$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/5EDC2B56F27E11EE8704D12FC4F9AE02.roa File: 5EDC2B56F27E11EE8704D12FC4F9AE02.roa (raw, json) Hash identifier: IkaJ8i577C8HJn9L10GXsDg7dnEgDNc7V/0u1lmvtUc= Subject key identifier: C1:39:BC:A0:F9:E8:C4:E4:BB:BC:15:9B:47:23:14:D5:FE:63:67:1C Certificate issuer: /CN=A91F0EBF/serialNumber=3ACCB69539AC9F4288BCD0F0A54250D592F540D4 Certificate serial: 221D Authority key identifier: 3A:CC:B6:95:39:AC:9F:42:88:BC:D0:F0:A5:42:50:D5:92:F5:40:D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/5EDC2B56F27E11EE8704D12FC4F9AE02.roa Signing time: Thu 02 Oct 2025 16:13:41 +0000 ROA not before: Thu 02 Oct 2025 16:13:41 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 14618 IP address blocks: 43.230.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.crl rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Oct 2025 15:56:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8733 (0x221d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0EBF, serialNumber=3ACCB69539AC9F4288BCD0F0A54250D592F540D4 Validity Not Before: Oct 2 16:13:41 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68dea4b5-8c52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:7a:cd:86:3b:d5:97:b0:d7:6b:ac:06:9b:10: 6a:06:72:ef:72:57:7d:cc:3d:0d:cf:70:4a:b6:b0: c2:91:cb:a7:5c:93:b3:a7:6b:cb:70:6e:22:a8:72: 64:69:a2:18:a0:96:0d:e8:92:41:c8:4b:52:bd:45: a2:5f:e3:75:70:18:24:81:ac:58:03:06:c1:a9:ee: 15:a0:2e:01:bd:a3:e0:fd:7b:6d:7b:20:d5:db:a6: 3a:76:3b:03:93:98:46:97:4f:8b:b9:d2:1c:87:b6: 80:81:89:62:c8:b4:1b:22:3b:3c:53:be:8e:6a:67: 06:f8:30:b5:ac:78:0b:a9:23:ea:96:85:56:a2:c8: 0e:5d:a1:ca:4c:e0:50:69:e7:6a:91:ca:82:bd:6d: cf:e0:ee:2b:2b:14:44:a8:9b:b4:89:c6:21:47:3b: 98:16:e6:7d:74:62:ab:d8:2e:35:67:3b:d4:60:91: ae:26:06:e3:a2:01:21:ab:8e:35:f6:d4:58:de:25: 30:b3:70:ca:00:30:8f:7e:5f:44:77:22:fe:b7:57: 16:4a:42:9c:9a:8d:e1:65:a9:5b:e5:63:07:97:87: 05:1b:54:74:c1:98:4b:1a:70:75:97:52:b5:22:48: 8b:14:0e:24:cb:ea:90:f8:9b:ad:e9:89:71:9b:63: 9d:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:39:BC:A0:F9:E8:C4:E4:BB:BC:15:9B:47:23:14:D5:FE:63:67:1C X509v3 Authority Key Identifier: keyid:3A:CC:B6:95:39:AC:9F:42:88:BC:D0:F0:A5:42:50:D5:92:F5:40:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/5EDC2B56F27E11EE8704D12FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.230.25.0/24 Signature Algorithm: sha256WithRSAEncryption 