$ rpki-client -vvf rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/AC1FAF84432211EEB1984F73C4F9AE02.roa File: AC1FAF84432211EEB1984F73C4F9AE02.roa (raw, json) Hash identifier: 9II8C/zPZ8Sqh/GnkvMtaceds37LRqTiNOgVoHgvhUI= Subject key identifier: 9E:0C:B9:8C:AE:AE:42:B2:FA:8F:25:AF:85:14:67:AD:64:36:CC:BD Certificate issuer: /CN=A9164F45/serialNumber=24320EAFF9A820B8EDA59E03E40555C5F34FEFCC Certificate serial: 0195 Authority key identifier: 24:32:0E:AF:F9:A8:20:B8:ED:A5:9E:03:E4:05:55:C5:F3:4F:EF:CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDIOr_moILjtpZ4D5AVVxfNP78w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/AC1FAF84432211EEB1984F73C4F9AE02.roa Signing time: Wed 03 Sep 2025 04:23:03 +0000 ROA not before: Wed 03 Sep 2025 04:23:03 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 10118 IP address blocks: 203.145.72.0/21 maxlen: 24 203.145.80.0/20 maxlen: 24 2407:3100::/32 maxlen: 32 2407:3100::/36 maxlen: 36 2407:3100:1000::/36 maxlen: 36 2407:3100:2000::/36 maxlen: 36 2407:3100:3000::/36 maxlen: 36 2407:3100:4000::/36 maxlen: 36 2407:3100:5000::/36 maxlen: 36 2407:3100:6000::/36 maxlen: 36 2407:3100:7000::/36 maxlen: 36 2407:3100:8000::/36 maxlen: 36 2407:3100:8113::/48 maxlen: 48 2407:3100:9000::/36 maxlen: 36 2407:3100:a000::/36 maxlen: 36 2407:3100:b000::/36 maxlen: 36 2407:3100:c000::/36 maxlen: 36 2407:3100:d000::/36 maxlen: 36 2407:3100:e000::/36 maxlen: 36 2407:3100:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.crl rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDIOr_moILjtpZ4D5AVVxfNP78w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:28:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 405 (0x195) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164F45, serialNumber=24320EAFF9A820B8EDA59E03E40555C5F34FEFCC Validity Not Before: Sep 3 04:23:03 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68b7c2a7-a1b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:da:09:a1:71:da:5e:f8:ce:b7:58:27:eb:e1: f9:0a:43:4e:20:c1:9a:96:4f:cb:51:2a:e7:92:48: f4:3e:a3:90:20:f2:63:f5:8b:e9:fc:c5:34:33:b8: cc:82:09:a2:4e:75:48:6a:04:e3:8f:2b:93:41:e2: 73:52:c1:5c:43:a2:a9:48:9c:05:16:e7:18:76:ae: 8e:bd:cf:81:40:74:b6:12:97:5e:86:28:f7:64:99: d7:ce:99:fc:4d:cb:ef:cd:d1:74:a0:b3:4b:32:36: 7e:6f:eb:fe:d7:5c:44:7e:43:d7:5c:1d:63:01:01: 4c:6b:b4:9a:51:f9:9b:5b:ac:ce:29:6c:00:0e:36: 43:47:b2:ff:7c:b9:af:52:ed:f9:ea:87:88:ad:e9: eb:32:62:b0:3e:b7:04:5e:95:60:63:24:bb:f3:e9: c2:b8:ec:b2:ab:42:ff:b3:f0:87:0e:f6:51:80:d5: 41:ca:d3:e4:de:35:1a:a0:26:93:9b:88:69:34:0f: 55:2c:1e:65:ce:cc:b9:fc:10:4c:ba:12:78:c6:6d: 24:3a:27:cb:7f:51:36:97:f0:47:0c:c4:a4:02:2d: b8:0b:ce:4d:8f:38:71:37:8f:12:c7:9b:3d:1a:1d: 21:2d:98:b2:72:21:ed:bc:93:12:0f:0e:f9:3c:96: ce:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:0C:B9:8C:AE:AE:42:B2:FA:8F:25:AF:85:14:67:AD:64:36:CC:BD X509v3 Authority Key Identifier: