$ rpki-client -vvf rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/89A6BB88E06911EF9C6CF520C4F9AE02.roa File: 89A6BB88E06911EF9C6CF520C4F9AE02.roa (raw, json) Hash identifier: PuXKnOp8AIAF4wfrgpLx1sVsd5LNs1dsfeLf5R0B8+s= Subject key identifier: 2B:47:32:97:80:FD:24:9C:5E:69:A7:0F:DA:EB:A2:AE:81:9C:F0:42 Certificate issuer: /CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257 Certificate serial: 36B9 Authority key identifier: E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/89A6BB88E06911EF9C6CF520C4F9AE02.roa Signing time: Wed 08 Oct 2025 14:40:42 +0000 ROA not before: Wed 08 Oct 2025 14:40:42 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 150675 IP address blocks: 175.29.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:15:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14009 (0x36b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91510AD, serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257 Validity Not Before: Oct 8 14:40:42 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68e677ea-db9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:48:24:b5:fc:d5:ec:ca:8a:56:e0:d5:75:d6: 58:af:22:cf:1a:fe:42:1c:bc:c4:20:9f:46:19:88: 68:e8:76:91:e7:67:13:bb:c4:03:4f:7c:6f:53:5a: 99:52:ed:1f:32:af:8b:ca:78:8c:01:b6:85:06:f6: e6:3c:6a:ef:85:dd:a7:e5:53:a7:fb:cf:c7:ef:64: b3:b3:56:f6:b0:d5:8a:08:ac:cf:b7:17:e1:18:8b: 19:23:77:c3:d0:2e:cd:c6:6e:bd:5a:04:56:e8:75: 60:f7:61:50:fa:c3:be:de:17:b8:fa:89:44:9a:ac: 9a:03:e5:5c:48:bb:b8:52:a9:ff:56:8b:10:0c:74: fe:69:eb:62:d8:54:56:9b:ff:e5:0b:dc:98:2c:70: f6:ee:5a:5e:82:5b:0c:b6:2e:b3:aa:e2:94:4c:a5: 1e:ab:31:e7:87:b1:0e:2e:f5:08:df:e6:ad:f7:f1: 95:bc:eb:7e:b5:b4:91:3e:7b:fc:79:0f:49:b2:19: e0:ae:b3:da:b9:92:ad:3f:99:68:07:e0:ba:46:d6: 10:85:d8:67:4d:8d:22:69:bf:84:7a:23:c2:6c:99: 48:55:43:e2:38:54:31:70:b1:d7:d1:ee:13:21:a8: a5:a9:2e:70:29:9f:33:c8:0c:fa:a4:c0:db:16:4a: 6a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:47:32:97:80:FD:24:9C:5E:69:A7:0F:DA:EB:A2:AE:81:9C:F0:42 X509v3 Authority Key Identifier: keyid:E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/89A6BB88E06911EF9C6CF520C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 175.29.18.0/24 Signature Algorithm: sha256WithRSAEncryption 99:4f:98:54:7a:20:0c:d0:6b:9d:49:42:a4:e9:6d:a5:31:10: 7b:52:69:ea:e8:52:a3:b6:3c:29:ab:73:e8:e9:6a:04:3f:4a: 20:06:c6:2d:8f:e9:e9:6d:6e:34:0e:08:f5:f0:fb:00:27:2c: 24:d7:7e:96:7e:b7:80:47:49:d0:e7:b1:21:1a:9d:92:3e:48: e7:d3:b3:99:c2:04:90:29:0b:9d:63:31:33:be:e4:d7:f3:70: 8c:61:ed:18:14:52:61:a3:6d:f1:4a:73:e9:f7:da:44:1c:ac: d8:6b:df:09:f9:13:78:a1:f4:1c:4e:6e:af:c3:82:10:b2:34: 3a:a4:da:48:b5:34:37:4f:32:73:fd:82:0c:7a:1f:89:72:dc: db:97:54:da:82:6b:3c:93:7d:ea:21:68:e0:d7:cf:84:e1:0b: 54:1b:20:26:e1:a7:d4:eb:5e:7e:53:f4:07:b2:0c:05:1d:a9: ea:ad:3b:74:f8:d6:ef:fe:db:80:a5:1c:f6:45:ad:33:50:76: 1c:a7:22:48:bd:9e:e4:f9:49:bc:22:49:43:4b:fb:11:38:68: ec:7d:74:85:6b:60:7a:6a:7e:f4:9e:e6:6b:61:42:46:44:b4: 70:34:97:1f:ec:c6:0f:ad:df:42:2d:fa:88:c6:b3:c8:b3:1f: 09:e2:87:2d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNrkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTEwQUQxMTAvBgNVBAUTKEUxRTY5MDhBMTZFQzgxM0RBQTBCRDY0Nzk3QUU5REJE RUIwOTIyNTcwHhcNMjUxMDA4MTQ0MDQyWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGU2NzdlYS1kYjlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1EgktfzV7MqKVuDVddZYryLPGv5CHLzEIJ9GGYho6HaR52cTu8QDT3xvU1qZ Uu0fMq+LyniMAbaFBvbmPGrvhd2n5VOn+8/H72Szs1b2sNWKCKzPtxfhGIsZI3fD 0C7Nxm69WgRW6HVg92FQ+sO+3he4+olEmqyaA+VcSLu4Uqn/VosQDHT+aeti2FRW m//lC9yYLHD27lpeglsMti6zquKUTKUeqzHnh7EOLvUI3+at9/GVvOt+tbSRPnv8 eQ9JshngrrPauZKtP5loB+C6RtYQhdhnTY0iab+EeiPCbJlIVUPiOFQxcLHX0e4T IailqS5wKZ8zyAz6pMDbFkpq0wIDAQABo4IClTCCApEwHQYDVR0OBBYEFCtHMpeA /SScXmmnD9rroq6BnPBCMB8GA1UdIwQYMBaAFOHmkIoW7IE9qgvWR5eunb3rCSJX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTBBRC84QjVFNzVGRTFE ODcxMUUyODRCMzgzREYwOEIwMkNEMi80ZWFRaWhic2dUMnFDOVpIbDY2ZHZlc0pJ bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRlYVFpaGJzZ1QycUM5WkhsNjZkdmVzSklsYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTEwQUQvOEI1RTc1RkUxRDg3MTFFMjg0QjM4M0RGMDhCMDJDRDIvODlBNkJCODhF MDY5MTFFRjlDNkNGNTIwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBACvHRIwDQYJKoZIhvcNAQELBQADggEBAJlPmFR6IAzQa51J QqTpbaUxEHtSaeroUqO2PCmrc+jpagQ/SiAGxi2P6eltbjQOCPXw+wAnLCTXfpZ+ t4BHSdDnsSEanZI+SOfTs5nCBJApC51jMTO+5NfzcIxh7RgUUmGjbfFKc+n32kQc rNhr3wn5E3ih9BxObq/DghCyNDqk2ki1NDdPMnP9ggx6H4ly3NuXVNqCazyTfeoh aODXz4ThC1QbICbhp9TrXn5T9AeyDAUdqeqtO3T41u/+24ClHPZFrTNQdhynIki9 nuT5SbwiSUNL+xE4aOx9dIVrYHpqfvSe5mthQkZEtHA0lx/sxg+t30It+ojGs8iz Hwnihy0= -----END CERTIFICATE-----Generated at Sun Oct 19 22:35:03 2025 by rpki-client