$ rpki-client -vvf rpki.apnic.net/member_repository/A91477C3/5DA48C20E76E11EA8142A839C4F9AE02/5FB89FD4DA8511EEBD7AF854C4F9AE02.roa File: 5FB89FD4DA8511EEBD7AF854C4F9AE02.roa (raw, json) Hash identifier: 4EbGKeFdURg1erPWSPKY/29bASejNm7sStafQa8KWis= Subject key identifier: DA:06:FF:58:3D:BA:51:D2:0D:07:2D:C8:58:76:E8:8F:6A:29:F2:86 Certificate issuer: /CN=A91477C3/serialNumber=B20E9FE64AF3CE8C982725D012A142927263CEF0 Certificate serial: 084B Authority key identifier: B2:0E:9F:E6:4A:F3:CE:8C:98:27:25:D0:12:A1:42:92:72:63:CE:F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sg6f5krzzoyYJyXQEqFCknJjzvA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91477C3/5DA48C20E76E11EA8142A839C4F9AE02/5FB89FD4DA8511EEBD7AF854C4F9AE02.roa Signing time: Thu 02 Oct 2025 21:22:11 +0000 ROA not before: Thu 02 Oct 2025 21:22:11 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 45270 IP address blocks: 43.252.0.0/22 maxlen: 22 101.234.192.0/24 maxlen: 24 101.234.193.0/24 maxlen: 24 101.234.194.0/24 maxlen: 24 101.234.195.0/24 maxlen: 24 101.234.196.0/24 maxlen: 24 101.234.200.0/24 maxlen: 24 101.234.201.0/24 maxlen: 24 103.233.16.0/22 maxlen: 22 223.25.228.0/23 maxlen: 23 223.25.231.0/24 maxlen: 24 2407:ab00::/48 maxlen: 48 2407:ab00:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91477C3/5DA48C20E76E11EA8142A839C4F9AE02/sg6f5krzzoyYJyXQEqFCknJjzvA.crl rsync://rpki.apnic.net/member_repository/A91477C3/5DA48C20E76E11EA8142A839C4F9AE02/sg6f5krzzoyYJyXQEqFCknJjzvA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sg6f5krzzoyYJyXQEqFCknJjzvA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:57:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2123 (0x84b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91477C3, serialNumber=B20E9FE64AF3CE8C982725D012A142927263CEF0 Validity Not Before: Oct 2 21:22:11 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68deed02-7480 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:12:12:1c:2f:a9:bb:6b:15:69:0d:92:03:ae: d5:30:aa:dd:43:9f:28:ee:ec:14:e6:9e:a5:a3:14: 7a:58:8a:b7:49:e9:a4:69:c6:77:52:e6:f3:b7:cc: 6d:78:14:37:1f:77:7f:23:ef:9d:e9:e4:7a:b9:f0: ef:24:9c:21:79:d0:5b:3c:2e:1e:a4:f4:92:0b:c3: 42:45:3f:5c:32:61:5e:4b:49:28:ea:57:b4:06:6a: 9f:ed:5b:91:6b:e2:47:52:6c:7e:9f:70:47:89:16: 9a:7c:c5:32:97:73:f9:8a:7f:9c:09:68:86:84:3d: 24:0d:a5:7a:ae:4f:a6:5f:06:b3:57:3b:3d:71:e9: 80:6b:60:9f:19:22:c7:e2:f6:25:94:5d:11:56:95: 7f:e6:68:81:00:7d:36:1c:28:18:51:7e:69:9a:a0: ae:7b:b2:e9:87:e0:e9:d8:c1:b5:06:a3:a0:0b:55: 3d:de:6a:b4:3a:0f:a4:4d:74:35:06:c6:ee:6a:c8: a8:f0:72:36:eb:6e:b9:f6:0b:8a:4c:c7:75:45:a5: 99:7c:5d:7f:ff:3f:31:ff:85:2a:22:0a:39:fc:7b: 9d:ce:38:46:2d:f6:59:93:07:f4:52:11:09:58:0b: 7c:d5:5f:0c:66:3a:52:ca:3b:5f:6e:3a:c4:68:a8: d4:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:06:FF:58:3D:BA:51:D2:0D:07:2D:C8:58:76:E8:8F:6A:29:F2:86 X509v3 Authority Key Identifier: