$ rpki-client -vvf rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/A08AFBB284F211EE89828225C4F9AE02.roa File: A08AFBB284F211EE89828225C4F9AE02.roa (raw, json) Hash identifier: +rlXfE57KQq96FSve4vj7ymxepa9D4fVPV/TYC7d4nQ= Subject key identifier: 8F:B2:5D:DD:BE:1A:84:53:B6:6A:0A:68:9D:3F:B7:D9:41:0A:49:C6 Certificate issuer: /CN=A91406AA/serialNumber=218A8AA050267B0805E3FDC8A939BF8FBCB00101 Certificate serial: 06F3 Authority key identifier: 21:8A:8A:A0:50:26:7B:08:05:E3:FD:C8:A9:39:BF:8F:BC:B0:01:01 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IYqKoFAmewgF4_3IqTm_j7ywAQE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/A08AFBB284F211EE89828225C4F9AE02.roa Signing time: Wed 08 Oct 2025 22:24:24 +0000 ROA not before: Wed 08 Oct 2025 22:24:24 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 9790 IP address blocks: 131.203.0.0/16 maxlen: 20 131.203.29.0/24 maxlen: 24 131.203.48.0/24 maxlen: 24 131.203.49.0/24 maxlen: 24 131.203.78.0/24 maxlen: 24 131.203.79.0/24 maxlen: 24 151.210.224.0/20 maxlen: 24 158.140.224.0/20 maxlen: 24 158.140.240.0/21 maxlen: 24 158.140.248.0/22 maxlen: 24 161.29.0.0/16 maxlen: 20 161.65.0.0/19 maxlen: 20 161.65.64.0/18 maxlen: 22 161.65.128.0/19 maxlen: 19 161.65.192.0/18 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.crl rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IYqKoFAmewgF4_3IqTm_j7ywAQE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:48:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1779 (0x6f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91406AA, serialNumber=218A8AA050267B0805E3FDC8A939BF8FBCB00101 Validity Not Before: Oct 8 22:24:24 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68e6e498-f782 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:5b:05:da:3a:07:b6:58:25:46:9b:cd:8b:b8: 08:bc:f4:f5:09:3d:50:63:f3:02:af:4a:ab:a9:8e: b5:ea:dc:3d:46:4c:59:30:0d:2a:c5:93:02:8f:b5: 67:f9:73:0d:a2:92:b8:2f:26:45:54:79:9b:77:65: 39:f4:ab:74:00:85:9f:a6:0d:46:25:69:fd:70:b6: a8:68:11:af:6a:27:c7:1b:4e:01:1f:c3:76:09:83: e7:37:af:ce:9c:0b:aa:0f:4a:04:f8:01:33:be:2d: df:b6:c0:99:10:a7:e9:1e:1f:5c:bc:49:d8:c3:3c: 58:9f:b1:3c:83:4b:e2:79:7d:bf:14:b9:fc:68:a5: fc:79:36:c4:a6:bb:23:72:94:eb:2c:ef:d4:fe:6e: 4a:e4:90:db:7b:e5:78:f6:2f:51:36:bb:8c:cc:d8: 87:27:18:1e:da:9f:ce:57:61:68:a1:a2:9f:19:40: 23:14:e8:cf:fa:24:bd:85:db:18:8f:14:7b:91:d5: 55:71:6b:28:05:29:cf:24:5e:2d:de:18:f6:46:bf: 2f:e3:74:3a:19:73:d8:03:ed:3c:ed:86:b8:42:0b: ea:42:2c:1f:b5:14:2b:c6:6f:51:f1:13:c9:f6:c1: 4a:57:8b:63:c8:86:7b:ef:08:2f:ca:73:32:65:55: 39:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:B2:5D:DD:BE:1A:84:53:B6:6A:0A:68:9D:3F:B7:D9:41:0A:49:C6 X509v3 Authority Key Identifier: keyid:21:8A:8A:A0:50:26:7B:08:05:E3:FD:C8:A9:39:BF:8F:BC:B0:01:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IYqKoFAmewgF4_3IqTm_j7ywAQE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/A08AFBB284F211EE89828225C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 