$ rpki-client -vvf rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/CD9372E687F811F0B5B27636C4F9AE02.roa File: CD9372E687F811F0B5B27636C4F9AE02.roa (raw, json) Hash identifier: 7e1bIIpY60NREKCU3ueEl2g/koitX0hrLn6cquJbTFo= Subject key identifier: E1:CB:1F:A3:6C:F3:A7:E0:4B:3B:66:78:89:48:0A:65:B0:BD:46:35 Certificate issuer: /CN=A9155647/serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB Certificate serial: 01AB Authority key identifier: AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/CD9372E687F811F0B5B27636C4F9AE02.roa Signing time: Tue 02 Sep 2025 12:31:52 +0000 ROA not before: Tue 02 Sep 2025 12:31:52 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 382 IP address blocks: 43.231.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:48:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 427 (0x1ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155647, serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB Validity Not Before: Sep 2 12:31:52 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=68b6e3b8-d21f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:2a:27:27:95:5f:10:c8:02:fb:d2:80:a6:e4: 07:e9:79:8c:8c:99:35:fe:7a:f6:a0:a9:5b:c4:58: 22:95:7b:ce:4e:ce:69:e6:6b:4b:c2:96:6c:ef:cd: 9b:ce:a4:8e:40:25:e4:cd:4b:22:13:31:fd:3e:9e: 0a:71:17:19:d6:26:21:b9:f8:8f:1c:24:1c:3e:18: 7d:15:34:11:99:ab:48:20:73:68:4b:4d:96:c4:38: 7a:22:e7:37:51:6b:e5:c5:8b:e8:0d:ad:26:4f:41: 50:c1:28:e0:00:17:74:55:9d:17:f0:b5:1a:cf:56: c4:da:ec:f7:92:cf:26:6e:2e:bd:9a:dc:47:94:6b: bc:f0:da:1c:1b:14:f0:b0:d6:9b:09:2b:61:91:09: 8a:da:2f:25:03:33:1a:ed:88:df:46:c8:af:d3:33: 04:49:72:58:21:ef:f4:4e:18:76:6a:20:b9:27:49: ab:a0:60:c4:66:6f:cb:5f:dc:d9:76:9f:ed:55:07: bc:8b:7e:72:25:6f:b4:d3:d2:ab:09:d4:37:14:c3: d8:dc:ee:45:c8:e7:75:14:c8:88:ec:0d:2b:aa:72: 1d:93:12:7d:7e:33:9c:62:3e:da:5b:3d:73:ba:9f: 42:2a:e5:f7:f4:9e:7c:4d:a9:bf:01:e5:a7:3c:24: 91:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:CB:1F:A3:6C:F3:A7:E0:4B:3B:66:78:89:48:0A:65:B0:BD:46:35 X509v3 Authority Key Identifier: keyid:AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/CD9372E687F811F0B5B27636C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.231.207.0/24 Signature Algorithm: sha256WithRSAEncryption 55:67:0b:05:28:8d:e6:81:0a:cc:26:07:6e:12:5d:ea:a4:fc: 33:67:9e:53:e6:db:fe:0d:85:48:1b:8a:f1:87:e6:7a:16:78: 47:dd:6a:21:7c:a9:9f:e4:78:a7:d8:92:5f:2d:0f:3d:a1:bd: 3a:82:95:f5:f7:60:db:ab:1a:c6:4c:ab:d0:65:cd:e1:f8:c3: 53:39:9a:cb:54:0c:29:7b:57:0e:b5:a4:af:3d:56:ae:ff:e8: 5e:90:1f:b8:3a:f3:08:db:07:54:13:ee:2d:50:b9:a6:76:ce: 19:24:f2:91:09:e4:25:c5:32:6f:cf:45:af:4c:fc:41:96:de: 21:37:2f:ff:68:36:92:00:3e:3c:0e:7a:52:61:66:f8:1f:31: d1:da:95:92:e4:26:35:f8:81:3f:e3:f4:e6:e9:7d:f7:60:00: 17:0b:e2:ae:e8:e5:0d:56:7f:e4:b5:a3:44:a7:5a:c7:fb:4c: 63:a5:1b:78:bc:a6:d8:94:78:59:52:d1:96:86:01:84:88:db: d5:aa:db:6c:d7:38:cc:1b:23:d9:7f:59:72:94:b8:89:90:70: aa:a2:c2:64:7b:49:f9:9d:ff:72:85:09:b1:77:fc:39:04:0a: 50:1c:c2:69:99:36:66:90:11:65:2e:c8:75:8e:c9:3d:82:84: f7:08:95:d6 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU2NDcxMTAvBgNVBAUTKEFEMzQ0NURCNDIwMTBCMTIxNUE0OUU0MjdGMUFFNzQw MEQ3ODhCRkIwHhcNMjUwOTAyMTIzMTUyWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OGI2ZTNiOC1kMjFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4SonJ5VfEMgC+9KApuQH6XmMjJk1/nr2oKlbxFgilXvOTs5p5mtLwpZs782b zqSOQCXkzUsiEzH9Pp4KcRcZ1iYhufiPHCQcPhh9FTQRmatIIHNoS02WxDh6Iuc3 UWvlxYvoDa0mT0FQwSjgABd0VZ0X8LUaz1bE2uz3ks8mbi69mtxHlGu88NocGxTw sNabCSthkQmK2i8lAzMa7YjfRsiv0zMESXJYIe/0Thh2aiC5J0mroGDEZm/LX9zZ dp/tVQe8i35yJW+009KrCdQ3FMPY3O5FyOd1FMiI7A0rqnIdkxJ9fjOcYj7aWz1z up9CKuX39J58Tam/AeWnPCSRrQIDAQABo4IClTCCApEwHQYDVR0OBBYEFOHLH6Ns 86fgSztmeIlICmWwvUY1MB8GA1UdIwQYMBaAFK00RdtCAQsSFaSeQn8a50ANeIv7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTY0Ny85MDVDMTA0NkYz NkYxMUVFOTk3MkVCNzlDNEY5QUUwMi9yVFJGMjBJQkN4SVZwSjVDZnhyblFBMTRp X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JUUkYyMElCQ3hJVnBKNUNmeHJuUUExNGlfcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTU2NDcvOTA1QzEwNDZGMzZGMTFFRTk5NzJFQjc5QzRGOUFFMDIvQ0Q5MzcyRTY4 N0Y4MTFGMEI1QjI3NjM2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAr588wDQYJKoZIhvcNAQELBQADggEBAFVnCwUojeaBCswm B24SXeqk/DNnnlPm2/4NhUgbivGH5noWeEfdaiF8qZ/keKfYkl8tDz2hvTqClfX3 YNurGsZMq9BlzeH4w1M5mstUDCl7Vw61pK89Vq7/6F6QH7g68wjbB1QT7i1QuaZ2 zhkk8pEJ5CXFMm/PRa9M/EGW3iE3L/9oNpIAPjwOelJhZvgfMdHalZLkJjX4gT/j 9ObpffdgABcL4q7o5Q1Wf+S1o0SnWsf7TGOlG3i8ptiUeFlS0ZaGAYSI29Wq22zX OMwbI9l/WXKUuImQcKqiwmR7Sfmd/3KFCbF3/DkEClAcwmmZNmaQEWUuyHWOyT2C hPcIldY= -----END CERTIFICATE-----Generated at Wed Nov 5 09:57:27 2025 by rpki-client