$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/317095E0A28911ECBC355360C4F9AE02.roa File: 317095E0A28911ECBC355360C4F9AE02.roa (raw, json) Hash identifier: nnSzGYlerQsM9iKa/4jkZPWucx7hq6XlvmmOclZbbeI= Subject key identifier: D3:A8:7D:BC:AF:F9:F9:35:2D:9B:93:2F:ED:40:8F:A8:4F:94:C2:46 Certificate issuer: /CN=A91DC31B/serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8 Certificate serial: 078F Authority key identifier: 8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/317095E0A28911ECBC355360C4F9AE02.roa Signing time: Fri 26 Sep 2025 06:53:47 +0000 ROA not before: Fri 26 Sep 2025 06:53:47 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 6453 IP address blocks: 166.81.6.0/24 maxlen: 24 166.81.51.0/24 maxlen: 24 166.81.52.0/24 maxlen: 24 166.81.54.0/24 maxlen: 24 166.81.55.0/24 maxlen: 24 166.81.56.0/24 maxlen: 24 166.81.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:49:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1935 (0x78f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC31B, serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8 Validity Not Before: Sep 26 06:53:47 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=68d6387b-b4f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:71:2a:d6:3b:bc:d2:e3:06:4c:2f:9c:7d:6b: 99:b1:bf:cc:63:94:69:58:38:0d:36:a5:30:52:53: 4f:00:25:1d:82:7f:bb:0c:0e:93:0a:53:a4:a6:27: aa:8c:cf:41:e2:3d:22:8f:9f:65:02:ac:6e:40:e7: ad:65:d5:09:b6:98:b9:e0:b2:89:5a:38:af:a8:24: 57:7d:b8:1d:84:71:4e:15:5c:dd:76:e5:04:ee:ab: b7:9a:3b:a7:ed:6a:19:21:27:e0:e7:28:d4:7b:cd: 7b:42:45:92:fb:d9:7d:e9:f1:23:7a:f0:34:6e:81: d9:b9:4b:e1:35:26:d3:62:a3:14:2a:7b:d4:e1:40: 78:b4:2e:86:68:96:a1:0d:53:16:13:11:d2:1c:81: 41:a1:b8:56:be:bc:82:b4:3a:52:65:a3:9f:04:7c: 42:a5:64:5e:b8:e1:83:29:7e:da:1a:eb:0a:e1:cb: ba:31:26:d7:e1:c2:92:07:b1:9e:45:01:d1:23:7b: cb:0d:9a:73:72:e5:82:5a:a2:38:b2:a8:20:2b:8a: 74:67:42:c8:d4:68:4b:1b:dc:2b:7b:72:86:f9:9d: 31:17:59:a6:f4:1f:b8:3e:f2:4e:a9:a4:81:05:4d: 5b:00:77:e1:7e:ca:2a:96:d3:d9:33:6c:2e:8b:8c: 33:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:A8:7D:BC:AF:F9:F9:35:2D:9B:93:2F:ED:40:8F:A8:4F:94:C2:46 X509v3 Authority Key Identifier: keyid:8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/317095E0A28911ECBC355360C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 166.81.6.0/24 166.81.51.0-166.81.52.255 166.81.54.0-166.81.57.255 Signature Algorithm: sha256WithRSAEncryption 46:58:58:50:89:7c:ab:65:59:7c:fd:4b:ca:b9:41:ef:a8:f9: 