$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC25F/FC1FBE92A27611F0AF63281BC4F9AE02/4AF261A4A27811F0898CD81DC4F9AE02.roa File: 4AF261A4A27811F0898CD81DC4F9AE02.roa (raw, json) Hash identifier: gfhnOPzDyM+Fg9J0TvNJzwIQWU3jT5AWtZ4rTSQDxgE= Subject key identifier: B5:34:D7:EE:F5:20:06:F1:23:FB:3B:36:D2:D5:64:59:C2:16:3A:73 Certificate issuer: /CN=A91FC25F/serialNumber=486CB816BE3A5E03CB72772988A0DE0EA972CDAA Certificate serial: 02 Authority key identifier: 48:6C:B8:16:BE:3A:5E:03:CB:72:77:29:88:A0:DE:0E:A9:72:CD:AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SGy4Fr46XgPLcncpiKDeDqlyzao.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC25F/FC1FBE92A27611F0AF63281BC4F9AE02/4AF261A4A27811F0898CD81DC4F9AE02.roa Signing time: Mon 06 Oct 2025 05:49:59 +0000 ROA not before: Mon 06 Oct 2025 05:49:59 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 154273 IP address blocks: 43.229.18.0/23 maxlen: 23 43.229.18.0/24 maxlen: 24 43.229.19.0/24 maxlen: 24 2001:df6:2a40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC25F/FC1FBE92A27611F0AF63281BC4F9AE02/SGy4Fr46XgPLcncpiKDeDqlyzao.crl rsync://rpki.apnic.net/member_repository/A91FC25F/FC1FBE92A27611F0AF63281BC4F9AE02/SGy4Fr46XgPLcncpiKDeDqlyzao.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SGy4Fr46XgPLcncpiKDeDqlyzao.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:37:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC25F, serialNumber=486CB816BE3A5E03CB72772988A0DE0EA972CDAA Validity Not Before: Oct 6 05:49:59 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68e35886-3d87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e8:72:a2:2f:32:b6:4a:5c:f2:14:cd:29:54: 9c:4f:5e:17:4f:fe:0a:de:8f:dd:ee:85:c4:ac:07: cd:e6:64:3c:d5:c6:93:08:05:aa:71:96:d5:1d:83: 71:18:c3:6f:57:26:f7:40:40:78:89:d5:6e:4c:70: 2f:ca:48:e2:41:c6:ff:74:64:37:1d:aa:0f:08:9f: b0:b0:27:82:6f:ed:d4:7f:55:b7:85:46:7e:ca:62: 8d:ce:c3:cf:84:9b:58:02:86:8d:45:eb:8c:0a:8c: 2f:f9:16:78:c6:34:eb:41:5e:b5:6c:8e:41:09:31: 18:39:4f:1d:6f:43:78:bf:e2:1a:2e:2f:e3:fb:c0: 18:2b:f2:12:52:6d:d9:63:3f:f3:6d:1f:26:a1:e5: df:95:27:16:81:57:02:66:a1:4c:9e:14:35:ac:90: c0:1f:ab:e2:5a:ae:99:3f:62:c2:1e:95:e4:7a:7a: 0f:b8:9c:a4:9b:4e:71:9e:aa:b0:ff:85:17:d6:55: a0:ac:15:d9:a6:75:1b:09:5c:cc:f2:2a:ba:82:57: b2:bb:34:53:82:60:72:b3:87:7c:7c:11:53:23:25: dd:35:20:bb:c6:d3:4a:6e:2f:20:69:54:b5:a6:c2: 15:20:66:25:b5:99:aa:43:8f:ff:9f:e7:59:cc:2b: ff:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:34:D7:EE:F5:20:06:F1:23:FB:3B:36:D2:D5:64:59:C2:16:3A:73 X509v3 Authority Key Identifier: keyid:48:6C:B8:16:BE:3A:5E:03:CB:72:77:29:88:A0:DE:0E:A9:72:CD:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC25F/FC1FBE92A27611F0AF63281BC4F9AE02/SGy4Fr46XgPLcncpiKDeDqlyzao.