$ rpki-client -vvf rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/88E0DEC8507F11F09A42640CC4F9AE02.roa File: 88E0DEC8507F11F09A42640CC4F9AE02.roa (raw, json) Hash identifier: 60QYnNNnq4c71VtkBxPoIBcr2b6wcX5JfuteRubUSlQ= Subject key identifier: 1C:DA:A0:67:96:40:EA:65:7A:C3:DD:58:FF:A1:F7:94:D2:27:28:27 Certificate issuer: /CN=A91168B5/serialNumber=BF45D47E7F8FD177D4592C434BCF962BC0A8C669 Certificate serial: 1C22 Authority key identifier: BF:45:D4:7E:7F:8F:D1:77:D4:59:2C:43:4B:CF:96:2B:C0:A8:C6:69 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v0XUfn-P0XfUWSxDS8-WK8Coxmk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/88E0DEC8507F11F09A42640CC4F9AE02.roa Signing time: Tue 04 Nov 2025 04:13:14 +0000 ROA not before: Tue 04 Nov 2025 04:13:14 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 9432 IP address blocks: 132.181.0.0/18 maxlen: 18 132.181.64.0/19 maxlen: 19 132.181.79.0/24 maxlen: 24 132.181.96.0/19 maxlen: 19 132.181.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.crl rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v0XUfn-P0XfUWSxDS8-WK8Coxmk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:18:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7202 (0x1c22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91168B5, serialNumber=BF45D47E7F8FD177D4592C434BCF962BC0A8C669 Validity Not Before: Nov 4 04:13:14 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69097d5a-991e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:6d:cd:3b:97:33:ea:b9:d6:f5:93:45:96:4a: 2d:5a:cd:32:ec:75:d3:2d:02:45:19:24:d1:eb:fd: 38:4b:a3:d5:87:b0:66:2d:1f:b0:40:ae:b4:7d:f9: 53:b9:94:84:03:c2:ac:40:a0:82:e9:3f:9b:79:04: 6f:c6:63:7a:60:8c:e8:8a:2b:fd:bb:e6:ea:9a:27: 03:33:22:6d:1b:93:b8:8f:5f:2a:5d:11:be:50:23: 5a:6b:6c:1d:de:62:67:80:63:f7:42:ec:53:3c:33: 82:66:76:38:76:9f:bc:99:dc:69:ef:39:ea:f4:b4: cd:a3:81:8b:6b:48:2f:37:49:1d:01:23:4e:9e:77: a5:5d:b7:b2:89:87:43:b2:79:5a:0b:51:32:41:2b: 20:d9:80:2a:18:21:80:4b:9d:8b:31:dc:c4:70:96: ce:10:9c:6f:29:0b:68:b1:56:ad:c1:e6:11:3b:9f: 95:25:c5:4c:91:0d:95:37:1c:c4:06:63:b8:a8:77: 6a:3f:67:d3:74:31:a0:55:7c:37:17:97:4b:39:54: 9c:43:34:22:e3:80:62:df:6c:4d:7b:75:f6:1e:b6: ff:09:25:33:72:c8:aa:34:f1:ad:f7:ee:a6:66:69: dc:00:e8:b7:e0:ad:f6:e7:57:0b:f0:c0:c3:5f:11: de:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:DA:A0:67:96:40:EA:65:7A:C3:DD:58:FF:A1:F7:94:D2:27:28:27 X509v3 Authority Key Identifier: keyid:BF:45:D4:7E:7F:8F:D1:77:D4:59:2C:43:4B:CF:96:2B:C0:A8:C6:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v0XUfn-P0XfUWSxDS8-WK8Coxmk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/88E0DEC8507F11F09A42640CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 