$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/46BE2FE6837B11EEB7855E0FC4F9AE02.roa File: 46BE2FE6837B11EEB7855E0FC4F9AE02.roa (raw, json) Hash identifier: phdTwY4t01uFxXXylAhv644EIWlF4mfAPI7ZF9ao2Vw= Subject key identifier: 02:4D:EB:65:53:87:91:19:4B:E0:02:DC:5E:E5:30:5E:6D:7B:FB:32 Certificate issuer: /CN=A91E7561/serialNumber=25BC7D4DE77BD01B3D191587696E5AFDD8CECD04 Certificate serial: 0646 Authority key identifier: 25:BC:7D:4D:E7:7B:D0:1B:3D:19:15:87:69:6E:5A:FD:D8:CE:CD:04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/46BE2FE6837B11EEB7855E0FC4F9AE02.roa Signing time: Wed 27 Aug 2025 00:04:46 +0000 ROA not before: Wed 27 Aug 2025 00:04:46 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 147027 IP address blocks: 110.164.234.0/24 maxlen: 24 110.164.235.0/24 maxlen: 24 2403:6200:7928::/48 maxlen: 48 2403:6200:7929::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.crl rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:05:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1606 (0x646) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7561, serialNumber=25BC7D4DE77BD01B3D191587696E5AFDD8CECD04 Validity Not Before: Aug 27 00:04:46 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68ae4b9e-2f23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:86:46:81:39:07:ce:1e:43:ae:27:2b:86:22: ec:01:02:de:58:c7:34:6f:bb:e4:f1:25:f4:ae:5f: 20:8e:a2:39:71:bd:97:32:bc:45:9c:0f:9e:11:68: b3:35:fa:1c:dc:b0:e4:2d:dc:59:4f:65:33:98:2e: a1:53:7e:89:21:f7:53:a4:e2:d7:fe:41:9e:3e:d2: 7b:a7:16:b3:c6:74:a8:50:a0:c0:a6:11:d6:a5:92: 3a:58:fd:b9:22:5b:d6:fe:be:a6:70:55:55:7b:4d: 28:a7:85:20:77:eb:ae:b8:c7:24:52:ec:4c:e6:d0: 56:07:18:35:fb:ee:79:5e:e0:e9:a1:62:12:8b:6b: cb:1f:b4:9a:ae:ff:fd:9e:98:41:a2:8e:31:fa:bc: 6a:7e:2d:24:12:48:03:a4:cb:f7:12:91:de:2f:a3: f1:56:7d:ed:c1:1a:41:52:80:0a:5e:eb:69:f8:ba: a1:72:bc:b7:b1:13:5f:4b:b3:9d:c8:29:e0:5f:c2: f5:a5:41:df:a7:00:1e:23:2d:19:ff:bf:4e:ac:31: 98:f8:56:13:23:68:74:f6:0c:7e:86:ab:0c:5d:75: 66:8c:dc:1d:d2:7f:db:ca:6f:56:3e:a4:29:8f:4d: 9f:e3:8a:c3:9c:ff:f1:49:00:81:3c:09:89:ae:60: ce:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:4D:EB:65:53:87:91:19:4B:E0:02:DC:5E:E5:30:5E:6D:7B:FB:32 X509v3 Authority Key Identifier: keyid:25:BC:7D:4D:E7:7B:D0:1B:3D:19:15:87:69:6E:5A:FD:D8:CE:CD:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/46BE2FE6837B11EEB7855E0FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.164.234.0/23 IPv6: 2403:6200:7928::/47 Signature Algorithm: sha256WithRSAEncryption 