$ rpki-client -vvf rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1B09C20A9CD711EE8D4B0835C4F9AE02.roa File: 1B09C20A9CD711EE8D4B0835C4F9AE02.roa (raw, json) Hash identifier: xQhNdK+dmnWFBSYuPKpKIiIyOGr1KTaY3ftw2n4c55M= Subject key identifier: 7F:B9:60:62:9A:26:8A:9E:76:F6:33:11:6B:E9:90:4A:3A:F3:18:79 Certificate issuer: /CN=A916D0D2/serialNumber=D5E53AF115997C7FA3B86552F95F5114AF3405E9 Certificate serial: 07D1 Authority key identifier: D5:E5:3A:F1:15:99:7C:7F:A3:B8:65:52:F9:5F:51:14:AF:34:05:E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1B09C20A9CD711EE8D4B0835C4F9AE02.roa Signing time: Wed 02 Jul 2025 22:31:20 +0000 ROA not before: Wed 02 Jul 2025 22:31:20 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 56683 IP address blocks: 45.114.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.crl rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:40:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2001 (0x7d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D0D2, serialNumber=D5E53AF115997C7FA3B86552F95F5114AF3405E9 Validity Not Before: Jul 2 22:31:20 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=6865b338-1f6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:05:0f:f4:d1:79:71:0b:d2:5e:79:5c:45:11: 81:19:1a:06:69:9d:23:95:82:60:3c:93:98:9f:5c: 43:64:81:c3:c0:ad:88:2b:d1:c0:ea:f7:e2:f1:d9: fd:f0:bd:4e:2c:7c:9e:38:42:a3:2f:21:dd:bb:2b: 85:49:43:f6:ba:e3:99:53:44:6b:cf:0b:54:ba:ed: c8:a7:3e:ef:c4:7e:e7:cb:e8:4d:65:7a:a0:8a:2d: 44:cb:e1:9e:90:dc:a0:db:c5:85:91:73:a4:6c:fd: 22:88:7d:56:3f:cb:e3:ef:be:31:2f:07:ec:b3:01: 4e:9b:5b:30:32:82:04:d4:63:04:fc:da:bf:e4:a6: 7a:5e:55:e8:ac:3c:00:40:4d:c5:2c:38:60:17:47: 29:ba:7a:44:48:1e:15:9c:5c:a5:cd:01:f9:e7:ec: 54:ea:a9:a4:66:7d:aa:b8:47:c4:32:cc:d7:8e:9b: 7d:53:2d:ea:51:9c:de:af:0d:1b:62:c3:a7:ec:d5: 14:d6:43:0c:19:3c:2b:e9:66:e3:ff:ea:24:11:99: 5d:39:3d:67:86:23:f6:36:a9:1a:ec:2c:3a:94:e1: f5:61:d7:10:22:2a:9e:d7:c2:4b:12:90:1b:fd:bd: 67:4f:59:1f:2b:be:70:65:a8:3f:e8:66:4f:52:2c: 49:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:B9:60:62:9A:26:8A:9E:76:F6:33:11:6B:E9:90:4A:3A:F3:18:79 X509v3 Authority Key Identifier: keyid:D5:E5:3A:F1:15:99:7C:7F:A3:B8:65:52:F9:5F:51:14:AF:34:05:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1B09C20A9CD711EE8D4B0835C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.114.188.