$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/FE8AECB2607511F0901D374BC4F9AE02.roa File: FE8AECB2607511F0901D374BC4F9AE02.roa (raw, json) Hash identifier: EJVhSBgTHHf2d5/MtIZhLVa66pMBIQnO9YLHd2Y9jmU= Subject key identifier: F4:1D:E8:FE:5B:71:05:76:56:C7:6A:65:A0:F6:10:CC:9E:3E:24:3E Certificate issuer: /CN=A91E7561/serialNumber=25BC7D4DE77BD01B3D191587696E5AFDD8CECD04 Certificate serial: 0641 Authority key identifier: 25:BC:7D:4D:E7:7B:D0:1B:3D:19:15:87:69:6E:5A:FD:D8:CE:CD:04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/FE8AECB2607511F0901D374BC4F9AE02.roa Signing time: Wed 27 Aug 2025 00:04:42 +0000 ROA not before: Wed 27 Aug 2025 00:04:42 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 131445 IP address blocks: 14.207.0.0/21 maxlen: 21 14.207.0.0/24 maxlen: 24 14.207.1.0/24 maxlen: 24 14.207.2.0/24 maxlen: 24 14.207.3.0/24 maxlen: 24 14.207.4.0/24 maxlen: 24 14.207.5.0/24 maxlen: 24 14.207.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.crl rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:05:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1601 (0x641) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7561, serialNumber=25BC7D4DE77BD01B3D191587696E5AFDD8CECD04 Validity Not Before: Aug 27 00:04:42 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68ae4b9a-4776 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:78:67:40:fd:89:ed:47:90:e3:79:18:96:77: 0e:53:d4:f7:ee:99:ae:96:b5:b0:5f:2c:dd:0e:8e: 5a:93:3b:b8:98:72:98:7a:a1:c1:80:11:ef:26:e6: 9e:3c:b8:7e:ed:77:6c:4e:bc:f3:69:c4:ff:5d:8a: 8b:46:95:03:4f:77:f1:99:0e:c6:58:ce:37:f5:1e: 29:52:71:c0:dd:c5:b8:55:72:a3:ec:3f:ac:08:bf: bd:19:11:5b:81:5e:4e:cd:6a:cb:0a:e6:57:e7:7f: 4e:c4:e5:05:58:2f:f4:0e:73:5f:01:49:58:44:f2: 14:15:b9:44:a8:04:9a:ec:b7:dc:aa:10:db:57:7c: 6e:29:1b:f3:3e:f2:47:7f:ce:75:65:9e:27:35:cc: 9b:67:08:48:64:ff:a7:f0:0e:ac:1f:93:ff:78:12: d2:b3:a6:77:02:6b:96:de:e9:f6:35:ff:80:7d:39: e5:54:98:0d:2c:55:f6:8b:a1:64:54:ae:d1:d9:ec: 1d:a4:ab:cb:2f:c2:e1:a9:a2:56:25:41:31:c6:34: 5c:47:98:95:9f:39:29:15:0b:e3:78:ac:fe:4d:5d: 8f:e5:26:90:30:3b:75:d0:04:28:0d:62:cf:7d:e1: c0:e2:2d:12:e0:eb:90:61:c0:27:c4:70:b2:07:f2: 08:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:1D:E8:FE:5B:71:05:76:56:C7:6A:65:A0:F6:10:CC:9E:3E:24:3E X509v3 Authority Key Identifier: keyid:25:BC:7D:4D:E7:7B:D0:1B:3D:19:15:87:69:6E:5A:FD:D8:CE:CD:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/FE8AECB2607511F0901D374BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 