132.181.0.0-132.181.159.255 Signature Algorithm: sha256WithRSAEncryption 0f:1b:7e:17:7e:1f:41:13:f9:cc:0a:4d:53:f9:d3:0a:a8:6b: 2e:ab:4d:24:ab:2d:63:21:b7:b7:1f:f4:66:29:70:4f:36:97: da:5f:7c:d6:46:1d:1f:e1:ba:63:b6:05:85:8b:6c:31:39:32: fb:eb:01:ad:31:b9:e7:fe:f6:0d:9b:a3:fb:7d:d4:6d:7a:0f: c1:3b:16:cc:36:8e:3d:c2:04:0a:51:76:0c:a4:f0:58:27:fb: 49:5f:ab:b5:e4:3e:08:99:68:48:55:bb:6a:e2:93:32:22:5f: 8a:ab:01:78:a5:7a:c1:2d:42:74:c2:f3:14:f5:77:ae:f9:d5: 24:93:9d:79:4f:95:84:f7:9f:a3:21:be:b7:7a:f3:62:b6:fe: 23:de:c5:9b:f2:45:b9:c8:df:d8:2c:5c:7c:5d:3d:c5:46:fb: 23:83:8c:cf:3e:97:d5:48:8c:f1:40:a3:98:cb:d3:27:7d:21: 1b:d3:06:66:7c:0a:b1:92:16:0d:4a:63:8b:7f:97:2d:2b:d5: 95:4b:3b:3c:12:7e:be:48:1a:08:5f:51:93:f9:4b:9d:de:8f: ca:77:9b:ac:6e:d9:65:b4:d4:f0:88:ab:3c:2d:ee:c1:7b:0a: c7:ab:0e:8f:8b:1f:59:11:09:fc:72:28:88:37:41:96:dc:cd: 11:7d:6a:68 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgICHCIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY4QjUxMTAvBgNVBAUTKEJGNDVENDdFN0Y4RkQxNzdENDU5MkM0MzRCQ0Y5NjJC QzBBOEM2NjkwHhcNMjUxMTA0MDQxMzE0WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTA5N2Q1YS05OTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkm3NO5cz6rnW9ZNFlkotWs0y7HXTLQJFGSTR6/04S6PVh7BmLR+wQK60fflT uZSEA8KsQKCC6T+beQRvxmN6YIzoiiv9u+bqmicDMyJtG5O4j18qXRG+UCNaa2wd 3mJngGP3QuxTPDOCZnY4dp+8mdxp7znq9LTNo4GLa0gvN0kdASNOnnelXbeyiYdD snlaC1EyQSsg2YAqGCGAS52LMdzEcJbOEJxvKQtosVatweYRO5+VJcVMkQ2VNxzE BmO4qHdqP2fTdDGgVXw3F5dLOVScQzQi44Bi32xNe3X2Hrb/CSUzcsiqNPGt9+6m ZmncAOi34K3251cL8MDDXxHe9QIDAQABo4ICnDCCApgwHQYDVR0OBBYEFBzaoGeW QOplesPdWP+h95TSJygnMB8GA1UdIwQYMBaAFL9F1H5/j9F31FksQ0vPlivAqMZp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjhCNS8yQjBCRkQ5OEY2 RTAxMUU2OTJBMjBCODdDNEY5QUUwMi92MFhVZm4tUDBYZlVXU3hEUzgtV0s4Q294 bWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3YwWFVmbi1QMFhmVVdTeERTOC1XSzhDb3htay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTY4QjUvMkIwQkZEOThGNkUwMTFFNjkyQTIwQjg3QzRGOUFFMDIvODhFMERFQzg1 MDdGMTFGMDlBNDI2NDBDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJgYIKwYBBQUHAQcBAf8E FzAVMBMEAgABMA0wCwMDAIS1AwQFhLWAMA0GCSqGSIb3DQEBCwUAA4IBAQAPG34X fh9BE/nMCk1T+dMKqGsuq00kqy1jIbe3H/RmKXBPNpfaX3zWRh0f4bpjtgWFi2wx OTL76wGtMbnn/vYNm6P7fdRteg/BOxbMNo49wgQKUXYMpPBYJ/tJX6u15D4ImWhI Vbtq4pMyIl+KqwF4pXrBLUJ0wvMU9Xeu+dUkk515T5WE95+jIb63evNitv4j3sWb 8kW5yN/YLFx8XT3FRvsjg4zPPpfVSIzxQKOYy9MnfSEb0wZmfAqxkhYNSmOLf5ct K9WVSzs8En6+SBoIX1GT+Uud3o/Kd5usbtlltNTwiKs8Le7BewrHqw6Pix9ZEQn8 ciiIN0GW3M0RfWpo -----END CERTIFICATE-----Generated at Wed Nov 5 18:47:51 2025 by rpki-client