$ rpki-client -vvf rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/7CA593102A2811F0819D8C13C4F9AE02.roa File: 7CA593102A2811F0819D8C13C4F9AE02.roa (raw, json) Hash identifier: Ia6tlVbLIeqz/TCnxF60wA233bLpbVn+2ya+t4NGuKY= Subject key identifier: 05:D5:6A:7A:86:C7:96:50:00:35:1C:83:9A:5F:A6:E1:A1:C7:ED:3E Certificate issuer: /CN=A9165DB1/serialNumber=8686C92B87DD5DD2EE2ABB40EC73F178F6045A34 Certificate serial: 029A Authority key identifier: 86:86:C9:2B:87:DD:5D:D2:EE:2A:BB:40:EC:73:F1:78:F6:04:5A:34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hobJK4fdXdLuKrtA7HPxePYEWjQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/7CA593102A2811F0819D8C13C4F9AE02.roa Signing time: Tue 05 Aug 2025 02:40:32 +0000 ROA not before: Tue 05 Aug 2025 02:40:32 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 14618 IP address blocks: 203.4.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.crl rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hobJK4fdXdLuKrtA7HPxePYEWjQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:29:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 666 (0x29a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165DB1, serialNumber=8686C92B87DD5DD2EE2ABB40EC73F178F6045A34 Validity Not Before: Aug 5 02:40:32 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68916f1f-5bd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:23:3b:98:31:ef:11:95:3e:ea:f9:d2:b2:4f: 8c:0f:56:54:8d:54:1a:64:f0:f2:61:4b:30:d7:ef: ad:b6:5c:e6:42:1f:ce:0f:25:ca:1e:b4:89:6a:b8: 4f:e4:d0:bc:23:ba:70:26:56:d3:2e:a7:f2:85:21: 33:29:df:5b:ad:1d:1d:30:8a:ab:eb:ca:b9:ef:2c: 57:7f:16:39:fd:77:7b:69:a3:f7:fa:97:f5:7b:d4: fe:94:83:7e:e0:f4:ec:16:c6:96:93:3a:67:5a:bc: 1d:a9:42:8a:49:a7:a9:7e:38:7b:05:49:25:83:58: 6d:db:0c:41:49:dc:33:fa:95:2b:46:24:d8:e8:e2: 25:ff:42:b8:fa:fd:20:c6:e6:17:1e:49:16:58:e4: 04:61:b3:97:cd:1d:43:e7:6c:12:20:c5:cb:d0:09: e7:8f:e0:d2:79:49:94:0b:2d:0d:a9:41:39:a7:e4: 1b:a1:79:41:95:df:ef:01:8b:24:1d:02:a2:19:1e: 48:78:c7:90:c2:fb:a1:f7:b0:59:28:b4:c0:9d:3c: b8:8f:e4:6c:cd:b8:4b:7e:52:33:b6:2d:6b:0f:37: 81:0d:b7:23:8d:f8:b0:93:d7:fa:6e:24:56:7a:9b: 22:a4:37:2e:48:e6:57:3e:a6:96:c2:54:0c:a2:52: 90:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:D5:6A:7A:86:C7:96:50:00:35:1C:83:9A:5F:A6:E1:A1:C7:ED:3E X509v3 Authority Key Identifier: keyid:86:86:C9:2B:87:DD:5D:D2:EE:2A:BB:40:EC:73:F1:78:F6:04:5A:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hobJK4fdXdLuKrtA7HPxePYEWjQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/7CA593102A2811F0819D8C13C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.4.146.0/24 