131.203.0.0/16 151.210.224.0/20 158.140.224.0-158.140.251.255 161.29.0.0/16 161.65.0.0/19 161.65.64.0-161.65.159.255 161.65.192.0/18 Signature Algorithm: sha256WithRSAEncryption 2f:c9:a3:df:c7:41:b3:d4:5d:45:82:c4:63:8a:37:92:1f:7e: 32:93:5a:2f:23:2a:96:47:aa:d4:ff:21:84:50:67:17:5d:1c: 87:0f:7c:77:4f:f7:2b:ff:c6:56:5e:08:f7:83:d2:10:8f:bf: 68:68:87:5d:11:9e:92:f9:06:38:a3:04:1d:fc:3e:36:8c:53: 66:e6:61:5e:2c:e5:c3:ed:5d:13:ea:83:07:d2:65:e6:f1:f4: 5b:56:fd:36:38:48:71:43:4e:c2:53:ed:bc:19:33:50:39:76: 7c:fc:27:ee:af:e8:ee:b9:62:11:aa:b9:ae:df:27:c1:1b:98: df:b3:11:40:4a:d3:ce:0c:d0:05:4a:64:ff:90:af:6a:94:76: c0:d6:4d:72:47:7e:4c:96:79:88:48:ee:f1:51:18:ae:77:5d: 05:f7:d6:56:29:93:cc:ec:37:24:24:0a:90:17:a8:4b:7e:a2: 6f:75:46:f0:e3:f6:ed:74:07:cc:70:a2:25:1a:4b:f4:9f:0c: 0f:33:15:e6:cc:e3:15:3f:af:05:fd:67:40:14:ac:3f:ca:db: 8c:3e:50:bf:07:4b:1e:c8:b1:78:bf:28:55:af:d0:ee:15:ed: 40:cc:d1:ba:fb:24:31:52:10:0d:19:b8:3f:92:be:ae:71:e5: 04:4b:48:8a -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgICBvMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDA2QUExMTAvBgNVBAUTKDIxOEE4QUEwNTAyNjdCMDgwNUUzRkRDOEE5MzlCRjhG QkNCMDAxMDEwHhcNMjUxMDA4MjIyNDI0WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGU2ZTQ5OC1mNzgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp1sF2joHtlglRpvNi7gIvPT1CT1QY/MCr0qrqY616tw9RkxZMA0qxZMCj7Vn +XMNopK4LyZFVHmbd2U59Kt0AIWfpg1GJWn9cLaoaBGvaifHG04BH8N2CYPnN6/O nAuqD0oE+AEzvi3ftsCZEKfpHh9cvEnYwzxYn7E8g0vieX2/FLn8aKX8eTbEprsj cpTrLO/U/m5K5JDbe+V49i9RNruMzNiHJxge2p/OV2FooaKfGUAjFOjP+iS9hdsY jxR7kdVVcWsoBSnPJF4t3hj2Rr8v43Q6GXPYA+087Ya4QgvqQiwftRQrxm9R8RPJ 9sFKV4tjyIZ77wgvynMyZVU5GQIDAQABo4ICxzCCAsMwHQYDVR0OBBYEFI+yXd2+ GoRTtmoKaJ0/t9lBCknGMB8GA1UdIwQYMBaAFCGKiqBQJnsIBeP9yKk5v4+8sAEB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDZBQS84NjU4RTQ2Njg2 QzExMUVCQkFCMzE4NEJDNEY5QUUwMi9JWXFLb0ZBbWV3Z0Y0XzNJcVRtX2o3eXdB UUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0lZcUtvRkFtZXdnRjRfM0lxVG1fajd5d0FRRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDA2QUEvODY1OEU0NjY4NkMxMTFFQkJBQjMxODRCQzRGOUFFMDIvQTA4QUZCQjI4 NEYyMTFFRTg5ODI4MjI1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwUQYIKwYBBQUHAQcBAf8E QjBAMD4EAgABMDgDAwCDywMEBJfS4DAMAwQFnozgAwQCnoz4AwMAoR0DBAWhQQAw DAMEBqFBQAMEBaFBgAMEBqFBwDANBgkqhkiG9w0BAQsFAAOCAQEAL8mj38dBs9Rd RYLEY4o3kh9+MpNaLyMqlkeq1P8hhFBnF10chw98d0/3K//GVl4I94PSEI+/aGiH XRGekvkGOKMEHfw+NoxTZuZhXizlw+1dE+qDB9Jl5vH0W1b9NjhIcUNOwlPtvBkz UDl2fPwn7q/o7rliEaq5rt8nwRuY37MRQErTzgzQBUpk/5CvapR2wNZNckd+TJZ5 iEju8VEYrnddBffWVimTzOw3JCQKkBeoS36ib3VG8OP27XQHzHCiJRpL9J8MDzMV 5szjFT+vBf1nQBSsP8rbjD5QvwdLHsixeL8oVa/Q7hXtQMzRuvskMVIQDRm4P5K+ rnHlBEtIig== -----END CERTIFICATE-----Generated at Mon Oct 20 13:45:01 2025 by rpki-client