$ rpki-client -vvf rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/D1A4CFBA4FBE11EF97812B80C4F9AE02.roa File: D1A4CFBA4FBE11EF97812B80C4F9AE02.roa (raw, json) Hash identifier: /TyJbdztz4Y61/Gz2zhowON+Tt9+b5wqgCKpbZ339lw= Subject key identifier: 2A:BF:26:25:81:E9:61:8F:78:36:F9:79:F1:9B:A1:7C:D7:85:CD:DF Certificate issuer: /CN=A91E91BC/serialNumber=6D5D50E88B9D65E8AFDA28C2CEA6150127038608 Certificate serial: 034F Authority key identifier: 6D:5D:50:E8:8B:9D:65:E8:AF:DA:28:C2:CE:A6:15:01:27:03:86:08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/D1A4CFBA4FBE11EF97812B80C4F9AE02.roa Signing time: Thu 05 Jun 2025 01:08:20 +0000 ROA not before: Thu 05 Jun 2025 01:08:20 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 7545 IP address blocks: 202.12.90.0/24 maxlen: 24 203.14.156.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.crl rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:05:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 847 (0x34f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E91BC, serialNumber=6D5D50E88B9D65E8AFDA28C2CEA6150127038608 Validity Not Before: Jun 5 01:08:20 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=6840ee04-a7d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:bf:b2:4c:1a:32:cc:d1:1b:52:05:c5:7c:f8: 6e:8c:99:09:0a:13:ad:06:c2:9f:ff:42:78:53:16: 69:21:eb:1b:45:7d:26:ff:c3:0c:aa:e6:f9:30:40: 90:86:4b:e6:a5:cf:02:86:23:32:08:e5:ad:c2:0f: 23:d2:93:d1:6b:7e:31:e7:7b:b3:36:a0:cf:5f:e1: c4:97:ca:df:71:d6:ae:76:aa:47:f5:19:66:d1:8e: bb:7d:4e:e9:53:5d:77:dc:8f:7b:64:87:e5:de:aa: c8:1f:f2:5e:f9:f1:75:a5:d9:3b:f1:c6:e4:ee:c3: 36:4e:7b:4a:ee:d2:fd:80:f1:7c:e0:87:09:93:16: 33:46:94:78:95:a8:68:59:af:df:49:3a:5e:3f:ff: 3e:ae:1e:10:5f:56:bc:74:54:19:3f:1d:5c:fc:7e: d6:b4:5b:16:0f:a2:d2:cf:15:e7:d0:a6:9b:43:34: 50:92:f1:f9:df:2a:12:86:06:08:75:c7:77:82:b8: bb:87:09:58:7e:1c:f7:45:ca:a8:e4:f7:e5:c1:1d: e1:f9:f0:3c:d5:8d:fa:e0:cf:ac:e9:83:11:36:af: 44:73:06:d1:02:16:e7:e3:d1:f6:ea:78:2a:27:06: 47:98:cd:eb:7c:79:31:05:79:3c:5c:c4:fd:87:3a: db:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:BF:26:25:81:E9:61:8F:78:36:F9:79:F1:9B:A1:7C:D7:85:CD:DF X509v3 Authority Key Identifier: keyid:6D:5D:50:E8:8B:9D:65:E8:AF:DA:28:C2:CE:A6:15:01:27:03:86:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/D1A4CFBA4FBE11EF97812B80C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.12.90.0/24 203.14.156.0/23 Signature Algorithm: sha256WithRSAEncryption 