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:aa:f9:8c:05:29:af:92:d1:a3:48:c8:ba:87:90:cf:86:43: f9:b2:9b:68:c8:27:48:34:ad:e8:2d:ef:5a:58:34:b4:eb:97: 14:53:51:6c:ee:15:b5:00:78:18:d4:01:38:8f:c5:4c:16:1a: 04:f7:de:f6:3d:3e:13:2f:43:f5:0b:1f:3b:49:9d:c7:a9:fe: 6a:08:cf:d8:5a:04:be:53:2c:68:13:b9:13:cc:ba:d2:f3:c6: 80:d7:9f:04:cf:98:6a:a2:85:3d:98:dc:ae:06:52:0a:89:9b: a9:d8:ef:35:0a:5c:fb:a5:2c:42:fa:71:7c:81:ca:6b:ab:b3: ae:7c:4e:06:4a:9a:6b:34:25:e1:55:ae:84:8c:d0:17:a7:3f: 1e:a7:e9:f4:55:e8:54:2f:6a:ec:a4:d1:9e:9d:bb:b9:cd:bf: ad:17:7b:fa:f4:88:78:d4:30:a4:85:59:1c:97:07:04:78:d2: d2:c8:2d:d8:64:1d:f4:d9:dd:cf:72:84:3f:f2:09:96:c2:47: a2:2b:1e:8e:78:d0:43:b5:29:94:3f:2d:55:ed:ff:a4:41:ab: 74:5e:1b:12:ed:36:70:b9:a2:37:4b:95:07:7f:e2:f2:eb:35: ec:64:99:10:46:77:4d:67:9d:c3:3f:79:0d:f8:8a:d0:29:ec: 78:1c:4f:7f -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB9EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQwRDIxMTAvBgNVBAUTKEQ1RTUzQUYxMTU5OTdDN0ZBM0I4NjU1MkY5NUY1MTE0 QUYzNDA1RTkwHhcNMjUwNzAyMjIzMTIwWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODY1YjMzOC0xZjZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxgUP9NF5cQvSXnlcRRGBGRoGaZ0jlYJgPJOYn1xDZIHDwK2IK9HA6vfi8dn9 8L1OLHyeOEKjLyHduyuFSUP2uuOZU0RrzwtUuu3Ipz7vxH7ny+hNZXqgii1Ey+Ge kNyg28WFkXOkbP0iiH1WP8vj774xLwfsswFOm1swMoIE1GME/Nq/5KZ6XlXorDwA QE3FLDhgF0cpunpESB4VnFylzQH55+xU6qmkZn2quEfEMszXjpt9Uy3qUZzerw0b YsOn7NUU1kMMGTwr6Wbj/+okEZldOT1nhiP2Nqka7Cw6lOH1YdcQIiqe18JLEpAb /b1nT1kfK75wZag/6GZPUixJqwIDAQABo4IClTCCApEwHQYDVR0OBBYEFH+5YGKa JoqedvYzEWvpkEo68xh5MB8GA1UdIwQYMBaAFNXlOvEVmXx/o7hlUvlfURSvNAXp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDBEMi81OTM3RDQzRTM1 QUQxMUVCODFFRUFEMTJDNEY5QUUwMi8xZVU2OFJXWmZILWp1R1ZTLVY5UkZLODBC ZWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFlVTY4UldaZkgtanVHVlMtVjlSRks4MEJlay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkQwRDIvNTkzN0Q0M0UzNUFEMTFFQjgxRUVBRDEyQzRGOUFFMDIvMUIwOUMyMEE5 Q0Q3MTFFRThENEIwODM1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAtcrwwDQYJKoZIhvcNAQELBQADggEBADqq+YwFKa+S0aNI yLqHkM+GQ/mym2jIJ0g0regt71pYNLTrlxRTUWzuFbUAeBjUATiPxUwWGgT33vY9 PhMvQ/ULHztJncep/moIz9haBL5TLGgTuRPMutLzxoDXnwTPmGqihT2Y3K4GUgqJ m6nY7zUKXPulLEL6cXyBymurs658TgZKmms0JeFVroSM0BenPx6n6fRV6FQvauyk 0Z6du7nNv60Xe/r0iHjUMKSFWRyXBwR40tLILdhkHfTZ3c9yhD/yCZbCR6IrHo54 0EO1KZQ/LVXt/6RBq3ReGxLtNnC5ojdLlQd/4vLrNexkmRBGd01nncM/eQ34itAp 7HgcT38= -----END CERTIFICATE-----Generated at Wed Nov 5 10:04:11 2025 by rpki-client