$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/A7034AFA7F8411EC9036F64CC4F9AE02.roa File: A7034AFA7F8411EC9036F64CC4F9AE02.roa (raw, json) Hash identifier: gb3eIqGKtDZZMjsIarWLCbAcIGW3eUHFzm27i/K2y8U= Subject key identifier: AC:DC:FF:62:45:B2:CF:67:A1:F1:39:13:B2:FE:E1:AA:03:D8:F9:DB Certificate issuer: /CN=A91DDCB6/serialNumber=65DFF2EE3F9BB2EB24551E1D18F1D63DEC0A6E17 Certificate serial: 08A5 Authority key identifier: 65:DF:F2:EE:3F:9B:B2:EB:24:55:1E:1D:18:F1:D6:3D:EC:0A:6E:17 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zd_y7j-bsuskVR4dGPHWPewKbhc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/A7034AFA7F8411EC9036F64CC4F9AE02.roa Signing time: Wed 08 Oct 2025 20:51:35 +0000 ROA not before: Wed 08 Oct 2025 20:51:35 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 132420 IP address blocks: 146.88.24.0/22 maxlen: 24 164.52.192.0/19 maxlen: 24 205.147.96.0/21 maxlen: 24 205.147.108.0/22 maxlen: 24 216.48.176.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.crl rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zd_y7j-bsuskVR4dGPHWPewKbhc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:42:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2213 (0x8a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDCB6, serialNumber=65DFF2EE3F9BB2EB24551E1D18F1D63DEC0A6E17 Validity Not Before: Oct 8 20:51:35 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68e6ced6-eb8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:26:f0:50:ba:8a:4a:fb:f7:9a:35:c2:30:ad: e2:f2:b0:92:fa:04:26:18:62:38:a8:ea:80:f4:4b: e4:21:f3:ef:8b:ff:0f:6b:5b:23:16:37:e0:3a:2d: 55:b5:9c:1e:38:c9:fd:f7:c7:02:c9:b6:5b:fe:7f: 63:a0:76:e8:f6:c2:1f:a3:fc:72:e4:28:64:a8:91: fd:d7:b4:a6:fe:1f:a3:c5:a9:6d:52:53:45:71:84: 95:e0:de:9d:01:11:bc:f8:9b:54:21:b5:7c:9d:30: f7:c7:d0:9f:97:36:ef:e0:39:c9:65:f5:ca:21:8a: 0a:81:01:91:ac:f5:5d:a8:0a:b0:30:93:54:58:53: 6e:cb:47:17:3d:67:00:44:84:35:85:09:a7:10:a4: 7b:b8:dc:54:9f:3f:f8:f5:e0:c0:f4:18:c1:be:c8: 9b:7d:e3:59:05:00:1c:a4:36:6e:27:dd:bf:f3:4d: 23:01:9d:e8:60:bf:ed:06:99:09:5e:82:32:a9:46: 7e:17:e7:2f:98:e2:97:61:33:77:bb:e7:1e:35:dc: 17:11:5f:9b:b0:8f:a1:d3:a4:5e:ec:de:76:52:ab: 70:32:41:96:2f:2e:40:e1:7c:32:ef:e3:9e:4d:93: f2:ce:b8:29:31:62:37:72:be:cc:8d:51:66:52:87: 0c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:DC:FF:62:45:B2:CF:67:A1:F1:39:13:B2:FE:E1:AA:03:D8:F9:DB X509v3 Authority Key Identifier: keyid:65:DF:F2:EE:3F:9B:B2:EB:24:55:1E:1D:18:F1:D6:3D:EC:0A:6E:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zd_y7j-bsuskVR4dGPHWPewKbhc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/A7034AFA7F8411EC9036F64CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 