$ rpki-client -vvf rpki.apnic.net/member_repository/A9190818/7E1F6AE2909D11EF9717F650C4F9AE02/B91F8BF69EE211EF883C7D14C4F9AE02.roa File: B91F8BF69EE211EF883C7D14C4F9AE02.roa (raw, json) Hash identifier: QgB+A4WuYKNQrPEnTyyBdOW3MptpcufkWnuUQSA6mwQ= Subject key identifier: CF:68:F4:31:DA:5C:CD:2E:92:2F:B9:B3:45:D1:AA:FC:41:58:52:8C Certificate issuer: /CN=A9190818/serialNumber=548430EAB88E4E378FB5005AFAE5CAB9C0007A1A Certificate serial: D2 Authority key identifier: 54:84:30:EA:B8:8E:4E:37:8F:B5:00:5A:FA:E5:CA:B9:C0:00:7A:1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIQw6riOTjePtQBa-uXKucAAeho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190818/7E1F6AE2909D11EF9717F650C4F9AE02/B91F8BF69EE211EF883C7D14C4F9AE02.roa Signing time: Tue 30 Sep 2025 19:01:59 +0000 ROA not before: Tue 30 Sep 2025 19:01:59 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 153371 IP address blocks: 2401:ce20::/48 maxlen: 48 2401:ce20:1::/48 maxlen: 48 2401:ce20:2::/48 maxlen: 48 2401:ce20:3::/48 maxlen: 48 2401:ce20:4::/48 maxlen: 48 2401:ce20:5::/48 maxlen: 48 2401:ce20:6::/48 maxlen: 48 2401:ce20:7::/48 maxlen: 48 2401:ce20:10::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190818/7E1F6AE2909D11EF9717F650C4F9AE02/VIQw6riOTjePtQBa-uXKucAAeho.crl rsync://rpki.apnic.net/member_repository/A9190818/7E1F6AE2909D11EF9717F650C4F9AE02/VIQw6riOTjePtQBa-uXKucAAeho.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIQw6riOTjePtQBa-uXKucAAeho.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:06:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 210 (0xd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190818, serialNumber=548430EAB88E4E378FB5005AFAE5CAB9C0007A1A Validity Not Before: Sep 30 19:01:59 2025 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=68dc2927-33d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:08:87:51:e7:f0:4c:e7:6f:4a:be:a2:3d:42: 68:c0:e4:5d:60:71:f2:8b:6b:31:5d:fe:99:aa:8f: b9:93:66:e5:f2:59:a0:f7:e5:ea:77:6e:62:13:36: 76:1f:05:8a:2d:2b:a5:51:db:ff:ac:5b:1a:11:07: 28:30:1b:b0:d0:59:f7:ad:3e:9d:4b:f2:cc:fd:44: 47:98:f1:52:03:82:d0:9d:b7:96:20:e6:9c:ce:40: ba:3c:83:4c:77:d9:c6:b2:84:7b:6f:87:68:ab:9e: dc:5e:cb:89:41:35:a8:1a:9a:d4:51:d1:eb:6a:b2: 47:d9:7e:93:f8:dd:62:32:a0:19:5e:b5:4d:29:cf: b2:98:b9:64:b5:c4:fc:5c:c0:00:61:78:df:95:ba: 2a:6a:13:3c:af:f6:eb:d5:1c:7b:61:80:b1:ec:eb: a5:3f:97:96:8f:66:61:09:5a:e7:24:23:0b:eb:c5: 17:82:07:65:ab:e1:bb:64:c9:38:41:76:99:63:9e: 03:ca:5d:50:1f:d2:09:de:51:78:69:74:3f:92:6e: 62:7b:83:91:8b:1c:53:9a:b0:b2:1e:d7:79:5b:62: c0:ae:1e:f3:c3:5a:cc:d5:17:54:0f:c1:0e:47:1d: f2:26:1e:81:82:3c:03:17:f1:98:6d:23:c8:d1:a2: bf:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:68:F4:31:DA:5C:CD:2E:92:2F:B9:B3:45:D1:AA:FC:41:58:52:8C X509v3 Authority Key Identifier: