$ rpki-client -vvf rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/0919A7B69C4111F0A9483031C4F9AE02.roa File: 0919A7B69C4111F0A9483031C4F9AE02.roa (raw, json) Hash identifier: WAKRMBYdCNNPwO0lju5L+3xdfnFpvUpYnLtfFW5BMDI= Subject key identifier: BA:A7:D1:CF:AC:2A:81:3E:16:3A:90:B2:73:45:52:23:2C:F8:31:5B Certificate issuer: /CN=A9135D1F/serialNumber=0CAB68E069083A4388E8FC69758F045962FD01AF Certificate serial: 15 Authority key identifier: 0C:AB:68:E0:69:08:3A:43:88:E8:FC:69:75:8F:04:59:62:FD:01:AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKto4GkIOkOI6PxpdY8EWWL9Aa8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/0919A7B69C4111F0A9483031C4F9AE02.roa Signing time: Sun 28 Sep 2025 07:59:19 +0000 ROA not before: Sun 28 Sep 2025 07:59:19 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 208185 IP address blocks: 203.21.65.0/24 maxlen: 24 203.28.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.crl rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKto4GkIOkOI6PxpdY8EWWL9Aa8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:51:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135D1F, serialNumber=0CAB68E069083A4388E8FC69758F045962FD01AF Validity Not Before: Sep 28 07:59:19 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68d8ead7-6123 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:8a:64:48:90:ae:81:28:89:b7:41:db:fa:8b: b3:d6:4e:70:ad:e4:d4:e7:12:87:5a:44:5e:44:11: 46:3d:32:bd:2b:b3:12:d7:c8:62:da:67:cc:15:69: 05:60:a8:89:73:24:6c:29:65:de:d4:6a:64:4e:6b: fc:ae:28:3e:ef:48:9b:8e:1a:cc:13:ee:f7:fc:1b: 12:10:95:6d:5f:d7:e4:cf:f5:86:86:e0:0f:5f:04: 0f:a2:c5:a0:36:6c:4c:91:7a:59:bb:fe:d5:02:2e: 20:86:8b:45:a1:78:d9:8c:10:b8:2d:47:c9:f8:30: c4:f9:dc:4a:8c:a4:ee:f1:4a:69:89:0d:76:31:18: 85:42:ca:d2:0f:f3:b3:62:b3:2f:31:c6:54:88:9d: cc:9c:04:f4:b4:d3:81:2c:20:bd:79:cf:1d:a3:c3: 4a:68:9b:dc:0a:9b:56:53:95:60:9c:5e:e1:8f:5f: 00:de:6f:62:a7:f6:be:c1:19:e0:e1:11:ad:86:b9: ae:17:a3:a4:0a:9b:72:b8:a8:66:b9:74:a3:7c:ce: aa:22:9a:a2:b4:f1:5a:31:b0:6c:a1:8c:75:94:b2: ac:c1:68:72:cb:68:fe:dd:32:34:ae:af:2c:d6:81: 1c:a0:0f:df:09:a8:e1:cd:1c:3d:7e:63:bd:2b:36: 49:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:A7:D1:CF:AC:2A:81:3E:16:3A:90:B2:73:45:52:23:2C:F8:31:5B X509v3 Authority Key Identifier: keyid:0C:AB:68:E0:69:08:3A:43:88:E8:FC:69:75:8F:04:59:62:FD:01:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/DKto4GkIOkOI6PxpdY8EWWL9Aa8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKto4GkIOkOI6PxpdY8EWWL9Aa8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135D1F/AD2021A4977411F080BF1E64C4F9AE02/0919A7B69C4111F0A9483031C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.21.65.0/24 