146.88.24.0/22 164.52.192.0/19 205.147.96.0/21 205.147.108.0/22 216.48.176.0/20 Signature Algorithm: sha256WithRSAEncryption 4d:1e:ac:d7:de:30:18:57:64:d9:94:f9:59:fa:7a:ad:93:b2: fe:03:44:6d:c6:a4:36:71:62:0b:e1:87:c4:88:c4:96:b0:17: 59:22:22:62:e1:cf:4f:1d:30:28:d7:09:62:bb:fd:8e:96:ed: 48:b0:85:8a:e3:f8:4f:db:9b:f9:00:2a:76:39:8d:cf:ef:56: ce:88:fc:a8:13:0f:50:33:d3:fe:b9:44:52:1b:bf:d5:9a:74: 8f:e7:5d:c0:e8:c6:29:7b:7c:6f:10:a0:8d:74:41:ab:a8:be: eb:04:36:5c:b5:37:8c:4f:d2:2a:69:96:93:77:1e:ca:e7:b7: 16:5d:7f:fc:95:84:37:cb:e1:1a:57:45:c4:ee:80:60:27:59: 58:55:9c:ab:72:fe:12:d5:45:00:b2:37:84:1c:1c:6c:b9:78: 0c:c9:16:68:2a:e6:a2:5e:2f:8f:28:b3:5b:42:8b:ca:9c:d8: 98:48:72:fb:a1:74:dd:41:91:f9:b3:27:50:22:0f:4a:15:38: 1e:c8:c8:de:d5:42:1c:32:c0:4c:7d:bc:58:cf:93:46:ee:69: c7:5e:c3:c9:a8:f8:2d:a7:24:20:78:20:ec:5c:2c:eb:63:e7: 5f:7f:34:79:97:0e:b6:af:d4:ed:78:29:18:cb:0f:ea:82:a1: 52:ec:ba:50 -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgICCKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RERDQjYxMTAvBgNVBAUTKDY1REZGMkVFM0Y5QkIyRUIyNDU1MUUxRDE4RjFENjNE RUMwQTZFMTcwHhcNMjUxMDA4MjA1MTM1WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGU2Y2VkNi1lYjhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4SbwULqKSvv3mjXCMK3i8rCS+gQmGGI4qOqA9EvkIfPvi/8Pa1sjFjfgOi1V tZweOMn998cCybZb/n9joHbo9sIfo/xy5ChkqJH917Sm/h+jxaltUlNFcYSV4N6d ARG8+JtUIbV8nTD3x9Cflzbv4DnJZfXKIYoKgQGRrPVdqAqwMJNUWFNuy0cXPWcA RIQ1hQmnEKR7uNxUnz/49eDA9BjBvsibfeNZBQAcpDZuJ92/800jAZ3oYL/tBpkJ XoIyqUZ+F+cvmOKXYTN3u+ceNdwXEV+bsI+h06Re7N52UqtwMkGWLy5A4Xwy7+Oe TZPyzrgpMWI3cr7MjVFmUocMwwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFKzc/2JF ss9nofE5E7L+4aoD2PnbMB8GA1UdIwQYMBaAFGXf8u4/m7LrJFUeHRjx1j3sCm4X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERENCNi9FODgzREZENkND M0QxMUVBOEJDNDVDMjlDNEY5QUUwMi9aZF95N2otYnN1c2tWUjRkR1BIV1Bld0ti aGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1pkX3k3ai1ic3Vza1ZSNGRHUEhXUGV3S2JoYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RERDQjYvRTg4M0RGRDZDQzNEMTFFQThCQzQ1QzI5QzRGOUFFMDIvQTcwMzRBRkE3 Rjg0MTFFQzkwMzZGNjRDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNwYIKwYBBQUHAQcBAf8E KDAmMCQEAgABMB4DBAKSWBgDBAWkNMADBAPNk2ADBALNk2wDBATYMLAwDQYJKoZI hvcNAQELBQADggEBAE0erNfeMBhXZNmU+Vn6eq2Tsv4DRG3GpDZxYgvhh8SIxJaw F1kiImLhz08dMCjXCWK7/Y6W7UiwhYrj+E/bm/kAKnY5jc/vVs6I/KgTD1Az0/65 RFIbv9WadI/nXcDoxil7fG8QoI10QauovusENly1N4xP0ipplpN3HsrntxZdf/yV hDfL4RpXRcTugGAnWVhVnKty/hLVRQCyN4QcHGy5eAzJFmgq5qJeL48os1tCi8qc 2JhIcvuhdN1BkfmzJ1AiD0oVOB7IyN7VQhwywEx9vFjPk0buacdew8mo+C2nJCB4 IOxcLOtj519/NHmXDrav1O14KRjLD+qCoVLsulA= -----END CERTIFICATE-----Generated at Mon Oct 20 05:04:23 2025 by rpki-client