4F9AE02/07pE2ly9wcxRJeLBAHts233c3IU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07pE2ly9wcxRJeLBAHts233c3IU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:23:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37 (0x25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129757, serialNumber=D3BA44DA5CBDC1CC5125E2C1007B6CDB7DDCDC85 Validity Not Before: Feb 3 06:59:48 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=67a06964-e6c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e8:a3:ae:c7:15:e1:16:a7:c4:2a:09:b4:f9: 1c:43:c8:fe:e8:94:32:62:9c:5f:f9:a5:61:e4:64: d7:c4:7f:29:05:8b:63:a7:59:25:75:18:c5:9c:15: 8a:25:02:f7:2b:98:f5:7a:cf:69:54:16:d0:76:ed: 7d:41:0a:7b:40:c5:93:5d:be:45:40:7f:08:87:e4: 26:9d:d8:9d:3e:6d:f7:cf:53:6b:07:e0:a9:d6:fb: 89:e1:14:87:82:0b:25:d7:3c:50:ad:e0:af:bf:6e: 5c:92:cd:62:80:31:08:76:02:e5:aa:53:a3:ef:33: c7:eb:4e:fb:10:c9:00:90:18:20:70:c6:f6:5d:cc: fb:8b:71:ca:7a:2e:d0:f3:09:0a:35:77:80:cc:a7: d1:50:84:ac:63:ae:f9:ea:fb:a8:68:e8:f5:95:60: 7c:d5:f6:e0:d6:3f:a8:ed:85:ec:d8:ca:bd:33:e6: 20:fa:90:a9:3e:34:31:cc:8e:dd:d0:37:30:bb:09: 72:66:01:5c:bf:69:56:93:7f:45:52:da:c1:45:19: a9:fc:35:56:42:d1:75:24:32:be:b1:3f:50:63:44: 5e:e5:9d:55:e1:24:03:6f:93:39:26:13:90:66:4d: 9f:5f:56:eb:43:5b:bd:0a:3b:0a:ed:69:f7:4a:6b: be:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:A0:1B:81:D9:C4:49:97:BE:8E:FD:61:72:75:71:46:10:82:D9:29 X509v3 Authority Key Identifier: keyid:D3:BA:44:DA:5C:BD:C1:CC:51:25:E2:C1:00:7B:6C:DB:7D:DC:DC:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129757/32934CECB37A11EF9C07C65BC4F9AE02/07pE2ly9wcxRJeLBAHts233c3IU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07pE2ly9wcxRJeLBAHts233c3IU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129757/32934CECB37A11EF9C07C65BC4F9AE02/46A6690EB41911EFA68E0826C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.79.16.0/21 Signature Algorithm: sha256WithRSAEncryption 97:dd:9f:93:97:19:29:44:68:1c:9e:2c:9b:3f:15:cc:e0:8e: 59:01:d6:e1:5b:ad:c8:e6:36:b1:36:9d:95:42:4b:cb:77:05: 28:d1:08:e9:7e:6c:66:d2:92:24:63:80:fb:d1:17:a3:38:2d: c4:aa:c4:1e:b8:78:bf:3e:a9:fa:3c:40:00:08:c5:5c:3c:56: 4f:cf:ae:17:46:fb:52:11:82:a4:03:c6:c5:f0:61:f4:ac:54: 99:04:92:e7:be:0c:09:cd:52:af:fe:a3:3a:6f:61:ff:77:87: 9a:84:24:9f:cc:18:88:63:d0:a4:1f:89:dc:42:ce:07:38:ca: da:c5:35:b8:91:09:3b:e7:87:f2:2d:cb:ed:b0:28:ec:57:ec: 32:31:1d:24:03:39:fa:6c:f9:20:c3:6d:d4:07:dd:de:ef:ba: 04:31:33:57:ab:63:4c:05:5a:d4:3a:83:88:72:83:2a:a2:1f: 46:03:d5:19:e9:a0:50:13:08:47:b8:a9:3d:07:b3:27:2c:c1: dc:a6:05:5d:e0:ef:99:8f:b1:4a:c5:55:cf:0d:d0:84:1e:d2: c5:2c:ae:5b:89:a9:7d:ba:37:ec:92:82:58:a9:71:0d:22:2e: d8:a2:db:1b:c9:cb:4b:df:38:2e:bd:ba:a0:0e:a3:2f:09:4e: 15:07:dd:84 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBJTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy OTc1NzExMC8GA1UEBRMoRDNCQTQ0REE1Q0JEQzFDQzUxMjVFMkMxMDA3QjZDREI3 RERDREM4NTAeFw0yNTAyMDMwNjU5NDhaFw0yNjAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3YTA2OTY0LWU2YzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDP6KOuxxXhFqfEKgm0+RxDyP7olDJinF/5pWHkZNfEfykFi2OnWSV1GMWcFYol AvcrmPV6z2lUFtB27X1BCntAxZNdvkVAfwiH5Cad2J0+bffPU2sH4KnW+4nhFIeC CyXXPFCt4K+/blySzWKAMQh2AuWqU6PvM8frTvsQyQCQGCBwxvZdzPuLccp6LtDz CQo1d4DMp9FQhKxjrvnq+6ho6PWVYHzV9uDWP6jthezYyr0z5iD6kKk+NDHMjt3Q NzC7CXJmAVy/aVaTf0VS2sFFGan8NVZC0XUkMr6xP1BjRF7lnVXhJANvkzkmE5Bm TZ9fVutDW70KOwrtafdKa77JAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUwqAbgdnE SZe+jv1hcnVxRhCC2SkwHwYDVR0jBBgwFoAU07pE2ly9wcxRJeLBAHts233c3IUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI5NzU3LzMyOTM0Q0VDQjM3 QTExRUY5QzA3QzY1QkM0RjlBRTAyLzA3cEUybHk5d2N4UkplTEJBSHRzMjMzYzNJ VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMDdwRTJseTl3Y3hSSmVMQkFIdHMyMzNjM0lVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTc1Ny8zMjkzNENFQ0IzN0ExMUVGOUMwN0M2NUJDNEY5QUUwMi80NkE2NjkwRUI0 MTkxMUVGQTY4RTA4MjZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEA8tPEDANBgkqhkiG9w0BAQsFAAOCAQEAl92fk5cZKURoHJ4s mz8VzOCOWQHW4VutyOY2sTadlUJLy3cFKNEI6X5sZtKSJGOA+9EXozgtxKrEHrh4 vz6p+jxAAAjFXDxWT8+uF0b7UhGCpAPGxfBh9KxUmQSS574MCc1Sr/6jOm9h/3eH moQkn8wYiGPQpB+J3ELOBzjK2sU1uJEJO+eH8i3L7bAo7FfsMjEdJAM5+mz5IMNt 1Afd3u+6BDEzV6tjTAVa1DqDiHKDKqIfRgPVGemgUBMIR7ipPQezJyzB3KYFXeDv mY+xSsVVzw3QhB7SxSyuW4mpfbo37JKCWKlxDSIu2KLbG8nLS984Lr26oA6jLwlO FQfdhA== -----END CERTIFICATE-----Generated at Wed Nov 5 13:32:58 2025 by rpki-client