$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/F2DDF3C2A09011F096CB321AC4F9AE02.roa File: F2DDF3C2A09011F096CB321AC4F9AE02.roa (raw, json) Hash identifier: 7A2K302P4GqA7E4M8j6+6W6FTSHuJtNzsuXfTMJFzfw= Subject key identifier: B0:81:92:7A:80:F3:C8:5A:BA:B4:30:44:1E:4F:5C:60:C3:CE:63:E3 Certificate issuer: /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206 Certificate serial: 39D7 Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/F2DDF3C2A09011F096CB321AC4F9AE02.roa Signing time: Fri 31 Oct 2025 10:44:05 +0000 ROA not before: Fri 31 Oct 2025 10:44:05 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 111.88.96.0/19 maxlen: 24 111.88.132.0/23 maxlen: 24 111.88.160.0/22 maxlen: 24 111.88.164.0/22 maxlen: 24 111.88.168.0/24 maxlen: 24 111.88.169.0/24 maxlen: 24 111.88.224.0/21 maxlen: 24 115.186.44.0/23 maxlen: 23 115.186.46.0/24 maxlen: 24 115.186.62.0/24 maxlen: 24 115.186.104.0/24 maxlen: 24 203.81.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:33:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14807 (0x39d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206 Validity Not Before: Oct 31 10:44:05 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=690492f5-8fbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:06:dc:2f:bc:06:cd:56:3f:77:09:4a:f2:de: 15:ff:a4:e8:2e:c8:cd:e8:45:32:18:0a:24:c5:2b: d9:ae:25:9c:f0:02:a5:0b:9d:a7:68:fa:62:35:e4: 02:0f:70:c2:04:26:f0:ca:7f:9c:16:6e:2d:c7:20: f7:b9:2b:80:4b:0e:6b:91:b6:1e:66:bc:5c:4d:11: 87:02:0d:9b:76:26:88:d9:c6:b5:f7:b4:e0:c7:cf: f8:7b:e2:8f:aa:bf:4b:65:1d:a1:c1:ae:0a:4e:b3: 2e:92:66:b4:8f:d2:d3:0f:f1:88:e7:ef:f3:f0:96: d2:34:aa:63:fa:37:d8:7f:12:58:a3:9e:fa:b4:3d: e6:08:9e:52:57:9a:dd:f8:66:1f:e8:f0:b8:b0:c4: c7:7b:de:65:6d:64:14:78:fc:5d:e5:ed:21:dd:96: 29:34:85:da:0e:2a:ba:46:19:58:03:d6:17:ea:7d: ba:df:d3:45:44:6a:26:19:4d:5a:8d:c0:28:aa:b4: 5d:b5:e7:87:0a:3c:e3:b6:84:48:e6:ba:64:90:23: e6:21:b3:e2:3a:c3:1a:ff:da:a2:d5:ce:93:5a:43: 41:f1:50:db:d4:2f:1b:a2:44:34:22:33:b9:49:50: ba:bc:7d:93:ff:aa:e9:5c:28:19:36:bd:6a:2b:47: d9:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:81:92:7A:80:F3:C8:5A:BA:B4:30:44:1E:4F:5C:60:C3:CE:63:E3 X509v3 Authority Key Identifier: keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/F2DDF3C2A09011F096CB321AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 111.88.96.0/19 111.88.132.0/23 111.88.160.0-111.88.169.255 111.88.224.0/21 115.186.44.0-115.186.46.255 115.186.62.0/24 115.186.104.0/24 203.81.235.0/24 Signature Algorithm: sha256WithRSAEncryption 