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SGy4Fr46XgPLcncpiKDeDqlyzao.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC25F/FC1FBE92A27611F0AF63281BC4F9AE02/4AF261A4A27811F0898CD81DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.229.18.0/23 IPv6: 2001:df6:2a40::/48 Signature Algorithm: sha256WithRSAEncryption 38:c4:d9:b4:97:27:9f:c4:5b:f2:59:ab:aa:1d:f0:3e:4e:10: b6:e9:d1:9c:f0:07:e5:cc:61:f9:14:f0:ba:fa:6b:3f:75:31: 2a:fa:4a:ef:c6:ec:ab:47:4b:9f:9e:39:59:9e:70:39:ad:6b: 8b:23:cd:54:18:ab:31:b7:85:1f:12:81:1b:6a:a4:4e:18:8f: 3c:36:14:12:b6:5c:5d:06:3e:92:40:7c:ab:3e:79:a3:06:40: 05:2e:d2:c3:eb:b7:f5:92:13:61:74:73:4c:c6:c5:af:c6:54: c4:e7:3c:8d:27:82:10:0d:c2:a7:67:ac:b6:6c:28:b1:34:a1: df:98:56:ba:02:43:72:17:ba:4e:8f:a2:e9:9b:05:eb:dd:78: f3:fb:1c:00:92:5c:79:20:b2:40:cc:e3:1f:8e:0e:10:c8:e6: 60:cb:5c:78:a4:fb:b9:55:68:ca:17:e8:8a:9b:d2:9a:28:7f: 6f:ba:02:0d:14:75:44:b7:9b:3f:fa:23:bf:0d:3f:f1:e0:1b: 8a:47:c3:b8:1a:79:05:59:25:1d:5d:8b:0f:2d:1f:01:c4:e4: cd:1f:84:a2:2a:ed:85:99:89:87:44:d9:ce:f6:bd:43:05:4d: eb:a9:f0:fe:ac:fb:c9:19:94:3a:b9:ee:92:2e:e3:2b:43:20: 79:94:7a:f4 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QzI1RjExMC8GA1UEBRMoNDg2Q0I4MTZCRTNBNUUwM0NCNzI3NzI5ODhBMERFMEVB OTcyQ0RBQTAeFw0yNTEwMDYwNTQ5NTlaFw0yNjEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY4ZTM1ODg2LTNkODcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCv6HKiLzK2SlzyFM0pVJxPXhdP/grej93uhcSsB83mZDzVxpMIBapxltUdg3EY w29XJvdAQHiJ1W5McC/KSOJBxv90ZDcdqg8In7CwJ4Jv7dR/VbeFRn7KYo3Ow8+E m1gCho1F64wKjC/5FnjGNOtBXrVsjkEJMRg5Tx1vQ3i/4houL+P7wBgr8hJSbdlj P/NtHyah5d+VJxaBVwJmoUyeFDWskMAfq+Jarpk/YsIeleR6eg+4nKSbTnGeqrD/ hRfWVaCsFdmmdRsJXMzyKrqCV7K7NFOCYHKzh3x8EVMjJd01ILvG00puLyBpVLWm whUgZiW1mapDj/+f51nMK/+NAgMBAAGjggKmMIICojAdBgNVHQ4EFgQUtTTX7vUg BvEj+zs20tVkWcIWOnMwHwYDVR0jBBgwFoAUSGy4Fr46XgPLcncpiKDeDqlyzaow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZDMjVGL0ZDMUZCRTkyQTI3 NjExRjBBRjYzMjgxQkM0RjlBRTAyL1NHeTRGcjQ2WGdQTGNuY3BpS0RlRHFseXph by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvU0d5NEZyNDZYZ1BMY25jcGlLRGVEcWx5emFvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QzI1Ri9GQzFGQkU5MkEyNzYxMUYwQUY2MzI4MUJDNEY5QUUwMi80QUYyNjFBNEEy NzgxMUYwODk4Q0Q4MURDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEASvlEjAPBAIAAjAJAwcAIAEN9ipAMA0GCSqGSIb3DQEBCwUA A4IBAQA4xNm0lyefxFvyWauqHfA+ThC26dGc8AflzGH5FPC6+ms/dTEq+krvxuyr R0ufnjlZnnA5rWuLI81UGKsxt4UfEoEbaqROGI88NhQStlxdBj6SQHyrPnmjBkAF LtLD67f1khNhdHNMxsWvxlTE5zyNJ4IQDcKnZ6y2bCixNKHfmFa6AkNyF7pOj6Lp mwXr3Xjz+xwAklx5ILJAzOMfjg4QyOZgy1x4pPu5VWjKF+iKm9KaKH9vugINFHVE t5s/+iO/DT/x4BuKR8O4GnkFWSUdXYsPLR8BxOTNH4SiKu2FmYmHRNnO9r1DBU3r qfD+rPvJGZQ6ue6SLuMrQyB5lHr0 -----END CERTIFICATE-----Generated at Mon Oct 20 14:55:42 2025 by rpki-client