$ rpki-client -vvf rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/B8E7D994D00711EAB66A1255C4F9AE02.roa File: B8E7D994D00711EAB66A1255C4F9AE02.roa (raw, json) Hash identifier: vea6+toj4YiyIQ3kah2JLdyvZ+cCoP4Yr2UZguv6xdk= Subject key identifier: 37:46:27:28:03:A0:37:8D:FF:BC:54:EF:FA:BE:2B:1B:6F:FF:34:FE Certificate issuer: /CN=A9191FA5/serialNumber=AB11E809F2BC66B0D1E60B8A31F86B5B82E00E39 Certificate serial: 366E Authority key identifier: AB:11:E8:09:F2:BC:66:B0:D1:E6:0B:8A:31:F8:6B:5B:82:E0:0E:39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/B8E7D994D00711EAB66A1255C4F9AE02.roa Signing time: Wed 16 Jul 2025 14:50:34 +0000 ROA not before: Wed 16 Jul 2025 14:50:34 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 20940 IP address blocks: 220.227.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.crl rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:29:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13934 (0x366e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191FA5, serialNumber=AB11E809F2BC66B0D1E60B8A31F86B5B82E00E39 Validity Not Before: Jul 16 14:50:34 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=6877bc39-5e18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:62:c0:01:eb:a3:fe:a4:6e:c3:8f:66:5a:b7: 04:37:4c:c3:ea:cc:f1:9d:de:22:0b:60:67:7c:c9: 24:d3:07:84:26:e3:99:2e:31:e3:8d:0d:33:4d:3f: bc:1b:43:70:91:fd:fa:94:58:14:ce:db:c7:af:b8: 12:71:a2:18:03:ed:9e:e4:a7:fd:5a:30:dd:67:53: d6:0d:b3:40:5b:11:38:8f:8d:1d:f1:13:64:88:1d: 9e:0c:45:9a:4f:9c:43:fd:58:0a:2e:77:46:05:fb: bf:dd:f0:25:f7:00:81:c3:61:b4:9d:1a:ac:b9:2b: f0:13:f3:c8:d9:5d:4b:bb:f7:d7:63:64:97:3b:5c: cc:c9:f7:73:9a:29:58:95:4c:13:52:64:6c:3c:91: 08:37:98:bf:7d:48:0f:3a:f1:d1:d5:4d:d2:58:a7: e8:5c:df:4b:7c:a1:3e:ec:f3:15:be:38:c5:6a:3f: a8:05:ca:5d:66:8f:da:72:dc:d1:f2:43:5d:cd:6e: f5:bb:41:b7:14:0d:5e:5d:4b:11:86:4e:86:09:2b: 7b:43:93:39:fd:52:97:a2:16:6b:0d:d2:1b:a4:2a: c0:f3:b3:8e:db:11:15:07:39:54:5d:76:99:97:2f: 52:a8:ae:89:c6:16:27:81:d8:5f:d4:3d:75:64:ac: 71:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:46:27:28:03:A0:37:8D:FF:BC:54:EF:FA:BE:2B:1B:6F:FF:34:FE X509v3 Authority Key Identifier: keyid:AB:11:E8:09:F2:BC:66:B0:D1:E6:0B:8A:31:F8:6B:5B:82:E0:0E:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/B8E7D994D00711EAB66A1255C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.227.183.0/24 Signature Algorithm: sha256WithRSAEncryption