keyid:B2:0E:9F:E6:4A:F3:CE:8C:98:27:25:D0:12:A1:42:92:72:63:CE:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91477C3/5DA48C20E76E11EA8142A839C4F9AE02/sg6f5krzzoyYJyXQEqFCknJjzvA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sg6f5krzzoyYJyXQEqFCknJjzvA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91477C3/5DA48C20E76E11EA8142A839C4F9AE02/5FB89FD4DA8511EEBD7AF854C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.252.0.0/22 101.234.192.0-101.234.196.255 101.234.200.0/23 103.233.16.0/22 223.25.228.0/23 223.25.231.0/24 IPv6: 2407:ab00::/48 2407:ab00:2::/48 Signature Algorithm: sha256WithRSAEncryption 3e:73:7c:96:dc:5a:8d:ff:ba:b6:a8:c3:2e:94:3a:94:eb:6d: be:75:63:60:5e:93:fd:ae:72:fd:5b:c7:ce:e9:43:68:31:6f: 3b:f7:65:69:4e:c0:12:63:7a:93:b4:6a:02:0f:eb:d5:91:82: 7b:a8:ab:bf:5f:1c:3e:93:71:ac:77:ae:f5:7f:10:bd:ee:65: 13:35:9e:3e:50:cf:aa:7d:e9:8c:43:65:4d:5b:34:14:83:b2: 96:ba:3d:23:37:5d:98:db:2d:2d:da:c2:86:f1:ef:77:46:bf: d4:2d:26:98:02:f7:81:5f:88:9b:13:67:f6:32:40:16:63:ac: 4b:ce:35:3d:7d:16:9e:1e:71:15:5e:d5:da:8a:4b:ad:e7:b6: 88:8b:03:cd:2d:a2:e5:f8:ba:1f:eb:30:d8:39:ab:69:87:15: b9:56:97:17:37:e5:68:89:4f:6c:bb:59:50:bf:de:46:2d:87: 49:b7:f1:12:65:3d:10:98:1a:b7:37:82:14:40:6a:40:dc:3b: 70:a0:71:80:f9:6e:51:80:64:c5:57:a2:a4:f3:a3:09:b3:74: e5:e7:48:e8:d0:8e:03:4c:01:79:a8:66:13:94:1b:00:5d:85: 84:9f:c2:5d:56:82:02:27:8a:9c:2a:c3:bc:41:24:61:af:d5: ba:bf:af:3d -----BEGIN CERTIFICATE----- MIIFsTCCBJmgAwIBAgICCEswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc3QzMxMTAvBgNVBAUTKEIyMEU5RkU2NEFGM0NFOEM5ODI3MjVEMDEyQTE0Mjky NzI2M0NFRjAwHhcNMjUxMDAyMjEyMjExWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGRlZWQwMi03NDgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3RISHC+pu2sVaQ2SA67VMKrdQ58o7uwU5p6loxR6WIq3SemkacZ3Uubzt8xt eBQ3H3d/I++d6eR6ufDvJJwhedBbPC4epPSSC8NCRT9cMmFeS0ko6le0Bmqf7VuR a+JHUmx+n3BHiRaafMUyl3P5in+cCWiGhD0kDaV6rk+mXwazVzs9cemAa2CfGSLH 4vYllF0RVpV/5miBAH02HCgYUX5pmqCue7Lph+Dp2MG1BqOgC1U93mq0Og+kTXQ1 Bsbuasio8HI262659guKTMd1RaWZfF1//z8x/4UqIgo5/HudzjhGLfZZkwf0UhEJ WAt81V8MZjpSyjtfbjrEaKjUOwIDAQABo4IC1TCCAtEwHQYDVR0OBBYEFNoG/1g9 ulHSDQctyFh26I9qKfKGMB8GA1UdIwQYMBaAFLIOn+ZK886MmCcl0BKhQpJyY87w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzdDMy81REE0OEMyMEU3 NkUxMUVBODE0MkE4MzlDNEY5QUUwMi9zZzZmNWtyenpveVlKeVhRRXFGQ2tuSmp6 dkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NnNmY1a3J6em95WUp5WFFFcUZDa25Kanp2QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDc3QzMvNURBNDhDMjBFNzZFMTFFQTgxNDJBODM5QzRGOUFFMDIvNUZCODlGRDRE QTg1MTFFRUJEN0FGODU0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwXwYIKwYBBQUHAQcBAf8E UDBOMDIEAgABMCwDBAIr/AAwDAMEBmXqwAMEAGXqxAMEAWXqyAMEAmfpEAMEAd8Z 5AMEAN8Z5zAYBAIAAjASAwcAJAerAAAAAwcAJAerAAACMA0GCSqGSIb3DQEBCwUA A4IBAQA+c3yW3FqN/7q2qMMulDqU622+dWNgXpP9rnL9W8fO6UNoMW8792VpTsAS Y3qTtGoCD+vVkYJ7qKu/Xxw+k3Gsd671fxC97mUTNZ4+UM+qfemMQ2VNWzQUg7KW uj0jN12Y2y0t2sKG8e93Rr/ULSaYAveBX4ibE2f2MkAWY6xLzjU9fRaeHnEVXtXa ikut57aIiwPNLaLl+Lof6zDYOatphxW5VpcXN+VoiU9su1lQv95GLYdJt/ESZT0Q mBq3N4IUQGpA3DtwoHGA+W5RgGTFV6Kk86MJs3Tl50jo0I4DTAF5qGYTlBsAXYWE n8JdVoICJ4qcKsO8QSRhr9W6v689 -----END CERTIFICATE-----Generated at Mon Oct 20 04:46:10 2025 by rpki-client