96:a5:fa:c9:00:85:76:96:5c:f9:06:e5:ce:f2:39:5a:4a:c6: 75:b4:b8:b3:05:1b:6f:84:e6:46:10:29:b2:de:2d:a0:4a:8a: e2:46:f2:0b:44:d5:6f:b8:8c:ca:a7:0f:6a:96:9a:76:28:70: d1:a7:61:18:68:d9:a5:e6:58:64:82:f1:6a:c2:42:5d:45:04: 8f:b4:5b:66:c4:04:0f:e2:08:68:3f:ea:4f:0e:2f:cd:72:9b: 8b:b0:1f:71:59:bd:cb:ae:2d:d8:2a:ad:bc:17:e3:61:c0:0b: 37:fc:e4:fb:7b:5a:5b:46:70:8d:ab:e1:d5:b0:0a:21:e5:b0: 0f:7f:7f:c1:22:57:4a:a3:4f:05:33:55:95:01:57:b3:95:26: e0:45:f1:bb:f3:59:1b:26:e0:25:5e:ae:69:71:83:58:b9:e4: ee:75:78:21:b6:6a:c0:a4:eb:be:ec:83:b7:bb:6f:59:80:2c: bd:f9:5d:e1:b4:7c:0c:50:11:e3:44:0c:5c:08:c9:28:04:99: 56:2b:af:0a:18:f8:2e:0e:5d:b1:83:99:97:6e:8e:eb:bf:f9: 2d:65:f6:60:b8:6f:ee:f3:9c:b4:fe:9c:e2:86:31:05:3d:2e: 29:38:41:67:af:7c:58:79:54:a9:d4:1b:02:39:a7:b1:03:09: af:60:ef:16 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICBkYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc1NjExMTAvBgNVBAUTKDI1QkM3RDRERTc3QkQwMUIzRDE5MTU4NzY5NkU1QUZE RDhDRUNEMDQwHhcNMjUwODI3MDAwNDQ2WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGFlNGI5ZS0yZjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt4ZGgTkHzh5DricrhiLsAQLeWMc0b7vk8SX0rl8gjqI5cb2XMrxFnA+eEWiz Nfoc3LDkLdxZT2UzmC6hU36JIfdTpOLX/kGePtJ7pxazxnSoUKDAphHWpZI6WP25 IlvW/r6mcFVVe00op4Ugd+uuuMckUuxM5tBWBxg1++55XuDpoWISi2vLH7Sarv/9 nphBoo4x+rxqfi0kEkgDpMv3EpHeL6PxVn3twRpBUoAKXutp+Lqhcry3sRNfS7Od yCngX8L1pUHfpwAeIy0Z/79OrDGY+FYTI2h09gx+hqsMXXVmjNwd0n/bym9WPqQp j02f44rDnP/xSQCBPAmJrmDOowIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFAJN62VT h5EZS+AC3F7lMF5te/syMB8GA1UdIwQYMBaAFCW8fU3ne9AbPRkVh2luWv3Yzs0E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzU2MS9BMjZFMDZFMDA1 NEMxMUVDQkRCNEZFNDZDNEY5QUUwMi9KYng5VGVkNzBCczlHUldIYVc1YV9kak96 UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pieDlUZWQ3MEJzOUdSV0hhVzVhX2RqT3pRUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTc1NjEvQTI2RTA2RTAwNTRDMTFFQ0JEQjRGRTQ2QzRGOUFFMDIvNDZCRTJGRTY4 MzdCMTFFRUI3ODU1RTBGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFupOowDwQCAAIwCQMHASQDYgB5KDANBgkqhkiG9w0BAQsF AAOCAQEAlqX6yQCFdpZc+QblzvI5WkrGdbS4swUbb4TmRhApst4toEqK4kbyC0TV b7iMyqcPapaadihw0adhGGjZpeZYZILxasJCXUUEj7RbZsQED+IIaD/qTw4vzXKb i7AfcVm9y64t2CqtvBfjYcALN/zk+3taW0Zwjavh1bAKIeWwD39/wSJXSqNPBTNV lQFXs5Um4EXxu/NZGybgJV6uaXGDWLnk7nV4IbZqwKTrvuyDt7tvWYAsvfld4bR8 DFAR40QMXAjJKASZViuvChj4Lg5dsYOZl26O67/5LWX2YLhv7vOctP6c4oYxBT0u KThBZ698WHlUqdQbAjmnsQMJr2DvFg== -----END CERTIFICATE-----Generated at Mon Oct 20 18:25:54 2025 by rpki-client