$ rpki-client -vvf rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/5D822954368F11EAB3D4CE7FC4F9AE02.roa File: 5D822954368F11EAB3D4CE7FC4F9AE02.roa (raw, json) Hash identifier: 69pkK44GCEYYO1DQ/J3aSzjtWc5Cn9UqeLLTzO9Yidc= Subject key identifier: DC:18:2A:66:64:04:E7:DC:3E:D9:EB:C2:5F:11:40:91:16:0D:50:FF Certificate issuer: /CN=A91250FA/serialNumber=1283A2F4C7BA11706C66E17BF1BD3E99627A1813 Certificate serial: 0B9A Authority key identifier: 12:83:A2:F4:C7:BA:11:70:6C:66:E1:7B:F1:BD:3E:99:62:7A:18:13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EoOi9Me6EXBsZuF78b0-mWJ6GBM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/5D822954368F11EAB3D4CE7FC4F9AE02.roa Signing time: Wed 08 Oct 2025 19:19:53 +0000 ROA not before: Wed 08 Oct 2025 19:19:53 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 132683 IP address blocks: 203.161.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.crl rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EoOi9Me6EXBsZuF78b0-mWJ6GBM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 19:41:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2970 (0xb9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91250FA, serialNumber=1283A2F4C7BA11706C66E17BF1BD3E99627A1813 Validity Not Before: Oct 8 19:19:53 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68e6b959-2736 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a6:ec:c6:08:3a:21:87:ad:0c:c8:c3:4a:57: d6:0e:23:83:44:5c:37:e6:d6:9e:ee:11:5c:ef:30: de:75:71:b0:ff:fd:04:43:5d:6e:af:37:9f:67:69: 28:52:32:8d:65:9a:83:76:7e:94:cd:7a:8f:81:b5: 15:91:01:51:5a:ce:d1:9e:83:e0:0d:54:ec:32:f5: c5:9f:8a:1b:0f:ac:cf:16:e8:f8:06:95:96:e3:71: e0:8c:0d:82:5a:e1:a6:47:c5:2a:b2:65:e4:e4:2a: 74:50:9f:11:32:59:00:8f:90:c7:c9:9f:8d:68:96: 30:3e:c9:5c:1b:6f:07:c7:28:da:00:0b:d0:35:e7: 15:c7:11:d9:74:0a:fa:c6:a7:f8:ec:24:09:13:97: 9b:e8:9f:b2:34:a0:6c:b1:66:e3:f8:d6:95:46:54: 69:27:0f:ae:52:c5:f6:e5:6b:57:5f:7f:02:56:a9: 0a:67:2e:b3:ba:d8:db:51:45:92:1a:eb:56:a4:10: 8c:6c:9b:5a:a5:8d:5a:db:59:68:fd:ad:9c:11:e4: 35:28:03:90:95:83:03:fb:e7:dd:1f:4e:1f:37:45: 67:54:c6:0c:f4:7e:c3:ef:93:c4:36:b6:f6:06:b4: c9:94:01:8b:74:c3:72:7b:3e:e1:87:33:1e:6f:19: 5f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:18:2A:66:64:04:E7:DC:3E:D9:EB:C2:5F:11:40:91:16:0D:50:FF X509v3 Authority Key Identifier: keyid:12:83:A2:F4:C7:BA:11:70:6C:66:E1:7B:F1:BD:3E:99:62:7A:18:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EoOi9Me6EXBsZuF78b0-mWJ6GBM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/5D822954368F11EAB3D4CE7FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.161.179.0/24 