$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/94FE3AB6D55011EF8A1E1855C4F9AE02.roa File: 94FE3AB6D55011EF8A1E1855C4F9AE02.roa (raw, json) Hash identifier: jgn+IjzdhxyJSAgxV7AsSre4TgUxRmV/YSZYucj9K7o= Subject key identifier: 21:47:11:9D:28:B2:32:E1:38:CD:D9:22:03:AB:0F:65:E7:B7:6E:71 Certificate issuer: /CN=A91C7A69/serialNumber=CB9D41A6DA96F76A4FF0586B5E8A889FC0235457 Certificate serial: 037C Authority key identifier: CB:9D:41:A6:DA:96:F7:6A:4F:F0:58:6B:5E:8A:88:9F:C0:23:54:57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y51BptqW92pP8FhrXoqIn8AjVFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/94FE3AB6D55011EF8A1E1855C4F9AE02.roa Signing time: Sat 11 Oct 2025 03:28:01 +0000 ROA not before: Sat 11 Oct 2025 03:28:01 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 153494 IP address blocks: 43.249.76.0/22 maxlen: 24 103.40.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.crl rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y51BptqW92pP8FhrXoqIn8AjVFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:53:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 892 (0x37c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7A69, serialNumber=CB9D41A6DA96F76A4FF0586B5E8A889FC0235457 Validity Not Before: Oct 11 03:28:01 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68e9cec0-bf77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:f5:5c:01:64:99:d1:53:73:8a:d1:55:01:94: 90:8e:9d:e5:ff:de:7f:dd:14:6d:fa:40:d8:e8:a1: 40:f2:f0:67:26:d8:dd:16:2d:14:ae:b0:cc:22:fd: 54:21:0b:5b:73:8f:1d:b4:c6:18:df:ee:0d:cf:95: ee:d5:22:ee:d5:b4:44:a1:46:b5:c8:b7:bd:f9:85: 07:02:61:73:60:94:84:ea:c3:cc:31:85:6b:e2:6b: a8:75:b4:a5:12:2a:32:96:53:d7:85:52:9e:85:f9: 0e:ce:01:55:6a:70:56:b0:cf:ab:0d:6a:61:29:bb: 88:1e:9c:be:c4:b6:d0:ab:a4:ec:9f:ed:2c:a2:23: aa:87:8a:11:cc:89:ac:a7:b5:f9:8d:36:85:13:bb: 75:37:2c:e1:67:31:00:d5:cd:f5:ab:86:82:0b:9d: e8:97:b1:ed:0f:64:0a:bd:c2:ff:2b:af:2b:ed:44: 9d:3d:75:f6:30:68:e8:15:95:df:88:61:a6:5f:96: 53:7e:76:a4:e3:0e:07:41:6a:6a:cd:32:a3:97:a3: 35:21:77:70:54:1e:11:86:a8:91:72:3e:89:65:4c: 5f:c0:9f:39:ae:af:b6:9f:ae:ab:6e:60:3f:2d:36: b2:2e:75:57:56:82:64:89:14:fd:bd:33:08:bd:c2: 51:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:47:11:9D:28:B2:32:E1:38:CD:D9:22:03:AB:0F:65:E7:B7:6E:71 X509v3 Authority Key Identifier: keyid:CB:9D:41:A6:DA:96:F7:6A:4F:F0:58:6B:5E:8A:88:9F:C0:23:54:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y51BptqW92pP8FhrXoqIn8AjVFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/94FE3AB6D55011EF8A1E1855C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.249.76.0/22 