$ rpki-client -vvf rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/9F57DB96B42211F09BF7B44BC4F9AE02.roa File: 9F57DB96B42211F09BF7B44BC4F9AE02.roa (raw, json) Hash identifier: GSocOIU4gJGXAsCNtlbHDTRRIj+08JXL+H5AQwRagYs= Subject key identifier: B0:E7:E1:BF:64:F2:62:D6:86:AD:1E:03:E5:E6:5E:30:ED:15:EE:D2 Certificate issuer: /CN=A916E9E3/serialNumber=0084F47A4372C8F8A7D51183D5036C593D19E1C3 Certificate serial: 18 Authority key identifier: 00:84:F4:7A:43:72:C8:F8:A7:D5:11:83:D5:03:6C:59:3D:19:E1:C3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AIT0ekNyyPin1RGD1QNsWT0Z4cM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/9F57DB96B42211F09BF7B44BC4F9AE02.roa Signing time: Tue 28 Oct 2025 17:22:51 +0000 ROA not before: Tue 28 Oct 2025 17:22:51 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 152098 IP address blocks: 155.35.34.0/24 maxlen: 24 155.35.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/AIT0ekNyyPin1RGD1QNsWT0Z4cM.crl rsync://rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/AIT0ekNyyPin1RGD1QNsWT0Z4cM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AIT0ekNyyPin1RGD1QNsWT0Z4cM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:57:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E9E3, serialNumber=0084F47A4372C8F8A7D51183D5036C593D19E1C3 Validity Not Before: Oct 28 17:22:51 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=6900fbeb-301a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ac:89:16:4f:c6:5b:1e:b2:ab:09:42:b0:e5: e1:d0:bf:98:e5:98:9e:87:79:a2:10:d0:60:dd:21: 7d:74:60:16:15:db:72:36:ea:9a:27:00:72:f8:38: 1e:fe:1c:45:91:26:da:06:df:5e:94:44:07:9c:a7: 04:f3:42:4d:9b:3d:11:71:29:82:48:66:01:7d:0b: 3d:15:27:ba:8f:47:54:d3:36:dc:0b:96:26:fc:98: 7b:c2:64:cf:da:55:f4:e6:b3:9e:d4:be:4d:7d:7e: 5f:c0:b5:91:80:fb:b7:f7:61:19:2c:23:ec:a1:21: d7:90:3b:26:c8:1a:6c:cd:7d:06:07:ee:50:b3:82: e9:2f:4d:c6:e1:3e:0c:39:cd:aa:73:e3:cb:ff:b5: 93:b6:18:37:6f:a3:ce:42:2c:d0:ab:4b:96:cd:a6: 73:a1:bc:a2:9e:df:85:82:eb:57:ff:1d:9f:1d:a1: d5:c8:fe:4c:8a:19:a4:c3:37:26:2b:e3:81:ac:aa: 3d:54:8a:f3:8d:8d:13:14:5b:59:39:8b:81:db:2a: 5a:b4:b3:67:4b:29:1f:1b:93:32:d4:6f:ec:b1:5e: 69:a4:23:50:f0:e6:6e:09:30:44:45:eb:ad:7a:b9: e6:a6:23:b5:be:0e:c3:86:65:d0:60:82:e0:67:e8: d2:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:E7:E1:BF:64:F2:62:D6:86:AD:1E:03:E5:E6:5E:30:ED:15:EE:D2 X509v3 Authority Key Identifier: keyid:00:84:F4:7A:43:72:C8:F8:A7:D5:11:83:D5:03:6C:59:3D:19:E1:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/AIT0ekNyyPin1RGD1QNsWT0Z4cM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AIT0ekNyyPin1RGD1QNsWT0Z4cM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/9F57DB96B42211F09BF7B44BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 