$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/2CC5D50CDEC911EBA828524CC4F9AE02.roa File: 2CC5D50CDEC911EBA828524CC4F9AE02.roa (raw, json) Hash identifier: FMw40XVAdGd77UkmIqYoD247AipDSUL3njDNeC4HGuM= Subject key identifier: 5C:AD:5C:38:C3:46:CA:6B:72:CE:92:FD:D2:5B:BD:E9:C7:35:B7:D4 Certificate issuer: /CN=A91ACBB7/serialNumber=746241ADA77DDBDFEA0FE144EFE21391E3FC4FD9 Certificate serial: 0D1F Authority key identifier: 74:62:41:AD:A7:7D:DB:DF:EA:0F:E1:44:EF:E2:13:91:E3:FC:4F:D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGJBrad929_qD-FE7-ITkeP8T9k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/2CC5D50CDEC911EBA828524CC4F9AE02.roa Signing time: Thu 16 Oct 2025 09:54:48 +0000 ROA not before: Thu 16 Oct 2025 09:54:48 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 63969 IP address blocks: 45.114.84.0/22 maxlen: 24 103.54.36.0/22 maxlen: 24 103.143.148.0/24 maxlen: 24 2403:41c0::/32 maxlen: 36 2403:41c0:19::/48 maxlen: 48 2403:41c0:1a::/48 maxlen: 48 2403:41c0:2a::/48 maxlen: 48 2403:41c0:3a::/48 maxlen: 48 2403:41c0:41::/48 maxlen: 48 2403:41c0:fc00::/48 maxlen: 48 2403:41c0:fc05::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.crl rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGJBrad929_qD-FE7-ITkeP8T9k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:47:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3359 (0xd1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACBB7, serialNumber=746241ADA77DDBDFEA0FE144EFE21391E3FC4FD9 Validity Not Before: Oct 16 09:54:48 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=68f0c0e8-5cbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e2:6c:28:34:41:ab:fc:a3:2f:93:c7:24:65: 91:a0:f8:ff:00:17:14:63:76:d9:79:ab:95:94:c0: e7:94:8e:61:6f:e6:e0:76:88:4c:19:62:a0:75:f9: a4:9c:4e:b2:39:a4:48:9a:e2:9b:30:17:16:8b:ae: 3d:92:f1:cf:37:a9:8a:1e:f6:49:c8:60:03:b4:97: da:7a:53:30:d7:23:2c:c3:e2:0f:fd:20:7b:eb:ba: c6:1e:7f:04:41:f4:8e:09:ab:e5:66:a1:92:00:c4: 2c:0b:58:05:bd:ec:a5:1a:19:ca:e2:c4:cc:4f:f4: 4a:c2:98:67:a2:47:ea:17:01:76:10:7c:7b:30:3d: 3e:88:56:da:57:a6:52:21:be:c5:75:e5:a0:87:be: b3:f7:87:50:46:8d:a6:ac:72:b1:74:58:6b:e8:95: 72:21:a9:22:ac:82:cb:0a:82:7e:1f:b6:a5:12:62: 27:08:ca:57:bb:58:c4:19:18:0f:14:8b:51:97:28: b0:12:30:60:1d:40:3a:83:55:39:c1:10:fd:d7:7d: f7:e9:ab:68:03:08:d3:17:2b:46:7b:9e:50:b4:47: 67:af:5f:83:6a:cd:50:58:72:9f:b8:9a:ed:e1:f4: e3:36:97:87:73:c1:0b:47:60:d9:a2:dc:20:8b:f2: 9d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:AD:5C:38:C3:46:CA:6B:72:CE:92:FD:D2:5B:BD:E9:C7:35:B7:D4 X509v3 Authority Key Identifier: keyid:74:62:41:AD:A7:7D:DB:DF:EA:0F:E1:44:EF:E2:13:91:E3:FC:4F:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGJBrad929_qD-FE7-ITkeP8T9k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/2CC5D50CDEC911EBA828524CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.114.84.0/22 