96:ca:8b:38:e2:ee:5f:56:7c:0e:40:c0:98:85:40:be:ef:a4: 21:d0:29:1d:c0:4e:eb:a4:ef:2b:5b:52:83:5f:ca:b6:bf:bd: e9:0b:cb:1f:07:11:39:66:c5:43:a4:ae:b3:fb:ee:c4:d9:e8: 6c:62:49:dd:14:ac:93:16:78:66:09:f6:e0:ad:ac:6a:d0:19: 42:43:dc:1e:1d:53:d7:95:96:8d:06:53:09:e5:5c:88:2b:8f: 4e:cc:ee:e9:70:ba:4c:8e:b4:59:88:4c:b4:b1:45:15:cc:fb: 6e:66:c9:4c:77:dc:a6:dc:d2:eb:2f:e6:a9:68:7f:7f:be:fd: 62:69:7b:45:74:ce:bd:14:b2:88:6b:bb:0a:ee:ad:55:06:80: 76:99:69:a1:64:44:60:dc:5a:7b:63:61:ba:81:22:60:94:70: 49:d9:be:d3:d8:c4:92:93:30:fc:a4:c3:86:8e:73:53:67:9f: 05:5c:89:30:69:ea:f0:be:ba:db:66:e5:a8:f8:62:de:b8:c5: 2e:35:48:e3:c5:2e:fc:89:a5:12:9f:d8:93:94:1c:51:1d:06: a2:8a:ee:5d:6c:1f:90:f1:a1:dc:7b:42:21:45:43:c7:65:ca: 08:03:b7:f0 -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgICB48wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMzMUIxMTAvBgNVBAUTKDhCOEFENUNBMUMzRThCOENGNDY4QjVGNDk2QTkxQUJC MEU0OENGQTgwHhcNMjUwOTI2MDY1MzQ3WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGQ2Mzg3Yi1iNGYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm3Eq1ju80uMGTC+cfWuZsb/MY5RpWDgNNqUwUlNPACUdgn+7DA6TClOkpieq jM9B4j0ij59lAqxuQOetZdUJtpi54LKJWjivqCRXfbgdhHFOFVzdduUE7qu3mjun 7WoZISfg5yjUe817QkWS+9l96fEjevA0boHZuUvhNSbTYqMUKnvU4UB4tC6GaJah DVMWExHSHIFBobhWvryCtDpSZaOfBHxCpWReuOGDKX7aGusK4cu6MSbX4cKSB7Ge RQHRI3vLDZpzcuWCWqI4sqggK4p0Z0LI1GhLG9wre3KG+Z0xF1mm9B+4PvJOqaSB BU1bAHfhfsoqltPZM2wui4wzQQIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFNOofbyv +fk1LZuTL+1Aj6hPlMJGMB8GA1UdIwQYMBaAFIuK1cocPouM9Gi19JapGrsOSM+o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzMxQi9EMEVDQ0Q0ODg5 M0QxMUVCOTE2REYwMjJDNEY5QUUwMi9pNHJWeWh3LWk0ejBhTFgwbHFrYXV3NUl6 NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2k0clZ5aHctaTR6MGFMWDBscWthdXc1SXo2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REMzMUIvRDBFQ0NENDg4OTNEMTFFQjkxNkRGMDIyQzRGOUFFMDIvMzE3MDk1RTBB Mjg5MTFFQ0JDMzU1MzYwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOwYIKwYBBQUHAQcBAf8E LDAqMCgEAgABMCIDBACmUQYwDAMEAKZRMwMEAKZRNDAMAwQBplE2AwQBplE4MA0G CSqGSIb3DQEBCwUAA4IBAQBGWFhQiXyrZVl8/UvKuUHvqPmWyos44u5fVnwOQMCY hUC+76Qh0CkdwE7rpO8rW1KDX8q2v73pC8sfBxE5ZsVDpK6z++7E2ehsYkndFKyT FnhmCfbgraxq0BlCQ9weHVPXlZaNBlMJ5VyIK49OzO7pcLpMjrRZiEy0sUUVzPtu ZslMd9ym3NLrL+apaH9/vv1iaXtFdM69FLKIa7sK7q1VBoB2mWmhZERg3Fp7Y2G6 gSJglHBJ2b7T2MSSkzD8pMOGjnNTZ58FXIkwaerwvrrbZuWo+GLeuMUuNUjjxS78 iaUSn9iTlBxRHQaiiu5dbB+Q8aHce0IhRUPHZcoIA7fw -----END CERTIFICATE-----Generated at Mon Oct 20 10:37:32 2025 by rpki-client