$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/F1F087928C6B11F0B1A50E82C4F9AE02.roa File: F1F087928C6B11F0B1A50E82C4F9AE02.roa (raw, json) Hash identifier: 7tfXuCQjw9T0qFosF2h5F8UNVF4qyYhcz32Eciv+YZo= Subject key identifier: B6:BE:06:2B:2B:AD:EC:E7:5B:78:81:2D:E3:D7:BC:14:3E:A5:54:C3 Certificate issuer: /CN=A91E2454/serialNumber=AB6262BC7D02EC1AD48B71DA98B73D22A362DAF0 Certificate serial: 362E Authority key identifier: AB:62:62:BC:7D:02:EC:1A:D4:8B:71:DA:98:B7:3D:22:A3:62:DA:F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/F1F087928C6B11F0B1A50E82C4F9AE02.roa Signing time: Mon 08 Sep 2025 04:26:10 +0000 ROA not before: Mon 08 Sep 2025 04:26:10 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 132792 IP address blocks: 111.125.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.crl rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 14:31:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13870 (0x362e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2454, serialNumber=AB6262BC7D02EC1AD48B71DA98B73D22A362DAF0 Validity Not Before: Sep 8 04:26:10 2025 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=68be5ae1-e8c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:30:44:da:93:ef:f0:95:a9:74:09:10:ca:13: 4f:d3:ab:27:a2:1e:2f:0c:f0:e5:e5:35:ae:f7:a1: 9c:be:8e:7d:3b:eb:04:1a:f4:4b:c0:13:fe:87:49: 42:92:2b:26:7f:e4:3b:65:94:4f:8f:d8:47:a0:c0: 40:44:83:a4:30:f6:00:89:3f:7c:da:20:97:c7:ee: e7:ef:37:1f:fa:28:89:27:74:84:9b:48:2f:dc:f9: 5c:5a:50:c9:a9:12:38:0b:86:a9:99:ee:5d:46:2a: 0a:df:e1:a5:44:c0:7f:54:08:0e:5c:cc:1f:77:ab: df:e5:96:73:f4:ae:0c:fe:55:ab:ac:02:67:02:d7: 21:4d:55:21:41:cb:1c:83:a3:46:59:38:73:ce:b2: 0f:d4:34:9c:de:68:d9:28:c1:50:3d:0d:e6:88:b7: e8:67:27:d7:56:8a:8b:7c:a7:54:bd:5b:5c:3e:81: 8c:37:4b:92:6b:c8:e3:6d:d0:fc:40:34:0e:9b:64: 35:fb:e6:96:d8:51:3c:30:b6:08:3e:0a:05:c2:dd: 58:8a:c0:78:55:cc:4f:30:1e:ba:4e:f3:e3:f5:a4: f0:71:89:f7:02:66:2a:48:bf:7f:72:93:d0:b2:a8: ca:ae:20:7a:92:d6:e2:60:de:fc:26:36:23:c2:4d: ed:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:BE:06:2B:2B:AD:EC:E7:5B:78:81:2D:E3:D7:BC:14:3E:A5:54:C3 X509v3 Authority Key Identifier: keyid:AB:62:62:BC:7D:02:EC:1A:D4:8B:71:DA:98:B7:3D:22:A3:62:DA:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/F1F087928C6B11F0B1A50E82C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 111.125.83.0/24 Signature Algorithm: sha256WithRSAEncryption 