$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/CF49BBDAD33811EDAAE97C1BC4F9AE02.roa File: CF49BBDAD33811EDAAE97C1BC4F9AE02.roa (raw, json) Hash identifier: Xh3iMK0Ak0Tx1OewwcV+5j4ibHx4h2hLFwHOLVOVBKI= Subject key identifier: 59:82:29:6B:0D:BA:D8:F9:E7:2C:27:8D:27:70:26:49:88:19:5F:85 Certificate issuer: /CN=A91DCD09/serialNumber=ADB98978FD751F99D9A8EB2AE72D3C0C550453A4 Certificate serial: 0561 Authority key identifier: AD:B9:89:78:FD:75:1F:99:D9:A8:EB:2A:E7:2D:3C:0C:55:04:53:A4 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/CF49BBDAD33811EDAAE97C1BC4F9AE02.roa Signing time: Mon 22 Sep 2025 16:35:23 +0000 ROA not before: Mon 22 Sep 2025 16:35:23 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 8987 IP address blocks: 213.170.156.0/24 maxlen: 24 213.170.157.0/24 maxlen: 24 213.170.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.crl rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:42:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1377 (0x561) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCD09, serialNumber=ADB98978FD751F99D9A8EB2AE72D3C0C550453A4 Validity Not Before: Sep 22 16:35:23 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68d17acb-2175 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:a1:9a:82:44:90:7a:fe:79:a2:f5:fc:9b:e3: 64:81:08:70:f1:be:90:aa:9f:ba:64:3d:c5:47:76: 9e:0a:90:9d:c3:7a:93:25:ab:bb:5c:0d:88:09:c1: 13:b5:ba:8a:90:5b:f0:70:2d:a3:22:38:7a:8e:61: 4b:d7:28:bf:d9:ff:a6:7b:e9:3e:05:63:5e:d4:c9: 15:66:3a:70:cb:40:08:d3:c2:ca:07:0c:c3:29:e4: 43:f1:61:9d:87:73:b0:0f:fe:3b:97:99:66:06:8c: f5:a2:da:b3:1b:e1:03:75:af:94:e0:32:27:f7:5f: 4e:0d:e5:9a:f9:ae:06:2a:8e:57:7b:af:4f:e9:36: f7:e1:05:a2:b3:e7:dc:fc:93:92:a8:56:c3:b3:1d: 7a:03:de:43:94:c7:22:82:d2:46:40:17:c2:10:d7: a1:e8:5e:b2:31:b4:fa:c5:d8:5f:dc:fa:7e:f0:c7: 9f:bc:b9:d5:4a:1e:66:6a:ab:2d:f5:6d:ba:4f:ba: 3d:f9:52:be:15:c3:d8:d5:95:2b:a7:b3:18:e5:df: fd:b2:b8:8f:46:df:c5:ef:ee:10:3d:4f:54:5a:96: b5:cc:4e:ea:3e:51:75:0d:31:74:72:11:67:74:5c: 0a:e8:b2:95:f8:35:a7:f0:fb:32:c2:2e:99:4f:22: b3:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:82:29:6B:0D:BA:D8:F9:E7:2C:27:8D:27:70:26:49:88:19:5F:85 X509v3 Authority Key Identifier: keyid:AD:B9:89:78:FD:75:1F:99:D9:A8:EB:2A:E7:2D:3C:0C:55:04:53:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/CF49BBDAD33811EDAAE97C1BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 213.170.156.0-213.170.158.255 Signature Algorithm: sha256WithRSAEncryption 