keyid:54:84:30:EA:B8:8E:4E:37:8F:B5:00:5A:FA:E5:CA:B9:C0:00:7A:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190818/7E1F6AE2909D11EF9717F650C4F9AE02/VIQw6riOTjePtQBa-uXKucAAeho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIQw6riOTjePtQBa-uXKucAAeho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190818/7E1F6AE2909D11EF9717F650C4F9AE02/B91F8BF69EE211EF883C7D14C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:ce20::/45 2401:ce20:10::/44 Signature Algorithm: sha256WithRSAEncryption 6a:46:c2:ce:37:ca:e3:1e:3b:38:dc:d8:44:a5:e2:58:64:ee: 93:28:03:06:2f:5b:78:59:10:ee:40:59:88:97:96:f5:33:6e: 7d:4f:e1:47:aa:00:f7:5f:84:cd:fa:54:0a:06:f6:24:83:d1: 72:1a:08:7b:89:3e:92:a2:72:a8:b6:6e:c3:66:80:af:93:9e: 66:31:fe:a8:50:08:60:3e:cf:f6:1b:f8:12:e6:60:3d:9f:fb: 38:9a:7c:cd:95:6a:f5:1d:f5:5a:64:62:f4:9b:a2:97:67:ff: b7:ec:89:e0:10:4a:0b:91:e7:e4:9d:da:2e:75:f5:a7:e6:42: 39:b6:50:64:46:db:07:a9:9e:0b:aa:8e:d6:30:0b:26:87:b6: bb:32:47:e5:9d:6e:54:de:94:32:7b:0d:ff:63:91:fc:11:a7: 5c:45:4b:50:a1:3f:5b:9f:5a:ab:da:e0:a6:94:11:35:86:89: 97:79:a9:27:37:ac:9d:e5:12:e8:12:b4:72:1f:b7:6c:d2:af: 60:e8:21:c5:ee:bf:5d:95:76:6f:51:b5:23:3d:b3:bd:d0:ef: 35:d0:70:32:66:08:e0:29:ca:9a:04:e8:35:83:a3:40:af:f9: c3:54:bc:6c:fa:4c:99:09:98:85:46:90:33:3c:09:f5:74:ce: 3e:4f:a0:e6 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICANIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTA4MTgxMTAvBgNVBAUTKDU0ODQzMEVBQjg4RTRFMzc4RkI1MDA1QUZBRTVDQUI5 QzAwMDdBMUEwHhcNMjUwOTMwMTkwMTU5WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGRjMjkyNy0zM2Q1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAngiHUefwTOdvSr6iPUJowORdYHHyi2sxXf6Zqo+5k2bl8lmg9+Xqd25iEzZ2 HwWKLSulUdv/rFsaEQcoMBuw0Fn3rT6dS/LM/URHmPFSA4LQnbeWIOaczkC6PINM d9nGsoR7b4doq57cXsuJQTWoGprUUdHrarJH2X6T+N1iMqAZXrVNKc+ymLlktcT8 XMAAYXjflboqahM8r/br1Rx7YYCx7OulP5eWj2ZhCVrnJCML68UXggdlq+G7ZMk4 QXaZY54Dyl1QH9IJ3lF4aXQ/km5ie4ORixxTmrCyHtd5W2LArh7zw1rM1RdUD8EO Rx3yJh6BgjwDF/GYbSPI0aK/6QIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFM9o9DHa XM0uki+5s0XRqvxBWFKMMB8GA1UdIwQYMBaAFFSEMOq4jk43j7UAWvrlyrnAAHoa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDgxOC83RTFGNkFFMjkw OUQxMUVGOTcxN0Y2NTBDNEY5QUUwMi9WSVF3NnJpT1RqZVB0UUJhLXVYS3VjQUFl aG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZJUXc2cmlPVGplUHRRQmEtdVhLdWNBQWVoby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTA4MTgvN0UxRjZBRTI5MDlEMTFFRjk3MTdGNjUwQzRGOUFFMDIvQjkxRjhCRjY5 RUUyMTFFRjg4M0M3RDE0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgACMBIDBwMkAc4gAAADBwQkAc4gABAwDQYJKoZIhvcNAQELBQADggEB AGpGws43yuMeOzjc2ESl4lhk7pMoAwYvW3hZEO5AWYiXlvUzbn1P4UeqAPdfhM36 VAoG9iSD0XIaCHuJPpKicqi2bsNmgK+TnmYx/qhQCGA+z/Yb+BLmYD2f+ziafM2V avUd9VpkYvSbopdn/7fsieAQSguR5+Sd2i519afmQjm2UGRG2wepnguqjtYwCyaH trsyR+WdblTelDJ7Df9jkfwRp1xFS1ChP1ufWqva4KaUETWGiZd5qSc3rJ3lEugS tHIft2zSr2DoIcXuv12Vdm9RtSM9s73Q7zXQcDJmCOApypoE6DWDo0Cv+cNUvGz6 TJkJmIVGkDM8CfV0zj5PoOY= -----END CERTIFICATE-----Generated at Mon Oct 20 00:22:05 2025 by rpki-client