$ rpki-client -vvf rpki.apnic.net/member_repository/A91B477B/1C256270725011EBB648F84EC4F9AE02/535436609D0511F0BAF1837CC4F9AE02.roa File: 535436609D0511F0BAF1837CC4F9AE02.roa (raw, json) Hash identifier: 5BOUZnIceKppG/eOWr9McqTQMkFI46F0FXPhmOPQ3MY= Subject key identifier: 02:7F:E3:D4:89:0D:49:80:3E:1B:B1:B2:F5:96:91:4E:3B:E8:BC:F3 Certificate issuer: /CN=A91B477B/serialNumber=1FC4DFD00DAC34A8EB8463D3951C22A345837AC9 Certificate serial: 06E3 Authority key identifier: 1F:C4:DF:D0:0D:AC:34:A8:EB:84:63:D3:95:1C:22:A3:45:83:7A:C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8Tf0A2sNKjrhGPTlRwio0WDesk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B477B/1C256270725011EBB648F84EC4F9AE02/535436609D0511F0BAF1837CC4F9AE02.roa Signing time: Mon 29 Sep 2025 07:24:25 +0000 ROA not before: Mon 29 Sep 2025 07:24:25 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 31898 IP address blocks: 202.151.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B477B/1C256270725011EBB648F84EC4F9AE02/H8Tf0A2sNKjrhGPTlRwio0WDesk.crl rsync://rpki.apnic.net/member_repository/A91B477B/1C256270725011EBB648F84EC4F9AE02/H8Tf0A2sNKjrhGPTlRwio0WDesk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8Tf0A2sNKjrhGPTlRwio0WDesk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Oct 2025 21:59:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1763 (0x6e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B477B, serialNumber=1FC4DFD00DAC34A8EB8463D3951C22A345837AC9 Validity Not Before: Sep 29 07:24:25 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68da3428-dff0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:9c:ca:3f:e5:a3:fa:5c:21:51:e8:81:44:cb: 40:57:70:0f:81:dd:5c:50:26:a5:4f:4b:e3:19:42: b3:e7:ea:a7:5d:33:5c:72:b7:07:3d:29:fe:09:16: a0:97:8a:52:8f:af:01:81:94:45:eb:8d:be:df:fe: 5c:01:21:86:bb:0b:a7:e1:af:51:9a:6e:26:5e:e8: c9:21:15:3c:65:0c:5b:f7:e4:09:be:98:83:00:57: 25:fd:49:97:ac:d6:92:dc:9f:65:76:31:2c:18:95: 57:be:6d:45:cc:b1:12:57:85:bb:eb:14:2b:33:f9: 65:e2:1f:8c:22:ed:e4:37:2a:43:1d:0b:4c:42:e2: 8c:2e:c4:b9:7e:3f:3c:2a:cd:5a:5b:a3:b9:00:64: e3:e5:46:f3:5c:fb:e2:0b:47:d6:2d:6e:81:f9:d9: 62:ae:2e:3d:81:2a:d6:2a:8e:95:fd:8f:15:ec:ef: cc:60:bc:78:32:9a:ed:13:57:fb:c2:e7:37:67:b4: 7b:8a:b3:44:46:3d:cc:17:32:87:31:fa:b9:18:ad: 20:90:c7:a6:72:cc:23:a7:27:ef:24:6d:a5:7f:db: 39:84:c3:c7:e6:79:20:95:af:dc:1b:3b:d3:14:32: 0f:55:0d:04:7b:2f:e3:af:f2:34:a3:05:f0:5c:c7: 07:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:7F:E3:D4:89:0D:49:80:3E:1B:B1:B2:F5:96:91:4E:3B:E8:BC:F3 X509v3 Authority Key Identifier: keyid:1F:C4:DF:D0:0D:AC:34:A8:EB:84:63:D3:95:1C:22:A3:45:83:7A:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B477B/1C256270725011EBB648F84EC4F9AE02/H8Tf0A2sNKjrhGPTlRwio0WDesk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8Tf0A2sNKjrhGPTlRwio0WDesk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B477B/1C256270725011EBB648F84EC4F9AE02/535436609D0511F0BAF1837CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.151.34.