$ rpki-client -vvf rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/3CE9A810799D11EF9547461CC4F9AE02.roa File: 3CE9A810799D11EF9547461CC4F9AE02.roa (raw, json) Hash identifier: VfnSvDUvHKrYhNHc7vXNPSVppqVaI6SmYJprBmoGKlM= Subject key identifier: 98:4C:9D:AE:91:A0:44:81:BA:AE:10:91:62:D0:87:91:49:05:A4:E6 Certificate issuer: /CN=A917F854/serialNumber=E11A472F849FA3D663CA87CA6633ECE7D8D00762 Certificate serial: DC Authority key identifier: E1:1A:47:2F:84:9F:A3:D6:63:CA:87:CA:66:33:EC:E7:D8:D0:07:62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RpHL4Sfo9ZjyofKZjPs59jQB2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/3CE9A810799D11EF9547461CC4F9AE02.roa Signing time: Thu 23 Oct 2025 07:49:45 +0000 ROA not before: Thu 23 Oct 2025 07:49:45 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 16509 IP address blocks: 202.50.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.crl rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RpHL4Sfo9ZjyofKZjPs59jQB2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 220 (0xdc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F854, serialNumber=E11A472F849FA3D663CA87CA6633ECE7D8D00762 Validity Not Before: Oct 23 07:49:45 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68f9de18-8235 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:10:3a:7f:f3:d2:6c:2c:f1:25:98:50:c3:ee: 8a:67:0a:a5:f4:40:ee:22:7d:d5:73:d2:e9:c0:5d: 29:a6:f4:cc:0f:88:7b:83:3f:8f:96:60:21:58:50: da:83:72:89:31:9b:73:50:f9:3c:71:80:d4:0e:a9: b9:76:06:4e:6a:79:37:9e:3f:36:d9:10:74:18:87: a7:e1:f3:aa:b2:d2:e2:86:48:03:99:1b:e0:80:07: 9a:19:63:ae:0f:2d:23:95:8f:50:c8:5f:09:4c:a2: a6:29:e0:e5:37:eb:eb:31:cd:5f:b8:f7:a9:b0:1c: 91:fb:2c:8d:f2:15:fb:ba:34:45:99:06:e0:94:43: 42:22:0a:89:77:55:6f:db:f1:a9:ac:fe:3a:b7:10: 78:44:cc:d8:35:7d:5c:4e:0b:1f:32:c5:db:6c:ed: 2a:a4:fd:fd:59:f0:b2:29:e5:0b:a0:31:92:fa:d0: 4d:e1:f8:ac:b3:7e:02:90:40:90:36:77:fe:ce:76: f1:3e:5b:ea:26:86:1c:39:7c:91:b2:3f:b7:41:6b: e2:86:bf:6b:45:a4:14:b4:54:10:0e:be:2d:bf:de: fa:55:36:1c:9d:11:ce:63:92:eb:5d:d1:b9:6c:19: 80:70:09:88:ef:5e:c5:81:50:92:f2:26:19:08:aa: 1a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:4C:9D:AE:91:A0:44:81:BA:AE:10:91:62:D0:87:91:49:05:A4:E6 X509v3 Authority Key Identifier: keyid:E1:1A:47:2F:84:9F:A3:D6:63:CA:87:CA:66:33:EC:E7:D8:D0:07:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RpHL4Sfo9ZjyofKZjPs59jQB2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/3CE9A810799D11EF9547461CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.50.102.0/24 