db:42:5f:a2:3b:70:a1:e8:2d:c5:48:11:2e:fd:78:d9:b1:b9: e2:ce:78:44:b2:24:f9:a1:97:b1:b5:9d:9c:20:55:26:17:ba: 07:e0:01:37:8f:7b:65:70:66:22:89:2e:b6:9b:3d:f7:60:3c: 7a:4f:9b:69:2e:d1:af:1e:55:b3:d6:d9:5a:45:a0:d5:12:43: 66:29:3a:50:f5:69:3b:9a:2d:d8:2b:fe:f3:09:64:40:09:9f: 37:2f:1e:c2:c4:5e:50:c2:2f:bd:81:1d:f1:ec:01:b9:44:69: 7c:a3:6d:97:14:b0:e3:ca:f8:32:de:02:84:97:39:e7:5a:bb: 49:a5:22:2f:bf:5a:d5:ce:ac:9c:71:18:45:1a:e4:d5:8b:7d: b2:6e:ed:bb:5f:b7:7f:1d:58:41:cf:4a:d8:1c:f7:4f:1d:a8: 16:78:8d:f2:33:04:b5:32:6f:8b:92:81:4f:6f:2d:3f:e8:bd: 9d:67:ca:f7:f1:1b:4e:ca:4d:9b:42:5d:1d:5c:a6:31:fd:fb: 1b:7c:9c:45:a1:d3:a3:b0:cf:90:cb:77:55:9c:00:89:e3:36: ca:3c:45:b1:5a:6a:e5:42:19:6a:90:38:62:87:27:0f:b0:ec: 01:05:b0:fd:2d:68:fa:3b:26:58:d2:93:6d:b4:f7:d8:b2:ef: 72:71:91:5b -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNm4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFGQTUxMTAvBgNVBAUTKEFCMTFFODA5RjJCQzY2QjBEMUU2MEI4QTMxRjg2QjVC ODJFMDBFMzkwHhcNMjUwNzE2MTQ1MDM0WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02ODc3YmMzOS01ZTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyGLAAeuj/qRuw49mWrcEN0zD6szxnd4iC2BnfMkk0weEJuOZLjHjjQ0zTT+8 G0Nwkf36lFgUztvHr7gScaIYA+2e5Kf9WjDdZ1PWDbNAWxE4j40d8RNkiB2eDEWa T5xD/VgKLndGBfu/3fAl9wCBw2G0nRqsuSvwE/PI2V1Lu/fXY2SXO1zMyfdzmilY lUwTUmRsPJEIN5i/fUgPOvHR1U3SWKfoXN9LfKE+7PMVvjjFaj+oBcpdZo/actzR 8kNdzW71u0G3FA1eXUsRhk6GCSt7Q5M5/VKXohZrDdIbpCrA87OO2xEVBzlUXXaZ ly9SqK6JxhYngdhf1D11ZKxxfwIDAQABo4IClTCCApEwHQYDVR0OBBYEFDdGJygD oDeN/7xU7/q+Kxtv/zT+MB8GA1UdIwQYMBaAFKsR6AnyvGaw0eYLijH4a1uC4A45 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUZBNS8wODA1NkNFNDFE ODcxMUUyOUREM0M2REUwOEIwMkNEMi9xeEhvQ2ZLOFpyRFI1Z3VLTWZoclc0TGdE amsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3F4SG9DZks4WnJEUjVndUtNZmhyVzRMZ0Rqay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTFGQTUvMDgwNTZDRTQxRDg3MTFFMjlERDNDNkRFMDhCMDJDRDIvQjhFN0Q5OTRE MDA3MTFFQUI2NkExMjU1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADc47cwDQYJKoZIhvcNAQELBQADggEBANtCX6I7cKHoLcVI ES79eNmxueLOeESyJPmhl7G1nZwgVSYXugfgATePe2VwZiKJLrabPfdgPHpPm2ku 0a8eVbPW2VpFoNUSQ2YpOlD1aTuaLdgr/vMJZEAJnzcvHsLEXlDCL72BHfHsAblE aXyjbZcUsOPK+DLeAoSXOedau0mlIi+/WtXOrJxxGEUa5NWLfbJu7btft38dWEHP Stgc908dqBZ4jfIzBLUyb4uSgU9vLT/ovZ1nyvfxG07KTZtCXR1cpjH9+xt8nEWh 06Owz5DLd1WcAInjNso8RbFaauVCGWqQOGKHJw+w7AEFsP0taPo7JljSk22099iy 73JxkVs= -----END CERTIFICATE-----Generated at Wed Nov 5 02:18:42 2025 by rpki-client