$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/2086256888B911ECAC54E716C4F9AE02.roa File: 2086256888B911ECAC54E716C4F9AE02.roa (raw, json) Hash identifier: yiCrf2CBs1DTx9LePbZGWl/avup1Zfij9Oz3lNKWDkU= Subject key identifier: 46:64:45:EF:C2:F9:A3:1C:B4:3E:F1:52:D7:BF:61:A1:7E:FA:D6:03 Certificate issuer: /CN=A91DDCB6/serialNumber=FEA14F23FDB977AC6489D2106E35E023B28968DC Certificate serial: 08C6 Authority key identifier: FE:A1:4F:23:FD:B9:77:AC:64:89:D2:10:6E:35:E0:23:B2:89:68:DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qFPI_25d6xkidIQbjXgI7KJaNw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/2086256888B911ECAC54E716C4F9AE02.roa Signing time: Wed 08 Oct 2025 20:51:37 +0000 ROA not before: Wed 08 Oct 2025 20:51:37 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 17439 IP address blocks: 43.252.88.0/22 maxlen: 24 101.53.128.0/19 maxlen: 24 103.20.212.0/22 maxlen: 24 2001:df0:411::/48 maxlen: 48 2001:df4:3500::/48 maxlen: 48 2406:69c0::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.crl rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qFPI_25d6xkidIQbjXgI7KJaNw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:42:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2246 (0x8c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDCB6, serialNumber=FEA14F23FDB977AC6489D2106E35E023B28968DC Validity Not Before: Oct 8 20:51:37 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68e6ced9-f0ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2d:5e:91:64:60:95:6f:9c:3d:c4:9d:f8:3f: 1f:25:c8:d3:0a:11:4c:9b:70:f5:f0:5c:95:e4:8b: 40:7d:7b:e9:b4:07:9b:f2:41:e2:6a:ed:09:b2:bb: 04:67:27:46:5a:98:07:28:f3:c5:16:7b:94:5d:aa: f2:21:90:fe:6d:03:5e:23:15:79:36:59:64:b4:5b: 48:8d:3a:5c:02:c6:4b:ff:0a:45:a3:ce:39:00:52: 0f:37:4a:f1:d9:c8:58:30:bc:2a:6a:dc:90:dd:61: 9d:2d:e8:74:1c:78:25:07:4c:1e:5a:fa:ab:7e:37: d5:b4:93:79:83:31:59:e5:81:d2:2a:93:21:05:c6: 04:64:15:5c:fc:6f:cd:08:1d:ad:78:0c:2e:11:ac: f1:22:59:c2:8c:45:e6:cb:6c:a5:a3:58:ba:0f:0f: 16:0c:ff:d6:df:4b:8b:de:ce:21:6b:77:8d:3a:56: 51:74:ae:ac:89:1a:94:83:39:e1:59:b9:51:65:4a: 0c:20:02:c6:15:08:18:84:ae:77:a1:f7:c8:ea:e4: ed:f1:74:62:a7:48:d4:84:f4:a5:8a:d7:c9:72:21: e2:30:87:ae:2b:24:1c:59:dd:92:b1:7c:49:4d:82: 6c:63:50:ad:f5:c6:de:36:aa:14:eb:7e:36:0c:e8: 2a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:64:45:EF:C2:F9:A3:1C:B4:3E:F1:52:D7:BF:61:A1:7E:FA:D6:03 X509v3 Authority Key Identifier: keyid:FE:A1:4F:23:FD:B9:77:AC:64:89:D2:10:6E:35:E0:23:B2:89:68:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qFPI_25d6xkidIQbjXgI7KJaNw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/2086256888B911ECAC54E716C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.252.88.0/22 