$ rpki-client -vvf rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/0517C4F0470311EC9E6FA71DC4F9AE02.roa File: 0517C4F0470311EC9E6FA71DC4F9AE02.roa (raw, json) Hash identifier: o+VIx3yy8oMDW/C3RImP2D9X9JrFefZYlsNOIecQzAE= Subject key identifier: 76:0D:8C:2E:E0:53:76:F7:B9:22:D4:A8:EB:2A:FC:3B:B4:14:88:B7 Certificate issuer: /CN=A916CCFF/serialNumber=0803662C571325728F24FAAD8CB1A5F1900715ED Certificate serial: 04B2 Authority key identifier: 08:03:66:2C:57:13:25:72:8F:24:FA:AD:8C:B1:A5:F1:90:07:15:ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CANmLFcTJXKPJPqtjLGl8ZAHFe0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/0517C4F0470311EC9E6FA71DC4F9AE02.roa Signing time: Sat 19 Jul 2025 00:37:26 +0000 ROA not before: Sat 19 Jul 2025 00:37:26 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 396982 IP address blocks: 202.92.198.0/24 maxlen: 24 202.92.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.crl rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CANmLFcTJXKPJPqtjLGl8ZAHFe0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:57:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1202 (0x4b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CCFF, serialNumber=0803662C571325728F24FAAD8CB1A5F1900715ED Validity Not Before: Jul 19 00:37:26 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=687ae8c6-2244 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:77:ee:dc:1b:6f:3e:d9:1f:ff:17:3f:37:05: 07:f8:e6:83:40:ee:57:36:5d:62:f6:2a:91:e1:47: bf:8c:a4:17:af:8d:ba:2a:f5:0d:5a:02:36:9b:25: 83:8c:76:f8:4d:49:a0:ba:5f:06:48:d8:b8:61:bc: a7:7a:fe:85:2f:2c:5d:15:5e:20:15:da:79:e1:c1: 27:15:5c:b2:43:61:7a:36:ac:73:22:2e:03:b5:87: 40:a4:bd:88:3f:7b:08:7a:0c:ee:40:1d:23:64:80: c2:0b:68:14:aa:59:f1:04:33:51:af:13:33:53:02: 10:70:62:49:c9:e9:c1:6e:b0:a6:2c:e4:9c:6f:da: e7:44:be:8f:40:56:ba:75:11:7c:72:0d:87:76:ff: 3d:55:10:da:be:1a:35:16:72:ca:a2:9d:ed:bc:f5: 07:48:65:a3:74:6a:db:a0:fc:ee:c4:cc:51:e9:4c: b7:fb:65:84:68:e0:30:86:db:5f:da:1a:59:87:7d: 6c:f5:2b:ab:e8:67:64:01:f0:ad:c6:ca:11:20:53: 3d:15:b1:b3:30:8f:44:05:af:5b:7f:fc:25:f5:2e: 66:19:c8:d7:ce:d0:dc:20:36:4e:52:f1:57:a2:7b: f1:b3:eb:b9:d0:fe:91:cb:a1:26:1f:75:6c:9d:a9: 40:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:0D:8C:2E:E0:53:76:F7:B9:22:D4:A8:EB:2A:FC:3B:B4:14:88:B7 X509v3 Authority Key Identifier: keyid:08:03:66:2C:57:13:25:72:8F:24:FA:AD:8C:B1:A5:F1:90:07:15:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CANmLFcTJXKPJPqtjLGl8ZAHFe0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/0517C4F0470311EC9E6FA71DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.92.198.0/23 