$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/3962A56E5E0611EF8CB1F080C4F9AE02.roa File: 3962A56E5E0611EF8CB1F080C4F9AE02.roa (raw, json) Hash identifier: TZ5nW0KMOCsvsXmMedYBvsw1ECjzpD9JYkBgPo1lGk4= Subject key identifier: 88:7C:FE:3F:20:E9:9A:F3:E0:82:F7:D8:C6:79:27:F8:46:64:E5:2C Certificate issuer: /CN=A91E7561/serialNumber=25BC7D4DE77BD01B3D191587696E5AFDD8CECD04 Certificate serial: 0643 Authority key identifier: 25:BC:7D:4D:E7:7B:D0:1B:3D:19:15:87:69:6E:5A:FD:D8:CE:CD:04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/3962A56E5E0611EF8CB1F080C4F9AE02.roa Signing time: Wed 27 Aug 2025 00:04:43 +0000 ROA not before: Wed 27 Aug 2025 00:04:43 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 135676 IP address blocks: 110.164.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.crl rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:05:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1603 (0x643) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7561, serialNumber=25BC7D4DE77BD01B3D191587696E5AFDD8CECD04 Validity Not Before: Aug 27 00:04:43 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68ae4b9b-3827 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c0:e6:d3:a4:fb:04:55:ca:d6:56:0b:f9:99: e9:76:d0:ec:0b:9f:e7:6f:bb:a7:8a:1e:6f:96:f5: 26:76:b7:67:88:ae:a6:0c:e3:e4:1b:30:25:b7:d7: 71:f5:a2:b4:e4:55:8c:12:06:23:a2:12:75:5c:08: 71:28:8b:ac:e4:10:e4:d2:1d:6f:34:1f:7d:0d:22: df:40:19:b9:c4:cf:70:6f:78:aa:64:cd:c7:7e:a3: 8b:15:27:08:44:9d:6d:4e:b3:dc:77:34:2a:5e:f4: 13:68:c8:c7:75:cd:92:94:49:fa:ee:90:a3:80:cc: 77:ef:0e:08:ad:19:32:e2:df:57:74:04:2c:7d:8b: 58:8a:ba:91:89:69:40:b5:ae:b0:df:47:e6:b2:d2: 3a:08:57:8c:8a:a7:55:a1:96:e0:ea:e8:d5:b4:80: 67:9e:da:e4:d1:03:b5:2a:07:44:1e:15:85:71:05: d9:9a:4d:d2:bd:89:80:b1:7f:1a:ef:3d:25:0d:34: 89:06:c8:68:64:53:76:15:fa:da:73:10:1a:e6:bf: 08:e0:32:e6:bc:94:9f:10:7d:35:b0:da:a7:27:45: 71:3f:3b:ad:1c:dd:6f:b7:e7:e6:2e:c6:c8:5b:a6: 71:c9:b1:fc:d1:e8:f9:4e:2c:a8:6b:12:06:b6:84: 63:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:7C:FE:3F:20:E9:9A:F3:E0:82:F7:D8:C6:79:27:F8:46:64:E5:2C X509v3 Authority Key Identifier: keyid:25:BC:7D:4D:E7:7B:D0:1B:3D:19:15:87:69:6E:5A:FD:D8:CE:CD:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/3962A56E5E0611EF8CB1F080C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.164.143.0/24 Signature Algorithm: sha256WithRSAEncryption 