$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/3066E80A5B7C11EDAAFAB831C4F9AE02.roa File: 3066E80A5B7C11EDAAFAB831C4F9AE02.roa (raw, json) Hash identifier: yyhxzF0/c5uMQ12puVXLcHeNACYdhT0nLnFanNPNceA= Subject key identifier: 13:97:BD:C8:1E:3A:3D:7C:4A:69:03:2D:4E:FC:80:F5:7D:8D:D3:52 Certificate issuer: /CN=A91ADB98/serialNumber=661C64E293B87F473AF61D89DE48FC4538570157 Certificate serial: 02AF Authority key identifier: 66:1C:64:E2:93:B8:7F:47:3A:F6:1D:89:DE:48:FC:45:38:57:01:57 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/3066E80A5B7C11EDAAFAB831C4F9AE02.roa Signing time: Wed 01 Oct 2025 02:29:09 +0000 ROA not before: Wed 01 Oct 2025 02:29:09 +0000 ROA not after: Fri 30 Jan 2026 00:00:00 +0000 asID: 65512 IP address blocks: 140.168.128.0/19 maxlen: 19 140.168.135.0/24 maxlen: 24 140.168.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.crl rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:04:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 687 (0x2af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADB98, serialNumber=661C64E293B87F473AF61D89DE48FC4538570157 Validity Not Before: Oct 1 02:29:09 2025 GMT Not After : Jan 30 00:00:00 2026 GMT Subject: CN=68dc91f4-6b48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3d:a9:9b:bd:92:24:52:61:40:85:9f:25:f2: 7f:55:a8:c5:83:5f:98:63:0b:32:6f:47:69:dd:47: d4:a1:51:93:8a:1b:21:66:a9:27:ee:9f:ba:be:2c: 80:03:66:1c:42:ea:b8:0c:7e:c6:97:e0:22:57:98: 7f:e5:43:78:b6:90:fe:f6:ec:ba:55:92:c5:f9:ab: ff:79:ad:dc:ec:6f:b4:de:38:4d:79:5d:ec:d0:76: 06:8d:c5:8f:d3:b2:d1:c6:98:9a:6f:c9:29:94:22: 93:93:e1:b7:15:4a:e5:cd:d2:fc:bc:39:62:ff:34: c6:36:6d:e6:0b:ee:8d:5a:53:9e:da:55:43:d3:f8: df:7b:0e:ab:d4:06:85:9a:4b:d1:44:df:07:e2:7f: 3d:35:3a:af:ed:93:3b:b3:98:f8:6a:81:50:ac:7f: c1:4b:a0:1f:9d:fb:9f:ca:e2:f3:1b:88:1b:bf:c4: 69:b1:49:5c:0e:db:84:26:ad:ef:7e:02:ce:f9:c9: f4:5f:5e:b0:87:b0:61:17:51:39:21:dd:e9:a2:19: f6:80:21:d0:ef:ec:cb:88:d4:07:90:9e:ea:f4:c6: 2a:d8:e8:25:8e:ad:6d:e4:ef:05:ac:b4:9e:0c:98: ff:87:6e:ab:51:0d:d6:22:42:b1:6a:34:a3:d5:1a: ab:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:97:BD:C8:1E:3A:3D:7C:4A:69:03:2D:4E:FC:80:F5:7D:8D:D3:52 X509v3 Authority Key Identifier: keyid:66:1C:64:E2:93:B8:7F:47:3A:F6:1D:89:DE:48:FC:45:38:57:01:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/3066E80A5B7C11EDAAFAB831C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 140.168.128.0/18 Signature Algorithm: sha256WithRSAEncryption 