$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/48DA881CA5FF11F08004B67CC4F9AE02.roa File: 48DA881CA5FF11F08004B67CC4F9AE02.roa (raw, json) Hash identifier: 5/hHV8J+lxETAhi9OjQgXXrOD+uCMVkbm4MOQS088qU= Subject key identifier: 1F:04:7D:C5:AD:CA:9C:EC:13:49:CF:D9:15:91:C3:05:B7:34:74:62 Certificate issuer: /CN=A91E3493/serialNumber=31311CFCC1401BD6D0E6B6B39167B65C21092114 Certificate serial: 10 Authority key identifier: 31:31:1C:FC:C1:40:1B:D6:D0:E6:B6:B3:91:67:B6:5C:21:09:21:14 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/48DA881CA5FF11F08004B67CC4F9AE02.roa Signing time: Fri 10 Oct 2025 17:33:51 +0000 ROA not before: Fri 10 Oct 2025 17:33:51 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 396982 IP address blocks: 152.65.192.0/18 maxlen: 21 152.65.192.0/19 maxlen: 24 152.65.224.0/20 maxlen: 24 152.65.240.0/21 maxlen: 24 152.65.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.crl rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Oct 2025 01:51:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3493, serialNumber=31311CFCC1401BD6D0E6B6B39167B65C21092114 Validity Not Before: Oct 10 17:33:51 2025 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=68e9437e-353d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f9:bd:19:2a:23:0e:39:f1:6d:ce:0c:fe:65: 64:1b:29:aa:e4:6c:40:b9:39:fd:ed:d4:26:9d:fd: 29:d7:6f:51:c9:e3:b9:3c:f2:f3:95:b7:41:0c:8a: 37:c6:5d:4b:2c:68:cb:fb:f0:8d:dc:de:66:90:08: 64:c7:63:23:28:c7:01:82:8c:1e:7a:a8:b1:5b:f3: c2:1f:ff:0c:e8:af:2c:5e:09:a3:a8:09:70:74:09: 5c:d4:43:09:bf:ed:a7:a8:9d:75:14:d1:2c:e6:91: 4e:f0:fb:fa:1d:63:55:8f:9a:71:af:9f:7a:95:61: d2:4a:c1:d2:c9:7a:46:84:a4:95:bc:dd:bc:3f:77: 82:d6:e4:5f:78:56:3e:8c:f6:de:f1:cc:c0:40:cb: aa:09:17:d8:be:60:0b:06:09:84:30:c4:7d:70:f9: 20:d0:2a:34:ea:ab:5a:96:ad:b3:0e:d9:2b:97:db: 63:d6:a3:2c:13:22:66:e5:fb:91:b8:79:75:dc:c6: d5:6e:73:c8:fb:22:c9:c0:6a:b2:8e:5f:cf:08:00: 4d:49:d2:6e:d2:81:d0:72:0f:ef:14:28:99:ac:37: fd:43:70:3d:e6:7c:4c:19:a0:a8:71:e5:6b:fe:ec: 40:03:2e:0d:77:22:56:89:ab:c8:d9:e6:e3:e7:f2: fc:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:04:7D:C5:AD:CA:9C:EC:13:49:CF:D9:15:91:C3:05:B7:34:74:62 X509v3 Authority Key Identifier: keyid:31:31:1C:FC:C1:40:1B:D6:D0:E6:B6:B3:91:67:B6:5C:21:09:21:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/48DA881CA5FF11F08004B67CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 152.65.192.0/18 Signature Algorithm: