$ rpki-client -vvf rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/2B9ED7AE8C8611F093C24B78C4F9AE02.roa File: 2B9ED7AE8C8611F093C24B78C4F9AE02.roa (raw, json) Hash identifier: 42v/8WB31KluVgugWaqssdygke8Q1F8h8HksLJ872Jw= Subject key identifier: E3:54:95:C4:11:B6:ED:06:A1:BE:9D:0A:AE:DE:0E:98:05:65:DE:1B Certificate issuer: /CN=A91C09C5/serialNumber=66761CCD1B4C88384E6A404028CD9A9F809DE276 Certificate serial: 0170 Authority key identifier: 66:76:1C:CD:1B:4C:88:38:4E:6A:40:40:28:CD:9A:9F:80:9D:E2:76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnYczRtMiDhOakBAKM2an4Cd4nY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/2B9ED7AE8C8611F093C24B78C4F9AE02.roa Signing time: Mon 08 Sep 2025 07:33:53 +0000 ROA not before: Mon 08 Sep 2025 07:33:53 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 151845 IP address blocks: 113.192.42.0/24 maxlen: 24 113.192.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.crl rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnYczRtMiDhOakBAKM2an4Cd4nY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:46:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 368 (0x170) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C09C5, serialNumber=66761CCD1B4C88384E6A404028CD9A9F809DE276 Validity Not Before: Sep 8 07:33:53 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=68be86e1-952a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:09:9a:57:53:a0:3b:d5:d3:a0:1c:78:3e:55: 1a:ef:71:b2:03:bf:15:a4:a8:26:98:d8:8d:a5:1f: e5:f9:4a:45:e5:41:12:54:6e:bf:a2:12:d4:90:7c: 11:43:9d:62:13:69:ee:ca:60:4c:76:7d:41:48:3a: 86:40:f4:84:79:54:50:5a:23:c4:eb:b4:ce:aa:bf: 64:a5:56:41:1c:26:25:65:ee:08:7b:66:51:1f:c5: d6:ad:de:07:1b:b6:3f:3e:94:ad:bb:95:b5:1d:c4: 7d:97:43:83:83:d5:a0:a0:a9:c1:41:12:26:45:4b: 75:81:b9:f1:a1:5d:0e:af:72:09:e4:22:09:12:e7: f6:62:83:45:bd:ba:a8:ed:2e:1a:21:80:55:09:91: 3c:73:b3:90:68:e5:54:9f:88:98:90:ea:91:bd:4f: 23:e7:48:0f:37:1c:3d:df:dc:05:35:d0:c7:ca:12: 51:7b:60:cf:aa:08:4f:0d:4b:6b:90:f3:40:f7:a7: 79:15:11:4e:85:f5:1a:6e:e8:46:5e:72:cd:51:a3: 5f:06:20:26:35:87:10:7e:83:48:ba:e3:f0:2a:98: c0:11:34:02:30:e6:d9:50:6f:eb:e8:77:c9:97:3a: 14:69:62:cd:dd:3e:d7:1a:d2:77:49:fc:91:60:9a: 91:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:54:95:C4:11:B6:ED:06:A1:BE:9D:0A:AE:DE:0E:98:05:65:DE:1B X509v3 Authority Key Identifier: keyid:66:76:1C:CD:1B:4C:88:38:4E:6A:40:40:28:CD:9A:9F:80:9D:E2:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnYczRtMiDhOakBAKM2an4Cd4nY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/2B9ED7AE8C8611F093C24B78C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 