$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4CC09F5C4C1811F0904F8A51C4F9AE02.roa File: 4CC09F5C4C1811F0904F8A51C4F9AE02.roa (raw, json) Hash identifier: ufyBdt795VVGnmnGkbATpnldErMOw3aUu4ai64fZbB0= Subject key identifier: 49:34:3D:4E:C9:36:0B:37:9D:09:93:F8:E1:71:9A:A6:58:8C:6E:CC Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: BE74 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4CC09F5C4C1811F0904F8A51C4F9AE02.roa Signing time: Wed 18 Jun 2025 07:46:10 +0000 ROA not before: Wed 18 Jun 2025 07:46:10 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 45661 IP address blocks: 116.199.168.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:24:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48756 (0xbe74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jun 18 07:46:10 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=68526ec2-7770 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:25:b8:9d:c0:8f:a9:51:c9:c6:c4:30:97:87: b9:19:06:72:f7:59:9d:68:b5:4c:fb:2c:e8:f4:00: aa:a8:4f:d6:87:10:07:5b:3f:07:bc:88:b4:80:f0: 67:c2:c9:f5:de:85:0c:b2:76:08:aa:63:98:1c:97: f8:ba:06:51:fc:59:ea:b9:6f:a8:0b:4a:e9:82:46: f9:16:8d:3f:7f:fd:d8:48:88:21:1e:3d:9b:c4:a9: d2:4d:ef:cc:3b:8f:c6:1a:03:4d:f7:9e:9e:49:d3: 5f:85:59:8b:75:f2:45:6a:ae:1f:90:fe:cc:df:09: eb:56:dc:7c:53:e2:c5:5b:a0:e8:87:e9:e5:83:48: 63:2d:e6:b7:bb:fa:41:c6:7e:e9:de:c5:27:2e:e3: 8d:08:ac:f5:4e:63:fe:5b:9d:9c:10:f5:33:5e:b2: e1:83:e6:1f:14:62:46:7e:6b:19:a3:64:b7:fe:f4: 53:c7:69:83:f6:44:9c:1b:81:e9:a3:2a:13:1b:87: 73:ee:80:b1:35:58:57:37:b6:72:b2:d4:2d:ab:37: 2b:14:9f:73:6e:79:da:4b:3d:c2:00:94:c5:73:86: f0:b3:10:a4:95:61:08:40:40:fc:34:ec:c2:dd:2e: 4c:d9:5a:dd:80:2a:c2:ad:d2:24:bd:3f:77:f4:40: 2c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:34:3D:4E:C9:36:0B:37:9D:09:93:F8:E1:71:9A:A6:58:8C:6E:CC X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4CC09F5C4C1811F0904F8A51C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 116.199.168.0/22 Signature Algorithm: sha256WithRSAEncryption 1b:8a:b7:3d:d8:18:e0:b3:8c:81:cb:19:06:4d:d5:ff:86:ca: ab:d9:70:f9:80:20:0e:db:af:28:e5:90:2a:d3:35:da:5b:3e: 68:57:22:c0:e3:53:a0:db:04:2f:50:de:1b:e1:aa:85:d3:fe: 9a:ec:ff:fe:8b:8d:01:81:73:f6:aa:b0:40:1e:c7:03:17:25: 73:64:ed:19:7f:c9:77:f7:04:69:d0:8c:fb:ed:a9:a0:e5:23: c8:5f:1f:e3:09:a1:4e:25:f9:75:49:5a:9d:da:e2:ff:b4:0e: e0:0f:e6:2c:05:25:76:07:6d:65:85:48:c6:e9:de:79:e5:80: 8e:c9:a6:a8:01:74:f9:c0:97:8e:f6:43:58:c4:26:8c:4d:ad: 25:da:13:ad:53:54:9d:27:22:c7:b2:2a:a1:f6:13:1c:29:08: 8f:d0:1b:36:ff:2a:77:ad:c1:a2:ec:31:21:5d:00:98:8f:56: f1:bd:4c:e0:ca:bf:4f:1c:31:55:a8:f4:f8:4b:03:81:43:bd: ce:ed:4a:57:9c:4f:49:6c:7c:20:83:cc:29:b2:9c:f4:76:f3: e9:bc:07:45:26:a9:2a:50:24:51:58:7f:c4:c7:20:48:8f:19: 42:df:c4:4a:fb:b0:e9:84:e3:5c:80:d0:7e:aa:a9:1e:78:1b: 1b:a0:bd:b8 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDAL50MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDYxODA3NDYxMFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjg1MjZlYzItNzc3MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKAluJ3Aj6lRycbEMJeHuRkGcvdZnWi1TPss6PQAqqhP1ocQB1s/B7yItIDw Z8LJ9d6FDLJ2CKpjmByX+LoGUfxZ6rlvqAtK6YJG+RaNP3/92EiIIR49m8Sp0k3v zDuPxhoDTfeenknTX4VZi3XyRWquH5D+zN8J61bcfFPixVug6Ifp5YNIYy3mt7v6 QcZ+6d7FJy7jjQis9U5j/ludnBD1M16y4YPmHxRiRn5rGaNkt/70U8dpg/ZEnBuB 6aMqExuHc+6AsTVYVze2crLULas3KxSfc2552ks9wgCUxXOG8LMQpJVhCEBA/DTs wt0uTNla3YAqwq3SJL0/d/RALMcCAwEAAaOCApUwggKRMB0GA1UdDgQWBBRJND1O yTYLN50Jk/jhcZqmWIxuzDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzRDQzA5RjVD NEMxODExRjA5MDRGOEE1MUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQCdMeoMA0GCSqGSIb3DQEBCwUAA4IBAQAbirc92Bjgs4yB yxkGTdX/hsqr2XD5gCAO268o5ZAq0zXaWz5oVyLA41Og2wQvUN4b4aqF0/6a7P/+ i40BgXP2qrBAHscDFyVzZO0Zf8l39wRp0Iz77amg5SPIXx/jCaFOJfl1SVqd2uL/ tA7gD+YsBSV2B21lhUjG6d555YCOyaaoAXT5wJeO9kNYxCaMTa0l2hOtU1SdJyLH siqh9hMcKQiP0Bs2/yp3rcGi7DEhXQCYj1bxvUzgyr9PHDFVqPT4SwOBQ73O7UpX nE9JbHwgg8wpspz0dvPpvAdFJqkqUCRRWH/ExyBIjxlC38RK+7DphONcgNB+qqke eBsboL24 -----END CERTIFICATE-----Generated at Wed Nov 5 16:29:01 2025 by rpki-client