$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/4B848DCEA6ED11EDA9E80454C4F9AE02.roa File: 4B848DCEA6ED11EDA9E80454C4F9AE02.roa (raw, json) Hash identifier: K3fvldT9Mc/lZb+wx6WzuwlTVaS/fmxJVle6WcpqwVI= Subject key identifier: F6:71:E8:8D:7F:4F:D3:5C:AC:81:CA:99:45:EF:78:95:52:F9:2B:BD Certificate issuer: /CN=A91C2663/serialNumber=1A97C2F4711F7BC802E268AC66F110862BE57888 Certificate serial: 232C Authority key identifier: 1A:97:C2:F4:71:1F:7B:C8:02:E2:68:AC:66:F1:10:86:2B:E5:78:88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GpfC9HEfe8gC4misZvEQhivleIg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/4B848DCEA6ED11EDA9E80454C4F9AE02.roa Signing time: Tue 07 Oct 2025 02:09:23 +0000 ROA not before: Tue 07 Oct 2025 02:09:23 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 135004 IP address blocks: 202.165.124.0/24 maxlen: 24 202.165.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.crl rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GpfC9HEfe8gC4misZvEQhivleIg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:06:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9004 (0x232c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2663, serialNumber=1A97C2F4711F7BC802E268AC66F110862BE57888 Validity Not Before: Oct 7 02:09:23 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=68e47652-24c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:0d:e2:00:f9:90:1e:30:84:2e:8e:09:d4:bf: 45:a1:bd:f6:22:ac:87:bb:b7:f1:8e:bd:8c:0a:82: ff:97:ce:57:89:c9:9d:2f:3e:61:88:23:5c:e1:f8: 19:90:75:1c:95:41:1d:6a:fd:5f:dd:1a:d0:0f:a1: d9:eb:91:cb:29:a4:1a:11:b9:ef:81:9d:c0:bf:2e: 3a:d0:5f:59:98:d2:9e:8b:e4:ed:3c:1d:f4:31:32: 0c:1d:c3:b2:01:da:dd:83:bd:2c:0a:fe:63:54:68: a1:41:a9:de:6c:34:70:59:6d:cb:0d:48:d2:f7:5d: 7f:0c:0a:b4:2f:0e:d1:b5:38:2e:51:f5:1e:e3:16: 5e:63:39:da:4e:63:2e:3c:de:91:d7:74:a2:34:37: ff:2b:5a:f4:e9:d7:c5:b3:4f:c3:89:c2:91:b8:6b: 1b:2a:ab:a8:eb:be:18:a5:68:43:e8:cb:ac:47:f0: 34:ec:21:ec:e5:05:87:14:46:98:d6:c8:62:3a:0c: 94:5a:c3:82:c0:5e:5c:5a:2a:e4:63:fa:2b:3e:ca: e3:dc:15:10:a7:42:1e:ba:5b:e5:51:59:43:62:85: f7:97:f8:f3:54:5f:1b:36:86:2e:22:ac:28:2e:f9: 30:70:ea:95:56:c7:3e:4d:d0:18:6a:c8:41:f6:14: bd:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:71:E8:8D:7F:4F:D3:5C:AC:81:CA:99:45:EF:78:95:52:F9:2B:BD X509v3 Authority Key Identifier: keyid:1A:97:C2:F4:71:1F:7B:C8:02:E2:68:AC:66:F1:10:86:2B:E5:78:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GpfC9HEfe8gC4misZvEQhivleIg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/4B848DCEA6ED11EDA9E80454C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.165.124.0/23 