keyid:24:32:0E:AF:F9:A8:20:B8:ED:A5:9E:03:E4:05:55:C5:F3:4F:EF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDIOr_moILjtpZ4D5AVVxfNP78w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/AC1FAF84432211EEB1984F73C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.145.72.0-203.145.95.255 IPv6: 2407:3100::/32 Signature Algorithm: sha256WithRSAEncryption 78:0a:5c:f7:c2:2d:b0:8c:05:ba:5d:ce:97:bf:4a:29:d1:57: fc:ca:e3:df:41:8c:ab:bb:a0:59:a9:90:59:42:20:aa:f2:e7: 7e:38:41:37:8e:08:0c:2b:aa:52:57:2e:6e:7b:2a:e3:fd:86: 2d:fa:65:fd:13:27:63:63:0e:9c:fa:74:e7:d0:7b:76:56:98: df:87:00:6d:f8:c0:c5:ad:96:48:ad:91:a9:b3:3e:09:b2:47: ff:ba:a2:50:15:d9:00:36:6e:b6:9e:53:0e:8c:72:4b:8a:eb: 35:f6:1a:ab:34:7b:5f:d6:45:2a:17:05:b5:b3:43:4e:28:3f: 25:57:6d:7f:75:50:18:66:f4:dd:25:55:15:44:96:64:5d:96: 73:15:69:05:f9:21:19:8d:a7:de:89:5b:20:84:69:22:c4:39: 8f:c6:53:7d:7e:01:56:13:99:e6:e2:0a:5b:78:e2:d6:84:65: b5:be:01:48:21:35:6f:ac:a1:c3:72:bb:97:7c:a2:35:58:02: fa:33:27:f5:7c:1f:2f:3a:87:77:27:19:d4:4f:e2:33:bd:f9: aa:a5:c4:13:4b:59:45:49:f2:e6:10:87:79:22:58:d7:45:3d: c0:67:be:92:bd:8a:06:cf:81:04:0c:d1:44:e1:de:00:cf:32: b1:b3:99:cc -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICAZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjRGNDUxMTAvBgNVBAUTKDI0MzIwRUFGRjlBODIwQjhFREE1OUUwM0U0MDU1NUM1 RjM0RkVGQ0MwHhcNMjUwOTAzMDQyMzAzWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGI3YzJhNy1hMWI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyNoJoXHaXvjOt1gn6+H5CkNOIMGalk/LUSrnkkj0PqOQIPJj9Yvp/MU0M7jM ggmiTnVIagTjjyuTQeJzUsFcQ6KpSJwFFucYdq6Ovc+BQHS2Epdehij3ZJnXzpn8 TcvvzdF0oLNLMjZ+b+v+11xEfkPXXB1jAQFMa7SaUfmbW6zOKWwADjZDR7L/fLmv Uu356oeIrenrMmKwPrcEXpVgYyS78+nCuOyyq0L/s/CHDvZRgNVBytPk3jUaoCaT m4hpNA9VLB5lzsy5/BBMuhJ4xm0kOifLf1E2l/BHDMSkAi24C85NjzhxN48Sx5s9 Gh0hLZiyciHtvJMSDw75PJbOuwIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFJ4MuYyu rkKy+o8lr4UUZ61kNsy9MB8GA1UdIwQYMBaAFCQyDq/5qCC47aWeA+QFVcXzT+/M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NEY0NS8zMzYxMTlDNDQy RjYxMUVFQTI1MjRENjNDNEY5QUUwMi9KRElPcl9tb0lManRwWjRENUFWVnhmTlA3 OHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pESU9yX21vSUxqdHBaNEQ1QVZWeGZOUDc4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjRGNDUvMzM2MTE5QzQ0MkY2MTFFRUEyNTI0RDYzQzRGOUFFMDIvQUMxRkFGODQ0 MzIyMTFFRUIxOTg0RjczQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBQEAgABMA4wDAMEA8uRSAMEBcuRQDANBAIAAjAHAwUAJAcxADANBgkqhkiG 9w0BAQsFAAOCAQEAeApc98ItsIwFul3Ol79KKdFX/Mrj30GMq7ugWamQWUIgqvLn fjhBN44IDCuqUlcubnsq4/2GLfpl/RMnY2MOnPp059B7dlaY34cAbfjAxa2WSK2R qbM+CbJH/7qiUBXZADZutp5TDoxyS4rrNfYaqzR7X9ZFKhcFtbNDTig/JVdtf3VQ GGb03SVVFUSWZF2WcxVpBfkhGY2n3olbIIRpIsQ5j8ZTfX4BVhOZ5uIKW3ji1oRl tb4BSCE1b6yhw3K7l3yiNVgC+jMn9XwfLzqHdycZ1E/iM735qqXEE0tZRUny5hCH eSJY10U9wGe+kr2KBs+BBAzRROHeAM8ysbOZzA== -----END CERTIFICATE-----Generated at Thu Nov 6 06:11:44 2025 by rpki-client