26:d8:58:1e:bd:29:4d:76:e4:ae:36:5b:cd:de:0e:bd:a7:db: 32:c4:94:e2:4e:7f:f8:48:c6:d3:d1:f9:6b:ea:34:e0:0e:e9: 1f:44:c5:1e:aa:68:dd:7c:9c:e7:e5:30:50:ad:33:57:d6:de: 3e:83:18:32:63:b3:1d:de:d1:e4:5b:69:13:7d:9a:fd:0e:a6: 56:1d:1c:af:fe:ed:16:cb:ce:69:f0:cd:ad:41:05:20:13:90: 0f:c9:71:a8:0f:03:95:2c:09:02:ce:5f:f6:87:48:6c:3b:0e: bb:91:2e:f6:3c:bf:f1:5f:41:2b:28:cb:0c:4b:f7:5f:b0:e8: 04:8a:6c:d7:ea:f7:d5:7b:0c:a7:13:7f:06:74:a0:bf:31:ff: 0d:98:2e:e7:8e:33:08:f3:45:ff:02:5c:a3:42:17:d4:e4:f4: 0d:11:a0:5a:cf:1d:f0:30:1a:8f:fc:05:fb:7f:dd:95:e4:9a: 33:6c:c0:59:02:aa:62:ac:94:54:9e:c1:01:63:4b:56:e3:bb: 2e:2d:17:42:84:72:63:be:85:6c:3a:73:3b:f4:8f:ec:be:b8: f3:d7:ed:ca:50:99:9c:a0:d1:31:eb:51:ed:e4:f5:c0:f8:11: 6d:0f:a7:fa:f8:50:07:bf:4e:4c:6e:a9:de:c2:da:4e:70:d7: 63:09:5a:b8 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNi4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI0NTQxMTAvBgNVBAUTKEFCNjI2MkJDN0QwMkVDMUFENDhCNzFEQTk4QjczRDIy QTM2MkRBRjAwHhcNMjUwOTA4MDQyNjEwWhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGJlNWFlMS1lOGM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApTBE2pPv8JWpdAkQyhNP06snoh4vDPDl5TWu96Gcvo59O+sEGvRLwBP+h0lC kismf+Q7ZZRPj9hHoMBARIOkMPYAiT982iCXx+7n7zcf+iiJJ3SEm0gv3PlcWlDJ qRI4C4apme5dRioK3+GlRMB/VAgOXMwfd6vf5ZZz9K4M/lWrrAJnAtchTVUhQcsc g6NGWThzzrIP1DSc3mjZKMFQPQ3miLfoZyfXVoqLfKdUvVtcPoGMN0uSa8jjbdD8 QDQOm2Q1++aW2FE8MLYIPgoFwt1YisB4VcxPMB66TvPj9aTwcYn3AmYqSL9/cpPQ sqjKriB6ktbiYN78JjYjwk3t5wIDAQABo4IClTCCApEwHQYDVR0OBBYEFLa+Bisr reznW3iBLePXvBQ+pVTDMB8GA1UdIwQYMBaAFKtiYrx9Auwa1Itx2pi3PSKjYtrw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjQ1NC9ENEMzMEI0MjFE ODcxMUUyQTE5ODIyRTAwOEIwMkNEMi9xMkppdkgwQzdCclVpM0hhbUxjOUlxTmky dkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3EySml2SDBDN0JyVWkzSGFtTGM5SXFOaTJ2QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTI0NTQvRDRDMzBCNDIxRDg3MTFFMkExOTgyMkUwMDhCMDJDRDIvRjFGMDg3OTI4 QzZCMTFGMEIxQTUwRTgyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABvfVMwDQYJKoZIhvcNAQELBQADggEBACbYWB69KU125K42 W83eDr2n2zLElOJOf/hIxtPR+WvqNOAO6R9ExR6qaN18nOflMFCtM1fW3j6DGDJj sx3e0eRbaRN9mv0OplYdHK/+7RbLzmnwza1BBSATkA/JcagPA5UsCQLOX/aHSGw7 DruRLvY8v/FfQSsoywxL91+w6ASKbNfq99V7DKcTfwZ0oL8x/w2YLueOMwjzRf8C XKNCF9Tk9A0RoFrPHfAwGo/8Bft/3ZXkmjNswFkCqmKslFSewQFjS1bjuy4tF0KE cmO+hWw6czv0j+y+uPPX7cpQmZyg0THrUe3k9cD4EW0Pp/r4UAe/Tkxuqd7C2k5w 12MJWrg= -----END CERTIFICATE-----Generated at Mon Oct 20 08:27:24 2025 by rpki-client