59:e8:ba:e9:3d:78:28:16:25:a2:44:45:03:1c:05:4b:b8:c7: 7f:1b:56:77:7c:26:6f:10:43:19:0f:c0:ca:03:f3:d3:5c:63: 33:05:f9:b0:74:9b:00:46:8c:16:e0:1b:0b:cc:00:f7:a6:4f: 3a:db:55:d2:fb:1c:55:86:b5:bd:9c:92:c3:cb:56:07:dc:f2: 86:17:cb:aa:c2:39:ee:69:77:5e:95:b3:2d:0e:75:4e:2d:0a: c4:c9:db:45:c6:bf:c6:6f:d9:80:74:b6:72:b3:13:2e:1c:ae: d4:32:e1:74:f8:68:63:0d:63:51:c2:ae:7f:59:62:94:1b:c1: 89:c1:80:64:de:6d:f6:f4:bf:6e:27:12:30:36:d9:f2:84:a8: a3:1a:8d:0e:b6:84:ea:2f:d6:bd:a6:67:f7:71:42:85:ad:bf: 5f:6c:4c:56:5a:ee:41:f5:f2:cb:c2:01:44:1c:59:25:48:d4: 1c:0d:a6:6c:dc:fe:a5:19:d2:b3:31:db:c6:23:7e:ea:f9:41: 00:6c:a6:06:96:93:cf:f9:be:36:a2:99:21:3b:15:97:70:71: 0f:00:87:2b:b8:1d:7a:c6:93:ab:32:70:1e:d0:1d:34:d4:7e: c7:83:a4:a5:c5:9d:a3:17:e3:ce:10:16:63:74:aa:a8:c2:c4: 06:63:35:6b -----BEGIN CERTIFICATE----- MIIFqzCCBJOgAwIBAgICOdcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM4M0IxMTAvBgNVBAUTKEU3NkVCMjU2QzBGQ0IwN0UyOTA3OTc4MzQzRTlBRDlE RDIxRkUyMDYwHhcNMjUxMDMxMTA0NDA1WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTA0OTJmNS04ZmJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvwbcL7wGzVY/dwlK8t4V/6ToLsjN6EUyGAokxSvZriWc8AKlC52naPpiNeQC D3DCBCbwyn+cFm4txyD3uSuASw5rkbYeZrxcTRGHAg2bdiaI2ca197Tgx8/4e+KP qr9LZR2hwa4KTrMukma0j9LTD/GI5+/z8JbSNKpj+jfYfxJYo576tD3mCJ5SV5rd +GYf6PC4sMTHe95lbWQUePxd5e0h3ZYpNIXaDiq6RhlYA9YX6n2639NFRGomGU1a jcAoqrRdteeHCjzjtoRI5rpkkCPmIbPiOsMa/9qi1c6TWkNB8VDb1C8bokQ0IjO5 SVC6vH2T/6rpXCgZNr1qK0fZuwIDAQABo4ICzzCCAsswHQYDVR0OBBYEFLCBknqA 88haurQwRB5PXGDDzmPjMB8GA1UdIwQYMBaAFOduslbA/LB+KQeXg0PprZ3SH+IG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzgzQi9FNEUxMEI0QTFE ODgxMUUyQTAxMkNCRTEwOEIwMkNEMi81MjZ5VnNEOHNINHBCNWVEUS1tdG5kSWY0 Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzUyNnlWc0Q4c0g0cEI1ZURRLW10bmRJZjRnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkM4M0IvRTRFMTBCNEExRDg4MTFFMkEwMTJDQkUxMDhCMDJDRDIvRjJEREYzQzJB MDkwMTFGMDk2Q0IzMjFBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwWQYIKwYBBQUHAQcBAf8E SjBIMEYEAgABMEADBAVvWGADBAFvWIQwDAMEBW9YoAMEAW9YqAMEA29Y4DAMAwQC c7osAwQAc7ouAwQAc7o+AwQAc7poAwQAy1HrMA0GCSqGSIb3DQEBCwUAA4IBAQBZ 6LrpPXgoFiWiREUDHAVLuMd/G1Z3fCZvEEMZD8DKA/PTXGMzBfmwdJsARowW4BsL zAD3pk8621XS+xxVhrW9nJLDy1YH3PKGF8uqwjnuaXdelbMtDnVOLQrEydtFxr/G b9mAdLZysxMuHK7UMuF0+GhjDWNRwq5/WWKUG8GJwYBk3m329L9uJxIwNtnyhKij Go0OtoTqL9a9pmf3cUKFrb9fbExWWu5B9fLLwgFEHFklSNQcDaZs3P6lGdKzMdvG I37q+UEAbKYGlpPP+b42opkhOxWXcHEPAIcruB16xpOrMnAe0B001H7Hg6SlxZ2j F+POEBZjdKqowsQGYzVr -----END CERTIFICATE-----Generated at Tue Nov 4 21:03:15 2025 by rpki-client