$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/9920D2E6F7C611EA8B23C30CC4F9AE02.roa File: 9920D2E6F7C611EA8B23C30CC4F9AE02.roa (raw, json) Hash identifier: aPoLWPstwsO+freisIa5/qBSIqgnIR7f63xsHuA2Fdc= Subject key identifier: 4B:8B:54:61:3D:84:61:44:9C:D0:62:0A:73:0F:4F:18:64:12:E9:55 Certificate issuer: /CN=A91D5590/serialNumber=7196138FD9FC8C78FE843A253CB0480ADCC57F0D Certificate serial: 0805 Authority key identifier: 71:96:13:8F:D9:FC:8C:78:FE:84:3A:25:3C:B0:48:0A:DC:C5:7F:0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cZYTj9n8jHj-hDolPLBICtzFfw0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/9920D2E6F7C611EA8B23C30CC4F9AE02.roa Signing time: Tue 16 Sep 2025 21:32:18 +0000 ROA not before: Tue 16 Sep 2025 21:32:18 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 9884 IP address blocks: 202.189.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/cZYTj9n8jHj-hDolPLBICtzFfw0.crl rsync://rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/cZYTj9n8jHj-hDolPLBICtzFfw0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cZYTj9n8jHj-hDolPLBICtzFfw0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:09:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2053 (0x805) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5590, serialNumber=7196138FD9FC8C78FE843A253CB0480ADCC57F0D Validity Not Before: Sep 16 21:32:18 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68c9d762-c2ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:fc:1f:04:78:ef:fe:14:32:9d:32:3f:20:35: c7:56:b2:29:19:56:9e:ac:95:23:be:45:31:a9:91: 3a:86:49:47:72:e6:64:ac:04:66:28:9f:e4:60:93: 66:33:23:ca:7c:c3:ed:59:35:19:83:a5:46:f5:f9: de:94:b0:b0:3e:e7:9f:6c:bf:81:21:9b:f8:e1:38: e4:04:07:b7:e6:25:a7:21:89:c7:14:6d:a0:61:36: 07:be:38:98:32:20:9b:40:79:e0:f5:d6:f0:f5:ea: 1b:ee:fc:e4:cc:5a:17:3b:eb:49:59:c9:08:1c:cc: 57:47:a8:10:85:66:e7:91:06:f6:ae:33:80:9b:c5: 37:6e:87:c1:aa:d3:77:8a:47:9f:8a:bb:d2:9e:ef: b5:99:fa:8a:11:e8:35:3b:74:7c:01:ae:b7:0a:e0: 2f:67:09:0f:cb:0e:4d:6d:e0:5c:85:b6:14:35:fb: 68:51:7e:ea:df:87:41:2f:68:f0:77:11:10:b4:61: af:2d:a8:6b:8b:51:da:06:25:0d:d2:02:64:d7:ca: 2c:22:c8:ba:90:43:a8:11:2f:c5:70:c4:1b:53:24: 3b:9f:79:73:13:8e:3f:96:92:b6:a9:50:36:48:94: 57:17:22:02:ed:5d:9c:ba:dc:8d:ca:14:e2:21:a2: 58:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:8B:54:61:3D:84:61:44:9C:D0:62:0A:73:0F:4F:18:64:12:E9:55 X509v3 Authority Key Identifier: keyid:71:96:13:8F:D9:FC:8C:78:FE:84:3A:25:3C:B0:48:0A:DC:C5:7F:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/cZYTj9n8jHj-hDolPLBICtzFfw0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cZYTj9n8jHj-hDolPLBICtzFfw0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/9920D2E6F7C611EA8B23C30CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.189.128.0/24 