$ rpki-client -vvf rpki.apnic.net/member_repository/A9187386/49CD6A3C3B2611E9B20D2681C4F9AE02/E366C4B83B2611E9906E7B81C4F9AE02.roa File: E366C4B83B2611E9906E7B81C4F9AE02.roa (raw, json) Hash identifier: xEIKhjUewdtyeU71/5L7KmwiUHlZvuapGiPz1UBOmLU= Subject key identifier: CE:19:0E:66:71:A9:E2:40:15:33:5E:BB:27:C8:11:FB:7C:5F:B4:48 Certificate issuer: /CN=A9187386/serialNumber=DE0C8F42BCA05B2F5581E6BCCB4C14A6E671B619 Certificate serial: 108D Authority key identifier: DE:0C:8F:42:BC:A0:5B:2F:55:81:E6:BC:CB:4C:14:A6:E6:71:B6:19 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3gyPQrygWy9Vgea8y0wUpuZxthk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187386/49CD6A3C3B2611E9B20D2681C4F9AE02/E366C4B83B2611E9906E7B81C4F9AE02.roa Signing time: Sun 31 Aug 2025 17:37:17 +0000 ROA not before: Sun 31 Aug 2025 17:37:17 +0000 ROA not after: Thu 01 Jan 2026 00:00:00 +0000 asID: 38229 IP address blocks: 192.248.0.0/17 maxlen: 17 192.248.0.0/22 maxlen: 22 192.248.4.0/22 maxlen: 22 192.248.8.0/21 maxlen: 21 192.248.16.0/20 maxlen: 20 192.248.32.0/19 maxlen: 19 192.248.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187386/49CD6A3C3B2611E9B20D2681C4F9AE02/3gyPQrygWy9Vgea8y0wUpuZxthk.crl rsync://rpki.apnic.net/member_repository/A9187386/49CD6A3C3B2611E9B20D2681C4F9AE02/3gyPQrygWy9Vgea8y0wUpuZxthk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3gyPQrygWy9Vgea8y0wUpuZxthk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:26:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4237 (0x108d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187386, serialNumber=DE0C8F42BCA05B2F5581E6BCCB4C14A6E671B619 Validity Not Before: Aug 31 17:37:17 2025 GMT Not After : Jan 1 00:00:00 2026 GMT Subject: CN=68b4884c-a0e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:68:3e:f3:72:97:8d:db:3d:27:bc:ae:2c:cb: a8:2f:2a:c8:e1:96:26:d2:eb:56:ac:9c:b7:73:c4: a6:65:6e:4e:75:a0:d8:f0:b9:2c:be:92:1d:1b:a7: 85:89:6b:72:b3:98:a4:b6:92:39:e4:d7:b1:a9:0f: 66:a2:7f:7f:16:63:a0:3e:6f:06:10:d6:9c:e5:4a: 42:d7:26:5d:1c:f0:54:38:6c:53:da:f5:13:5b:51: ed:cf:9b:9e:e8:f4:51:cf:99:fb:ec:11:78:88:da: ef:ea:f4:5c:de:ba:b8:71:4f:1f:0b:63:01:81:0c: 5a:5e:62:cb:70:46:8a:12:d8:8d:9a:b2:2d:6d:34: a7:58:80:2d:2c:af:49:83:6e:83:f8:9c:3d:77:3b: b5:ae:15:d0:1f:5e:4f:c9:a2:05:b7:fb:ea:d7:96: 77:5c:7e:51:04:e7:58:e4:4f:6e:6e:12:f0:bf:63: fa:8f:4a:82:33:75:09:6c:8f:52:22:07:e4:71:aa: aa:46:63:3b:d3:bc:fe:d1:47:b2:a5:2f:35:a6:e8: 10:89:bf:48:e0:07:81:44:ae:de:67:b6:fa:7b:1b: a4:99:c7:46:fc:09:28:ab:db:fe:31:fb:34:4b:ac: f7:1b:5b:bc:c4:3f:13:0e:3f:6c:c1:4f:6e:f0:68: 91:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:19:0E:66:71:A9:E2:40:15:33:5E:BB:27:C8:11:FB:7C:5F:B4:48 X509v3 Authority Key Identifier: