$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/8FF3B806B0D411F0955C2A4DC4F9AE02.roa File: 8FF3B806B0D411F0955C2A4DC4F9AE02.roa (raw, json) Hash identifier: rpUhoGdIDBVafKl8qBkBhc3QB9uFh7VuBkjsoTkTb4Y= Subject key identifier: A7:65:65:0F:62:00:79:E0:F0:0C:89:3B:83:D7:5E:99:82:06:71:37 Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264 Certificate serial: 0EC7 Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/8FF3B806B0D411F0955C2A4DC4F9AE02.roa Signing time: Fri 24 Oct 2025 12:25:45 +0000 ROA not before: Fri 24 Oct 2025 12:25:45 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 131275 IP address blocks: 111.92.151.0/24 maxlen: 24 111.92.152.0/24 maxlen: 24 111.92.153.0/24 maxlen: 24 111.92.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:59:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3783 (0xec7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264 Validity Not Before: Oct 24 12:25:45 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68fb7048-ba0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:97:6c:b6:e5:7c:36:f9:4c:1d:52:0a:aa:95: 11:6e:3d:f8:1a:7a:db:e4:80:a7:d0:da:97:28:44: 5a:0e:55:c9:49:f7:99:cc:51:2c:f3:c8:e1:3e:d4: 7f:9b:93:82:34:aa:f1:3b:5c:8f:7c:4e:0c:a9:3e: df:57:61:7c:da:60:8d:45:41:74:8f:0a:4f:d9:1f: 4b:bd:45:4f:38:bd:c6:95:27:4e:fc:fb:02:c3:c1: a9:1a:16:9b:1e:0a:02:22:03:52:1f:eb:a6:6f:ed: 15:3c:1b:a7:c9:b4:9f:a9:ea:9b:50:48:75:5a:df: a2:dd:70:52:d3:9e:7a:f5:4f:58:26:36:52:36:bf: 7e:b6:39:63:23:0a:0b:c9:6d:bd:97:1a:02:ef:f7: eb:64:99:c4:a7:ed:df:ba:0e:ef:c1:11:fe:d3:8f: ee:d7:95:b0:ac:49:4a:1b:e9:98:5e:2f:7a:c3:2e: f7:31:53:f0:ea:66:80:95:52:de:fa:ad:d0:75:d8: 09:09:1f:41:74:f8:3b:37:1d:d8:91:3e:b7:63:d4: 94:c3:e7:37:b6:73:a0:12:1e:8d:6a:43:ac:38:d4: a6:f9:ae:5d:96:33:60:b4:15:65:d4:fd:44:a9:2d: 59:5c:93:24:ad:f2:0d:6b:74:5e:bf:00:72:85:6f: b1:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:65:65:0F:62:00:79:E0:F0:0C:89:3B:83:D7:5E:99:82:06:71:37 X509v3 Authority Key Identifier: keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/8FF3B806B0D411F0955C2A4DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 111.92.151.0-111.92.154.255 Signature Algorithm: sha256WithRSAEncryption 68:f0:ec:2d:4d:03:70:2e:c5:22:5c:fb:0c:97:2d:c0:4b:86: f4:1f:b7:55:1e:b7:71:73:43:84:5e:4e:1b:5b:55:86:ea:1f: a6:7b:a0:e9:3e:99:70:ce:3a:cc:7f:c2:73:86:f8:4b:21:71: de:18:0a:ab:e5:f6:f8:15:c6:0c:e1:be:4b:d2:84:91:23:e1: c5:54:d6:f8:00:1f:c4:76:95:b9:e0:ff:de:2c:28:c6:26:cf: cc:77:b5:09:db:1a:6f:0a:60:ed:6b:5e:c2:70:4a:7a:c6:9e: 6f:21:ab:b8:53:a8:96:d8:a4:e0:b2:d5:b0:e4:ce:2b:26:ea: 2c:17:23:40:00:75:df:8d:c8:58:ce:e5:a5:cc:17:70:b4:b1: 2e:13:c7:0d:fa:9b:30:8f:9e:dc:36:ad:7d:c9:3e:04:ce:3c: 19:32:fa:a6:53:4f:31:0d:d1:45:ff:88:51:ac:50:50:7c:72: 8f:58:93:fc:31:c5:c1:93:53:b8:7d:d6:3c:74:54:ca:aa:36: 62:27:d4:d6:71:d3:2e:db:16:ce:9a:cd:f7:cb:74:05:ac:26: 73:88:cc:7d:c1:30:c1:7a:e1:3c:d4:8f:b6:15:d7:9d:29:1c: 42:c0:bd:ab:df:3c:32:ed:d9:1f:17:20:f7:d1:b0:87:21:43: 37:a2:2e:2b -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgICDscwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEwQ0QxMTAvBgNVBAUTKDM4MTkzNzIwODIxRTA3RDY5MThFM0E3OUZCRTA4MjND NjczMkUyNjQwHhcNMjUxMDI0MTIyNTQ1WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGZiNzA0OC1iYTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq5dstuV8NvlMHVIKqpURbj34Gnrb5ICn0NqXKERaDlXJSfeZzFEs88jhPtR/ m5OCNKrxO1yPfE4MqT7fV2F82mCNRUF0jwpP2R9LvUVPOL3GlSdO/PsCw8GpGhab HgoCIgNSH+umb+0VPBunybSfqeqbUEh1Wt+i3XBS05569U9YJjZSNr9+tjljIwoL yW29lxoC7/frZJnEp+3fug7vwRH+04/u15WwrElKG+mYXi96wy73MVPw6maAlVLe +q3QddgJCR9BdPg7Nx3YkT63Y9SUw+c3tnOgEh6NakOsONSm+a5dljNgtBVl1P1E qS1ZXJMkrfINa3RevwByhW+xewIDAQABo4ICnTCCApkwHQYDVR0OBBYEFKdlZQ9i AHng8AyJO4PXXpmCBnE3MB8GA1UdIwQYMBaAFDgZNyCCHgfWkY46efvggjxnMuJk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBDRC80NjcyM0YxRTg5 RUMxMUVBODFDMDRGMUVDNEY5QUUwMi9PQmszSUlJZUI5YVJqanA1LS1DQ1BHY3k0 bVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09CazNJSUllQjlhUmpqcDUtLUNDUEdjeTRtUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUEwQ0QvNDY3MjNGMUU4OUVDMTFFQTgxQzA0RjFFQzRGOUFFMDIvOEZGM0I4MDZC MEQ0MTFGMDk1NUMyQTREQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E GDAWMBQEAgABMA4wDAMEAG9clwMEAG9cmjANBgkqhkiG9w0BAQsFAAOCAQEAaPDs LU0DcC7FIlz7DJctwEuG9B+3VR63cXNDhF5OG1tVhuofpnug6T6ZcM46zH/Cc4b4 SyFx3hgKq+X2+BXGDOG+S9KEkSPhxVTW+AAfxHaVueD/3iwoxibPzHe1Cdsabwpg 7WtewnBKesaebyGruFOoltik4LLVsOTOKybqLBcjQAB1343IWM7lpcwXcLSxLhPH DfqbMI+e3Datfck+BM48GTL6plNPMQ3RRf+IUaxQUHxyj1iT/DHFwZNTuH3WPHRU yqo2YifU1nHTLtsWzprN98t0Bawmc4jMfcEwwXrhPNSPthXXnSkcQsC9q988Mu3Z Hxcg99GwhyFDN6IuKw== -----END CERTIFICATE-----Generated at Wed Nov 5 08:17:01 2025 by rpki-client