Signature Algorithm: sha256WithRSAEncryption 07:9a:d3:f5:7e:dc:0e:9b:8a:a0:e9:7c:7b:7b:4a:15:10:ea: 01:43:e0:67:c9:0b:62:48:19:7c:ec:1b:2a:9b:9f:7f:28:cb: f4:bd:a3:81:c2:a3:19:4d:65:cf:34:46:f6:24:53:86:ab:dd: 9b:8f:fa:ab:5e:3b:fa:51:2d:88:24:53:a5:81:15:0a:c2:ce: 06:cd:aa:7e:2f:84:42:89:76:41:89:80:87:9d:81:be:b9:e9: 2b:3d:e9:c0:bf:cb:ad:fd:d9:dd:3a:b7:33:2e:26:db:67:39: b4:bf:87:19:fb:57:03:dc:89:1d:11:5e:56:d1:1a:01:4a:81: 07:5d:2c:e5:0a:33:64:d9:21:f2:88:4f:16:0f:28:36:b3:ec: e3:17:97:e3:78:ee:56:b8:33:ea:0b:f7:32:4e:7b:13:5b:ac: c9:b3:78:3f:2b:0e:48:4a:88:c9:c5:ab:ff:b9:18:f6:a1:11: 3c:6d:ee:d7:8a:14:c8:e7:0c:88:b6:4f:cf:41:29:f9:42:34: 23:4b:8e:a1:e6:d1:9c:83:ea:40:be:1e:e6:89:bf:b6:d4:b0: 69:e7:b2:f8:32:45:78:6c:ca:a8:dd:5a:76:ef:a4:aa:69:37: ef:97:87:e3:38:a0:3b:36:dd:18:b1:40:17:3f:d2:1d:c1:60: 1d:ea:3b:6e -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBLIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkNDRkYxMTAvBgNVBAUTKDA4MDM2NjJDNTcxMzI1NzI4RjI0RkFBRDhDQjFBNUYx OTAwNzE1RUQwHhcNMjUwNzE5MDAzNzI2WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODdhZThjNi0yMjQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyXfu3BtvPtkf/xc/NwUH+OaDQO5XNl1i9iqR4Ue/jKQXr426KvUNWgI2myWD jHb4TUmgul8GSNi4Ybynev6FLyxdFV4gFdp54cEnFVyyQ2F6NqxzIi4DtYdApL2I P3sIegzuQB0jZIDCC2gUqlnxBDNRrxMzUwIQcGJJyenBbrCmLOScb9rnRL6PQFa6 dRF8cg2Hdv89VRDavho1FnLKop3tvPUHSGWjdGrboPzuxMxR6Uy3+2WEaOAwhttf 2hpZh31s9Sur6GdkAfCtxsoRIFM9FbGzMI9EBa9bf/wl9S5mGcjXztDcIDZOUvFX onvxs+u50P6Ry6EmH3VsnalAkQIDAQABo4IClTCCApEwHQYDVR0OBBYEFHYNjC7g U3b3uSLUqOsq/Du0FIi3MB8GA1UdIwQYMBaAFAgDZixXEyVyjyT6rYyxpfGQBxXt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0NGRi85QTVFQzE2QzQ2 RkUxMUVDOTRFM0QyNEFDNEY5QUUwMi9DQU5tTEZjVEpYS1BKUHF0akxHbDhaQUhG ZTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NBTm1MRmNUSlhLUEpQcXRqTEdsOFpBSEZlMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkNDRkYvOUE1RUMxNkM0NkZFMTFFQzk0RTNEMjRBQzRGOUFFMDIvMDUxN0M0RjA0 NzAzMTFFQzlFNkZBNzFEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAHKXMYwDQYJKoZIhvcNAQELBQADggEBAAea0/V+3A6biqDp fHt7ShUQ6gFD4GfJC2JIGXzsGyqbn38oy/S9o4HCoxlNZc80RvYkU4ar3ZuP+qte O/pRLYgkU6WBFQrCzgbNqn4vhEKJdkGJgIedgb656Ss96cC/y6392d06tzMuJttn ObS/hxn7VwPciR0RXlbRGgFKgQddLOUKM2TZIfKITxYPKDaz7OMXl+N47la4M+oL 9zJOexNbrMmzeD8rDkhKiMnFq/+5GPahETxt7teKFMjnDIi2T89BKflCNCNLjqHm 0ZyD6kC+HuaJv7bUsGnnsvgyRXhsyqjdWnbvpKppN++Xh+M4oDs23RixQBc/0h3B YB3qO24= -----END CERTIFICATE-----Generated at Wed Nov 5 10:09:19 2025 by rpki-client