113.192.42.0/23 Signature Algorithm: sha256WithRSAEncryption 2e:f9:65:d8:9a:4c:d3:46:37:4b:ec:5c:97:4c:7e:21:e9:9f: 2d:b7:30:63:91:be:d5:63:51:62:58:97:b8:9d:69:e5:1f:c8: 06:a2:ff:4a:d4:cd:b0:b5:cf:88:78:4d:bc:44:26:17:21:18: b9:a5:dd:f1:83:c7:63:bb:63:cc:52:73:3f:2a:96:4d:f2:f8: af:a1:90:4f:0e:01:d0:90:eb:be:1b:d6:37:a5:75:bc:23:27: 19:66:db:3f:3b:6e:21:85:9e:ad:87:2c:d6:d4:87:9c:eb:e1: c9:03:f4:61:24:0e:c0:44:ee:c1:e0:10:01:c0:e1:28:48:de: a8:49:ab:8f:b2:96:8f:fb:4d:91:7e:cd:71:7b:b3:4a:11:07: 2b:69:dd:ad:ca:9a:40:9f:44:ad:09:3d:16:e4:66:d5:e6:c4: 3d:56:a9:10:bb:2e:2a:41:49:60:5c:5a:59:51:f9:ea:7b:7e: f0:ec:7f:a7:0d:ca:eb:09:e4:26:67:08:75:4a:d4:72:e6:68: 13:f7:ef:f4:85:24:13:d5:16:05:80:86:d9:e1:de:37:54:08: aa:2c:da:f2:16:b5:3c:4a:ac:3d:7d:ec:3f:51:12:ca:da:d8: 2d:c6:ef:23:7f:66:e3:d6:16:ce:28:d0:16:c6:2d:76:88:1e: 78:75:4a:93 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzA5QzUxMTAvBgNVBAUTKDY2NzYxQ0NEMUI0Qzg4Mzg0RTZBNDA0MDI4Q0Q5QTlG ODA5REUyNzYwHhcNMjUwOTA4MDczMzUzWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OGJlODZlMS05NTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuwmaV1OgO9XToBx4PlUa73GyA78VpKgmmNiNpR/l+UpF5UESVG6/ohLUkHwR Q51iE2nuymBMdn1BSDqGQPSEeVRQWiPE67TOqr9kpVZBHCYlZe4Ie2ZRH8XWrd4H G7Y/PpStu5W1HcR9l0ODg9WgoKnBQRImRUt1gbnxoV0Or3IJ5CIJEuf2YoNFvbqo 7S4aIYBVCZE8c7OQaOVUn4iYkOqRvU8j50gPNxw939wFNdDHyhJRe2DPqghPDUtr kPNA96d5FRFOhfUabuhGXnLNUaNfBiAmNYcQfoNIuuPwKpjAETQCMObZUG/r6HfJ lzoUaWLN3T7XGtJ3SfyRYJqRlQIDAQABo4IClTCCApEwHQYDVR0OBBYEFONUlcQR tu0Gob6dCq7eDpgFZd4bMB8GA1UdIwQYMBaAFGZ2HM0bTIg4TmpAQCjNmp+AneJ2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDlDNS83NEIxNkM3Njk1 OTkxMUVFQkEzQ0IyNzVDNEY5QUUwMi9ablljelJ0TWlEaE9ha0JBS00yYW40Q2Q0 blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1puWWN6UnRNaURoT2FrQkFLTTJhbjRDZDRuWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzA5QzUvNzRCMTZDNzY5NTk5MTFFRUJBM0NCMjc1QzRGOUFFMDIvMkI5RUQ3QUU4 Qzg2MTFGMDkzQzI0Qjc4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFxwCowDQYJKoZIhvcNAQELBQADggEBAC75ZdiaTNNGN0vs XJdMfiHpny23MGORvtVjUWJYl7idaeUfyAai/0rUzbC1z4h4TbxEJhchGLml3fGD x2O7Y8xScz8qlk3y+K+hkE8OAdCQ674b1jeldbwjJxlm2z87biGFnq2HLNbUh5zr 4ckD9GEkDsBE7sHgEAHA4ShI3qhJq4+ylo/7TZF+zXF7s0oRBytp3a3KmkCfRK0J PRbkZtXmxD1WqRC7LipBSWBcWllR+ep7fvDsf6cNyusJ5CZnCHVK1HLmaBP37/SF JBPVFgWAhtnh3jdUCKos2vIWtTxKrD197D9REsra2C3G7yN/ZuPWFs4o0BbGLXaI Hnh1SpM= -----END CERTIFICATE-----Generated at Mon Oct 20 09:58:54 2025 by rpki-client