$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/63BFE4C0292811EEAF894530C4F9AE02.roa File: 63BFE4C0292811EEAF894530C4F9AE02.roa (raw, json) Hash identifier: 8CfQ0/1GwUUp0J0kvZBXA7fizuzpoZuw6UptgYm1mO8= Subject key identifier: 81:60:B0:F8:15:BA:0A:9E:44:C5:1C:E6:6B:AE:23:FC:72:63:FA:E5 Certificate issuer: /CN=A91F0EBF/serialNumber=3ACCB69539AC9F4288BCD0F0A54250D592F540D4 Certificate serial: 221F Authority key identifier: 3A:CC:B6:95:39:AC:9F:42:88:BC:D0:F0:A5:42:50:D5:92:F5:40:D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/63BFE4C0292811EEAF894530C4F9AE02.roa Signing time: Thu 02 Oct 2025 16:13:42 +0000 ROA not before: Thu 02 Oct 2025 16:13:42 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 31898 IP address blocks: 43.230.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.crl rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Oct 2025 15:56:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8735 (0x221f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0EBF, serialNumber=3ACCB69539AC9F4288BCD0F0A54250D592F540D4 Validity Not Before: Oct 2 16:13:42 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68dea4b6-560c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9b:72:de:f4:ce:c9:82:b0:b3:5a:dc:c9:6c: 87:24:16:42:b6:12:58:9b:b4:1d:63:0b:8d:94:90: 26:59:2b:62:ec:6a:9a:f8:52:43:55:5b:3a:c1:a1: 9a:ec:4b:5b:9c:28:62:55:12:3c:9d:3b:12:03:e7: d7:31:f9:1c:ba:16:29:bf:a5:19:e8:7d:1e:68:2c: 46:91:5b:e1:96:fe:e6:8d:f0:3d:28:a9:ab:c6:c2: ca:79:b1:16:01:2b:6d:3f:f3:af:12:8d:fb:a7:45: 27:e6:28:99:70:a6:e0:45:f9:d8:fa:bf:57:7a:be: 91:f9:87:5d:84:03:bd:fe:26:c8:01:d6:a7:4b:26: 74:7f:56:f9:a6:65:62:3b:ae:8c:3f:c2:fa:8d:6d: b1:eb:8e:72:b7:d6:f8:9b:24:3e:c0:08:d7:ea:a5: 13:35:e6:3e:55:f3:18:43:e1:a4:9f:0f:cc:27:a1: ca:8e:61:3a:f9:25:1c:23:0b:c5:7f:5b:17:4a:aa: 9b:35:98:05:16:66:0d:7b:aa:d1:a0:56:4b:c1:10: d6:42:f7:07:cb:4f:4b:f8:b6:60:f8:8b:b0:74:4d: 12:fd:ac:1c:57:fa:29:00:63:f3:8f:50:2c:4c:fb: b2:95:89:33:ef:2b:8d:6c:68:46:4a:e1:7b:76:4b: d3:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:60:B0:F8:15:BA:0A:9E:44:C5:1C:E6:6B:AE:23:FC:72:63:FA:E5 X509v3 Authority Key Identifier: keyid:3A:CC:B6:95:39:AC:9F:42:88:BC:D0:F0:A5:42:50:D5:92:F5:40:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/63BFE4C0292811EEAF894530C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.230.26.0/24 Signature Algorithm: sha256WithRSAEncryption