14.207.0.0/21 Signature Algorithm: sha256WithRSAEncryption 29:2b:d2:4b:86:8f:17:f9:4f:90:7d:32:7e:f4:7f:e0:10:22: 2e:4b:8b:3f:6c:98:90:c2:86:12:f2:13:ef:d5:d7:7b:a2:49: f8:99:72:6c:39:6c:48:9f:bd:df:30:5b:c3:e2:31:6c:cd:42: 97:66:6c:01:43:3c:5e:3b:86:62:b9:62:79:e6:1c:18:a2:8b: 41:f8:0c:17:48:d5:fc:2a:8a:a6:65:f9:8c:18:08:91:e5:60: 45:6f:65:c7:34:79:56:04:93:98:7b:cc:c5:03:58:80:e7:c8: 92:12:73:bd:97:71:8c:5b:51:74:11:dc:f5:9f:dc:19:84:5a: 13:4c:2d:ff:45:6e:1a:e8:6d:a1:69:a9:de:a9:a0:7e:42:24: 07:54:c3:78:ba:a2:c4:95:92:89:d8:dc:fa:76:e8:7c:04:84: 53:4f:f3:e5:f9:45:b9:b6:99:f4:5d:c3:a4:b8:bc:8e:47:57: 77:03:8d:88:a4:af:e3:ce:5c:c8:03:3f:95:bd:8d:00:2e:97: 70:9d:7a:e2:d3:3f:31:e5:21:13:7c:c6:c7:db:92:41:47:bf: 6e:53:6e:d9:f0:42:9a:b8:6e:ef:7a:05:c6:50:ac:b3:14:59: e8:bb:30:d6:a0:17:86:d5:51:8e:ea:4e:8a:5e:2d:2a:a1:0b: 95:2b:09:1d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBkEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc1NjExMTAvBgNVBAUTKDI1QkM3RDRERTc3QkQwMUIzRDE5MTU4NzY5NkU1QUZE RDhDRUNEMDQwHhcNMjUwODI3MDAwNDQyWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGFlNGI5YS00Nzc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArnhnQP2J7UeQ43kYlncOU9T37pmulrWwXyzdDo5akzu4mHKYeqHBgBHvJuae PLh+7XdsTrzzacT/XYqLRpUDT3fxmQ7GWM439R4pUnHA3cW4VXKj7D+sCL+9GRFb gV5OzWrLCuZX539OxOUFWC/0DnNfAUlYRPIUFblEqASa7LfcqhDbV3xuKRvzPvJH f851ZZ4nNcybZwhIZP+n8A6sH5P/eBLSs6Z3AmuW3un2Nf+AfTnlVJgNLFX2i6Fk VK7R2ewdpKvLL8LhqaJWJUExxjRcR5iVnzkpFQvjeKz+TV2P5SaQMDt10AQoDWLP feHA4i0S4OuQYcAnxHCyB/IIqwIDAQABo4IClTCCApEwHQYDVR0OBBYEFPQd6P5b cQV2VsdqZaD2EMyePiQ+MB8GA1UdIwQYMBaAFCW8fU3ne9AbPRkVh2luWv3Yzs0E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzU2MS9BMjZFMDZFMDA1 NEMxMUVDQkRCNEZFNDZDNEY5QUUwMi9KYng5VGVkNzBCczlHUldIYVc1YV9kak96 UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pieDlUZWQ3MEJzOUdSV0hhVzVhX2RqT3pRUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTc1NjEvQTI2RTA2RTAwNTRDMTFFQ0JEQjRGRTQ2QzRGOUFFMDIvRkU4QUVDQjI2 MDc1MTFGMDkwMUQzNzRCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAMOzwAwDQYJKoZIhvcNAQELBQADggEBACkr0kuGjxf5T5B9 Mn70f+AQIi5Liz9smJDChhLyE+/V13uiSfiZcmw5bEifvd8wW8PiMWzNQpdmbAFD PF47hmK5YnnmHBiii0H4DBdI1fwqiqZl+YwYCJHlYEVvZcc0eVYEk5h7zMUDWIDn yJISc72XcYxbUXQR3PWf3BmEWhNMLf9FbhrobaFpqd6poH5CJAdUw3i6osSVkonY 3Pp26HwEhFNP8+X5Rbm2mfRdw6S4vI5HV3cDjYikr+POXMgDP5W9jQAul3CdeuLT PzHlIRN8xsfbkkFHv25TbtnwQpq4bu96BcZQrLMUWei7MNagF4bVUY7qTopeLSqh C5UrCR0= -----END CERTIFICATE-----Generated at Mon Oct 20 16:05:30 2025 by rpki-client