155.35.34.0/23 Signature Algorithm: sha256WithRSAEncryption 70:fa:83:74:32:e7:86:ff:78:bd:d9:84:ec:f1:67:c1:3b:9f: 75:d3:84:f4:d0:fb:ec:2a:f0:46:72:dc:34:1b:ba:4c:2e:ba: e9:96:75:ee:53:35:50:58:9d:4b:42:a5:68:29:24:7c:e4:ee: 90:49:cc:22:6f:74:31:5c:84:0b:72:43:1c:69:5e:f0:4f:52: 91:fc:dd:8d:a5:c7:c2:8c:fe:3b:b6:95:69:cb:b4:43:d4:0a: 95:7f:e1:1d:56:7f:2c:3f:67:ec:34:a7:6b:e0:2c:fb:ca:a8: c7:10:0a:0b:11:26:5a:1c:ed:11:44:76:a4:c9:e5:94:2f:d4: 2b:7d:15:cc:9f:c4:8c:ac:6f:ac:38:cd:df:e8:36:b5:a8:73: 7a:4e:4a:3a:30:b8:51:a5:e6:7e:83:12:99:5e:e5:0a:00:18: 33:9f:8c:f3:45:d5:a8:e9:89:07:ae:61:47:e6:aa:0b:0d:b7: 87:af:89:8c:ca:ec:38:4a:51:2e:df:cf:26:4b:3c:9b:2c:5f: 90:82:f2:d3:22:e1:c2:5b:95:92:ed:67:9f:b9:78:c1:4a:cd: 81:ce:7e:fb:52:2c:7a:4e:74:77:d8:00:8f:9a:a1:7c:2a:5f: e6:27:9f:ee:94:a1:6f:a2:e4:f5:04:e5:1e:13:b2:ea:2b:02: ec:d9:d0:d5 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 RTlFMzExMC8GA1UEBRMoMDA4NEY0N0E0MzcyQzhGOEE3RDUxMTgzRDUwMzZDNTkz RDE5RTFDMzAeFw0yNTEwMjgxNzIyNTFaFw0yNjEyMDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MDBmYmViLTMwMWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBrIkWT8ZbHrKrCUKw5eHQv5jlmJ6HeaIQ0GDdIX10YBYV23I26ponAHL4OB7+ HEWRJtoG316URAecpwTzQk2bPRFxKYJIZgF9Cz0VJ7qPR1TTNtwLlib8mHvCZM/a VfTms57Uvk19fl/AtZGA+7f3YRksI+yhIdeQOybIGmzNfQYH7lCzgukvTcbhPgw5 zapz48v/tZO2GDdvo85CLNCrS5bNpnOhvKKe34WC61f/HZ8dodXI/kyKGaTDNyYr 44Gsqj1UivONjRMUW1k5i4HbKlq0s2dLKR8bkzLUb+yxXmmkI1Dw5m4JMERF6616 ueamI7W+DsOGZdBgguBn6NLRAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUsOfhv2Ty YtaGrR4D5eZeMO0V7tIwHwYDVR0jBBgwFoAUAIT0ekNyyPin1RGD1QNsWT0Z4cMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZFOUUzLzQ0Q0U0RUQyQTNB NDExRjA5MjAxM0UyOUM0RjlBRTAyL0FJVDBla055eVBpbjFSR0QxUU5zV1QwWjRj TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQUlUMGVrTnl5UGluMVJHRDFRTnNXVDBaNGNNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RTlFMy80NENFNEVEMkEzQTQxMUYwOTIwMTNFMjlDNEY5QUUwMi85RjU3REI5NkI0 MjIxMUYwOUJGN0I0NEJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAZsjIjANBgkqhkiG9w0BAQsFAAOCAQEAcPqDdDLnhv94vdmE 7PFnwTufddOE9ND77CrwRnLcNBu6TC666ZZ17lM1UFidS0KlaCkkfOTukEnMIm90 MVyEC3JDHGle8E9SkfzdjaXHwoz+O7aVacu0Q9QKlX/hHVZ/LD9n7DSna+As+8qo xxAKCxEmWhztEUR2pMnllC/UK30VzJ/EjKxvrDjN3+g2tahzek5KOjC4UaXmfoMS mV7lCgAYM5+M80XVqOmJB65hR+aqCw23h6+JjMrsOEpRLt/PJks8myxfkILy0yLh wluVku1nn7l4wUrNgc5++1Isek50d9gAj5qhfCpf5ief7pShb6Lk9QTlHhOy6isC 7NnQ1Q== -----END CERTIFICATE-----Generated at Wed Nov 5 07:23:35 2025 by rpki-client