63:89:bc:5b:06:77:18:f8:56:21:99:b9:fc:a8:da:69:bd:04: d6:eb:c1:d7:5c:b5:5f:be:ee:10:20:ec:e9:b6:6d:3f:6f:42: 93:13:ed:61:7a:93:3d:dc:bb:b9:9d:26:d2:90:97:39:c7:6e: 22:a9:67:34:10:75:af:18:05:83:dc:b2:ba:44:2a:91:7c:4f: ac:d5:7c:84:25:f2:36:e6:8c:ed:1c:fb:b4:f1:e0:8e:99:1d: 1d:e7:dd:e8:ff:e4:55:a6:e7:78:a1:85:e8:d4:61:b5:43:79: b3:7d:84:12:cf:7b:5d:07:e5:2a:4e:43:5d:08:17:14:61:62: 31:66:98:63:db:41:75:d5:b7:b1:38:68:1f:24:23:3c:3b:ac: 31:1b:51:30:81:9b:a2:68:39:24:76:0f:70:79:91:a6:07:4d: c3:2e:62:86:8d:1a:9f:4c:07:f7:db:f7:3d:7c:90:84:9d:5e: 47:c7:31:34:b9:3d:b3:cf:6c:7e:61:46:4f:10:bd:df:b7:11: 1c:5b:07:7f:bc:37:5a:70:85:88:f5:da:6e:45:88:6f:f1:9a: c3:cd:5e:64:05:79:33:fc:a8:66:a0:f6:fb:da:0e:b3:ec:c9: 08:93:6f:2b:39:62:c7:66:71:69:1a:50:ad:d0:8e:89:d1:27: af:92:c8:6f -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgICBWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENEMDkxMTAvBgNVBAUTKEFEQjk4OTc4RkQ3NTFGOTlEOUE4RUIyQUU3MkQzQzBD NTUwNDUzQTQwHhcNMjUwOTIyMTYzNTIzWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGQxN2FjYi0yMTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3qGagkSQev55ovX8m+NkgQhw8b6Qqp+6ZD3FR3aeCpCdw3qTJau7XA2ICcET tbqKkFvwcC2jIjh6jmFL1yi/2f+me+k+BWNe1MkVZjpwy0AI08LKBwzDKeRD8WGd h3OwD/47l5lmBoz1otqzG+EDda+U4DIn919ODeWa+a4GKo5Xe69P6Tb34QWis+fc /JOSqFbDsx16A95DlMcigtJGQBfCENeh6F6yMbT6xdhf3Pp+8MefvLnVSh5maqst 9W26T7o9+VK+FcPY1ZUrp7MY5d/9sriPRt/F7+4QPU9UWpa1zE7qPlF1DTF0chFn dFwK6LKV+DWn8Psywi6ZTyKzLwIDAQABo4ICnTCCApkwHQYDVR0OBBYEFFmCKWsN utj55ywnjSdwJkmIGV+FMB8GA1UdIwQYMBaAFK25iXj9dR+Z2ajrKuctPAxVBFOk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0QwOS9FQUM3RUVBMDEx MkQxMUVDOEQ4NzA1N0RDNEY5QUUwMi9yYm1KZVAxMUg1blpxT3NxNXkwOERGVUVV NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3JibUplUDExSDVuWnFPc3E1eTA4REZVRVU2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RENEMDkvRUFDN0VFQTAxMTJEMTFFQzhEODcwNTdEQzRGOUFFMDIvQ0Y0OUJCREFE MzM4MTFFREFBRTk3QzFCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E GDAWMBQEAgABMA4wDAMEAtWqnAMEANWqnjANBgkqhkiG9w0BAQsFAAOCAQEAY4m8 WwZ3GPhWIZm5/Kjaab0E1uvB11y1X77uECDs6bZtP29CkxPtYXqTPdy7uZ0m0pCX OcduIqlnNBB1rxgFg9yyukQqkXxPrNV8hCXyNuaM7Rz7tPHgjpkdHefd6P/kVabn eKGF6NRhtUN5s32EEs97XQflKk5DXQgXFGFiMWaYY9tBddW3sThoHyQjPDusMRtR MIGbomg5JHYPcHmRpgdNwy5iho0an0wH99v3PXyQhJ1eR8cxNLk9s89sfmFGTxC9 37cRHFsHf7w3WnCFiPXabkWIb/Gaw81eZAV5M/yoZqD2+9oOs+zJCJNvKzlix2Zx aRpQrdCOidEnr5LIbw== -----END CERTIFICATE-----Generated at Mon Oct 20 04:18:20 2025 by rpki-client