103.54.36.0/22 103.143.148.0/24 IPv6: 2403:41c0::/32 Signature Algorithm: sha256WithRSAEncryption 49:90:71:75:15:48:a5:28:69:75:59:dd:5b:16:0f:8c:da:28: 4f:c0:21:ac:31:09:65:6a:75:3f:c9:e6:93:43:de:a7:3c:b0: 1a:b1:e6:fc:03:77:18:6e:a7:1a:2b:c7:60:fc:09:8f:36:f0: 5e:ad:ef:14:3d:18:60:df:64:81:da:4a:0f:90:53:3c:95:94: 97:82:f4:27:4a:4a:13:e9:f2:5e:c8:6d:ec:3f:25:28:f1:19: 5d:35:a1:00:3c:91:ec:bc:ea:fb:bf:13:99:32:48:c5:5e:27: 84:6a:b9:a9:b0:74:65:ad:47:67:08:b5:81:8d:34:59:40:d3: 56:b1:52:8f:94:02:99:f5:46:ce:a3:64:23:59:9d:54:be:f4: 8f:21:e5:df:4f:ff:d3:67:c5:d1:6b:44:e3:2b:8b:30:95:f4: fa:93:e3:63:9e:7c:de:28:38:fd:cf:af:8a:29:a1:8e:73:60: aa:dd:5a:06:bf:18:f9:33:6c:37:8e:24:6d:5a:21:71:62:60: 91:0d:06:0f:4b:18:07:0e:6a:5a:78:9f:cc:de:61:ef:b9:ad: 78:4f:04:99:84:e5:8c:80:8c:f5:17:90:9c:68:71:48:7f:de: 10:86:3a:c6:32:05:11:d5:87:c2:66:01:89:b4:c5:6b:8d:fd: 56:a2:a0:a9 -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICDR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNCQjcxMTAvBgNVBAUTKDc0NjI0MUFEQTc3RERCREZFQTBGRTE0NEVGRTIxMzkx RTNGQzRGRDkwHhcNMjUxMDE2MDk1NDQ4WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OGYwYzBlOC01Y2JiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2uJsKDRBq/yjL5PHJGWRoPj/ABcUY3bZeauVlMDnlI5hb+bgdohMGWKgdfmk nE6yOaRImuKbMBcWi649kvHPN6mKHvZJyGADtJfaelMw1yMsw+IP/SB767rGHn8E QfSOCavlZqGSAMQsC1gFveylGhnK4sTMT/RKwphnokfqFwF2EHx7MD0+iFbaV6ZS Ib7FdeWgh76z94dQRo2mrHKxdFhr6JVyIakirILLCoJ+H7alEmInCMpXu1jEGRgP FItRlyiwEjBgHUA6g1U5wRD913336atoAwjTFytGe55QtEdnr1+Das1QWHKfuJrt 4fTjNpeHc8ELR2DZotwgi/KdwwIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFFytXDjD Rsprcs6S/dJbvenHNbfUMB8GA1UdIwQYMBaAFHRiQa2nfdvf6g/hRO/iE5Hj/E/Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0JCNy81RTFGQ0VCQ0Yz RjkxMUU5QjhBODMxMEFDNEY5QUUwMi9kR0pCcmFkOTI5X3FELUZFNy1JVGtlUDhU OWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RHSkJyYWQ5MjlfcUQtRkU3LUlUa2VQOFQ5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUNCQjcvNUUxRkNFQkNGM0Y5MTFFOUI4QTgzMTBBQzRGOUFFMDIvMkNDNUQ1MENE RUM5MTFFQkE4Mjg1MjRDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E KzApMBgEAgABMBIDBAItclQDBAJnNiQDBABnj5QwDQQCAAIwBwMFACQDQcAwDQYJ KoZIhvcNAQELBQADggEBAEmQcXUVSKUoaXVZ3VsWD4zaKE/AIawxCWVqdT/J5pND 3qc8sBqx5vwDdxhupxorx2D8CY828F6t7xQ9GGDfZIHaSg+QUzyVlJeC9CdKShPp 8l7Ibew/JSjxGV01oQA8key86vu/E5kySMVeJ4RquamwdGWtR2cItYGNNFlA01ax Uo+UApn1Rs6jZCNZnVS+9I8h5d9P/9NnxdFrROMrizCV9PqT42OefN4oOP3Pr4op oY5zYKrdWga/GPkzbDeOJG1aIXFiYJENBg9LGAcOalp4n8zeYe+5rXhPBJmE5YyA jPUXkJxocUh/3hCGOsYyBRHVh8JmAYm0xWuN/VaioKk= -----END CERTIFICATE-----Generated at Mon Oct 20 09:30:47 2025 by rpki-client