103.40.152.0/22 Signature Algorithm: sha256WithRSAEncryption 5b:7b:0c:0f:e6:4b:bf:24:34:a8:18:f2:2c:58:ad:a9:89:9a: 48:eb:d2:03:dc:6e:4d:bc:b8:7d:8b:f8:7b:c6:62:c7:b0:81: ed:6b:06:9a:3d:69:f5:24:51:2c:5e:f8:8b:fd:8d:7c:70:ca: 7e:fd:94:0e:f5:3e:ec:af:b3:54:a6:fb:63:8e:08:73:69:9b: 54:29:6f:4b:56:1a:30:32:6e:5e:60:8a:d4:df:91:a4:c0:70: be:8e:4d:3f:54:61:60:54:cb:74:31:e6:28:aa:bd:1b:6c:1e: 31:c5:15:93:0f:c5:66:9f:60:ae:37:1e:c8:48:15:24:a8:27: 1c:29:f6:31:21:57:75:1a:fd:cf:52:d3:a6:f0:66:85:40:ec: f6:f5:f3:7c:13:7e:b0:12:d9:90:20:b0:31:ba:89:b4:11:d7: b6:09:26:3a:32:3c:b1:fe:1b:52:7d:d5:e2:0a:44:d5:45:d2: 64:31:db:23:0e:34:dd:38:b8:99:41:3d:0f:0f:bf:84:88:36: 6b:70:24:53:1e:5f:bc:84:c6:79:56:63:78:82:1d:b1:78:d5: c5:41:2d:ac:88:4d:18:b4:ae:48:52:be:cc:05:01:dc:c6:0b: 5e:f6:c5:a1:8c:5a:38:12:2a:5f:95:e5:76:3e:b5:25:af:52: 65:66:41:5d -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICA3wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdBNjkxMTAvBgNVBAUTKENCOUQ0MUE2REE5NkY3NkE0RkYwNTg2QjVFOEE4ODlG QzAyMzU0NTcwHhcNMjUxMDExMDMyODAxWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGU5Y2VjMC1iZjc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5/VcAWSZ0VNzitFVAZSQjp3l/95/3RRt+kDY6KFA8vBnJtjdFi0UrrDMIv1U IQtbc48dtMYY3+4Nz5Xu1SLu1bREoUa1yLe9+YUHAmFzYJSE6sPMMYVr4muodbSl EioyllPXhVKehfkOzgFVanBWsM+rDWphKbuIHpy+xLbQq6Tsn+0soiOqh4oRzIms p7X5jTaFE7t1NyzhZzEA1c31q4aCC53ol7HtD2QKvcL/K68r7USdPXX2MGjoFZXf iGGmX5ZTfnak4w4HQWpqzTKjl6M1IXdwVB4RhqiRcj6JZUxfwJ85rq+2n66rbmA/ LTayLnVXVoJkiRT9vTMIvcJRTQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFCFHEZ0o sjLhOM3ZIgOrD2Xnt25xMB8GA1UdIwQYMBaAFMudQabalvdqT/BYa16KiJ/AI1RX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0E2OS84QUYzRDVCMkM2 MDMxMUVDOEIwRDVEM0RDNEY5QUUwMi95NTFCcHRxVzkycFA4RmhyWG9xSW44QWpW RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3k1MUJwdHFXOTJwUDhGaHJYb3FJbjhBalZGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzdBNjkvOEFGM0Q1QjJDNjAzMTFFQzhCMEQ1RDNEQzRGOUFFMDIvOTRGRTNBQjZE NTUwMTFFRjhBMUUxODU1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAIr+UwDBAJnKJgwDQYJKoZIhvcNAQELBQADggEBAFt7DA/m S78kNKgY8ixYramJmkjr0gPcbk28uH2L+HvGYsewge1rBpo9afUkUSxe+Iv9jXxw yn79lA71Puyvs1Sm+2OOCHNpm1Qpb0tWGjAybl5gitTfkaTAcL6OTT9UYWBUy3Qx 5iiqvRtsHjHFFZMPxWafYK43HshIFSSoJxwp9jEhV3Ua/c9S06bwZoVA7Pb183wT frAS2ZAgsDG6ibQR17YJJjoyPLH+G1J91eIKRNVF0mQx2yMONN04uJlBPQ8Pv4SI NmtwJFMeX7yExnlWY3iCHbF41cVBLayITRi0rkhSvswFAdzGC172xaGMWjgSKl+V 5XY+tSWvUmVmQV0= -----END CERTIFICATE-----Generated at Mon Oct 20 18:25:45 2025 by rpki-client