Signature Algorithm: sha256WithRSAEncryption b7:f9:00:03:a3:ab:ea:43:f1:f2:c1:12:d6:4f:d3:00:4e:1f: 21:a4:cb:00:b8:8d:83:d3:e9:a3:4c:02:d7:4b:06:e1:59:92: 9b:96:4b:1c:b3:56:69:52:a4:95:a9:e9:5b:b3:96:e2:45:8d: 58:b5:61:12:43:07:c6:4b:2a:51:14:d0:0c:47:93:9e:67:da: 8f:83:da:f4:53:2f:19:36:50:b8:60:da:25:5d:b3:ae:7b:38: 5a:1e:5a:61:42:28:e5:28:22:a0:67:be:7b:b7:4e:29:7a:e1: 49:d4:08:4a:50:dc:50:50:1d:38:8b:f1:7e:b8:a3:47:b6:e7: ed:58:2e:16:f8:69:3c:1f:36:2d:7e:02:87:58:3c:3f:ea:82: 51:d0:49:0e:ea:73:5e:dd:88:f3:d1:50:68:ac:5b:a2:aa:8f: f9:07:f7:8c:b0:76:c2:ae:b0:0d:26:98:9d:bf:b2:21:b5:b1: ec:4f:07:c6:c2:6f:9e:26:b6:b2:50:de:48:1e:23:93:55:28: f9:40:8a:26:0d:1b:dc:e5:37:76:f2:2b:3f:5c:00:c5:93:78: c0:b2:11:00:16:58:a0:0f:14:f0:5d:b4:94:8e:20:c1:2a:18: f9:86:11:be:65:db:c1:f5:e7:c9:17:cb:55:e9:af:49:2c:f1: a5:01:53:7d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICC5owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjUwRkExMTAvBgNVBAUTKDEyODNBMkY0QzdCQTExNzA2QzY2RTE3QkYxQkQzRTk5 NjI3QTE4MTMwHhcNMjUxMDA4MTkxOTUzWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGU2Yjk1OS0yNzM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArqbsxgg6IYetDMjDSlfWDiODRFw35tae7hFc7zDedXGw//0EQ11urzefZ2ko UjKNZZqDdn6UzXqPgbUVkQFRWs7RnoPgDVTsMvXFn4obD6zPFuj4BpWW43HgjA2C WuGmR8UqsmXk5Cp0UJ8RMlkAj5DHyZ+NaJYwPslcG28HxyjaAAvQNecVxxHZdAr6 xqf47CQJE5eb6J+yNKBssWbj+NaVRlRpJw+uUsX25WtXX38CVqkKZy6zutjbUUWS GutWpBCMbJtapY1a21lo/a2cEeQ1KAOQlYMD++fdH04fN0VnVMYM9H7D75PENrb2 BrTJlAGLdMNyez7hhzMebxlfBwIDAQABo4IClTCCApEwHQYDVR0OBBYEFNwYKmZk BOfcPtnrwl8RQJEWDVD/MB8GA1UdIwQYMBaAFBKDovTHuhFwbGbhe/G9PpliehgT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTBGQS9BQUEwRUJFMDM2 OEUxMUVBQTc2OEZDN0VDNEY5QUUwMi9Fb09pOU1lNkVYQnNadUY3OGIwLW1XSjZH Qk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VvT2k5TWU2RVhCc1p1Rjc4YjAtbVdKNkdCTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjUwRkEvQUFBMEVCRTAzNjhFMTFFQUE3NjhGQzdFQzRGOUFFMDIvNUQ4MjI5NTQz NjhGMTFFQUIzRDRDRTdGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADLobMwDQYJKoZIhvcNAQELBQADggEBALf5AAOjq+pD8fLB EtZP0wBOHyGkywC4jYPT6aNMAtdLBuFZkpuWSxyzVmlSpJWp6VuzluJFjVi1YRJD B8ZLKlEU0AxHk55n2o+D2vRTLxk2ULhg2iVds657OFoeWmFCKOUoIqBnvnu3Til6 4UnUCEpQ3FBQHTiL8X64o0e25+1YLhb4aTwfNi1+AodYPD/qglHQSQ7qc17diPPR UGisW6Kqj/kH94ywdsKusA0mmJ2/siG1sexPB8bCb54mtrJQ3kgeI5NVKPlAiiYN G9zlN3byKz9cAMWTeMCyEQAWWKAPFPBdtJSOIMEqGPmGEb5l28H158kXy1Xpr0ks 8aUBU30= -----END CERTIFICATE-----Generated at Mon Oct 20 22:24:52 2025 by rpki-client