$ rpki-client -vvf rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/BADD8D386C4411EFA8952B76C4F9AE02.roa File: BADD8D386C4411EFA8952B76C4F9AE02.roa (raw, json) Hash identifier: dvnOEo+3N790+AtnbaRMi3nEBY3/eARCboXR6RYFGJE= Subject key identifier: F1:DE:85:C2:9B:2F:09:30:A1:2F:A4:CE:BC:A9:0A:B2:E6:FB:3E:5F Certificate issuer: /CN=A9175F18/serialNumber=3C8B2BDBCB155E2D2FECD45D062FB3699F034320 Certificate serial: 0816 Authority key identifier: 3C:8B:2B:DB:CB:15:5E:2D:2F:EC:D4:5D:06:2F:B3:69:9F:03:43:20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/BADD8D386C4411EFA8952B76C4F9AE02.roa Signing time: Sun 02 Nov 2025 21:11:15 +0000 ROA not before: Sun 02 Nov 2025 21:11:15 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 62468 IP address blocks: 43.225.56.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 21:11:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2070 (0x816) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175F18, serialNumber=3C8B2BDBCB155E2D2FECD45D062FB3699F034320 Validity Not Before: Nov 2 21:11:15 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6907c8f2-b036 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ac:f2:a5:f4:41:e5:0b:40:83:89:46:3b:c9: ae:e2:0e:fd:aa:dc:6f:b9:0d:7f:85:b1:c2:d0:b6: e2:29:c2:18:6b:f0:05:85:7f:2b:c5:c2:ff:90:ac: bc:2b:0c:84:9d:a5:c6:0a:cf:a4:d7:bb:39:0c:ee: 23:0a:70:94:25:c7:49:4b:de:c1:23:c4:a9:9b:20: 73:50:a6:ce:36:bb:97:71:d6:1f:d9:09:8f:cc:f4: 7b:63:0f:80:6d:79:83:38:ef:be:17:fd:5e:19:bf: e0:b8:6b:c7:ef:3e:36:2b:9c:6e:dc:cf:2a:da:07: 3e:e7:a3:b3:0d:23:44:ad:38:7f:a0:7f:f2:e7:e6: c6:9d:e5:8e:3e:ec:e5:d8:04:48:69:92:54:67:8f: 3d:f7:01:50:b8:d5:00:d7:17:a2:30:7f:ab:de:13: 32:3c:ae:a0:af:c9:ee:cb:08:95:8b:69:73:94:de: d1:dc:ae:66:45:8b:e6:cc:54:64:8e:9c:20:5e:48: 15:45:95:0e:c8:bd:02:e6:6f:c8:75:66:08:9f:0e: 43:75:db:cd:1a:9f:79:54:90:8e:6f:89:47:37:1d: f6:73:62:97:b4:da:96:d5:ad:bd:19:75:b0:af:3e: ae:0e:a7:52:8e:ae:a9:6b:b7:a7:10:7e:ce:94:88: 40:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:DE:85:C2:9B:2F:09:30:A1:2F:A4:CE:BC:A9:0A:B2:E6:FB:3E:5F X509v3 Authority Key Identifier: keyid:3C:8B:2B:DB:CB:15:5E:2D:2F:EC:D4:5D:06:2F:B3:69:9F:03:43:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/BADD8D386C4411EFA8952B76C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.225.56.0/22 Signature Algorithm: sha256WithRSAEncryption 72:4e:1f:ec:09:49:db:04:52:cb:cb:86:a7:89:ad:8a:69:84: 