101.53.128.0/19 103.20.212.0/22 IPv6: 2001:df0:411::/48 2001:df4:3500::/48 2406:69c0::/32 Signature Algorithm: sha256WithRSAEncryption 61:af:6b:c1:9a:b5:7c:26:09:50:be:d8:fa:2c:b5:e8:99:f3: d6:d9:4f:31:e8:f9:0a:2e:26:ae:ad:c1:3e:2a:69:27:55:ed: 91:4a:5a:bd:c7:59:f3:09:b2:df:c2:32:81:42:3f:7d:c8:68: a6:b2:1a:7a:dd:ab:ac:1e:c8:cb:ff:ec:5d:1b:ba:73:a5:36: 67:f8:7d:11:05:20:d9:e3:8c:4d:12:c3:7f:2b:f8:81:78:8f: 7c:cb:e9:af:da:5a:83:5e:42:b7:2a:20:07:4c:a5:b7:1a:ce: a0:06:89:c4:e4:3b:5a:e2:4b:dd:b9:b6:1c:dd:80:e5:f0:0b: 2a:de:44:0a:c7:18:35:98:ad:d4:b2:a8:f8:15:f4:9c:d2:2f: c0:ef:ee:29:6e:e8:1c:9c:17:a8:67:f8:cd:9a:13:87:38:97: b0:64:e4:f4:d0:e8:e5:17:49:f2:d6:f7:08:0f:a4:27:8e:1a: 31:d6:73:a9:25:fb:93:bf:6f:b8:cf:a9:c4:b4:09:4c:a6:2c: 68:8a:f0:e2:4d:ad:ca:d3:57:a3:7e:36:7b:10:6a:dc:61:c6: 9f:ed:a5:18:05:38:75:86:d9:6d:e1:b0:93:15:16:bf:91:c6: a2:7f:8d:3d:26:54:0f:b5:39:b5:ea:2c:da:f9:a1:11:a7:a8: 29:a2:8f:20 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgICCMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RERDQjYxMTAvBgNVBAUTKEZFQTE0RjIzRkRCOTc3QUM2NDg5RDIxMDZFMzVFMDIz QjI4OTY4REMwHhcNMjUxMDA4MjA1MTM3WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGU2Y2VkOS1mMGFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzC1ekWRglW+cPcSd+D8fJcjTChFMm3D18FyV5ItAfXvptAeb8kHiau0JsrsE ZydGWpgHKPPFFnuUXaryIZD+bQNeIxV5NllktFtIjTpcAsZL/wpFo845AFIPN0rx 2chYMLwqatyQ3WGdLeh0HHglB0weWvqrfjfVtJN5gzFZ5YHSKpMhBcYEZBVc/G/N CB2teAwuEazxIlnCjEXmy2ylo1i6Dw8WDP/W30uL3s4ha3eNOlZRdK6siRqUgznh WblRZUoMIALGFQgYhK53offI6uTt8XRip0jUhPSlitfJciHiMIeuKyQcWd2SsXxJ TYJsY1Ct9cbeNqoU6342DOgqaQIDAQABo4ICwjCCAr4wHQYDVR0OBBYEFEZkRe/C +aMctD7xUte/YaF++tYDMB8GA1UdIwQYMBaAFP6hTyP9uXesZInSEG414COyiWjc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERENCNi9GMDc3NTk4RUND M0QxMUVBOEJDNDVDMjlDNEY5QUUwMi9fcUZQSV8yNWQ2eGtpZElRYmpYZ0k3S0ph TncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19xRlBJXzI1ZDZ4a2lkSVFialhnSTdLSmFOdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RERDQjYvRjA3NzU5OEVDQzNEMTFFQThCQzQ1QzI5QzRGOUFFMDIvMjA4NjI1Njg4 OEI5MTFFQ0FDNTRFNzE2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwTAYIKwYBBQUHAQcBAf8E PTA7MBgEAgABMBIDBAIr/FgDBAVlNYADBAJnFNQwHwQCAAIwGQMHACABDfAEEQMH ACABDfQ1AAMFACQGacAwDQYJKoZIhvcNAQELBQADggEBAGGva8GatXwmCVC+2Pos teiZ89bZTzHo+QouJq6twT4qaSdV7ZFKWr3HWfMJst/CMoFCP33IaKayGnrdq6we yMv/7F0bunOlNmf4fREFINnjjE0Sw38r+IF4j3zL6a/aWoNeQrcqIAdMpbcazqAG icTkO1riS925thzdgOXwCyreRArHGDWYrdSyqPgV9JzSL8Dv7ilu6BycF6hn+M2a E4c4l7Bk5PTQ6OUXSfLW9wgPpCeOGjHWc6kl+5O/b7jPqcS0CUymLGiK8OJNrcrT V6N+NnsQatxhxp/tpRgFOHWG2W3hsJMVFr+RxqJ/jT0mVA+1ObXqLNr5oRGnqCmi jyA= -----END CERTIFICATE-----Generated at Mon Oct 20 08:05:03 2025 by rpki-client