$ rpki-client -vvf rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/2357FC145F8D11EF94E7303FC4F9AE02.roa File: 2357FC145F8D11EF94E7303FC4F9AE02.roa (raw, json) Hash identifier: XuW38uZAfeN4keo/onpljpRS5BHBZ8INJxFDXHjJZ6w= Subject key identifier: 34:3C:9E:C7:F2:A2:97:5B:7A:B9:DB:8D:AC:2B:4E:88:64:6A:EA:14 Certificate issuer: /CN=A9172D91/serialNumber=E2EDE4A7EA972668A795B27BA9DC87F4B90DA897 Certificate serial: 1690 Authority key identifier: E2:ED:E4:A7:EA:97:26:68:A7:95:B2:7B:A9:DC:87:F4:B9:0D:A8:97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4u3kp-qXJminlbJ7qdyH9LkNqJc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/2357FC145F8D11EF94E7303FC4F9AE02.roa Signing time: Sat 12 Jul 2025 16:55:29 +0000 ROA not before: Sat 12 Jul 2025 16:55:29 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 17819 IP address blocks: 27.111.183.0/24 maxlen: 24 2404:6900::/33 maxlen: 33 2404:6900:7000::/40 maxlen: 40 2404:6900:7001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/4u3kp-qXJminlbJ7qdyH9LkNqJc.crl rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/4u3kp-qXJminlbJ7qdyH9LkNqJc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4u3kp-qXJminlbJ7qdyH9LkNqJc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5776 (0x1690) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172D91, serialNumber=E2EDE4A7EA972668A795B27BA9DC87F4B90DA897 Validity Not Before: Jul 12 16:55:29 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68729381-d0c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e9:15:98:82:45:30:ce:00:5d:a1:7b:b8:85: e2:a9:15:b7:d5:fb:3e:9c:df:46:91:e6:85:a6:c1: e0:c9:a6:55:e3:82:08:c6:94:8c:59:89:34:d3:55: 52:dd:33:c9:3d:0e:e7:cc:63:49:ed:51:54:4f:d0: aa:dd:2d:e8:a7:ed:16:ac:56:a4:d3:c3:54:d4:d3: c3:8b:44:57:d1:a9:98:52:08:a9:e7:71:32:de:56: 5a:07:ad:01:54:aa:d0:54:d7:94:f5:56:0d:84:55: c0:3f:f8:d7:f2:6a:3a:a6:e0:53:0c:f2:96:86:45: 7f:5a:c0:84:e1:34:63:3b:00:7e:9d:cc:bc:68:07: 13:d8:91:d0:55:45:b6:25:41:23:e2:12:a8:73:91: ed:3d:5f:4a:7b:d5:e0:59:fa:fb:17:89:c4:8f:10: 0e:fc:56:62:5a:a2:8e:33:e2:ef:22:4b:27:88:fe: 8f:4f:2d:10:c1:1c:63:e8:e2:57:92:c2:6d:d1:a0: a2:44:7b:19:7b:ac:98:97:52:0e:d3:c6:f7:ba:ac: 78:7c:d4:11:bb:54:dc:ea:59:c5:c2:f1:62:da:9d: c5:a1:9c:57:b1:bf:4a:cd:53:b3:15:b4:7f:82:cb: 27:fe:c2:8c:fc:95:c9:7c:36:8b:d6:14:55:70:ad: 21:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:3C:9E:C7:F2:A2:97:5B:7A:B9:DB:8D:AC:2B:4E:88:64:6A:EA:14 X509v3 Authority Key Identifier: keyid:E2:ED:E4:A7:EA:97:26:68:A7:95:B2:7B:A9:DC:87:F4:B9:0D:A8:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/4u3kp-qXJminlbJ7qdyH9LkNqJc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4u3kp-qXJminlbJ7qdyH9LkNqJc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/2357FC145F8D11EF94E7303FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.111.183.0/24 