ae:b4:76:d2:4a:ce:c5:e9:dd:64:a2:cf:af:23:bf:8e:91:c4: c9:60:a5:e2:df:2c:55:5b:09:7b:6c:ec:72:7d:14:14:12:d6: 53:ed:64:fe:51:69:d4:a9:77:30:8b:40:16:5a:6d:ef:fc:6e: ed:28:88:e1:ed:9c:40:32:d7:6d:32:ff:0e:48:2b:dd:1e:36: 46:e9:6a:57:e1:70:74:8a:ff:b2:3b:28:25:f2:7c:ca:45:e7: 19:91:c0:e5:72:9a:79:12:81:58:13:fd:24:0e:2f:ba:3a:24: 68:91:6a:fb:0c:2a:a3:98:f8:50:df:f9:a3:2b:29:5a:2b:e2: 63:d0:c2:09:ac:18:82:e4:64:db:d0:94:51:03:3a:3d:63:b1: b4:68:bb:d9:38:6b:74:6d:53:29:a5:c1:27:3d:1d:09:16:16: 9d:9f:b4:fa:06:e0:ef:23:e7:08:ca:ab:28:26:ca:6b:45:1e: 2e:5e:e6:0f:96:9b:a7:19:fe:15:30:7a:f2:f7:ff:cb:6a:e6: 65:51:74:8b:63:ed:df:ea:30:76:fc:60:8a:2d:1a:7e:85:84: c0:62:f6:27:6e:45:fc:e2:76:8a:ac:f1:24:43:7c:38:b1:1e: 0b:5c:56:fc:49:19:c8:e5:66:78:58:93:51:7b:e7:62:d5:cf: 47:b9:26:6b -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICIh8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBFQkYxMTAvBgNVBAUTKDNBQ0NCNjk1MzlBQzlGNDI4OEJDRDBGMEE1NDI1MEQ1 OTJGNTQwRDQwHhcNMjUxMDAyMTYxMzQyWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGRlYTRiNi01NjBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw5ty3vTOyYKws1rcyWyHJBZCthJYm7QdYwuNlJAmWSti7Gqa+FJDVVs6waGa 7EtbnChiVRI8nTsSA+fXMfkcuhYpv6UZ6H0eaCxGkVvhlv7mjfA9KKmrxsLKebEW ASttP/OvEo37p0Un5iiZcKbgRfnY+r9Xer6R+YddhAO9/ibIAdanSyZ0f1b5pmVi O66MP8L6jW2x645yt9b4myQ+wAjX6qUTNeY+VfMYQ+Gknw/MJ6HKjmE6+SUcIwvF f1sXSqqbNZgFFmYNe6rRoFZLwRDWQvcHy09L+LZg+IuwdE0S/awcV/opAGPzj1As TPuylYkz7yuNbGhGSuF7dkvT3wIDAQABo4IClTCCApEwHQYDVR0OBBYEFIFgsPgV ugqeRMUc5muuI/xyY/rlMB8GA1UdIwQYMBaAFDrMtpU5rJ9CiLzQ8KVCUNWS9UDU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEVCRi81Rjg0RDdEOERC ODAxMUU1OUFCN0VEMUVDNEY5QUUwMi9Pc3kybFRtc24wS0l2TkR3cFVKUTFaTDFR TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09zeTJsVG1zbjBLSXZORHdwVUpRMVpMMVFOUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjBFQkYvNUY4NEQ3RDhEQjgwMTFFNTlBQjdFRDFFQzRGOUFFMDIvNjNCRkU0QzAy OTI4MTFFRUFGODk0NTMwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAr5howDQYJKoZIhvcNAQELBQADggEBAK60dtJKzsXp3WSi z68jv46RxMlgpeLfLFVbCXts7HJ9FBQS1lPtZP5RadSpdzCLQBZabe/8bu0oiOHt nEAy120y/w5IK90eNkbpalfhcHSK/7I7KCXyfMpF5xmRwOVymnkSgVgT/SQOL7o6 JGiRavsMKqOY+FDf+aMrKVor4mPQwgmsGILkZNvQlFEDOj1jsbRou9k4a3RtUyml wSc9HQkWFp2ftPoG4O8j5wjKqygmymtFHi5e5g+Wm6cZ/hUwevL3/8tq5mVRdItj 7d/qMHb8YIotGn6FhMBi9iduRfzidoqs8SRDfDixHgtcVvxJGcjlZnhYk1F752LV z0e5Jms= -----END CERTIFICATE-----Generated at Wed Oct 8 23:18:50 2025 by rpki-client