$ rpki-client -vvf rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/D2EF531219AE11EB8D3BC20EC4F9AE02.roa File: D2EF531219AE11EB8D3BC20EC4F9AE02.roa (raw, json) Hash identifier: Rd5Er0xxqgtyrGJoJrGL9EMcQw8NMf5g6jCq0sMGA2Q= Subject key identifier: BE:C1:D3:1E:CF:01:44:ED:DD:C2:E2:6A:7E:61:51:BA:BC:48:74:73 Certificate issuer: /CN=A9165568/serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8 Certificate serial: 1D32 Authority key identifier: 67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/D2EF531219AE11EB8D3BC20EC4F9AE02.roa Signing time: Tue 04 Nov 2025 15:00:28 +0000 ROA not before: Tue 04 Nov 2025 15:00:28 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 136974 IP address blocks: 210.2.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7474 (0x1d32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165568, serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8 Validity Not Before: Nov 4 15:00:28 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=690a150c-91c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f9:5f:95:34:62:a2:56:fd:24:4a:12:d4:4a: 03:14:de:0f:79:b6:ba:8e:eb:56:2b:96:ef:9e:25: 36:ca:6e:4c:4b:b2:f3:90:e7:ee:61:91:ea:f3:8a: d4:35:90:d1:27:5b:be:9a:8d:55:8c:88:36:19:e8: e7:40:2f:fe:21:7f:85:39:d1:d4:56:7b:02:2a:fd: 31:39:64:48:be:88:3d:f4:cd:54:ce:93:60:31:1d: a1:9d:aa:e5:d5:71:32:30:32:55:5a:57:5f:1c:be: 78:be:58:94:68:7b:07:30:b7:3d:20:10:49:cd:17: d5:ae:2a:31:a3:e6:99:0d:a0:be:9d:e1:2c:77:30: fd:ac:2e:a6:95:2e:c5:ad:0e:29:20:0b:cf:b3:e5: 93:34:48:7a:6d:cc:e2:c2:d5:b1:b0:8d:88:63:f5: 8c:2e:eb:f8:a1:87:a2:d2:b2:80:5c:78:00:e4:95: 9c:3a:4b:b6:86:76:51:03:78:1e:cf:52:c4:bd:a2: ec:77:19:db:1c:2b:f5:ef:62:7c:4a:7e:a7:7f:7c: 33:bc:87:51:12:7b:eb:14:a0:04:1a:df:04:c1:d9: 02:f8:7a:43:d0:e3:94:e6:63:62:7d:21:92:63:b1: 9a:de:f9:6b:53:3d:fa:98:8d:9f:46:2a:ef:cd:94: ee:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:C1:D3:1E:CF:01:44:ED:DD:C2:E2:6A:7E:61:51:BA:BC:48:74:73 X509v3 Authority Key Identifier: keyid:67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/D2EF531219AE11EB8D3BC20EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.2.136.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:a6:0a:8d:aa:01:30:a0:70:67:5e:d1:47:6d:f4:84:e0:ea: 44:7c:35:53:30:06:db:a3:4a:d4:06:fb:f1:1d:1f:a3:c9:24: 2b:4a:cc:9d:f4:07:10:a2:03:18:b3:2c:2a:2c:cc:4e:16:72: 93:a1:0c:0d:0a:72:b9:2b:2c:1f:05:13:51:b1:30:20:81:da: 5d:61:7c:39:2c:11:a3:a8:78:f9:fb:fb:c9:3d:e7:c9:d6:bf: a0:bb:86:58:0a:9a:34:ac:13:ff:a6:e2:8c:bc:c5:c2:da:b9: 67:bb:96:f6:96:5d:e9:d6:ab:39:51:af:0b:20:be:26:3a:72: a6:6c:c9:99:17:c1:8c:83:a9:4b:3c:f3:61:aa:8e:4d:4d:65: 0d:74:ed:39:51:2b:6d:5f:08:52:5f:48:73:22:99:72:ff:18: e8:81:49:26:4a:60:ee:db:ab:ff:de:6f:bf:fb:f6:a7:3c:39: 02:dd:96:63:09:5b:6f:68:db:61:30:8a:cf:08:ee:00:5f:e9: 86:52:f9:77:86:48:18:7b:53:06:db:66:cf:bf:1b:05:d8:07: a0:bd:c7:31:f9:a9:93:4c:b5:52:35:3d:15:2a:d9:94:85:c8: 6d:01:2c:28:56:12:0c:3a:35:b7:56:ca:7f:c4:e2:0d:af:43: 4e:77:fa:e0 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICHTIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU1NjgxMTAvBgNVBAUTKDY3MDk3RTQ5MkY3M0Q2REJEMzFGQTAxNkEyRDVCNUI4 NkE5QjNGRDgwHhcNMjUxMTA0MTUwMDI4WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTBhMTUwYy05MWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2PlflTRiolb9JEoS1EoDFN4Peba6jutWK5bvniU2ym5MS7LzkOfuYZHq84rU NZDRJ1u+mo1VjIg2GejnQC/+IX+FOdHUVnsCKv0xOWRIvog99M1UzpNgMR2hnarl 1XEyMDJVWldfHL54vliUaHsHMLc9IBBJzRfVrioxo+aZDaC+neEsdzD9rC6mlS7F rQ4pIAvPs+WTNEh6bcziwtWxsI2IY/WMLuv4oYei0rKAXHgA5JWcOku2hnZRA3ge z1LEvaLsdxnbHCv172J8Sn6nf3wzvIdREnvrFKAEGt8EwdkC+HpD0OOU5mNifSGS Y7Ga3vlrUz36mI2fRirvzZTu8QIDAQABo4IClTCCApEwHQYDVR0OBBYEFL7B0x7P AUTt3cLian5hUbq8SHRzMB8GA1UdIwQYMBaAFGcJfkkvc9bb0x+gFqLVtbhqmz/Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTU2OC9CRDFBOTVEMjFE ODcxMUUyOUJFM0U2REYwOEIwMkNEMi9ad2wtU1M5ejF0dlRINkFXb3RXMXVHcWJQ OWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p3bC1TUzl6MXR2VEg2QVdvdFcxdUdxYlA5Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjU1NjgvQkQxQTk1RDIxRDg3MTFFMjlCRTNFNkRGMDhCMDJDRDIvRDJFRjUzMTIx OUFFMTFFQjhEM0JDMjBFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADSAogwDQYJKoZIhvcNAQELBQADggEBAD+mCo2qATCgcGde 0Udt9ITg6kR8NVMwBtujStQG+/EdH6PJJCtKzJ30BxCiAxizLCoszE4WcpOhDA0K crkrLB8FE1GxMCCB2l1hfDksEaOoePn7+8k958nWv6C7hlgKmjSsE/+m4oy8xcLa uWe7lvaWXenWqzlRrwsgviY6cqZsyZkXwYyDqUs882Gqjk1NZQ107TlRK21fCFJf SHMimXL/GOiBSSZKYO7bq//eb7/79qc8OQLdlmMJW29o22Ewis8I7gBf6YZS+XeG SBh7UwbbZs+/GwXYB6C9xzH5qZNMtVI1PRUq2ZSFyG0BLChWEgw6NbdWyn/E4g2v Q053+uA= -----END CERTIFICATE-----Generated at Wed Nov 5 12:22:17 2025 by rpki-client