IPv6: 2404:6900::/33 Signature Algorithm: sha256WithRSAEncryption 52:d4:f0:13:37:40:4b:c3:17:df:27:9a:dc:9c:3b:86:f9:3a: 90:2c:6d:75:40:75:5d:69:94:12:74:29:87:22:15:fd:71:f4: ab:26:5b:69:c9:a3:fb:58:a1:60:fb:bb:1d:e6:42:99:78:2e: ff:97:fb:5d:a5:06:fe:49:55:0a:8a:82:42:fc:eb:32:9c:66: 82:a8:29:cd:c9:10:c5:97:ef:3f:32:59:7b:d6:5b:90:2d:ae: 0a:08:55:52:1b:34:66:2d:9b:80:44:15:89:50:7c:b1:4f:19: 84:9a:a9:22:d6:86:f7:bc:7f:4a:c5:56:b9:c7:80:cf:5b:44: 04:87:da:48:52:cd:ea:d8:69:d7:84:74:26:89:d6:b1:2b:40: 80:67:47:88:67:02:0c:aa:a4:f8:f1:f1:18:9f:77:8d:9e:c8: 4a:c6:86:79:0a:5d:63:7b:f4:fb:73:87:7b:21:5f:f8:a6:81: 87:da:fc:ae:01:0c:01:78:b5:34:4a:1a:4c:68:b2:9e:ba:db: 59:68:71:f8:aa:3a:30:f5:5b:81:99:21:c9:1f:d5:55:af:45: b2:26:38:aa:78:c9:66:ac:56:fc:3f:2d:b5:d8:92:c6:89:d8: be:3a:85:e4:2c:5a:66:ca:f3:87:90:f5:34:dc:bb:f6:be:70: 77:cf:ab:a1 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgICFpAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJEOTExMTAvBgNVBAUTKEUyRURFNEE3RUE5NzI2NjhBNzk1QjI3QkE5REM4N0Y0 QjkwREE4OTcwHhcNMjUwNzEyMTY1NTI5WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODcyOTM4MS1kMGM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz+kVmIJFMM4AXaF7uIXiqRW31fs+nN9GkeaFpsHgyaZV44IIxpSMWYk001VS 3TPJPQ7nzGNJ7VFUT9Cq3S3op+0WrFak08NU1NPDi0RX0amYUgip53Ey3lZaB60B VKrQVNeU9VYNhFXAP/jX8mo6puBTDPKWhkV/WsCE4TRjOwB+ncy8aAcT2JHQVUW2 JUEj4hKoc5HtPV9Ke9XgWfr7F4nEjxAO/FZiWqKOM+LvIksniP6PTy0QwRxj6OJX ksJt0aCiRHsZe6yYl1IO08b3uqx4fNQRu1Tc6lnFwvFi2p3FoZxXsb9KzVOzFbR/ gssn/sKM/JXJfDaL1hRVcK0hZwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFDQ8nsfy opdbernbjawrTohkauoUMB8GA1UdIwQYMBaAFOLt5KfqlyZop5Wye6nch/S5DaiX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkQ5MS9FQTY3MkE1QzE5 RTcxMUU4QjI0M0Q1N0NDNEY5QUUwMi80dTNrcC1xWEptaW5sYko3cWR5SDlMa05x SmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzR1M2twLXFYSm1pbmxiSjdxZHlIOUxrTnFKYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzJEOTEvRUE2NzJBNUMxOUU3MTFFOEIyNDNENTdDQzRGOUFFMDIvMjM1N0ZDMTQ1 RjhEMTFFRjk0RTczMDNGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLwYIKwYBBQUHAQcBAf8E IDAeMAwEAgABMAYDBAAbb7cwDgQCAAIwCAMGByQEaQAAMA0GCSqGSIb3DQEBCwUA A4IBAQBS1PATN0BLwxffJ5rcnDuG+TqQLG11QHVdaZQSdCmHIhX9cfSrJltpyaP7 WKFg+7sd5kKZeC7/l/tdpQb+SVUKioJC/OsynGaCqCnNyRDFl+8/Mll71luQLa4K CFVSGzRmLZuARBWJUHyxTxmEmqki1ob3vH9KxVa5x4DPW0QEh9pIUs3q2GnXhHQm idaxK0CAZ0eIZwIMqqT48fEYn3eNnshKxoZ5Cl1je/T7c4d7IV/4poGH2vyuAQwB eLU0ShpMaLKeuttZaHH4qjow9VuBmSHJH9VVr0WyJjiqeMlmrFb8Py212JLGidi+ OoXkLFpmyvOHkPU03Lv2vnB3z6uh -----END CERTIFICATE-----Generated at Wed Nov 5 12:04:52 2025 by rpki-client