07:53:fe:8c:96:65:39:0a:1e:a3:92:35:5b:2c:a1:8c:49:90: f1:e7:37:c7:98:01:e5:79:cf:68:3e:94:d3:9d:28:fb:ce:57: 1d:b2:fa:7e:8a:33:18:10:e1:f0:17:da:d6:08:fe:5f:77:2f: a3:aa:38:28:f2:60:6e:8a:df:29:b3:1b:4c:04:2f:59:a0:f2: a1:48:45:61:b6:10:81:85:8c:fc:9b:a6:85:4c:73:34:0e:17: fd:df:e6:28:1f:94:4f:4c:fa:bb:d2:9a:37:5a:4f:bd:76:cc: 5d:68:98:a5:e4:fe:be:73:b2:be:0b:d2:a6:51:fd:a7:98:a7: c9:9f:1a:e1:be:71:ae:3c:16:56:43:bd:57:df:b5:f5:0e:d5: 5d:5d:5d:8a:e1:db:3b:c1:8d:b1:1b:83:d6:84:33:65:59:82: ac:61:41:35:f8:51:eb:55:fb:8f:26:da:2c:e4:2c:24:ae:32: fc:5a:47:95:72:52:49:65:26:17:26:e5:d4:f3:d8:42:aa:21: 16:d1:78:cf:86:53:52:36:3e:c0:c9:54:87:45:34:d2:07:22: 45:3e:46:c0:01:a9:a0:3e:36:98:92:35:d9:c0:96:cc:9e:09: 6d:67:b0:1c:2e:d8:07:22:11:ec:bc:41:4b:a6:b8:72:29:d2: c3:7c:a7:0c -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICIh0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBFQkYxMTAvBgNVBAUTKDNBQ0NCNjk1MzlBQzlGNDI4OEJDRDBGMEE1NDI1MEQ1 OTJGNTQwRDQwHhcNMjUxMDAyMTYxMzQxWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGRlYTRiNS04YzUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1XrNhjvVl7DXa6wGmxBqBnLvcld9zD0Nz3BKtrDCkcunXJOzp2vLcG4iqHJk aaIYoJYN6JJByEtSvUWiX+N1cBgkgaxYAwbBqe4VoC4BvaPg/XtteyDV26Y6djsD k5hGl0+LudIch7aAgYliyLQbIjs8U76OamcG+DC1rHgLqSPqloVWosgOXaHKTOBQ aedqkcqCvW3P4O4rKxREqJu0icYhRzuYFuZ9dGKr2C41ZzvUYJGuJgbjogEhq441 9tRY3iUws3DKADCPfl9EdyL+t1cWSkKcmo3hZalb5WMHl4cFG1R0wZhLGnB1l1K1 IkiLFA4ky+qQ+Jut6Ylxm2Od+wIDAQABo4IClTCCApEwHQYDVR0OBBYEFME5vKD5 6MTku7wVm0cjFNX+Y2ccMB8GA1UdIwQYMBaAFDrMtpU5rJ9CiLzQ8KVCUNWS9UDU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEVCRi81Rjg0RDdEOERC ODAxMUU1OUFCN0VEMUVDNEY5QUUwMi9Pc3kybFRtc24wS0l2TkR3cFVKUTFaTDFR TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09zeTJsVG1zbjBLSXZORHdwVUpRMVpMMVFOUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjBFQkYvNUY4NEQ3RDhEQjgwMTFFNTlBQjdFRDFFQzRGOUFFMDIvNUVEQzJCNTZG MjdFMTFFRTg3MDREMTJGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAr5hkwDQYJKoZIhvcNAQELBQADggEBAAdT/oyWZTkKHqOS NVssoYxJkPHnN8eYAeV5z2g+lNOdKPvOVx2y+n6KMxgQ4fAX2tYI/l93L6OqOCjy YG6K3ymzG0wEL1mg8qFIRWG2EIGFjPybpoVMczQOF/3f5igflE9M+rvSmjdaT712 zF1omKXk/r5zsr4L0qZR/aeYp8mfGuG+ca48FlZDvVfftfUO1V1dXYrh2zvBjbEb g9aEM2VZgqxhQTX4UetV+48m2izkLCSuMvxaR5VyUkllJhcm5dTz2EKqIRbReM+G U1I2PsDJVIdFNNIHIkU+RsABqaA+NpiSNdnAlsyeCW1nsBwu2AciEey8QUumuHIp 0sN8pww= -----END CERTIFICATE-----Generated at Wed Oct 8 21:19:54 2025 by rpki-client