$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/F3A41ADEC0E411EFA19F644CC4F9AE02.roa File: F3A41ADEC0E411EFA19F644CC4F9AE02.roa (raw, json) Hash identifier: JfCzlyEj5RyOEksRQ5dZM0w5+meyD4/0WxMSGEXGqU0= Subject key identifier: 4C:5A:4F:D6:CC:37:75:5A:13:C5:F8:13:B1:95:2C:E2:1B:F9:D5:16 Certificate issuer: /CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A Certificate serial: 3606 Authority key identifier: 9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/F3A41ADEC0E411EFA19F644CC4F9AE02.roa Signing time: Sun 28 Sep 2025 13:35:14 +0000 ROA not before: Sun 28 Sep 2025 13:35:14 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 45800 IP address blocks: 58.181.147.0/24 maxlen: 24 203.155.54.0/24 maxlen: 24 203.209.82.0/24 maxlen: 24 203.209.99.0/24 maxlen: 24 2405:a000:17::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 14:23:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13830 (0x3606) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91697FA, serialNumber=9F82DBC9466312C5BA2E921279302400956A982A Validity Not Before: Sep 28 13:35:14 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68d93992-6626 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e1:92:e5:65:46:ca:24:ea:2f:3c:4b:2c:19: b2:12:cb:08:60:f7:08:a8:07:1b:56:3c:64:31:b7: 45:24:51:6b:47:21:de:25:97:6c:59:b4:3a:36:cb: 01:1b:6a:da:eb:de:ce:8f:e1:02:b1:5a:5c:73:32: bb:3c:26:1f:2e:ff:47:6c:8c:49:57:50:08:1c:dc: 33:ec:51:4c:00:bc:c2:17:a1:5c:cf:7d:17:47:5c: f8:55:fe:c0:14:59:39:7f:ee:6a:04:2d:20:4d:eb: b9:84:3c:5e:67:ec:d5:21:97:88:ff:48:dc:b4:f6: db:c8:a6:bf:f9:56:b1:82:96:c1:81:e6:15:b3:3e: f6:a2:5f:8e:b8:96:8f:c7:cb:4a:a4:8c:3f:ee:6c: d7:a7:8b:ec:29:50:7f:e4:ab:b7:7d:a3:43:ec:5a: f9:31:b2:5f:02:3e:1c:dd:fc:19:2d:ff:85:39:83: 42:aa:41:25:71:28:a1:de:9a:54:7b:33:7b:0e:ef: 6d:5b:38:44:83:e0:33:f7:6f:c4:a4:c0:7f:87:88: 48:3a:f6:76:b6:47:62:a2:64:24:f6:e9:4c:89:a9: 28:13:ff:e7:87:fa:9a:e3:80:af:b2:d9:44:69:2d: b8:2d:7f:de:5e:2e:87:a6:4c:57:00:a2:a0:0d:66: 8a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:5A:4F:D6:CC:37:75:5A:13:C5:F8:13:B1:95:2C:E2:1B:F9:D5:16 X509v3 Authority Key Identifier: keyid:9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/F3A41ADEC0E411EFA19F644CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 58.181.147.0/24 203.155.54.0/24 203.209.82.0/24 203.209.99.0/24 IPv6: 2405:a000:17::/48 Signature Algorithm: sha256WithRSAEncryption 0c:7f:06:49:66:0c:ef:9b:fd:0c:4d:00:08:c8:54:0d:fd:d8: 