keyid:DE:0C:8F:42:BC:A0:5B:2F:55:81:E6:BC:CB:4C:14:A6:E6:71:B6:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187386/49CD6A3C3B2611E9B20D2681C4F9AE02/3gyPQrygWy9Vgea8y0wUpuZxthk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3gyPQrygWy9Vgea8y0wUpuZxthk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187386/49CD6A3C3B2611E9B20D2681C4F9AE02/E366C4B83B2611E9906E7B81C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 192.248.0.0/17 Signature Algorithm: sha256WithRSAEncryption b6:e3:24:98:9b:23:28:d2:b2:37:b4:d1:32:01:8a:f3:0d:34: aa:da:48:bd:13:22:45:b7:b0:22:65:bd:69:92:dd:fd:85:aa: c1:32:97:b1:88:76:eb:a6:88:4b:d7:e1:58:25:7e:b9:ea:ad: 4a:f4:18:35:4e:bf:b6:77:1d:ae:95:ac:99:01:da:a9:1b:92: f2:d8:ef:3f:65:f9:9e:62:d0:de:b3:f5:70:6e:c6:69:8a:3b: b9:8b:e9:e1:ed:b6:bc:ef:21:26:99:73:8c:0f:0c:4c:55:2e: 47:f6:b8:ab:e6:66:1e:3b:c5:14:ff:f8:65:ca:ae:43:4d:3c: 1f:f4:63:8b:15:43:69:cd:5e:49:ea:ed:59:2a:62:e7:09:53: 18:37:9b:58:88:17:5a:32:61:19:1a:92:c6:8e:38:41:c0:5d: c0:7b:f8:76:45:28:a6:f4:bb:52:81:ef:59:65:3c:3a:42:a2: 82:62:20:05:a3:96:ee:a4:fa:b5:22:c6:35:a5:c8:e7:da:70: da:a1:64:bf:74:55:0d:11:9c:bc:fb:a8:87:59:0f:da:66:46: a0:e3:a7:fe:88:5c:3a:db:43:03:02:96:68:be:78:ad:39:54: 7a:0c:79:a8:eb:a0:6a:5c:9e:83:2f:3a:ce:1e:c5:f4:60:23: 8c:21:f7:1d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICEI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODczODYxMTAvBgNVBAUTKERFMEM4RjQyQkNBMDVCMkY1NTgxRTZCQ0NCNEMxNEE2 RTY3MUI2MTkwHhcNMjUwODMxMTczNzE3WhcNMjYwMTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGI0ODg0Yy1hMGU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA22g+83KXjds9J7yuLMuoLyrI4ZYm0utWrJy3c8SmZW5OdaDY8LksvpIdG6eF iWtys5iktpI55NexqQ9mon9/FmOgPm8GENac5UpC1yZdHPBUOGxT2vUTW1Htz5ue 6PRRz5n77BF4iNrv6vRc3rq4cU8fC2MBgQxaXmLLcEaKEtiNmrItbTSnWIAtLK9J g26D+Jw9dzu1rhXQH15PyaIFt/vq15Z3XH5RBOdY5E9ubhLwv2P6j0qCM3UJbI9S IgfkcaqqRmM707z+0UeypS81pugQib9I4AeBRK7eZ7b6exukmcdG/Akoq9v+Mfs0 S6z3G1u8xD8TDj9swU9u8GiRMwIDAQABo4IClTCCApEwHQYDVR0OBBYEFM4ZDmZx qeJAFTNeuyfIEft8X7RIMB8GA1UdIwQYMBaAFN4Mj0K8oFsvVYHmvMtMFKbmcbYZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzM4Ni80OUNENkEzQzNC MjYxMUU5QjIwRDI2ODFDNEY5QUUwMi8zZ3lQUXJ5Z1d5OVZnZWE4eTB3VXB1Wnh0 aGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzNneVBRcnlnV3k5VmdlYTh5MHdVcHVaeHRoay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODczODYvNDlDRDZBM0MzQjI2MTFFOUIyMEQyNjgxQzRGOUFFMDIvRTM2NkM0Qjgz QjI2MTFFOTkwNkU3QjgxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAfA+AAwDQYJKoZIhvcNAQELBQADggEBALbjJJibIyjSsje0 0TIBivMNNKraSL0TIkW3sCJlvWmS3f2FqsEyl7GIduumiEvX4VglfrnqrUr0GDVO v7Z3Ha6VrJkB2qkbkvLY7z9l+Z5i0N6z9XBuxmmKO7mL6eHttrzvISaZc4wPDExV Lkf2uKvmZh47xRT/+GXKrkNNPB/0Y4sVQ2nNXknq7VkqYucJUxg3m1iIF1oyYRka ksaOOEHAXcB7+HZFKKb0u1KB71llPDpCooJiIAWjlu6k+rUixjWlyOfacNqhZL90 VQ0RnLz7qIdZD9pmRqDjp/6IXDrbQwMClmi+eK05VHoMeajroGpcnoMvOs4exfRg I4wh9x0= -----END CERTIFICATE-----Generated at Wed Nov 5 20:07:30 2025 by rpki-client