$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/89A5C6C67C5511EDA0D2C06CC4F9AE02.roa File: 89A5C6C67C5511EDA0D2C06CC4F9AE02.roa (raw, json) Hash identifier: 4vU7ty9pe2QSdUFT6eAcsHDyN7pypl6G+w0CuYSW3oI= Subject key identifier: C1:DE:F8:96:84:54:37:CB:51:AA:94:1A:6A:E1:81:63:30:2E:FE:B0 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4CF2 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/89A5C6C67C5511EDA0D2C06CC4F9AE02.roa Signing time: Thu 28 Aug 2025 14:53:13 +0000 ROA not before: Thu 28 Aug 2025 14:53:13 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 135920 IP address blocks: 45.123.96.0/22 maxlen: 24 103.63.212.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 14:36:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19698 (0x4cf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Aug 28 14:53:13 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68b06d59-e98c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:80:a3:d7:ae:ff:35:a6:a6:f9:0d:2b:33:6a: ae:0f:29:e6:20:6a:82:71:ba:fc:ca:63:a0:9d:39: 64:2b:11:f1:7c:d0:04:0f:3c:3c:db:92:e7:75:2d: 82:2b:2e:93:79:a5:5c:af:29:bc:37:8d:7d:34:d6: c4:ee:17:16:68:52:a3:3e:f1:15:0b:e6:e4:d4:7d: 99:f9:19:b1:35:59:83:0e:e4:ce:7e:5d:e5:d7:23: 91:bb:e2:29:be:c1:df:ec:b5:2f:a7:82:4e:52:07: 4c:9d:c1:87:98:d2:ce:c4:61:42:45:0a:d2:13:16: fc:2a:e9:66:41:58:25:cb:69:ce:83:87:b7:83:69: 63:50:ae:ab:c5:7e:ad:e5:96:b8:e5:07:e6:e0:13: f7:a3:cd:80:71:fc:47:8f:b5:61:94:d6:79:47:a7: 79:23:c3:66:30:c2:a6:34:8b:e7:dc:2e:6f:93:9c: 96:7f:c1:97:52:09:74:19:68:eb:5d:ad:a5:a7:cb: 07:ca:ce:ab:7c:cb:51:58:54:1d:8d:53:5b:8a:e7: 3c:73:b3:45:08:f2:7f:43:0b:51:bb:1c:49:d9:33: d3:de:2c:5f:99:5d:08:9b:31:84:38:a4:78:98:71: 7d:db:00:7e:ee:cf:3a:15:40:4f:10:15:3c:80:59: c7:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:DE:F8:96:84:54:37:CB:51:AA:94:1A:6A:E1:81:63:30:2E:FE:B0 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/89A5C6C67C5511EDA0D2C06CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.123.96.0/22 103.63.212.0/22 Signature Algorithm: sha256WithRSAEncryption 6e:ba:f5:b3:cd:76:fe:cf:e7:9f:d5:3c:ee:d7:b2:f2:51:e0: 3e:4e:0c:59:ea:48:eb:30:7c:82:03:2f:a5:9d:c8:bc:7a:db: d1:94:93:c0:60:20:b8:ee:22:3c:52:63:b8:eb:46:e9:ce:aa: d3:e3:b4:f9:1c:a5:80:3d:ad:84:7c:16:a0:3b:1c:77:94:22: 96:28:43:bd:80:3d:7b:fd:ed:91:aa:1b:61:c7:0e:39:26:21: 33:b8:43:b5:6c:73:9e:b3:bc:b6:69:c0:97:5e:50:75:ee:96: 94:45:f5:b4:4d:cd:2e:4d:cc:a3:79:ab:d7:63:07:db:d8:3e: 63:6c:77:09:49:13:86:b7:3f:4b:73:8e:ec:c4:38:d0:89:1e: db:37:d3:a6:30:02:68:eb:15:ea:ff:59:26:4e:4b:08:09:8a: d3:ef:fe:3a:f1:57:86:2f:ad:c1:8e:a6:3c:43:c9:69:d6:f1: 65:2b:11:9b:bd:7b:31:6a:50:86:2e:57:c4:97:9b:e9:40:2e: 5e:93:83:41:9d:2f:9d:84:b1:40:dd:7b:1e:88:e1:ee:5f:6b: 43:00:aa:fd:3b:b7:7f:08:c4:de:cb:a5:93:de:02:3e:c5:e2: ed:9f:71:61:12:15:73:c2:a6:b4:f6:33:91:23:08:dc:cd:34: b3:79:a6:7f -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICTPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjUwODI4MTQ1MzEzWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGIwNmQ1OS1lOThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwoCj167/Naam+Q0rM2quDynmIGqCcbr8ymOgnTlkKxHxfNAEDzw825LndS2C Ky6TeaVcrym8N419NNbE7hcWaFKjPvEVC+bk1H2Z+RmxNVmDDuTOfl3l1yORu+Ip vsHf7LUvp4JOUgdMncGHmNLOxGFCRQrSExb8KulmQVgly2nOg4e3g2ljUK6rxX6t 5Za45Qfm4BP3o82AcfxHj7VhlNZ5R6d5I8NmMMKmNIvn3C5vk5yWf8GXUgl0GWjr Xa2lp8sHys6rfMtRWFQdjVNbiuc8c7NFCPJ/QwtRuxxJ2TPT3ixfmV0ImzGEOKR4 mHF92wB+7s86FUBPEBU8gFnHfwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFMHe+JaE VDfLUaqUGmrhgWMwLv6wMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvODlBNUM2QzY3 QzU1MTFFREEwRDJDMDZDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAIte2ADBAJnP9QwDQYJKoZIhvcNAQELBQADggEBAG669bPN dv7P55/VPO7XsvJR4D5ODFnqSOswfIIDL6WdyLx629GUk8BgILjuIjxSY7jrRunO qtPjtPkcpYA9rYR8FqA7HHeUIpYoQ72APXv97ZGqG2HHDjkmITO4Q7Vsc56zvLZp wJdeUHXulpRF9bRNzS5NzKN5q9djB9vYPmNsdwlJE4a3P0tzjuzEONCJHts306Yw AmjrFer/WSZOSwgJitPv/jrxV4YvrcGOpjxDyWnW8WUrEZu9ezFqUIYuV8SXm+lA Ll6Tg0GdL52EsUDdex6I4e5fa0MAqv07t38IxN7LpZPeAj7F4u2fcWESFXPCprT2 M5EjCNzNNLN5pn8= -----END CERTIFICATE-----Generated at Mon Oct 20 14:21:48 2025 by rpki-client