89:84:3d:bb:50:2c:77:89:42:c3:f7:40:88:d2:9a:ca:d5:f3: 07:2e:f5:51:6d:01:08:21:64:62:59:ba:dd:c5:f3:5a:26:f6: fb:b5:cc:b0:3a:d2:e6:28:6b:4b:e2:19:56:77:b1:fa:6b:d7: f8:76:b9:39:1b:c2:61:32:37:07:3e:85:90:a9:5e:17:66:a1: cb:5a:e8:59:13:1c:0c:10:9d:61:75:26:2a:67:38:13:ef:5e: ec:20:cb:05:3a:b9:03:3c:9f:de:f4:16:bb:07:8d:ec:2d:95: 55:7b:1f:4a:7c:be:f5:13:3e:27:a5:be:22:75:7e:ab:70:c2: 9b:6d:60:39:43:eb:02:96:e9:ee:10:c8:c9:b7:29:19:5e:f7: b0:1d:42:dc:51:ed:6d:fc:d9:57:90:b8:14:09:1d:ce:bb:1d: ac:03:d8:62:d8:c6:f7:5e:8b:7a:3b:be:b0:1a:44:6c:2f:78: cd:29:72:04:71:81:10:8f:17:3f:c6:bb:29:f0:70:66:20:aa: c2:92:06:79:ff:5e:a7:e6:2e:26:e8:ee:b8:2e:ad:82:48:28: 83:36:c1:8c:68:fd:b1:1a:81:89:02:75:6a:c7:72:f1:24:16: 8a:f5:34:cb:7d:58:41:39:e4:a4:f7:bb:7e:09:cc:49:60:4f: b3:b2:3e:90 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICA08wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTkxQkMxMTAvBgNVBAUTKDZENUQ1MEU4OEI5RDY1RThBRkRBMjhDMkNFQTYxNTAx MjcwMzg2MDgwHhcNMjUwNjA1MDEwODIwWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODQwZWUwNC1hN2QwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn7+yTBoyzNEbUgXFfPhujJkJChOtBsKf/0J4UxZpIesbRX0m/8MMqub5MECQ hkvmpc8ChiMyCOWtwg8j0pPRa34x53uzNqDPX+HEl8rfcdaudqpH9Rlm0Y67fU7p U1133I97ZIfl3qrIH/Je+fF1pdk78cbk7sM2TntK7tL9gPF84IcJkxYzRpR4laho Wa/fSTpeP/8+rh4QX1a8dFQZPx1c/H7WtFsWD6LSzxXn0KabQzRQkvH53yoShgYI dcd3gri7hwlYfhz3Rcqo5PflwR3h+fA81Y364M+s6YMRNq9EcwbRAhbn49H26ngq JwZHmM3rfHkxBXk8XMT9hzrbkwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFCq/JiWB 6WGPeDb5efGboXzXhc3fMB8GA1UdIwQYMBaAFG1dUOiLnWXor9oows6mFQEnA4YI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTFCQy9BRTQ0RDI0QURC RTkxMUVDOTUxMTA1MTVDNEY5QUUwMi9iVjFRNkl1ZFplaXYyaWpDenFZVkFTY0Ro Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JWMVE2SXVkWmVpdjJpakN6cVlWQVNjRGhnZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTkxQkMvQUU0NEQyNEFEQkU5MTFFQzk1MTEwNTE1QzRGOUFFMDIvRDFBNENGQkE0 RkJFMTFFRjk3ODEyQjgwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBADKDFoDBAHLDpwwDQYJKoZIhvcNAQELBQADggEBAImEPbtQ LHeJQsP3QIjSmsrV8wcu9VFtAQghZGJZut3F81om9vu1zLA60uYoa0viGVZ3sfpr 1/h2uTkbwmEyNwc+hZCpXhdmocta6FkTHAwQnWF1JipnOBPvXuwgywU6uQM8n970 FrsHjewtlVV7H0p8vvUTPielviJ1fqtwwpttYDlD6wKW6e4QyMm3KRle97AdQtxR 7W382VeQuBQJHc67HawD2GLYxvdei3o7vrAaRGwveM0pcgRxgRCPFz/GuynwcGYg qsKSBnn/XqfmLibo7rgurYJIKIM2wYxo/bEagYkCdWrHcvEkFor1NMt9WEE55KT3 u34JzElgT7OyPpA= -----END CERTIFICATE-----Generated at Mon Oct 20 19:13:20 2025 by rpki-client