$ rpki-client -vvf rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/8E1079DEB08F11EF8E3C4F2FC4F9AE02.roa File: 8E1079DEB08F11EF8E3C4F2FC4F9AE02.roa (raw, json) Hash identifier: B2iTPnMxaly9ld+4G5qhnu/Dw0b6DsRttSqT1fc5gtg= Subject key identifier: EA:0B:47:78:95:96:E0:48:E1:83:E7:9B:23:1D:31:BF:82:50:AC:62 Certificate issuer: /CN=A912FC73/serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC Certificate serial: 04FE Authority key identifier: CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/8E1079DEB08F11EF8E3C4F2FC4F9AE02.roa Signing time: Mon 03 Nov 2025 00:44:52 +0000 ROA not before: Mon 03 Nov 2025 00:44:52 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 1239 IP address blocks: 113.20.48.0/20 maxlen: 20 223.29.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:44:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1278 (0x4fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FC73, serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC Validity Not Before: Nov 3 00:44:52 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=6907fb04-274e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e0:b5:2f:b2:6b:5f:4a:15:5b:c6:39:b1:f9: b5:2a:18:ab:bb:20:5e:cc:ec:24:f4:45:a6:02:69: 75:c9:3f:64:45:69:10:bd:53:f5:89:cc:90:98:2f: 42:bb:b5:7d:2e:dd:0f:e7:5d:c0:ac:61:e1:3c:bd: b2:4c:ef:15:b6:f4:e2:95:da:20:16:af:8b:1a:5e: be:40:42:63:8f:24:cf:c0:97:72:aa:95:2e:d7:2a: fb:d7:18:80:09:84:9e:fb:a0:c6:8d:07:ba:2c:e2: 16:6c:f5:09:90:19:5b:98:52:5d:ca:3c:49:f2:71: 79:ca:3e:a5:81:f6:f2:ed:d6:bd:f1:16:b3:aa:1b: da:ec:8b:1e:02:42:86:be:51:02:6c:1f:68:79:87: 26:9e:68:2c:23:38:e9:8c:c5:4c:ce:78:4d:7f:fe: 11:01:18:49:35:0d:8f:c9:a9:1f:3f:37:7e:fb:c7: d0:4b:64:33:c7:bd:ec:ec:b1:ca:10:ca:16:b2:e0: cd:42:a1:a3:e5:37:3e:4a:91:62:da:ea:30:0e:0f: bd:d0:a9:16:b1:9e:ff:15:e1:97:1a:0e:7c:a5:5a: 8c:5d:ed:59:fe:1c:ae:fb:62:b8:fe:15:eb:03:c9: 39:5f:55:be:8e:2c:16:02:f9:e2:8c:c8:dc:7c:69: d9:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:0B:47:78:95:96:E0:48:E1:83:E7:9B:23:1D:31:BF:82:50:AC:62 X509v3 Authority Key Identifier: keyid:CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/8E1079DEB08F11EF8E3C4F2FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 113.20.48.0/20 223.29.128.0/19 Signature Algorithm: sha256WithRSAEncryption 66:b1:4a:0d:07:dc:f9:2c:75:c0:a9:76:6b:ba:85:00:a1:c1: 5e:f9:cd:b8:58:20:6e:e4:e5:6f:c2:c1:16:5e:39:7a:5d:db: 68:5d:ab:a1:76:a5:65:bc:e9:87:cb:c4:9f:cd:11:e5:3c:32: 61:41:91:37:16:71:c3:b7:aa:19:ed:dd:69:26:c6:f6:20:48: c7:0d:11:aa:46:cf:ed:4b:70:d3:11:5e:a3:46:9c:0f:e1:40: d5:b8:60:5b:d0:dd:7f:8b:fb:bf:70:b3:64:78:54:32:27:2a: b2:b8:98:6d:73:09:c6:bc:4b:83:f5:51:9a:83:97:5e:32:d1: 76:d5:67:86:90:f3:36:f2:81:2e:92:f1:87:48:73:e7:d3:80: 87:2c:96:24:d7:07:f0:7f:e3:f1:2f:8b:f3:a3:5d:df:f2:b1: 3d:b4:c5:a7:e9:c3:19:18:09:3c:1f:e9:4c:ec:03:37:f8:17: cd:02:a5:c8:00:d7:77:84:22:0c:f8:70:58:48:51:ee:59:bd: ed:e3:87:c1:a8:ca:2c:15:cd:a7:ac:8d:67:69:13:e4:03:04: 47:3c:5c:f0:63:66:0f:41:5a:eb:b3:c9:cf:a3:0c:05:91:1e: 1d:9a:d6:a3:fa:d4:84:e3:17:e1:3e:0b:a7:f5:b8:db:f7:e1: fc:83:36:9f -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZDNzMxMTAvBgNVBAUTKENFRTQxNjAxRUVBOUY1MUIzNTI1REE1NURENEFDOTVD RUZBRjVBQkMwHhcNMjUxMTAzMDA0NDUyWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTA3ZmIwNC0yNzRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzeC1L7JrX0oVW8Y5sfm1KhiruyBezOwk9EWmAml1yT9kRWkQvVP1icyQmC9C u7V9Lt0P513ArGHhPL2yTO8VtvTildogFq+LGl6+QEJjjyTPwJdyqpUu1yr71xiA CYSe+6DGjQe6LOIWbPUJkBlbmFJdyjxJ8nF5yj6lgfby7da98Razqhva7IseAkKG vlECbB9oeYcmnmgsIzjpjMVMznhNf/4RARhJNQ2PyakfPzd++8fQS2Qzx73s7LHK EMoWsuDNQqGj5Tc+SpFi2uowDg+90KkWsZ7/FeGXGg58pVqMXe1Z/hyu+2K4/hXr A8k5X1W+jiwWAvnijMjcfGnZVQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFOoLR3iV luBI4YPnmyMdMb+CUKxiMB8GA1UdIwQYMBaAFM7kFgHuqfUbNSXaVd1KyVzvr1q8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkM3My8wMTQ0Q0RGODlG MzQxMUVDOUNFQkM2NzBDNEY5QUUwMi96dVFXQWU2cDlSczFKZHBWM1VySlhPLXZX cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p1UVdBZTZwOVJzMUpkcFYzVXJKWE8tdldydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkZDNzMvMDE0NENERjg5RjM0MTFFQzlDRUJDNjcwQzRGOUFFMDIvOEUxMDc5REVC MDhGMTFFRjhFM0M0RjJGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBARxFDADBAXfHYAwDQYJKoZIhvcNAQELBQADggEBAGaxSg0H 3PksdcCpdmu6hQChwV75zbhYIG7k5W/CwRZeOXpd22hdq6F2pWW86YfLxJ/NEeU8 MmFBkTcWccO3qhnt3WkmxvYgSMcNEapGz+1LcNMRXqNGnA/hQNW4YFvQ3X+L+79w s2R4VDInKrK4mG1zCca8S4P1UZqDl14y0XbVZ4aQ8zbygS6S8YdIc+fTgIcsliTX B/B/4/Evi/OjXd/ysT20xafpwxkYCTwf6UzsAzf4F80CpcgA13eEIgz4cFhIUe5Z ve3jh8GoyiwVzaesjWdpE+QDBEc8XPBjZg9BWuuzyc+jDAWRHh2a1qP61ITjF+E+ C6f1uNv34fyDNp8= -----END CERTIFICATE-----Generated at Tue Nov 4 08:33:14 2025 by rpki-client