92:11:08:86:5a:1f:47:a3:8b:9b:ee:9a:50:62:1b:f6:44:00: b3:99:f1:ce:8a:38:b6:0c:2b:db:ad:44:c6:7b:94:81:59:9f: 8c:e9:0a:3c:4a:87:43:8e:dd:d4:88:b0:e8:51:11:a3:c4:dd: c5:2f:bf:f4:6b:8e:5f:51:40:f8:9a:0b:62:0e:1e:54:94:7f: 8b:64:41:2b:90:9a:08:d9:c5:42:e7:18:93:0f:c0:2b:ed:5d: b3:12:4f:c2:eb:20:22:da:f8:21:0c:e6:7f:50:f2:ad:14:3b: cf:f3:ef:17:b5:e0:39:f7:27:56:30:6a:c3:b2:0c:fa:00:70: 74:e7:45:24:79:ea:1a:ce:7e:e1:78:44:0f:3a:9c:6f:77:6a: 45:48:d8:13:f7:f9:eb:e6:20:c0:fd:fb:17:90:6e:c0:c9:b6: 5b:ef:17:f1:74:19:23:c7:7e:5f:3e:4c:aa:06:90:5d:4e:75: 78:4b:49:98:c9:e0:d0:62:2a:bb:a9:21:c4:fb:af:6f:51:25: 9d:84:6f:ba:d7:b2:c7:9a:42:65:8c:9e:e4:62:e1:8b:02:a1: dc:6b:f6:d5:71:af:2c:3c:05:c4:f4:a3:46:8a:c6:80:dd:2e: 65:b4:0e:e6 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgICNgYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk3RkExMTAvBgNVBAUTKDlGODJEQkM5NDY2MzEyQzVCQTJFOTIxMjc5MzAyNDAw OTU2QTk4MkEwHhcNMjUwOTI4MTMzNTE0WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGQ5Mzk5Mi02NjI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtOGS5WVGyiTqLzxLLBmyEssIYPcIqAcbVjxkMbdFJFFrRyHeJZdsWbQ6NssB G2ra697Oj+ECsVpcczK7PCYfLv9HbIxJV1AIHNwz7FFMALzCF6Fcz30XR1z4Vf7A FFk5f+5qBC0gTeu5hDxeZ+zVIZeI/0jctPbbyKa/+VaxgpbBgeYVsz72ol+OuJaP x8tKpIw/7mzXp4vsKVB/5Ku3faND7Fr5MbJfAj4c3fwZLf+FOYNCqkElcSih3ppU ezN7Du9tWzhEg+Az92/EpMB/h4hIOvZ2tkdiomQk9ulMiakoE//nh/qa44CvstlE aS24LX/eXi6HpkxXAKKgDWaKSwIDAQABo4ICuDCCArQwHQYDVR0OBBYEFExaT9bM N3VaE8X4E7GVLOIb+dUWMB8GA1UdIwQYMBaAFJ+C28lGYxLFui6SEnkwJACVapgq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTdGQS8yN0Y4M0I3MDFE ODMxMUUyOTMyOTIxRDgwOEIwMkNEMi9uNExieVVaakVzVzZMcElTZVRBa0FKVnFt Q28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL240TGJ5VVpqRXNXNkxwSVNlVEFrQUpWcW1Dby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Njk3RkEvMjdGODNCNzAxRDgzMTFFMjkzMjkyMUQ4MDhCMDJDRDIvRjNBNDFBREVD MEU0MTFFRkExOUY2NDRDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQgYIKwYBBQUHAQcBAf8E MzAxMB4EAgABMBgDBAA6tZMDBADLmzYDBADL0VIDBADL0WMwDwQCAAIwCQMHACQF oAAAFzANBgkqhkiG9w0BAQsFAAOCAQEADH8GSWYM75v9DE0ACMhUDf3YkhEIhlof R6OLm+6aUGIb9kQAs5nxzoo4tgwr261ExnuUgVmfjOkKPEqHQ47d1Iiw6FERo8Td xS+/9GuOX1FA+JoLYg4eVJR/i2RBK5CaCNnFQucYkw/AK+1dsxJPwusgItr4IQzm f1DyrRQ7z/PvF7XgOfcnVjBqw7IM+gBwdOdFJHnqGs5+4XhEDzqcb3dqRUjYE/f5 6+YgwP37F5BuwMm2W+8X8XQZI8d+Xz5MqgaQXU51eEtJmMng0GIqu6khxPuvb1El nYRvuteyx5pCZYye5GLhiwKh3Gv21XGvLDwFxPSjRorGgN0uZbQO5g== -----END CERTIFICATE-----Generated at Mon Oct 20 04:25:38 2025 by rpki-client