Signature Algorithm: sha256WithRSAEncryption 57:cd:a5:af:7e:d1:ab:1a:22:34:1c:9f:5c:29:7c:17:18:ce: 36:86:e8:4f:27:c0:4a:ba:0a:8f:03:f9:d1:79:e4:cb:41:2f: ef:ec:79:dc:f1:f0:7b:4d:1c:14:40:a0:44:35:76:b0:54:ca: 28:54:c3:50:8e:5d:1f:04:79:f6:dc:68:eb:58:5e:fa:30:cf: c3:10:57:d6:c9:db:f3:5b:ef:ab:a7:34:f1:b2:e3:79:bf:7d: f4:91:bf:10:97:bb:60:18:5c:0d:29:ae:03:56:98:73:4b:f5: 38:15:76:60:73:ce:ed:ca:31:83:4c:d4:0d:0a:3c:cf:b8:1d: a7:2b:fe:d2:34:2c:0c:75:d4:36:1b:c0:5a:0e:06:ec:53:32: 8c:8d:d2:04:e6:e2:d0:51:77:1c:eb:90:99:df:00:3f:7a:ad: 6d:5e:2d:59:14:77:06:e7:8e:63:63:0b:a5:e4:ac:77:da:c7: f8:c7:76:46:c3:07:31:a4:36:b0:bd:61:ca:91:ca:f9:ac:78: 78:e3:a9:55:04:7d:c6:99:e5:13:0b:07:2f:8a:d8:43:58:ee: 83:ea:aa:1f:31:cb:86:66:0d:de:e1:c1:d2:cb:3a:cd:16:7b: 9f:fa:78:30:02:2f:c3:0a:8f:64:0f:fa:97:4d:f1:f6:cc:9c: 61:2a:c9:d2 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICApowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVEQjExMTAvBgNVBAUTKDg2ODZDOTJCODdERDVERDJFRTJBQkI0MEVDNzNGMTc4 RjYwNDVBMzQwHhcNMjUwODA1MDI0MDMyWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODkxNmYxZi01YmQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArCM7mDHvEZU+6vnSsk+MD1ZUjVQaZPDyYUsw1++ttlzmQh/ODyXKHrSJarhP 5NC8I7pwJlbTLqfyhSEzKd9brR0dMIqr68q57yxXfxY5/Xd7aaP3+pf1e9T+lIN+ 4PTsFsaWkzpnWrwdqUKKSaepfjh7BUklg1ht2wxBSdwz+pUrRiTY6OIl/0K4+v0g xuYXHkkWWOQEYbOXzR1D52wSIMXL0Annj+DSeUmUCy0NqUE5p+QboXlBld/vAYsk HQKiGR5IeMeQwvuh97BZKLTAnTy4j+RszbhLflIzti1rDzeBDbcjjfiwk9f6biRW epsipDcuSOZXPqaWwlQMolKQMQIDAQABo4IClTCCApEwHQYDVR0OBBYEFAXVanqG x5ZQADUcg5pfpuGhx+0+MB8GA1UdIwQYMBaAFIaGySuH3V3S7iq7QOxz8Xj2BFo0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NURCMS81QTQ5NkY4ODBF MTcxMUVEOEUzQkQ5MTVDNEY5QUUwMi9ob2JKSzRmZFhkTHVLcnRBN0hQeGVQWUVX alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hvYkpLNGZkWGRMdUtydEE3SFB4ZVBZRVdqUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjVEQjEvNUE0OTZGODgwRTE3MTFFRDhFM0JEOTE1QzRGOUFFMDIvN0NBNTkzMTAy QTI4MTFGMDgxOUQ4QzEzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADLBJIwDQYJKoZIhvcNAQELBQADggEBAFfNpa9+0asaIjQc n1wpfBcYzjaG6E8nwEq6Co8D+dF55MtBL+/sedzx8HtNHBRAoEQ1drBUyihUw1CO XR8EefbcaOtYXvowz8MQV9bJ2/Nb76unNPGy43m/ffSRvxCXu2AYXA0prgNWmHNL 9TgVdmBzzu3KMYNM1A0KPM+4Hacr/tI0LAx11DYbwFoOBuxTMoyN0gTm4tBRdxzr kJnfAD96rW1eLVkUdwbnjmNjC6XkrHfax/jHdkbDBzGkNrC9YcqRyvmseHjjqVUE fcaZ5RMLBy+K2ENY7oPqqh8xy4ZmDd7hwdLLOs0We5/6eDACL8MKj2QP+pdN8fbM nGEqydI= -----END CERTIFICATE-----Generated at Wed Nov 5 11:46:32 2025 by rpki-client