$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/48471CAE611811EEB2B1C077C4F9AE02.roa File: 48471CAE611811EEB2B1C077C4F9AE02.roa (raw, json) Hash identifier: XAUpnIWVoo2gP76XF78PGBVOZx+0l56I4zT3vqwFcwU= Subject key identifier: 4C:FE:E6:B8:E5:40:21:14:0F:D3:5E:FA:19:E8:F1:65:F0:C3:48:8E Certificate issuer: /CN=A91CDCB6/serialNumber=0781675CC64FAB2B845DA7F51155498042ECE467 Certificate serial: 1E6E Authority key identifier: 07:81:67:5C:C6:4F:AB:2B:84:5D:A7:F5:11:55:49:80:42:EC:E4:67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4FnXMZPqyuEXaf1EVVJgELs5Gc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/48471CAE611811EEB2B1C077C4F9AE02.roa Signing time: Thu 04 Sep 2025 16:24:43 +0000 ROA not before: Thu 04 Sep 2025 16:24:43 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 151624 IP address blocks: 45.251.128.0/22 maxlen: 22 45.251.128.0/23 maxlen: 23 45.251.128.0/24 maxlen: 24 45.251.129.0/24 maxlen: 24 45.251.130.0/23 maxlen: 23 45.251.130.0/24 maxlen: 24 45.251.131.0/24 maxlen: 24 2403:2c40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.crl rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4FnXMZPqyuEXaf1EVVJgELs5Gc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:22:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7790 (0x1e6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDCB6, serialNumber=0781675CC64FAB2B845DA7F51155498042ECE467 Validity Not Before: Sep 4 16:24:43 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68b9bd4b-f701 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:e2:27:fc:23:73:30:bd:d7:56:26:22:aa:84: 98:5a:db:d3:ff:fe:83:b5:9e:32:ee:58:bf:15:72: ff:3d:b4:65:2e:9e:00:33:92:ea:ac:4d:ac:58:e6: 43:b7:96:91:af:80:c9:68:ec:df:b7:dd:bd:15:2a: 9b:3a:b6:cf:17:09:1a:d2:96:54:52:0e:1e:37:ff: a9:21:54:d4:55:29:94:09:48:62:fe:26:ee:43:10: 95:88:1b:51:d5:2c:ef:c9:8e:80:e0:39:6b:8d:f4: 66:55:4b:b6:9c:8f:ec:3e:76:93:42:a1:58:52:c4: 47:8c:69:06:3a:e2:29:8b:b5:18:fa:62:01:a1:8c: 83:db:7f:82:bb:05:65:7b:a1:de:e5:99:48:47:05: e8:bc:32:ec:fe:9e:71:b3:19:9a:75:3d:0f:f6:a5: 98:ec:a3:57:ef:5d:81:a8:57:25:fe:eb:fb:ef:6e: 2a:3d:d8:00:dc:22:1f:00:43:ae:df:ec:eb:33:50: 5e:52:09:c6:90:aa:2b:74:e7:3e:d6:e4:30:f0:36: aa:04:2f:1e:a3:95:e5:81:9c:3e:a3:a4:79:24:f1: 97:91:d8:4e:aa:97:c2:63:bd:90:c0:18:16:39:93: 4c:84:d2:99:cc:de:15:bc:4e:ac:fc:a8:4e:19:c8: 00:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:FE:E6:B8:E5:40:21:14:0F:D3:5E:FA:19:E8:F1:65:F0:C3:48:8E X509v3 Authority Key Identifier: keyid:07:81:67:5C:C6:4F:AB:2B:84:5D:A7:F5:11:55:49:80:42:EC:E4:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4FnXMZPqyuEXaf1EVVJgELs5Gc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/48471CAE611811EEB2B1C077C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.251.128.0/22 