sha256WithRSAEncryption 7a:a2:19:7a:fc:34:12:be:5e:50:1c:52:e0:26:75:e8:f9:a0: 29:7e:f0:d2:51:d5:01:0e:1d:4f:4b:43:e5:e2:23:a1:37:dd: ad:33:7a:0a:0a:c0:96:f7:ca:97:84:2b:70:3d:c4:f4:62:3f: 41:fe:5d:48:ab:5b:3f:18:06:84:85:29:aa:88:ed:93:b3:7e: 6d:55:73:09:26:92:04:a6:7f:d8:24:1e:aa:71:e5:dd:37:c2: 2e:1c:98:5a:95:6d:07:27:47:04:49:8d:71:a5:93:a1:ce:b2: 5a:be:26:10:8e:48:7d:e1:29:14:44:95:bf:34:7b:db:1c:3e: c9:db:c7:06:b1:12:cc:89:31:1f:2c:44:f4:7f:e1:15:04:7e: b3:e7:ff:43:35:ae:29:2c:46:3d:ee:8a:f0:7b:9e:aa:65:2f: bd:54:86:7b:12:1f:df:09:06:00:9d:4d:8c:26:f9:29:12:1c: 1f:c5:2d:bb:67:62:8d:f2:bc:2d:71:eb:d5:2b:41:30:d8:72: 21:49:63:de:1e:13:0e:31:0a:af:63:07:d1:8f:19:30:36:c5: ca:1c:15:01:07:95:ca:1b:24:0d:0f:4b:3c:18:46:f8:44:7c: 63:a5:09:ea:92:20:d2:f7:0e:94:09:b2:bc:cb:07:e4:47:6a: 2a:e2:5b:4d -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MzQ5MzExMC8GA1UEBRMoMzEzMTFDRkNDMTQwMUJENkQwRTZCNkIzOTE2N0I2NUMy MTA5MjExNDAeFw0yNTEwMTAxNzMzNTFaFw0yNjAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4ZTk0MzdlLTM1M2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCx+b0ZKiMOOfFtzgz+ZWQbKarkbEC5Of3t1Cad/SnXb1HJ47k88vOVt0EMijfG XUssaMv78I3c3maQCGTHYyMoxwGCjB56qLFb88If/wzoryxeCaOoCXB0CVzUQwm/ 7aeonXUU0SzmkU7w+/odY1WPmnGvn3qVYdJKwdLJekaEpJW83bw/d4LW5F94Vj6M 9t7xzMBAy6oJF9i+YAsGCYQwxH1w+SDQKjTqq1qWrbMO2SuX22PWoywTImbl+5G4 eXXcxtVuc8j7IsnAarKOX88IAE1J0m7SgdByD+8UKJmsN/1DcD3mfEwZoKhx5Wv+ 7EADLg13IlaJq8jZ5uPn8vxvAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUHwR9xa3K nOwTSc/ZFZHDBbc0dGIwHwYDVR0jBBgwFoAUMTEc/MFAG9bQ5razkWe2XCEJIRQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUzNDkzL0U1MkMxNEMwOUZG QTExRjBCQUQ1MEI2MUM0RjlBRTAyL01URWNfTUZBRzliUTVyYXprV2UyWENFSklS US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTVRFY19NRkFHOWJRNXJhemtXZTJYQ0VKSVJRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzQ5My9FNTJDMTRDMDlGRkExMUYwQkFENTBCNjFDNEY5QUUwMi80OERBODgxQ0E1 RkYxMUYwODAwNEI2N0NDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEBphBwDANBgkqhkiG9w0BAQsFAAOCAQEAeqIZevw0Er5eUBxS 4CZ16PmgKX7w0lHVAQ4dT0tD5eIjoTfdrTN6CgrAlvfKl4QrcD3E9GI/Qf5dSKtb PxgGhIUpqojtk7N+bVVzCSaSBKZ/2CQeqnHl3TfCLhyYWpVtBydHBEmNcaWToc6y Wr4mEI5IfeEpFESVvzR72xw+ydvHBrESzIkxHyxE9H/hFQR+s+f/QzWuKSxGPe6K 8HueqmUvvVSGexIf3wkGAJ1NjCb5KRIcH8Utu2dijfK8LXHr1StBMNhyIUlj3h4T DjEKr2MH0Y8ZMDbFyhwVAQeVyhskDQ9LPBhG+ER8Y6UJ6pIg0vcOlAmyvMsH5Edq KuJbTQ== -----END CERTIFICATE-----Generated at Sat Oct 11 14:15:49 2025 by rpki-client