$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/E64A79F07FF711EBBDDF9359C4F9AE02.roa File: E64A79F07FF711EBBDDF9359C4F9AE02.roa (raw, json) Hash identifier: BENbfPXFAWsNKNw04Hh56e1cgMusxzVBly6X0njmP6Q= Subject key identifier: CF:2F:07:B7:5B:94:11:4D:AD:FD:14:27:2F:13:6C:8B:45:52:88:DE Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4E0D Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/E64A79F07FF711EBBDDF9359C4F9AE02.roa Signing time: Thu 28 Aug 2025 14:57:09 +0000 ROA not before: Thu 28 Aug 2025 14:57:09 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 38735 IP address blocks: 49.246.128.0/18 maxlen: 24 49.246.192.0/19 maxlen: 24 113.52.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 14:35:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19981 (0x4e0d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Aug 28 14:57:09 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68b06e44-a175 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c3:d1:f4:ac:fe:5c:b5:86:48:89:90:c9:0b: 8e:8b:fa:e4:bf:e6:d5:4d:26:76:d4:50:f9:8e:e6: 7e:90:76:a1:73:97:2d:51:b2:61:43:6c:1f:6d:41: 42:df:d5:17:88:31:17:8a:6b:5d:c0:05:15:ad:4e: c3:a4:20:ca:62:1a:58:9a:9e:33:ef:54:62:5d:f0: 3c:aa:4b:74:70:a6:b8:75:0e:b5:a2:05:0c:77:ad: 64:c1:83:16:b5:ef:65:5d:43:7e:f1:02:b8:91:21: c4:4d:a5:21:c7:58:50:14:ea:e5:29:f7:62:27:63: 95:2d:6d:b5:9f:cf:0b:a6:6a:40:3d:e2:28:49:a3: 0c:71:32:d2:ce:21:0f:d3:5f:32:ab:b9:a1:d8:9b: 94:70:b8:da:4c:0e:5a:3c:c9:ca:52:3e:1b:b3:73: d9:f5:d9:d6:20:df:89:ad:d1:fc:3e:90:8c:8f:77: 16:a5:7f:e4:32:4a:60:20:5c:2b:f0:21:4a:b6:f3: e3:9d:86:37:44:4f:48:0e:cb:91:7a:87:15:75:dd: a6:fe:4c:db:96:5c:b8:6b:b6:13:fb:11:2b:b5:10: 88:2f:4d:c5:18:f3:81:63:22:a2:35:7a:5c:ca:2b: 42:fa:28:a3:b5:9f:35:54:d1:8c:13:45:9e:f5:c4: 25:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:2F:07:B7:5B:94:11:4D:AD:FD:14:27:2F:13:6C:8B:45:52:88:DE X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/E64A79F07FF711EBBDDF9359C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.246.128.0-49.246.223.255 113.52.32.0/19 Signature Algorithm: sha256WithRSAEncryption a5:6c:2d:45:41:83:8c:62:ad:d5:87:57:f0:c5:28:c1:c8:b2: 7d:e6:03:9b:bd:5d:a6:a0:c3:12:3d:f5:af:a9:9e:3f:7a:cd: 4d:16:80:9b:ef:8c:b0:32:b8:fd:35:96:2b:5a:f2:1d:52:87: 97:15:ec:5d:b8:ef:63:4a:f2:23:ef:98:55:d4:a7:12:d4:d4: be:35:ef:ad:fa:fe:16:d7:e4:c6:63:13:52:c0:2d:5d:08:26: 9b:30:cf:80:f5:a6:a8:64:c0:72:db:ae:19:5e:55:bf:84:52: f2:de:f2:a2:99:28:d0:14:7a:9b:60:11:9d:4d:c1:c2:fb:16: d2:8e:d3:33:0b:86:fb:38:63:2c:f7:08:38:58:35:c7:6a:55: 79:43:75:67:f7:d9:8d:92:d2:b0:3f:be:ea:75:c4:38:ad:20: 31:a5:62:c4:81:5d:eb:e7:b4:f4:ab:b0:90:aa:ac:a2:93:f5: 70:f5:1f:e3:c7:e6:74:f5:fd:f9:de:a9:37:41:7d:64:1d:70: 29:d2:d6:53:74:c3:0d:cf:c5:be:13:ab:c4:28:d7:d3:5e:14: a0:f5:b9:20:5d:71:54:e9:84:95:36:8b:3c:e8:00:ec:63:1b: 7e:bc:72:7e:0c:18:37:30:1e:b1:45:31:1f:d4:6c:1a:8c:24: 1d:da:b9:87 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgICTg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjUwODI4MTQ1NzA5WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGIwNmU0NC1hMTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvsPR9Kz+XLWGSImQyQuOi/rkv+bVTSZ21FD5juZ+kHahc5ctUbJhQ2wfbUFC 39UXiDEXimtdwAUVrU7DpCDKYhpYmp4z71RiXfA8qkt0cKa4dQ61ogUMd61kwYMW te9lXUN+8QK4kSHETaUhx1hQFOrlKfdiJ2OVLW21n88LpmpAPeIoSaMMcTLSziEP 018yq7mh2JuUcLjaTA5aPMnKUj4bs3PZ9dnWIN+JrdH8PpCMj3cWpX/kMkpgIFwr 8CFKtvPjnYY3RE9IDsuReocVdd2m/kzblly4a7YT+xErtRCIL03FGPOBYyKiNXpc yitC+iijtZ81VNGME0We9cQlvQIDAQABo4ICozCCAp8wHQYDVR0OBBYEFM8vB7db lBFNrf0UJy8TbItFUojeMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvRTY0QTc5RjA3 RkY3MTFFQkJEREY5MzU5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLQYIKwYBBQUHAQcBAf8E HjAcMBoEAgABMBQwDAMEBzH2gAMEBTH2wAMEBXE0IDANBgkqhkiG9w0BAQsFAAOC AQEApWwtRUGDjGKt1YdX8MUowciyfeYDm71dpqDDEj31r6meP3rNTRaAm++MsDK4 /TWWK1ryHVKHlxXsXbjvY0ryI++YVdSnEtTUvjXvrfr+FtfkxmMTUsAtXQgmmzDP gPWmqGTActuuGV5Vv4RS8t7yopko0BR6m2ARnU3BwvsW0o7TMwuG+zhjLPcIOFg1 x2pVeUN1Z/fZjZLSsD++6nXEOK0gMaVixIFd6+e09KuwkKqsopP1cPUf48fmdPX9 +d6pN0F9ZB1wKdLWU3TDDc/FvhOrxCjX014UoPW5IF1xVOmElTaLPOgA7GMbfrxy fgwYNzAesUUxH9RsGowkHdq5hw== -----END CERTIFICATE-----Generated at Mon Oct 20 17:01:29 2025 by rpki-client