$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9D76/6287A1141D6911E288ABA9A608B02CD2/0997A5828A1511F09F6EBD2BC4F9AE02.roa File: 0997A5828A1511F09F6EBD2BC4F9AE02.roa (raw, json) Hash identifier: OnxDy/55jjMCiBnkBT8Gsibkcizt1adU0FH5L5R2Oyw= Subject key identifier: 60:F3:C7:22:F7:38:75:35:EC:31:5C:97:33:02:36:B8:16:19:F5:FD Certificate issuer: /CN=A91C9D76/serialNumber=1E5A6321B11AA0846FA89BF139BCECDBAD38BE37 Certificate serial: 357C Authority key identifier: 1E:5A:63:21:B1:1A:A0:84:6F:A8:9B:F1:39:BC:EC:DB:AD:38:BE:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlpjIbEaoIRvqJvxObzs2604vjc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9D76/6287A1141D6911E288ABA9A608B02CD2/0997A5828A1511F09F6EBD2BC4F9AE02.roa Signing time: Mon 20 Oct 2025 06:39:18 +0000 ROA not before: Mon 20 Oct 2025 06:39:18 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 9732 IP address blocks: 45.119.92.0/22 maxlen: 24 45.127.0.0/22 maxlen: 24 103.85.200.0/22 maxlen: 24 103.214.76.0/22 maxlen: 24 202.128.224.0/19 maxlen: 24 202.181.252.0/22 maxlen: 24 220.232.128.0/22 maxlen: 24 220.232.176.0/22 maxlen: 24 2406::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9D76/6287A1141D6911E288ABA9A608B02CD2/HlpjIbEaoIRvqJvxObzs2604vjc.crl rsync://rpki.apnic.net/member_repository/A91C9D76/6287A1141D6911E288ABA9A608B02CD2/HlpjIbEaoIRvqJvxObzs2604vjc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlpjIbEaoIRvqJvxObzs2604vjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 14:16:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13692 (0x357c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9D76, serialNumber=1E5A6321B11AA0846FA89BF139BCECDBAD38BE37 Validity Not Before: Oct 20 06:39:18 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68f5d915-7718 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b9:ec:ce:14:9e:dd:61:11:61:47:a9:ab:1d: 21:29:06:bc:16:d0:af:4b:f8:7e:c0:ca:aa:24:84: 7a:27:95:73:09:82:53:eb:a0:db:3d:a3:8b:7d:bf: cd:9d:b7:6c:df:05:2b:23:b8:e6:8a:5d:e4:f6:75: 37:b7:25:fd:70:3b:ac:9c:b6:95:2a:29:49:ff:b0: 2b:1f:35:b7:c7:88:3d:f4:e5:59:45:5d:ae:2e:2c: b7:3c:67:69:bf:70:22:a3:cb:40:33:59:28:39:c1: 00:6a:94:9d:03:b3:0b:71:85:23:28:8c:f3:86:ef: 76:09:ae:b6:7d:ba:98:3f:58:06:50:26:31:b2:05: 15:ad:30:74:32:a6:ab:bf:51:95:c2:76:69:8d:4d: 68:04:55:e9:93:89:67:ae:d2:40:6f:b0:55:e0:a2: 57:4c:bf:62:f6:49:e4:52:b8:2b:6d:fa:2d:31:e4: 8b:51:eb:5b:bc:f4:49:7b:2a:80:90:a3:d1:51:e3: 45:01:6a:00:7f:5c:18:bd:f3:c1:30:0e:4d:ca:d5: f7:c4:03:ff:a7:a5:3c:9e:26:82:53:f6:36:78:da: 9a:47:ec:2b:d9:85:87:24:23:3f:4a:5f:5b:18:ba: 47:42:cd:36:f6:8a:2c:a9:96:d7:9f:8a:9f:aa:9f: 0b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:F3:C7:22:F7:38:75:35:EC:31:5C:97:33:02:36:B8:16:19:F5:FD X509v3 Authority Key Identifier: keyid:1E:5A:63:21:B1:1A:A0:84:6F:A8:9B:F1:39:BC:EC:DB:AD:38:BE:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9D76/6287A1141D6911E288ABA9A608B02CD2/HlpjIbEaoIRvqJvxObzs2604vjc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlpjIbEaoIRvqJvxObzs2604vjc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9D76/6287A1141D6911E288ABA9A608B02CD2/0997A5828A1511F09F6EBD2BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.119.92.0/22 45.127.0.0/22 103.85.200.0/22 103.214.76.0/22 202.128.224.0/19 202.181.252.0/22 220.232.128.0/22 220.232.176.0/22 IPv6: 2406::/32 Signature Algorithm: sha256WithRSAEncryption 04:c1:4f:e9:60:75:e2:e8:4b:28:08:6e:90:68:9f:cf:24:b1: 56:00:9e:76:b7:ca:66:17:10:76:36:eb:23:0f:7d:7a:65:32: b0:61:a3:99:61:6c:a3:bb:4d:ff:2f:d7:fc:a3:50:40:67:8a: 9c:c4:6d:1e:ac:1a:08:a4:be:73:91:dc:c4:05:f7:74:23:40: 9f:3a:9e:ff:93:4e:68:ed:12:e8:13:53:e0:83:cc:df:38:3e: 6b:8d:36:0c:17:eb:87:3e:64:a9:ba:22:c5:f4:b0:b5:7f:f4: 07:f1:8a:ef:07:72:6c:ea:34:cb:9f:5b:b0:d4:fb:e9:e5:04: 74:46:49:19:29:a3:ee:bc:85:71:f3:58:84:fb:d7:b5:2c:1b: 5b:b7:02:55:37:a6:da:26:91:e1:76:97:59:41:a6:eb:b2:e4: f2:ed:21:73:7c:71:f8:8c:6a:03:42:66:1e:44:1f:63:88:b4: af:59:24:da:b5:16:8c:c5:04:c1:49:f8:f7:26:9d:25:4e:fc: b1:da:a7:cf:dc:33:73:50:0a:16:a7:dc:7c:9b:d1:2c:62:d4: 55:7a:5f:8e:3d:85:9b:09:95:5b:95:40:d7:ae:ac:24:74:69: e5:5e:e1:50:23:68:75:79:52:ae:bd:02:6d:10:10:61:83:80: bc:21:aa:60 -----BEGIN CERTIFICATE----- MIIFqjCCBJKgAwIBAgICNXwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzlENzYxMTAvBgNVBAUTKDFFNUE2MzIxQjExQUEwODQ2RkE4OUJGMTM5QkNFQ0RC QUQzOEJFMzcwHhcNMjUxMDIwMDYzOTE4WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGY1ZDkxNS03NzE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1rnszhSe3WERYUepqx0hKQa8FtCvS/h+wMqqJIR6J5VzCYJT66DbPaOLfb/N nbds3wUrI7jmil3k9nU3tyX9cDusnLaVKilJ/7ArHzW3x4g99OVZRV2uLiy3PGdp v3Aio8tAM1koOcEAapSdA7MLcYUjKIzzhu92Ca62fbqYP1gGUCYxsgUVrTB0Mqar v1GVwnZpjU1oBFXpk4lnrtJAb7BV4KJXTL9i9knkUrgrbfotMeSLUetbvPRJeyqA kKPRUeNFAWoAf1wYvfPBMA5NytX3xAP/p6U8niaCU/Y2eNqaR+wr2YWHJCM/Sl9b GLpHQs029oosqZbXn4qfqp8L6QIDAQABo4ICzjCCAsowHQYDVR0OBBYEFGDzxyL3 OHU17DFclzMCNrgWGfX9MB8GA1UdIwQYMBaAFB5aYyGxGqCEb6ib8Tm87NutOL43 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUQ3Ni82Mjg3QTExNDFE NjkxMUUyODhBQkE5QTYwOEIwMkNEMi9IbHBqSWJFYW9JUnZxSnZ4T2J6czI2MDR2 amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hscGpJYkVhb0lSdnFKdnhPYnpzMjYwNHZqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzlENzYvNjI4N0ExMTQxRDY5MTFFMjg4QUJBOUE2MDhCMDJDRDIvMDk5N0E1ODI4 QTE1MTFGMDlGNkVCRDJCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwWAYIKwYBBQUHAQcBAf8E STBHMDYEAgABMDADBAItd1wDBAItfwADBAJnVcgDBAJn1kwDBAXKgOADBALKtfwD BALc6IADBALc6LAwDQQCAAIwBwMFACQGAAAwDQYJKoZIhvcNAQELBQADggEBAATB T+lgdeLoSygIbpBon88ksVYAnna3ymYXEHY26yMPfXplMrBho5lhbKO7Tf8v1/yj UEBnipzEbR6sGgikvnOR3MQF93QjQJ86nv+TTmjtEugTU+CDzN84PmuNNgwX64c+ ZKm6IsX0sLV/9Afxiu8HcmzqNMufW7DU++nlBHRGSRkpo+68hXHzWIT717UsG1u3 AlU3ptomkeF2l1lBpuuy5PLtIXN8cfiMagNCZh5EH2OItK9ZJNq1FozFBMFJ+Pcm nSVO/LHap8/cM3NQChan3Hyb0Sxi1FV6X449hZsJlVuVQNeurCR0aeVe4VAjaHV5 Uq69Am0QEGGDgLwhqmA= -----END CERTIFICATE-----Generated at Tue Oct 21 09:51:28 2025 by rpki-client