$ rpki-client -vvf rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/A75964A28E4B11EA8A347A3EC4F9AE02.roa File: A75964A28E4B11EA8A347A3EC4F9AE02.roa (raw, json) Hash identifier: LcHZ8dsRApo4tmI2qwJgG4gB+Gp0ezrnUO4zTwhEVS8= Subject key identifier: C5:E4:F6:B4:47:DC:8A:0B:4F:9F:21:BF:2C:B9:E5:C9:28:30:44:1C Certificate issuer: /CN=A9165568/serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8 Certificate serial: 1D2F Authority key identifier: 67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/A75964A28E4B11EA8A347A3EC4F9AE02.roa Signing time: Tue 04 Nov 2025 15:00:25 +0000 ROA not before: Tue 04 Nov 2025 15:00:25 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 131471 IP address blocks: 119.30.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7471 (0x1d2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165568, serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8 Validity Not Before: Nov 4 15:00:25 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=690a1509-a3aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:db:d0:f4:47:48:8e:9d:e5:0e:d0:ee:bc:55: db:39:7d:c1:d1:3f:be:4f:bb:a6:39:88:97:8b:b3: 4e:78:56:89:5b:1a:02:20:2e:45:ed:5e:5c:59:58: b6:2d:aa:f6:9b:98:6a:49:91:29:e2:86:be:bf:4e: da:f0:a4:4d:82:5d:71:5c:e3:35:f8:95:42:72:17: 1a:a6:b9:41:f3:3d:9b:77:8c:4b:77:ac:94:85:c9: b9:11:4b:97:26:27:73:25:73:e5:38:c1:7c:91:f4: db:b8:7f:35:b2:fe:88:82:99:49:c1:ac:d9:55:9d: 37:4e:68:6f:9d:2a:fd:e3:7e:bb:66:90:6b:7a:44: 20:15:6f:7e:a1:38:cf:62:44:77:98:2b:e3:44:35: 54:d0:fa:83:39:bc:50:38:c9:0d:3f:dc:fc:70:2b: 15:6f:96:1c:96:48:cc:b5:d5:63:e9:5c:12:bd:b4: a7:4e:a7:4f:d8:50:81:4b:13:60:5c:4e:f4:98:91: d5:ac:71:82:c8:b5:9c:65:b1:4f:64:08:0c:98:7d: b1:f6:45:ca:07:cb:68:f8:02:8e:7b:80:32:a6:69: ba:e1:58:97:00:b8:5e:5e:ac:cb:57:b0:bc:d9:7c: 08:19:3f:94:46:b8:34:d5:6d:c0:de:51:a3:ad:fc: 31:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:E4:F6:B4:47:DC:8A:0B:4F:9F:21:BF:2C:B9:E5:C9:28:30:44:1C X509v3 Authority Key Identifier: keyid:67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/A75964A28E4B11EA8A347A3EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 119.30.85.0/24 Signature Algorithm: sha256WithRSAEncryption 58:87:24:a5:d5:4b:1a:d8:b5:27:b6:d5:d0:b3:ca:03:ba:f4: ae:dc:44:16:99:b3:13:a3:ba:aa:14:f3:31:1a:b5:d3:4b:1a: b3:67:47:ee:78:3c:24:bd:82:ae:02:87:48:32:eb:2e:d6:9d: 14:fd:2a:15:99:70:d9:db:01:d5:70:9b:c5:47:a3:7a:73:ac: 4d:fe:41:c0:c5:b1:76:66:dd:f4:42:f7:86:6a:b1:a0:68:bb: d8:6b:62:2a:5e:23:65:ad:dd:df:4f:29:2a:46:2c:2b:9d:46: 6a:b3:60:24:7f:96:43:7d:db:1e:63:dd:ec:05:cf:b4:3f:24: b8:49:38:52:59:c7:62:2d:dd:01:03:e3:8f:2e:b0:e0:c3:39: e1:99:c9:e9:64:c5:7a:df:a8:73:71:06:7b:fe:ba:aa:5c:7e: 11:80:0d:40:d0:ca:f3:1d:0a:08:f6:4f:c7:9d:e8:5c:45:91: c6:4c:8f:cb:da:98:0e:35:8c:3c:3e:50:47:b1:1d:8f:74:05: 69:af:86:f4:80:d9:d3:8b:2a:14:a3:0b:18:6b:5e:ff:87:c7: a9:dd:bc:68:f6:1b:52:bc:79:d2:a3:7d:64:c1:a2:12:33:62: 78:52:15:60:fc:f1:72:0b:65:68:90:9f:8c:ca:0c:9b:59:92: 1f:a5:3e:52 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICHS8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU1NjgxMTAvBgNVBAUTKDY3MDk3RTQ5MkY3M0Q2REJEMzFGQTAxNkEyRDVCNUI4 NkE5QjNGRDgwHhcNMjUxMTA0MTUwMDI1WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTBhMTUwOS1hM2FhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzdvQ9EdIjp3lDtDuvFXbOX3B0T++T7umOYiXi7NOeFaJWxoCIC5F7V5cWVi2 Lar2m5hqSZEp4oa+v07a8KRNgl1xXOM1+JVCchcaprlB8z2bd4xLd6yUhcm5EUuX JidzJXPlOMF8kfTbuH81sv6IgplJwazZVZ03TmhvnSr94367ZpBrekQgFW9+oTjP YkR3mCvjRDVU0PqDObxQOMkNP9z8cCsVb5YclkjMtdVj6VwSvbSnTqdP2FCBSxNg XE70mJHVrHGCyLWcZbFPZAgMmH2x9kXKB8to+AKOe4Aypmm64ViXALheXqzLV7C8 2XwIGT+URrg01W3A3lGjrfwxlQIDAQABo4IClTCCApEwHQYDVR0OBBYEFMXk9rRH 3IoLT58hvyy55ckoMEQcMB8GA1UdIwQYMBaAFGcJfkkvc9bb0x+gFqLVtbhqmz/Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTU2OC9CRDFBOTVEMjFE ODcxMUUyOUJFM0U2REYwOEIwMkNEMi9ad2wtU1M5ejF0dlRINkFXb3RXMXVHcWJQ OWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p3bC1TUzl6MXR2VEg2QVdvdFcxdUdxYlA5Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjU1NjgvQkQxQTk1RDIxRDg3MTFFMjlCRTNFNkRGMDhCMDJDRDIvQTc1OTY0QTI4 RTRCMTFFQThBMzQ3QTNFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAB3HlUwDQYJKoZIhvcNAQELBQADggEBAFiHJKXVSxrYtSe2 1dCzygO69K7cRBaZsxOjuqoU8zEatdNLGrNnR+54PCS9gq4Ch0gy6y7WnRT9KhWZ cNnbAdVwm8VHo3pzrE3+QcDFsXZm3fRC94ZqsaBou9hrYipeI2Wt3d9PKSpGLCud RmqzYCR/lkN92x5j3ewFz7Q/JLhJOFJZx2It3QED448usODDOeGZyelkxXrfqHNx Bnv+uqpcfhGADUDQyvMdCgj2T8ed6FxFkcZMj8vamA41jDw+UEexHY90BWmvhvSA 2dOLKhSjCxhrXv+Hx6ndvGj2G1K8edKjfWTBohIzYnhSFWD88XILZWiQn4zKDJtZ kh+lPlI= -----END CERTIFICATE-----Generated at Wed Nov 5 15:04:24 2025 by rpki-client