Signature Algorithm: sha256WithRSAEncryption 41:79:14:70:60:fc:d5:5a:28:0c:56:62:d6:a3:01:02:b8:21: 58:3f:d2:4f:bf:90:92:93:d5:c7:17:c1:8b:cb:51:db:f0:65: 7a:27:92:46:0e:eb:c9:6d:48:f3:c5:f6:71:ba:9b:30:b2:dd: e5:f8:aa:4f:33:a5:e0:56:2b:3f:c9:9c:91:ae:69:a1:e6:fd: 9b:fb:a8:14:8a:97:8a:3d:ae:5d:5c:16:01:bd:5c:ee:be:0d: 5f:11:07:ed:63:1b:57:81:1d:79:ef:e8:66:e9:8e:23:d3:76: e2:65:66:50:4e:61:67:29:9f:8e:74:62:7b:6f:e7:fa:5c:df: ec:9c:bd:83:15:51:f8:c3:47:ce:54:36:26:25:c0:9b:6b:d2: 1b:75:82:a5:04:74:df:10:0a:72:81:2c:d8:b4:0b:4f:e5:26: d9:04:86:1f:86:aa:07:d1:3e:8d:91:24:98:aa:b6:7a:11:b5: 87:e6:a3:8a:b7:56:5d:39:5c:9b:3f:67:60:9b:43:29:49:a7: dc:ef:d9:ac:d1:aa:d9:92:e9:dc:40:d0:b3:02:99:c6:ed:eb: 76:6a:5a:66:88:b9:ca:40:55:66:2e:3c:b5:af:8a:d4:fb:9a: 82:ae:ae:d9:8a:61:b5:e5:d4:5f:7d:68:d9:f0:ff:07:de:5b: ef:41:f3:42 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICIywwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzI2NjMxMTAvBgNVBAUTKDFBOTdDMkY0NzExRjdCQzgwMkUyNjhBQzY2RjExMDg2 MkJFNTc4ODgwHhcNMjUxMDA3MDIwOTIzWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OGU0NzY1Mi0yNGMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6A3iAPmQHjCELo4J1L9Fob32IqyHu7fxjr2MCoL/l85XicmdLz5hiCNc4fgZ kHUclUEdav1f3RrQD6HZ65HLKaQaEbnvgZ3Avy460F9ZmNKei+TtPB30MTIMHcOy Adrdg70sCv5jVGihQanebDRwWW3LDUjS911/DAq0Lw7RtTguUfUe4xZeYznaTmMu PN6R13SiNDf/K1r06dfFs0/DicKRuGsbKquo674YpWhD6MusR/A07CHs5QWHFEaY 1shiOgyUWsOCwF5cWirkY/orPsrj3BUQp0IeulvlUVlDYoX3l/jzVF8bNoYuIqwo LvkwcOqVVsc+TdAYashB9hS93wIDAQABo4IClTCCApEwHQYDVR0OBBYEFPZx6I1/ T9NcrIHKmUXveJVS+Su9MB8GA1UdIwQYMBaAFBqXwvRxH3vIAuJorGbxEIYr5XiI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjY2My9COEFFRjEzOEE5 NEMxMUU1ODI5MUNBNjdDNEY5QUUwMi9HcGZDOUhFZmU4Z0M0bWlzWnZFUWhpdmxl SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dwZkM5SEVmZThnQzRtaXNadkVRaGl2bGVJZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzI2NjMvQjhBRUYxMzhBOTRDMTFFNTgyOTFDQTY3QzRGOUFFMDIvNEI4NDhEQ0VB NkVEMTFFREE5RTgwNDU0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAHKpXwwDQYJKoZIhvcNAQELBQADggEBAEF5FHBg/NVaKAxW YtajAQK4IVg/0k+/kJKT1ccXwYvLUdvwZXonkkYO68ltSPPF9nG6mzCy3eX4qk8z peBWKz/JnJGuaaHm/Zv7qBSKl4o9rl1cFgG9XO6+DV8RB+1jG1eBHXnv6GbpjiPT duJlZlBOYWcpn450Yntv5/pc3+ycvYMVUfjDR85UNiYlwJtr0ht1gqUEdN8QCnKB LNi0C0/lJtkEhh+GqgfRPo2RJJiqtnoRtYfmo4q3Vl05XJs/Z2CbQylJp9zv2azR qtmS6dxA0LMCmcbt63ZqWmaIucpAVWYuPLWvitT7moKurtmKYbXl1F99aNnw/wfe W+9B80I= -----END CERTIFICATE-----Generated at Mon Oct 20 05:46:50 2025 by rpki-client