IPv6: 2403:2c40::/32 Signature Algorithm: sha256WithRSAEncryption 44:7d:d3:4d:5d:0a:66:00:9f:d7:28:6c:ea:ae:19:79:61:71: aa:d9:34:8f:20:14:cc:21:03:2d:9f:0d:3a:f8:06:47:33:79: f0:b2:6a:ff:ef:b0:d7:cb:91:ba:bc:1d:00:b0:f0:a4:c3:24: 70:b0:a3:d0:b8:f1:36:bf:31:0a:71:f7:53:6d:28:68:46:d9: 9e:c1:87:04:a3:68:60:c8:11:ec:fe:a0:86:3b:3f:5d:22:18: 63:81:5a:ef:56:4d:fc:a7:d2:03:50:c2:b1:d4:03:63:d4:d4: 6d:11:f6:59:40:71:c4:e4:66:55:d1:ce:91:54:0b:be:8d:db: 9d:66:4c:50:37:7a:c0:00:4b:ee:74:50:de:6e:89:91:e0:01: 8d:ef:51:6a:aa:d2:53:30:dc:a6:24:3e:45:5e:83:ef:43:bc: c6:4b:f9:84:16:ce:df:85:86:56:bd:bf:87:cc:5c:1b:b1:0d: 8c:b1:37:2e:e7:c5:f2:c8:46:6a:e5:bf:93:8c:18:97:ac:f8: 3a:17:5d:99:44:d4:24:da:ec:35:74:ef:24:ce:1a:75:c6:9c: 0f:fd:82:8f:2a:c8:aa:bf:d9:1d:02:ee:ef:5e:9e:12:fe:c6: 14:43:28:7f:6c:6e:f1:0c:31:29:a8:25:f3:13:3c:fd:4b:f0: ab:41:99:fc -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICHm4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RDQjYxMTAvBgNVBAUTKDA3ODE2NzVDQzY0RkFCMkI4NDVEQTdGNTExNTU0OTgw NDJFQ0U0NjcwHhcNMjUwOTA0MTYyNDQzWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGI5YmQ0Yi1mNzAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7eIn/CNzML3XViYiqoSYWtvT//6DtZ4y7li/FXL/PbRlLp4AM5LqrE2sWOZD t5aRr4DJaOzft929FSqbOrbPFwka0pZUUg4eN/+pIVTUVSmUCUhi/ibuQxCViBtR 1SzvyY6A4DlrjfRmVUu2nI/sPnaTQqFYUsRHjGkGOuIpi7UY+mIBoYyD23+CuwVl e6He5ZlIRwXovDLs/p5xsxmadT0P9qWY7KNX712BqFcl/uv7724qPdgA3CIfAEOu 3+zrM1BeUgnGkKordOc+1uQw8DaqBC8eo5XlgZw+o6R5JPGXkdhOqpfCY72QwBgW OZNMhNKZzN4VvE6s/KhOGcgA0QIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFEz+5rjl QCEUD9Ne+hno8WXww0iOMB8GA1UdIwQYMBaAFAeBZ1zGT6srhF2n9RFVSYBC7ORn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRENCNi82N0M2QUE0QThB RjExMUU2OTgwNzgzNTVDNEY5QUUwMi9CNEZuWE1aUHF5dUVYYWYxRVZWSmdFTHM1 R2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I0Rm5YTVpQcXl1RVhhZjFFVlZKZ0VMczVHYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0RDQjYvNjdDNkFBNEE4QUYxMTFFNjk4MDc4MzU1QzRGOUFFMDIvNDg0NzFDQUU2 MTE4MTFFRUIyQjFDMDc3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAIt+4AwDQQCAAIwBwMFACQDLEAwDQYJKoZIhvcNAQELBQAD ggEBAER9001dCmYAn9cobOquGXlhcarZNI8gFMwhAy2fDTr4BkczefCyav/vsNfL kbq8HQCw8KTDJHCwo9C48Ta/MQpx91NtKGhG2Z7BhwSjaGDIEez+oIY7P10iGGOB Wu9WTfyn0gNQwrHUA2PU1G0R9llAccTkZlXRzpFUC76N251mTFA3esAAS+50UN5u iZHgAY3vUWqq0lMw3KYkPkVeg+9DvMZL+YQWzt+Fhla9v4fMXBuxDYyxNy7nxfLI Rmrlv5OMGJes+DoXXZlE1CTa7DV07yTOGnXGnA/9go8qyKq/2R0C7u9enhL+xhRD KH9sbvEMMSmoJfMTPP1L8KtBmfw= -----END CERTIFICATE-----Generated at Mon Oct 20 08:58:36 2025 by rpki-client