$ rpki-client -vvf rpki.apnic.net/member_repository/A9151932/47CA35E4720711EF9DC8BA21C4F9AE02/21642FDA720811EF8F352D23C4F9AE02.roa File: 21642FDA720811EF8F352D23C4F9AE02.roa (raw, json) Hash identifier: xRhybVxoDDnKc3CKFnXjp4iGF7ySaAqAvV6AwggDoT0= Subject key identifier: 56:47:00:6E:B0:D0:8B:74:24:1D:0C:D4:2F:40:64:78:81:83:0A:6B Certificate issuer: /CN=A9151932/serialNumber=F54F808016AB4BB06F796A894667C70BDD48FBF6 Certificate serial: E2 Authority key identifier: F5:4F:80:80:16:AB:4B:B0:6F:79:6A:89:46:67:C7:0B:DD:48:FB:F6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9U-AgBarS7BveWqJRmfHC91I-_Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151932/47CA35E4720711EF9DC8BA21C4F9AE02/21642FDA720811EF8F352D23C4F9AE02.roa Signing time: Mon 27 Oct 2025 00:18:28 +0000 ROA not before: Mon 27 Oct 2025 00:18:28 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 153325 IP address blocks: 64.255.42.0/24 maxlen: 24 64.255.54.0/24 maxlen: 24 107.6.124.0/24 maxlen: 24 160.187.32.0/24 maxlen: 24 160.187.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151932/47CA35E4720711EF9DC8BA21C4F9AE02/9U-AgBarS7BveWqJRmfHC91I-_Y.crl rsync://rpki.apnic.net/member_repository/A9151932/47CA35E4720711EF9DC8BA21C4F9AE02/9U-AgBarS7BveWqJRmfHC91I-_Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9U-AgBarS7BveWqJRmfHC91I-_Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:47:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 226 (0xe2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151932, serialNumber=F54F808016AB4BB06F796A894667C70BDD48FBF6 Validity Not Before: Oct 27 00:18:28 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68feba53-db32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f3:ff:1d:53:3d:62:06:cc:62:9c:b0:cd:a8: 78:6d:19:a1:31:84:72:0a:e6:99:b3:fc:8d:49:6c: 20:14:b2:bf:3a:7f:85:b6:57:da:f2:fb:34:44:9f: 7d:e6:0b:89:6b:54:d1:3c:77:82:c0:27:01:2b:ce: 8a:82:99:1c:73:02:10:0c:b5:74:5d:7e:50:45:6b: 36:ac:2c:5d:15:22:e0:90:71:92:74:2f:64:42:e6: aa:14:25:ec:a7:b0:4c:a9:fb:6f:8d:7a:1a:28:c6: 51:56:c0:ed:fe:a5:be:3a:de:1d:d1:af:0c:c3:b4: 40:cb:c6:26:2c:9a:a4:c1:6f:2d:80:66:fd:e5:a6: 39:c4:76:b9:37:02:a5:6a:34:e0:a3:d5:7d:7b:8e: eb:b6:b6:fb:3a:9b:35:2e:cd:a6:79:9e:40:44:9d: 56:e2:e2:d7:48:3a:1d:f3:44:7b:d1:59:af:40:d5: 54:c4:fd:f9:c7:ec:f4:0e:4b:c5:dc:f0:3c:97:19: 4d:3d:fb:9d:9a:72:61:4b:ff:c6:f8:4d:b6:7d:f7: 8c:cb:b6:13:b0:c3:f4:94:b7:40:73:79:33:5c:79: ba:46:20:e2:c8:04:c7:d1:76:79:69:1a:ed:8e:7a: 6f:78:d7:2d:a8:86:34:a6:fb:d7:8b:5f:32:41:d8: 5f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:47:00:6E:B0:D0:8B:74:24:1D:0C:D4:2F:40:64:78:81:83:0A:6B X509v3 Authority Key Identifier: