$ rpki-client -vvf rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/698B3FA6986011EE969A225FC4F9AE02.roa File: 698B3FA6986011EE969A225FC4F9AE02.roa (raw, json) Hash identifier: uCuRtLaJqPZT1V5liTXsYaVKYmSfpzuCPzU/U+ZmSyI= Subject key identifier: B3:7F:A9:1F:42:FA:23:0A:9C:A9:3A:BC:49:75:5C:A1:8C:1D:19:02 Certificate issuer: /CN=A916BCDF/serialNumber=87954C0231CAACB2BE2DFDB567C74AF5ECB75B0C Certificate serial: 1272 Authority key identifier: 87:95:4C:02:31:CA:AC:B2:BE:2D:FD:B5:67:C7:4A:F5:EC:B7:5B:0C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h5VMAjHKrLK-Lf21Z8dK9ey3Www.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/698B3FA6986011EE969A225FC4F9AE02.roa Signing time: Sun 02 Nov 2025 17:35:27 +0000 ROA not before: Sun 02 Nov 2025 17:35:27 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 20473 IP address blocks: 66.42.32.0/20 maxlen: 32 66.42.48.0/20 maxlen: 32 139.180.128.0/19 maxlen: 32 139.180.160.0/19 maxlen: 32 139.180.192.0/20 maxlen: 32 139.180.208.0/20 maxlen: 32 158.247.192.0/18 maxlen: 32 167.179.64.0/18 maxlen: 32 207.148.64.0/20 maxlen: 32 207.148.80.0/21 maxlen: 32 207.148.88.0/21 maxlen: 32 207.148.96.0/20 maxlen: 32 207.148.112.0/22 maxlen: 32 207.148.116.0/22 maxlen: 32 207.148.120.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.crl rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h5VMAjHKrLK-Lf21Z8dK9ey3Www.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 17:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4722 (0x1272) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BCDF, serialNumber=87954C0231CAACB2BE2DFDB567C74AF5ECB75B0C Validity Not Before: Nov 2 17:35:27 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=6907965e-4107 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d5:fd:b5:64:91:f7:7b:8e:44:46:83:79:41: 32:72:f2:e3:db:00:82:93:16:c2:8d:d4:a3:56:8c: 3c:7f:6b:1d:81:29:46:d1:36:82:84:14:b7:09:12: c8:82:a0:bf:fe:dc:57:ef:9c:84:aa:90:57:b6:7e: 6c:cc:f6:d1:82:32:c7:1b:ac:49:59:59:27:96:3d: 1b:ac:02:0a:51:01:71:0a:64:d5:4b:b8:e0:d5:2f: 0e:38:f6:c7:2e:ca:f6:80:2f:6b:f2:58:1e:7e:fb: 28:f2:58:dc:9d:cf:de:3f:69:03:bb:fe:93:af:54: 8e:46:fe:ae:f2:32:7d:69:5b:41:78:2a:dd:a4:a1: 6a:09:0c:78:21:54:e9:7e:fd:43:f2:b5:4f:69:46: be:f9:85:03:fc:bb:e3:5e:5f:fc:8c:70:6b:00:18: aa:2a:d3:af:97:a2:98:bd:5a:71:f8:c5:3a:93:22: a6:33:c9:ab:49:dd:ed:ec:b5:c0:1f:a2:02:24:4c: a3:c4:0e:bd:7b:76:86:b3:59:78:bb:d3:d0:d2:70: 74:6f:92:3f:2b:d7:60:14:8a:3c:2e:77:f0:e2:e1: c1:ed:f5:8f:2c:50:a8:05:13:d5:78:95:0b:65:f3: 5c:32:14:1d:af:27:c5:03:94:b7:bb:cc:79:59:a7: 0e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:7F:A9:1F:42:FA:23:0A:9C:A9:3A:BC:49:75:5C:A1:8C:1D:19:02 X509v3 Authority Key Identifier: keyid:87:95:4C:02:31:CA:AC:B2:BE:2D:FD:B5:67:C7:4A:F5:EC:B7:5B:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h5VMAjHKrLK-Lf21Z8dK9ey3Www.