05:39:d8:8b:b2:d0:43:4c:59:09:15:00:1b:36:a7:05:ec:f1: 3f:94:5c:a2:d2:c4:3d:a4:60:3e:b0:4d:9d:31:b6:98:97:f1: 68:e2:7a:69:51:de:7d:59:84:3e:9a:2d:ac:b3:75:2f:ad:c4: 1f:68:f9:df:14:7a:c1:32:5a:ef:aa:d2:da:94:c7:ec:13:aa: cf:c3:64:b2:df:97:b8:d5:a6:36:2c:89:31:17:64:02:bd:6b: f3:2b:d4:9c:7c:8e:50:47:15:1e:8d:3a:85:33:a8:d6:34:7d: 26:6c:9e:a1:8f:b6:07:04:8d:62:ce:68:6a:ff:5f:f1:de:56: 0e:f5:40:55:6c:e1:6e:3c:c9:46:d9:d9:6e:ad:dc:78:d2:5a: 2b:51:b6:fd:1a:cb:28:ef:e1:2b:2b:2f:af:d9:1b:99:76:72: cc:4d:94:7b:13:eb:0a:f7:47:27:90:c6:81:dc:bd:3b:e2:4b: 1f:61:7b:51:77:3d:1d:a6:99:23:d0:d7:8c:e2:4b:4c:f8:11: 7c:0d:64:04:94:eb:fd:a8:47:cc:4e:5c:8f:84:83:09:ca:c6: fc:9b:2d:fc:79:88:1d:d5:55:57:1c:49:a8:4e:6b:c6:b9:8a: 73:fd:1b:33:e2:de:9e:e1:02:88:66:7d:1a:63:d2:de:9f:86: 87:ed:68:b2 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBkMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc1NjExMTAvBgNVBAUTKDI1QkM3RDRERTc3QkQwMUIzRDE5MTU4NzY5NkU1QUZE RDhDRUNEMDQwHhcNMjUwODI3MDAwNDQzWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGFlNGI5Yi0zODI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzcDm06T7BFXK1lYL+ZnpdtDsC5/nb7unih5vlvUmdrdniK6mDOPkGzAlt9dx 9aK05FWMEgYjohJ1XAhxKIus5BDk0h1vNB99DSLfQBm5xM9wb3iqZM3HfqOLFScI RJ1tTrPcdzQqXvQTaMjHdc2SlEn67pCjgMx37w4IrRky4t9XdAQsfYtYirqRiWlA ta6w30fmstI6CFeMiqdVoZbg6ujVtIBnntrk0QO1KgdEHhWFcQXZmk3SvYmAsX8a 7z0lDTSJBshoZFN2FfracxAa5r8I4DLmvJSfEH01sNqnJ0VxPzutHN1vt+fmLsbI W6ZxybH80ej5TiyoaxIGtoRjLwIDAQABo4IClTCCApEwHQYDVR0OBBYEFIh8/j8g 6Zrz4IL32MZ5J/hGZOUsMB8GA1UdIwQYMBaAFCW8fU3ne9AbPRkVh2luWv3Yzs0E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzU2MS9BMjZFMDZFMDA1 NEMxMUVDQkRCNEZFNDZDNEY5QUUwMi9KYng5VGVkNzBCczlHUldIYVc1YV9kak96 UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pieDlUZWQ3MEJzOUdSV0hhVzVhX2RqT3pRUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTc1NjEvQTI2RTA2RTAwNTRDMTFFQ0JEQjRGRTQ2QzRGOUFFMDIvMzk2MkE1NkU1 RTA2MTFFRjhDQjFGMDgwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABupI8wDQYJKoZIhvcNAQELBQADggEBAAU52Iuy0ENMWQkV ABs2pwXs8T+UXKLSxD2kYD6wTZ0xtpiX8WjiemlR3n1ZhD6aLayzdS+txB9o+d8U esEyWu+q0tqUx+wTqs/DZLLfl7jVpjYsiTEXZAK9a/Mr1Jx8jlBHFR6NOoUzqNY0 fSZsnqGPtgcEjWLOaGr/X/HeVg71QFVs4W48yUbZ2W6t3HjSWitRtv0ayyjv4Ssr L6/ZG5l2csxNlHsT6wr3RyeQxoHcvTviSx9he1F3PR2mmSPQ14ziS0z4EXwNZASU 6/2oR8xOXI+EgwnKxvybLfx5iB3VVVccSahOa8a5inP9GzPi3p7hAohmfRpj0t6f hoftaLI= -----END CERTIFICATE-----Generated at Mon Oct 20 17:54:42 2025 by rpki-client