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:92:35:83:49:c4:f0:56:d5:74:96:4e:b1:69:ef:3d:3e:24: 9d:0c:b8:9e:8b:c1:aa:52:50:bd:7a:69:c0:07:45:56:25:9d: 34:3b:aa:88:af:0f:a3:00:38:43:45:80:80:0f:c1:b1:b5:ba: 90:ac:ac:71:75:00:50:bb:91:72:b0:48:39:12:5b:c3:3c:6d: 72:6b:c3:05:3c:94:f3:bb:89:f0:53:a5:5d:0c:f6:d0:3e:34: 81:4e:25:31:36:62:d2:76:ef:1e:e3:17:ad:01:b5:04:80:34: a5:29:89:99:b9:9d:19:74:d4:97:20:05:68:05:bf:39:1c:7d: 12:ba:02:7b:68:ad:e5:d8:11:8d:24:21:58:a2:c1:72:c8:94: 22:71:41:6e:58:ab:26:b7:fe:41:33:72:18:60:25:9b:c1:c3: ba:1a:ff:04:df:96:88:7d:83:40:7e:c1:67:83:95:f5:33:65: 27:ab:49:c0:e6:da:c9:92:e8:2e:0f:29:dc:87:f6:56:bf:0c: 3b:4b:42:94:7a:71:15:96:83:0e:f0:48:b1:bb:f1:55:87:e3: e7:87:fe:40:14:95:f3:7f:cd:ed:91:60:d2:dc:93:32:6b:c0: 0e:d9:7f:9b:8b:ee:cd:5b:91:a6:6e:da:0e:a2:8e:cd:5e:09: 80:83:f0:36 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBuMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQ3N0IxMTAvBgNVBAUTKDFGQzRERkQwMERBQzM0QThFQjg0NjNEMzk1MUMyMkEz NDU4MzdBQzkwHhcNMjUwOTI5MDcyNDI1WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGRhMzQyOC1kZmYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzJzKP+Wj+lwhUeiBRMtAV3APgd1cUCalT0vjGUKz5+qnXTNccrcHPSn+CRag l4pSj68BgZRF642+3/5cASGGuwun4a9Rmm4mXujJIRU8ZQxb9+QJvpiDAFcl/UmX rNaS3J9ldjEsGJVXvm1FzLESV4W76xQrM/ll4h+MIu3kNypDHQtMQuKMLsS5fj88 Ks1aW6O5AGTj5UbzXPviC0fWLW6B+dliri49gSrWKo6V/Y8V7O/MYLx4MprtE1f7 wuc3Z7R7irNERj3MFzKHMfq5GK0gkMemcswjpyfvJG2lf9s5hMPH5nkgla/cGzvT FDIPVQ0Eey/jr/I0owXwXMcHGQIDAQABo4IClTCCApEwHQYDVR0OBBYEFAJ/49SJ DUmAPhuxsvWWkU476LzzMB8GA1UdIwQYMBaAFB/E39ANrDSo64Rj05UcIqNFg3rJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDc3Qi8xQzI1NjI3MDcy NTAxMUVCQjY0OEY4NEVDNEY5QUUwMi9IOFRmMEEyc05LanJoR1BUbFJ3aW8wV0Rl c2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0g4VGYwQTJzTktqcmhHUFRsUndpbzBXRGVzay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjQ3N0IvMUMyNTYyNzA3MjUwMTFFQkI2NDhGODRFQzRGOUFFMDIvNTM1NDM2NjA5 RDA1MTFGMEJBRjE4MzdDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADKlyIwDQYJKoZIhvcNAQELBQADggEBAH+SNYNJxPBW1XSW TrFp7z0+JJ0MuJ6LwapSUL16acAHRVYlnTQ7qoivD6MAOENFgIAPwbG1upCsrHF1 AFC7kXKwSDkSW8M8bXJrwwU8lPO7ifBTpV0M9tA+NIFOJTE2YtJ27x7jF60BtQSA NKUpiZm5nRl01JcgBWgFvzkcfRK6AntoreXYEY0kIViiwXLIlCJxQW5Yqya3/kEz chhgJZvBw7oa/wTfloh9g0B+wWeDlfUzZSerScDm2smS6C4PKdyH9la/DDtLQpR6 cRWWgw7wSLG78VWH4+eH/kAUlfN/ze2RYNLckzJrwA7Zf5uL7s1bkaZu2g6ijs1e CYCD8DY= -----END CERTIFICATE-----Generated at Thu Oct 9 01:03:46 2025 by rpki-client