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/698B3FA6986011EE969A225FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 66.42.32.0/19 139.180.128.0-139.180.223.255 158.247.192.0/18 167.179.64.0/18 207.148.64.0/18 Signature Algorithm: sha256WithRSAEncryption 59:cf:5b:19:41:d3:ea:69:12:bd:07:ad:0f:6f:45:3d:60:94: 5a:07:5a:64:41:24:aa:4d:4a:0d:36:be:2a:a2:71:32:d4:4d: 2c:71:34:1d:8d:c4:31:91:6c:ca:0a:85:c2:2c:6d:39:b3:3f: d7:55:08:3b:76:45:7d:88:78:cb:fc:01:ff:33:36:08:f8:cc: c6:b3:d1:bd:a4:4e:be:b0:19:18:09:3c:db:cf:86:65:4d:fd: 5c:07:67:d1:f0:d5:2a:a6:45:7f:ac:ba:18:42:77:86:16:a7: 68:d7:89:fa:82:40:3a:c2:ae:d3:c0:d7:42:be:bc:17:a4:ec: 11:0a:77:2a:8b:36:7c:2c:9a:28:47:df:30:ab:f2:75:e4:5c: 4a:b4:eb:9a:dc:dc:cf:14:99:97:53:4a:d3:88:aa:ae:82:f2: ed:0e:39:aa:c7:33:24:b0:f7:26:65:fc:b8:92:e7:6d:64:51: 31:cd:bd:39:d0:02:ef:af:28:d0:7a:98:c2:35:66:d2:7a:45: a6:30:7d:53:47:49:7d:fa:7f:de:93:62:dd:52:07:80:8a:fb: 5c:87:b1:55:b7:e8:6d:5f:7d:c5:03:6e:b8:67:38:75:ac:dd: 92:8c:f6:bc:fe:37:a1:df:95:09:47:b1:37:ea:ba:e9:93:c9: ea:bf:2c:5c -----BEGIN CERTIFICATE----- MIIFkTCCBHmgAwIBAgICEnIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJDREYxMTAvBgNVBAUTKDg3OTU0QzAyMzFDQUFDQjJCRTJERkRCNTY3Qzc0QUY1 RUNCNzVCMEMwHhcNMjUxMTAyMTczNTI3WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTA3OTY1ZS00MTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAstX9tWSR93uOREaDeUEycvLj2wCCkxbCjdSjVow8f2sdgSlG0TaChBS3CRLI gqC//txX75yEqpBXtn5szPbRgjLHG6xJWVknlj0brAIKUQFxCmTVS7jg1S8OOPbH Lsr2gC9r8lgefvso8ljcnc/eP2kDu/6Tr1SORv6u8jJ9aVtBeCrdpKFqCQx4IVTp fv1D8rVPaUa++YUD/LvjXl/8jHBrABiqKtOvl6KYvVpx+MU6kyKmM8mrSd3t7LXA H6ICJEyjxA69e3aGs1l4u9PQ0nB0b5I/K9dgFIo8Lnfw4uHB7fWPLFCoBRPVeJUL ZfNcMhQdryfFA5S3u8x5WacOPQIDAQABo4ICtTCCArEwHQYDVR0OBBYEFLN/qR9C +iMKnKk6vEl1XKGMHRkCMB8GA1UdIwQYMBaAFIeVTAIxyqyyvi39tWfHSvXst1sM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkNERi9FQ0UwRkJFNkUz NkQxMUU4OTU2RjM1MTZDNEY5QUUwMi9oNVZNQWpIS3JMSy1MZjIxWjhkSzlleTNX d3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2g1Vk1BakhLckxLLUxmMjFaOGRLOWV5M1d3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkJDREYvRUNFMEZCRTZFMzZEMTFFODk1NkYzNTE2QzRGOUFFMDIvNjk4QjNGQTY5 ODYwMTFFRTk2OUEyMjVGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPwYIKwYBBQUHAQcBAf8E MDAuMCwEAgABMCYDBAVCKiAwDAMEB4u0gAMEBYu0wAMEBp73wAMEBqezQAMEBs+U QDANBgkqhkiG9w0BAQsFAAOCAQEAWc9bGUHT6mkSvQetD29FPWCUWgdaZEEkqk1K DTa+KqJxMtRNLHE0HY3EMZFsygqFwixtObM/11UIO3ZFfYh4y/wB/zM2CPjMxrPR vaROvrAZGAk828+GZU39XAdn0fDVKqZFf6y6GEJ3hhanaNeJ+oJAOsKu08DXQr68 F6TsEQp3Kos2fCyaKEffMKvydeRcSrTrmtzczxSZl1NK04iqroLy7Q45qsczJLD3 JmX8uJLnbWRRMc29OdAC768o0HqYwjVm0npFpjB9U0dJffp/3pNi3VIHgIr7XIex VbfobV99xQNuuGc4dazdkoz2vP43od+VCUexN+q66ZPJ6r8sXA== -----END CERTIFICATE-----Generated at Tue Nov 4 12:37:02 2025 by rpki-client