Signature Algorithm: sha256WithRSAEncryption 39:77:07:d5:47:57:41:33:d4:c4:09:b7:fa:ff:4c:49:3b:e9: 9e:c9:72:83:13:a5:25:c0:fe:93:45:17:5f:bf:75:b1:49:f6: eb:79:6b:41:7d:36:2c:6b:bd:52:48:4d:38:34:c1:aa:01:5c: 70:1a:19:7c:26:e7:e9:04:5a:19:77:65:4b:7c:8c:ee:e4:54: 42:08:12:04:19:f5:81:a3:df:69:fe:a4:c1:51:e1:35:59:57: 2c:48:9f:16:56:7b:98:e4:9a:43:a4:e6:fd:c7:a0:2c:6e:1e: 34:44:8d:96:a1:16:0a:53:c2:a9:97:e1:0a:45:85:a5:97:87: 7b:32:34:48:5a:b0:67:d4:11:cb:e1:ce:c6:74:b3:f0:6a:60: c2:3c:27:4f:3c:95:d5:49:d4:5e:07:47:be:29:39:9d:2e:8f: e2:21:fc:a0:0b:44:df:6b:2a:07:dd:0e:92:8e:95:b5:8e:73: af:5a:4d:8b:3e:49:7c:51:1f:42:27:75:25:fb:a5:9d:5f:73: 3a:bd:a4:57:b8:48:a9:c3:d5:02:44:64:51:3f:59:4e:d7:b0: cc:98:a7:0b:02:20:b4:d7:ad:3d:7f:af:45:f2:1b:f8:45:76: 2d:a6:75:39:91:25:5a:4f:cf:e6:1b:d0:b3:65:ab:d5:88:08: ee:4b:ee:7a -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICANwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Y4NTQxMTAvBgNVBAUTKEUxMUE0NzJGODQ5RkEzRDY2M0NBODdDQTY2MzNFQ0U3 RDhEMDA3NjIwHhcNMjUxMDIzMDc0OTQ1WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGY5ZGUxOC04MjM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmBA6f/PSbCzxJZhQw+6KZwql9EDuIn3Vc9LpwF0ppvTMD4h7gz+PlmAhWFDa g3KJMZtzUPk8cYDUDqm5dgZOank3nj822RB0GIen4fOqstLihkgDmRvggAeaGWOu Dy0jlY9QyF8JTKKmKeDlN+vrMc1fuPepsByR+yyN8hX7ujRFmQbglENCIgqJd1Vv 2/GprP46txB4RMzYNX1cTgsfMsXbbO0qpP39WfCyKeULoDGS+tBN4fiss34CkECQ Nnf+znbxPlvqJoYcOXyRsj+3QWvihr9rRaQUtFQQDr4tv976VTYcnRHOY5LrXdG5 bBmAcAmI717FgVCS8iYZCKoa7QIDAQABo4IClTCCApEwHQYDVR0OBBYEFJhMna6R oESBuq4QkWLQh5FJBaTmMB8GA1UdIwQYMBaAFOEaRy+En6PWY8qHymYz7OfY0Adi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Rjg1NC9BODk2NDY2MDc5 OUIxMUVGODExRjkwMTlDNEY5QUUwMi80UnBITDRTZm85Wmp5b2ZLWmpQczU5alFC MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRScEhMNFNmbzlaanlvZktaalBzNTlqUUIySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0Y4NTQvQTg5NjQ2NjA3OTlCMTFFRjgxMUY5MDE5QzRGOUFFMDIvM0NFOUE4MTA3 OTlEMTFFRjk1NDc0NjFDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADKMmYwDQYJKoZIhvcNAQELBQADggEBADl3B9VHV0Ez1MQJ t/r/TEk76Z7JcoMTpSXA/pNFF1+/dbFJ9ut5a0F9NixrvVJITTg0waoBXHAaGXwm 5+kEWhl3ZUt8jO7kVEIIEgQZ9YGj32n+pMFR4TVZVyxInxZWe5jkmkOk5v3HoCxu HjREjZahFgpTwqmX4QpFhaWXh3syNEhasGfUEcvhzsZ0s/BqYMI8J088ldVJ1F4H R74pOZ0uj+Ih/KALRN9rKgfdDpKOlbWOc69aTYs+SXxRH0IndSX7pZ1fczq9pFe4 SKnD1QJEZFE/WU7XsMyYpwsCILTXrT1/r0XyG/hFdi2mdTmRJVpPz+Yb0LNlq9WI CO5L7no= -----END CERTIFICATE-----Generated at Wed Nov 5 13:32:35 2025 by rpki-client