02:29:9a:ec:5f:af:54:79:c9:5b:bf:f6:f7:72:c3:20:1d:34: 1b:82:58:30:f2:f5:0b:51:1f:e5:b5:cc:aa:08:3b:34:e8:6b: ea:e7:e6:87:65:f8:db:4c:64:0c:6e:6c:18:cf:e6:3c:53:0c: d0:31:29:84:61:2e:9c:01:14:a4:4d:0a:ab:44:f9:2c:a1:90: 7b:dc:9d:ec:3f:a2:1d:4a:6b:c4:82:c7:6b:38:84:d1:67:83: 80:cd:4d:d1:27:bc:2e:e7:35:9d:4f:03:cb:c9:c9:73:8c:93: 1b:79:05:1c:c3:8b:82:80:ee:8d:a2:ce:a2:37:26:8a:14:22: 13:a6:49:00:81:87:ef:4e:b9:00:7a:4f:aa:7f:50:ff:6d:82: da:bb:4e:7f:69:17:a5:7e:d0:a6:d9:b0:57:3b:2c:3b:4a:eb: e5:7a:72:4a:f2:c6:fa:fd:71:3e:34:57:7b:31:8e:37:5e:40: 0d:fc:40:41:39:02:89:62:64:15:d7:de:a1:c3:87:58:f1:bf: a8:38:7a:91:04:8e:b5:2c:cb:a3:91:85:b7:ac:0f:3c:c7:a3: 30:69:c6:03:d1:a9:1c:c9:3e:a8:2a:7f:63:35:4a:80:65:dd: bb:f3:e3:3b -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCBYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzVGMTgxMTAvBgNVBAUTKDNDOEIyQkRCQ0IxNTVFMkQyRkVDRDQ1RDA2MkZCMzY5 OUYwMzQzMjAwHhcNMjUxMTAyMjExMTE1WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTA3YzhmMi1iMDM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnKzypfRB5QtAg4lGO8mu4g79qtxvuQ1/hbHC0LbiKcIYa/AFhX8rxcL/kKy8 KwyEnaXGCs+k17s5DO4jCnCUJcdJS97BI8SpmyBzUKbONruXcdYf2QmPzPR7Yw+A bXmDOO++F/1eGb/guGvH7z42K5xu3M8q2gc+56OzDSNErTh/oH/y5+bGneWOPuzl 2ARIaZJUZ4899wFQuNUA1xeiMH+r3hMyPK6gr8nuywiVi2lzlN7R3K5mRYvmzFRk jpwgXkgVRZUOyL0C5m/IdWYInw5DddvNGp95VJCOb4lHNx32c2KXtNqW1a29GXWw rz6uDqdSjq6pa7enEH7OlIhAhwIDAQABo4IClTCCApEwHQYDVR0OBBYEFPHehcKb LwkwoS+kzrypCrLm+z5fMB8GA1UdIwQYMBaAFDyLK9vLFV4tL+zUXQYvs2mfA0Mg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUYxOC9BMzg0MjkxQzBB QTAxMUVCODczMzM4ODJDNEY5QUUwMi9QSXNyMjhzVlhpMHY3TlJkQmktemFaOERR eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BJc3IyOHNWWGkwdjdOUmRCaS16YVo4RFF5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzVGMTgvQTM4NDI5MUMwQUEwMTFFQjg3MzMzODgyQzRGOUFFMDIvQkFERDhEMzg2 QzQ0MTFFRkE4OTUyQjc2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAIr4TgwDQYJKoZIhvcNAQELBQADggEBAHJOH+wJSdsEUsvL hqeJrYpphAIpmuxfr1R5yVu/9vdywyAdNBuCWDDy9QtRH+W1zKoIOzToa+rn5odl +NtMZAxubBjP5jxTDNAxKYRhLpwBFKRNCqtE+SyhkHvcnew/oh1Ka8SCx2s4hNFn g4DNTdEnvC7nNZ1PA8vJyXOMkxt5BRzDi4KA7o2izqI3JooUIhOmSQCBh+9OuQB6 T6p/UP9tgtq7Tn9pF6V+0KbZsFc7LDtK6+V6ckryxvr9cT40V3sxjjdeQA38QEE5 AoliZBXX3qHDh1jxv6g4epEEjrUsy6ORhbesDzzHozBpxgPRqRzJPqgqf2M1SoBl 3bvz4zs= -----END CERTIFICATE-----Generated at Tue Nov 4 21:43:54 2025 by rpki-client