$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC5DE/8762CD1A742211F0875CAC33C4F9AE02/C3CEEDC47DF011F097DBDD12C4F9AE02.roa File: C3CEEDC47DF011F097DBDD12C4F9AE02.roa (raw, json) Hash identifier: PAvwTfnZ/W9fr7RnaDWJUDQG4Z1oLxvvzVFavJSMKUc= Subject key identifier: 2A:F5:79:D3:7E:53:C6:78:A1:81:E6:05:93:AD:5C:6D:22:7B:1B:31 Certificate issuer: /CN=A91EC5DE/serialNumber=A6136E50E9498E049D0B4D2F1867FA1B1891C4EF Certificate serial: 2B Authority key identifier: A6:13:6E:50:E9:49:8E:04:9D:0B:4D:2F:18:67:FA:1B:18:91:C4:EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phNuUOlJjgSdC00vGGf6GxiRxO8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC5DE/8762CD1A742211F0875CAC33C4F9AE02/C3CEEDC47DF011F097DBDD12C4F9AE02.roa Signing time: Mon 13 Oct 2025 17:49:33 +0000 ROA not before: Mon 13 Oct 2025 17:49:32 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 154120 IP address blocks: 210.56.144.0/23 maxlen: 23 210.56.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC5DE/8762CD1A742211F0875CAC33C4F9AE02/phNuUOlJjgSdC00vGGf6GxiRxO8.crl rsync://rpki.apnic.net/member_repository/A91EC5DE/8762CD1A742211F0875CAC33C4F9AE02/phNuUOlJjgSdC00vGGf6GxiRxO8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phNuUOlJjgSdC00vGGf6GxiRxO8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:16:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43 (0x2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC5DE, serialNumber=A6136E50E9498E049D0B4D2F1867FA1B1891C4EF Validity Not Before: Oct 13 17:49:32 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68ed3bac-e00b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:77:ea:1f:97:c4:b0:75:77:b3:eb:56:e0:91: 23:64:b4:23:b4:6b:86:94:4a:ca:fc:3d:e3:d2:66: ac:36:ad:ec:bf:4d:a9:20:75:0c:70:78:db:fc:06: 25:db:bd:29:7e:7c:4e:e3:29:81:9d:2d:5a:2c:d5: cc:c4:43:d5:82:29:f3:fc:1a:c7:71:9e:15:90:e4: a1:6b:9e:b7:43:07:3a:92:78:72:f2:dc:2d:89:df: 3f:9e:07:93:0d:57:e9:39:28:35:cf:9f:be:2c:d5: 08:ee:46:d7:98:b0:c4:5e:b8:06:49:89:fa:de:a0: c5:7c:56:6e:e2:fe:30:40:01:8c:a8:8a:98:b9:72: d5:43:cf:2f:7b:db:9b:7a:9e:4f:47:07:ff:b2:63: 90:5c:60:62:45:3c:8b:ff:4b:10:af:cb:86:43:e6: 85:d5:2f:10:dd:31:a0:e2:15:fb:20:39:52:34:38: 2c:d8:7f:e3:d4:53:f1:80:cb:d8:c1:58:3e:ba:2c: ac:b4:42:d9:b1:90:81:0f:fe:b8:78:fe:e8:51:d2: a6:c0:dd:5f:4d:e1:fb:30:fe:2d:9c:ee:e4:b2:f6: 81:74:d7:de:f9:67:0d:2b:04:85:0b:94:05:fd:97: 8e:d3:bf:11:19:9d:53:ae:05:6b:1d:0b:1f:be:20: e0:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:F5:79:D3:7E:53:C6:78:A1:81:E6:05:93:AD:5C:6D:22:7B:1B:31 X509v3 Authority Key Identifier: keyid:A6:13:6E:50:E9:49:8E:04:9D:0B:4D:2F:18:67:FA:1B:18:91:C4:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC5DE/8762CD1A742211F0875CAC33C4F9AE02/phNuUOlJjgSdC00vGGf6GxiRxO8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phNuUOlJjgSdC00vGGf6GxiRxO8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC5DE/8762CD1A742211F0875CAC33C4F9AE02/C3CEEDC47DF011F097DBDD12C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.56.144.0/23 Signature Algorithm: sha256WithRSAEncryption 0b:31:47:c4:29:f0:36:b2:76:77:60:85:ca:ab:e0:9f:9c:43: ca:ea:54:5f:49:be:f6:be:7d:90:3b:cf:0a:e7:19:f6:31:37: 22:51:5f:f9:6c:5c:1c:3a:59:d0:ed:89:3c:99:e2:54:e3:f9: fb:08:71:94:ab:7b:82:ad:d8:35:d6:9b:dc:7f:54:94:48:1c: fc:db:bc:f0:b0:02:cb:45:3b:b7:8b:cc:9e:22:e1:d2:3f:81: 39:09:a1:20:56:14:c8:24:fe:6a:82:a1:b7:d2:1b:00:c1:d0: 8f:68:0e:1f:8b:cf:f4:91:ac:fd:d5:a5:74:d7:8a:07:72:a4: 4f:2e:d7:13:27:f9:aa:d8:f5:eb:e2:8b:c3:c3:82:1d:66:f0: be:52:1a:db:20:5d:bb:ce:11:63:95:ae:22:57:db:a5:ca:66: c3:3b:2e:b1:e9:76:73:c4:56:d8:e3:66:e5:ee:01:39:0d:5e: 11:30:7a:04:47:b6:fa:c3:ab:0e:90:72:84:be:c8:04:42:b7: 65:ed:ed:ba:27:18:f8:21:b4:83:fc:5d:06:28:4e:9a:f1:ce: 67:79:bb:4a:aa:1b:20:82:e8:24:d7:4c:e2:87:ee:7c:6e:b5: 7b:39:02:59:79:a8:fe:21:50:ce:3d:b7:7d:33:0f:f9:72:54: 2e:00:f4:bc -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBKzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QzVERTExMC8GA1UEBRMoQTYxMzZFNTBFOTQ5OEUwNDlEMEI0RDJGMTg2N0ZBMUIx ODkxQzRFRjAeFw0yNTEwMTMxNzQ5MzJaFw0yNjEyMDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4ZWQzYmFjLWUwMGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKd+ofl8SwdXez61bgkSNktCO0a4aUSsr8PePSZqw2rey/TakgdQxweNv8BiXb vSl+fE7jKYGdLVos1czEQ9WCKfP8GsdxnhWQ5KFrnrdDBzqSeHLy3C2J3z+eB5MN V+k5KDXPn74s1QjuRteYsMReuAZJifreoMV8Vm7i/jBAAYyoipi5ctVDzy9725t6 nk9HB/+yY5BcYGJFPIv/SxCvy4ZD5oXVLxDdMaDiFfsgOVI0OCzYf+PUU/GAy9jB WD66LKy0QtmxkIEP/rh4/uhR0qbA3V9N4fsw/i2c7uSy9oF01975Zw0rBIULlAX9 l47TvxEZnVOuBWsdCx++IOBtAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUKvV5035T xnihgeYFk61cbSJ7GzEwHwYDVR0jBBgwFoAUphNuUOlJjgSdC00vGGf6GxiRxO8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVDNURFLzg3NjJDRDFBNzQy MjExRjA4NzVDQUMzM0M0RjlBRTAyL3BoTnVVT2xKamdTZEMwMHZHR2Y2R3hpUnhP OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcGhOdVVPbEpqZ1NkQzAwdkdHZjZHeGlSeE84LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzVERS84NzYyQ0QxQTc0MjIxMUYwODc1Q0FDMzNDNEY5QUUwMi9DM0NFRURDNDdE RjAxMUYwOTdEQkREMTJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAdI4kDANBgkqhkiG9w0BAQsFAAOCAQEACzFHxCnwNrJ2d2CF yqvgn5xDyupUX0m+9r59kDvPCucZ9jE3IlFf+WxcHDpZ0O2JPJniVOP5+whxlKt7 gq3YNdab3H9UlEgc/Nu88LACy0U7t4vMniLh0j+BOQmhIFYUyCT+aoKht9IbAMHQ j2gOH4vP9JGs/dWldNeKB3KkTy7XEyf5qtj16+KLw8OCHWbwvlIa2yBdu84RY5Wu Ilfbpcpmwzsusel2c8RW2ONm5e4BOQ1eETB6BEe2+sOrDpByhL7IBEK3Ze3tuicY +CG0g/xdBihOmvHOZ3m7SqobIILoJNdM4ofufG61ezkCWXmo/iFQzj23fTMP+XJU LgD0vA== -----END CERTIFICATE-----Generated at Mon Oct 20 16:47:47 2025 by rpki-client