4a:59:9c:88:bf:17:09:4b:d7:be:5d:8d:96:ef:d1:34:cd:ea: 78:e1:d9:52:c6:e8:27:8b:1f:64:d9:92:43:c8:b8:ab:18:53: fc:73:56:42:e6:34:f3:d0:73:6e:2c:f1:b5:3d:7e:af:28:a6: 4e:57:6f:bd:00:c3:89:ef:dd:ea:be:4b:20:d9:ac:f8:35:8e: 79:f3:4a:ee:df:e2:9b:a1:00:7e:17:da:86:7f:0e:b8:99:31: dd:ea:cc:d1:b2:c8:6c:05:92:ae:aa:73:6f:f2:ec:3d:46:50: ae:47:ed:bc:c4:9e:2c:32:d9:43:d1:aa:a2:b9:ae:f6:44:b4: d1:32:5f:83:81:13:cc:7d:36:bd:d1:d0:5e:e7:45:f1:67:1e: 39:d7:22:47:1f:3b:7e:38:d0:c9:8b:90:a4:68:b2:cc:27:38: d0:e3:aa:8c:ad:15:51:f9:d5:a4:79:f9:87:c0:fd:61:c7:9d: 0b:e8:e7:96:c0:92:66:a4:f8:0c:41:8a:cd:a1:aa:0e:45:0c: cc:10:12:90:80:c9:f5:de:df:b3:45:4e:25:78:5c:4d:10:9d: 62:80:0c:42:d2:d3:b1:44:c0:84:81:f0:de:3a:03:55:99:cc: 4e:71:86:78:14:f2:4d:70:f8:c2:e4:e1:33:91:0e:a1:6f:83: fa:e3:9d:40 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAq8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURCOTgxMTAvBgNVBAUTKDY2MUM2NEUyOTNCODdGNDczQUY2MUQ4OURFNDhGQzQ1 Mzg1NzAxNTcwHhcNMjUxMDAxMDIyOTA5WhcNMjYwMTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGRjOTFmNC02YjQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuD2pm72SJFJhQIWfJfJ/VajFg1+YYwsyb0dp3UfUoVGTihshZqkn7p+6viyA A2YcQuq4DH7Gl+AiV5h/5UN4tpD+9uy6VZLF+av/ea3c7G+03jhNeV3s0HYGjcWP 07LRxpiab8kplCKTk+G3FUrlzdL8vDli/zTGNm3mC+6NWlOe2lVD0/jfew6r1AaF mkvRRN8H4n89NTqv7ZM7s5j4aoFQrH/BS6AfnfufyuLzG4gbv8RpsUlcDtuEJq3v fgLO+cn0X16wh7BhF1E5Id3pohn2gCHQ7+zLiNQHkJ7q9MYq2Ogljq1t5O8FrLSe DJj/h26rUQ3WIkKxajSj1RqrZwIDAQABo4IClTCCApEwHQYDVR0OBBYEFBOXvcge Oj18SmkDLU78gPV9jdNSMB8GA1UdIwQYMBaAFGYcZOKTuH9HOvYdid5I/EU4VwFX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREI5OC9EOTNFOTNEQzQ5 MjExMUVEQUJENTlDNTNDNEY5QUUwMi9aaHhrNHBPNGYwYzY5aDJKM2tqOFJUaFhB VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1poeGs0cE80ZjBjNjloMkoza2o4UlRoWEFWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QURCOTgvRDkzRTkzREM0OTIxMTFFREFCRDU5QzUzQzRGOUFFMDIvMzA2NkU4MEE1 QjdDMTFFREFBRkFCODMxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAaMqIAwDQYJKoZIhvcNAQELBQADggEBAEpZnIi/FwlL175d jZbv0TTN6njh2VLG6CeLH2TZkkPIuKsYU/xzVkLmNPPQc24s8bU9fq8opk5Xb70A w4nv3eq+SyDZrPg1jnnzSu7f4puhAH4X2oZ/DriZMd3qzNGyyGwFkq6qc2/y7D1G UK5H7bzEniwy2UPRqqK5rvZEtNEyX4OBE8x9Nr3R0F7nRfFnHjnXIkcfO3440MmL kKRosswnONDjqoytFVH51aR5+YfA/WHHnQvo55bAkmak+AxBis2hqg5FDMwQEpCA yfXe37NFTiV4XE0QnWKADELS07FEwISB8N46A1WZzE5xhngU8k1w+MLk4TORDqFv g/rjnUA= -----END CERTIFICATE-----Generated at Mon Oct 20 14:21:44 2025 by rpki-client