keyid:F5:4F:80:80:16:AB:4B:B0:6F:79:6A:89:46:67:C7:0B:DD:48:FB:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151932/47CA35E4720711EF9DC8BA21C4F9AE02/9U-AgBarS7BveWqJRmfHC91I-_Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9U-AgBarS7BveWqJRmfHC91I-_Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151932/47CA35E4720711EF9DC8BA21C4F9AE02/21642FDA720811EF8F352D23C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 64.255.42.0/24 64.255.54.0/24 107.6.124.0/24 160.187.32.0/23 Signature Algorithm: sha256WithRSAEncryption 2c:a5:d3:27:e6:e1:cf:a5:52:5d:ac:ed:2e:85:d2:ee:4b:bc: 32:eb:0a:37:57:47:c0:3c:e8:e8:c8:02:47:6d:08:40:4b:1d: 15:e3:88:b1:e5:11:a1:0b:e0:09:e8:bf:73:e5:fa:60:a7:b1: 77:80:17:fc:bc:94:7a:9f:3a:df:1b:c4:41:89:9f:2b:01:d3: 3c:8e:ea:4a:24:fa:22:02:4a:12:12:5b:02:4e:a6:a9:33:b9: 86:eb:42:7c:f2:90:f6:cf:78:9a:a1:4d:1f:99:43:93:83:c5: 5c:14:eb:6e:7c:f8:17:8d:47:d3:62:34:22:8b:65:82:0c:5d: f6:4a:df:93:39:51:be:3b:1f:4c:07:16:c2:90:52:f5:56:dc: 93:57:5f:d2:e4:ae:ab:bd:95:f8:9c:d9:eb:1e:35:3c:68:16: 20:c9:7b:2d:88:4b:27:2c:25:3e:79:76:de:7d:20:6e:c9:9a: c9:44:b4:fe:2d:55:0b:9d:e2:83:3e:0e:34:b7:89:bd:11:95: fb:03:08:1d:d5:7e:30:2f:6c:60:c9:06:a0:f5:66:b1:aa:a7: b1:ea:bc:37:bc:81:04:2d:11:4f:d0:c7:e4:f9:53:a1:a0:db: 40:21:46:1f:be:ae:b9:e6:aa:25:fd:8e:12:90:69:2e:47:04: 30:ca:5e:91 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICAOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTE5MzIxMTAvBgNVBAUTKEY1NEY4MDgwMTZBQjRCQjA2Rjc5NkE4OTQ2NjdDNzBC REQ0OEZCRjYwHhcNMjUxMDI3MDAxODI4WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGZlYmE1My1kYjMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz/P/HVM9YgbMYpywzah4bRmhMYRyCuaZs/yNSWwgFLK/On+Ftlfa8vs0RJ99 5guJa1TRPHeCwCcBK86KgpkccwIQDLV0XX5QRWs2rCxdFSLgkHGSdC9kQuaqFCXs p7BMqftvjXoaKMZRVsDt/qW+Ot4d0a8Mw7RAy8YmLJqkwW8tgGb95aY5xHa5NwKl ajTgo9V9e47rtrb7Ops1Ls2meZ5ARJ1W4uLXSDod80R70VmvQNVUxP35x+z0DkvF 3PA8lxlNPfudmnJhS//G+E22ffeMy7YTsMP0lLdAc3kzXHm6RiDiyATH0XZ5aRrt jnpveNctqIY0pvvXi18yQdhfFQIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFFZHAG6w 0It0JB0M1C9AZHiBgwprMB8GA1UdIwQYMBaAFPVPgIAWq0uwb3lqiUZnxwvdSPv2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTkzMi80N0NBMzVFNDcy MDcxMUVGOURDOEJBMjFDNEY5QUUwMi85VS1BZ0JhclM3QnZlV3FKUm1mSEM5MUkt X1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzlVLUFnQmFyUzdCdmVXcUpSbWZIQzkxSS1fWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTE5MzIvNDdDQTM1RTQ3MjA3MTFFRjlEQzhCQTIxQzRGOUFFMDIvMjE2NDJGREE3 MjA4MTFFRjhGMzUyRDIzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBABA/yoDBABA/zYDBABrBnwDBAGguyAwDQYJKoZIhvcNAQEL BQADggEBACyl0yfm4c+lUl2s7S6F0u5LvDLrCjdXR8A86OjIAkdtCEBLHRXjiLHl EaEL4Anov3Pl+mCnsXeAF/y8lHqfOt8bxEGJnysB0zyO6kok+iICShISWwJOpqkz uYbrQnzykPbPeJqhTR+ZQ5ODxVwU6258+BeNR9NiNCKLZYIMXfZK35M5Ub47H0wH FsKQUvVW3JNXX9Lkrqu9lfic2eseNTxoFiDJey2ISycsJT55dt59IG7JmslEtP4t VQud4oM+DjS3ib0RlfsDCB3VfjAvbGDJBqD1ZrGqp7HqvDe8gQQtEU/Qx+T5U6Gg 20AhRh++rrnmqiX9jhKQaS5HBDDKXpE= -----END CERTIFICATE-----Generated at Wed Nov 5 16:44:09 2025 by rpki-client