203.28.195.0/24 Signature Algorithm: sha256WithRSAEncryption b4:0a:62:f0:61:bf:25:fc:4a:4d:ef:14:ba:7b:ac:65:ae:c7: 0c:38:36:b5:48:09:4a:1f:b9:1f:6c:a9:dd:f5:76:86:ce:7a: 17:80:f0:08:0d:6c:8e:43:41:ab:60:9d:2c:4d:0f:88:79:49: f6:bc:47:7a:35:e1:5b:8b:2b:9f:b7:98:81:00:73:ff:60:c2: b9:da:e9:e6:bd:31:f0:be:5d:b8:d7:a0:04:bd:4b:97:0c:86: 14:08:77:c1:e4:5d:ab:0d:44:b5:20:79:77:d0:3b:b6:4d:6e: f1:5c:9d:e5:e4:7d:68:f2:14:c9:37:7f:77:d1:e5:14:32:87: 04:bf:4b:87:95:c6:1f:12:7a:d8:9a:ba:70:c3:cb:f1:ae:3a: 84:40:e7:df:8e:cb:d9:ee:93:0c:f0:01:84:b5:02:a5:e3:53: 2f:09:b4:0c:aa:51:48:cd:05:b1:89:71:bc:8c:42:53:73:12: 39:9f:5c:95:71:26:00:8d:78:95:87:3e:81:22:41:48:dd:ed: b9:b7:78:4a:6f:33:62:ac:31:d3:d0:05:17:a3:6c:cf:46:e6: c3:e1:6e:2a:a3:ab:7b:4f:a7:88:d4:45:cf:63:33:8d:5a:fa: 4f:57:0e:95:19:72:b7:a1:62:28:14:0a:5c:51:48:5c:40:4e: 6b:58:7d:00 -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NUQxRjExMC8GA1UEBRMoMENBQjY4RTA2OTA4M0E0Mzg4RThGQzY5NzU4RjA0NTk2 MkZEMDFBRjAeFw0yNTA5MjgwNzU5MTlaFw0yNjEwMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4ZDhlYWQ3LTYxMjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCximRIkK6BKIm3Qdv6i7PWTnCt5NTnEodaRF5EEUY9Mr0rsxLXyGLaZ8wVaQVg qIlzJGwpZd7UamROa/yuKD7vSJuOGswT7vf8GxIQlW1f1+TP9YaG4A9fBA+ixaA2 bEyRelm7/tUCLiCGi0WheNmMELgtR8n4MMT53EqMpO7xSmmJDXYxGIVCytIP87Ni sy8xxlSIncycBPS004EsIL15zx2jw0pom9wKm1ZTlWCcXuGPXwDeb2Kn9r7BGeDh Ea2Gua4Xo6QKm3K4qGa5dKN8zqoimqK08VoxsGyhjHWUsqzBaHLLaP7dMjSuryzW gRygD98JqOHNHD1+Y70rNkmPAgMBAAGjggKbMIIClzAdBgNVHQ4EFgQUuqfRz6wq gT4WOpCyc0VSIyz4MVswHwYDVR0jBBgwFoAUDKto4GkIOkOI6PxpdY8EWWL9Aa8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1RDFGL0FEMjAyMUE0OTc3 NDExRjA4MEJGMUU2NEM0RjlBRTAyL0RLdG80R2tJT2tPSTZQeHBkWThFV1dMOUFh OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvREt0bzRHa0lPa09JNlB4cGRZOEVXV0w5QWE4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NUQxRi9BRDIwMjFBNDk3NzQxMUYwODBCRjFFNjRDNEY5QUUwMi8wOTE5QTdCNjlD NDExMUYwQTk0ODMwMzFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQW MBQwEgQCAAEwDAMEAMsVQQMEAMscwzANBgkqhkiG9w0BAQsFAAOCAQEAtApi8GG/ JfxKTe8UunusZa7HDDg2tUgJSh+5H2yp3fV2hs56F4DwCA1sjkNBq2CdLE0PiHlJ 9rxHejXhW4srn7eYgQBz/2DCudrp5r0x8L5duNegBL1LlwyGFAh3weRdqw1EtSB5 d9A7tk1u8Vyd5eR9aPIUyTd/d9HlFDKHBL9Lh5XGHxJ62Jq6cMPL8a46hEDn347L 2e6TDPABhLUCpeNTLwm0DKpRSM0FsYlxvIxCU3MSOZ9clXEmAI14lYc+gSJBSN3t ubd4Sm8zYqwx09AFF6Nsz0bmw+FuKqOre0+niNRFz2MzjVr6T1cOlRlyt6FiKBQK XFFIXEBOa1h9AA== -----END CERTIFICATE-----Generated at Wed Nov 5 03:47:16 2025 by rpki-client