Signature Algorithm: sha256WithRSAEncryption a2:10:1e:c9:6c:fe:1e:81:c3:2e:bf:d7:5e:34:e8:7a:b2:24: f2:c2:56:e6:4e:6e:26:5f:67:fa:97:b4:da:36:86:77:9d:60: 2a:57:59:91:15:2e:69:97:53:ad:09:33:75:d7:61:f4:1d:56: d8:6c:26:db:e5:d0:fb:e8:a7:ac:73:fb:6b:4f:3b:ff:08:b9: 6b:2a:3e:c3:9e:1e:99:6a:75:df:03:8a:43:a4:7c:23:e7:ea: 19:4d:c4:64:95:89:e4:1b:5c:58:1e:41:41:42:3c:c1:f1:f1: fa:2a:49:ed:d7:48:d5:6a:97:da:ce:15:e9:7e:48:50:4a:49: 10:52:8f:59:64:1d:a9:ed:77:b7:bc:d4:67:c0:e1:eb:ee:8a: da:ff:12:67:db:34:2b:90:b3:fc:61:72:c8:eb:a7:2b:a8:92: fe:4d:6d:a7:a1:97:e7:93:fe:72:32:9d:e0:98:59:46:7c:69: d4:d6:9e:41:0b:a8:37:7a:94:87:bb:a8:ee:59:15:17:ce:92: ec:c1:46:8c:4b:39:23:0f:e5:0e:5b:af:86:fb:b8:c7:aa:a1: 11:e3:77:1d:35:bf:38:94:e1:c8:4c:31:1c:b3:1c:b3:5c:00: 5c:fb:8c:38:37:12:56:70:fa:66:10:3f:bd:4a:e8:ac:6a:94: f1:ae:6e:60 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCAUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDU1OTAxMTAvBgNVBAUTKDcxOTYxMzhGRDlGQzhDNzhGRTg0M0EyNTNDQjA0ODBB RENDNTdGMEQwHhcNMjUwOTE2MjEzMjE4WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGM5ZDc2Mi1jMmNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0vwfBHjv/hQynTI/IDXHVrIpGVaerJUjvkUxqZE6hklHcuZkrARmKJ/kYJNm MyPKfMPtWTUZg6VG9fnelLCwPuefbL+BIZv44TjkBAe35iWnIYnHFG2gYTYHvjiY MiCbQHng9dbw9eob7vzkzFoXO+tJWckIHMxXR6gQhWbnkQb2rjOAm8U3bofBqtN3 ikefirvSnu+1mfqKEeg1O3R8Aa63CuAvZwkPyw5NbeBchbYUNftoUX7q34dBL2jw dxEQtGGvLahri1HaBiUN0gJk18osIsi6kEOoES/FcMQbUyQ7n3lzE44/lpK2qVA2 SJRXFyIC7V2cutyNyhTiIaJYqwIDAQABo4IClTCCApEwHQYDVR0OBBYEFEuLVGE9 hGFEnNBiCnMPTxhkEulVMB8GA1UdIwQYMBaAFHGWE4/Z/Ix4/oQ6JTywSArcxX8N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTU5MC9BODk1MjQ5RUY3 QzUxMUVBODcxQzAwMENDNEY5QUUwMi9jWllUajluOGpIai1oRG9sUExCSUN0ekZm dzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NaWVRqOW44akhqLWhEb2xQTEJJQ3R6RmZ3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDU1OTAvQTg5NTI0OUVGN0M1MTFFQTg3MUMwMDBDQzRGOUFFMDIvOTkyMEQyRTZG N0M2MTFFQThCMjNDMzBDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADKvYAwDQYJKoZIhvcNAQELBQADggEBAKIQHsls/h6Bwy6/ 11406HqyJPLCVuZObiZfZ/qXtNo2hnedYCpXWZEVLmmXU60JM3XXYfQdVthsJtvl 0Pvop6xz+2tPO/8IuWsqPsOeHplqdd8DikOkfCPn6hlNxGSVieQbXFgeQUFCPMHx 8foqSe3XSNVql9rOFel+SFBKSRBSj1lkHantd7e81GfA4evuitr/EmfbNCuQs/xh csjrpyuokv5Nbaehl+eT/nIyneCYWUZ8adTWnkELqDd6lIe7qO5ZFRfOkuzBRoxL OSMP5Q5br4b7uMeqoRHjdx01vziU4chMMRyzHLNcAFz7jDg3ElZw+mYQP71K6Kxq lPGubmA= -----END CERTIFICATE-----Generated at Mon Oct 20 12:43:18 2025 by rpki-client