$ rpki-client -vvf rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/ED3D0F9E48C911F0B59FB71DC4F9AE02.roa File: ED3D0F9E48C911F0B59FB71DC4F9AE02.roa (raw, json) Hash identifier: XYs8/TAj1SKjF36KD3+2Mx5R6rHZ3Npg8Y//QV94Wa0= Subject key identifier: 01:B4:C2:D3:FD:AA:09:7F:12:BB:77:DD:E6:28:6B:70:B8:10:E2:E4 Certificate issuer: /CN=A91249C2/serialNumber=74DCEAA8506A2B327F87A42D0741AC36EEDEEB49 Certificate serial: 50 Authority key identifier: 74:DC:EA:A8:50:6A:2B:32:7F:87:A4:2D:07:41:AC:36:EE:DE:EB:49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNzqqFBqKzJ_h6QtB0GsNu7e60k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/ED3D0F9E48C911F0B59FB71DC4F9AE02.roa Signing time: Mon 03 Nov 2025 07:22:08 +0000 ROA not before: Mon 03 Nov 2025 07:22:08 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 55785 IP address blocks: 202.36.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.crl rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNzqqFBqKzJ_h6QtB0GsNu7e60k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:31:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 80 (0x50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91249C2, serialNumber=74DCEAA8506A2B327F87A42D0741AC36EEDEEB49 Validity Not Before: Nov 3 07:22:08 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69085820-9260 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:0e:3f:5c:52:5e:b9:f6:5e:e3:40:ce:71:51: 07:d2:25:f2:31:19:40:65:b3:51:1e:81:da:77:50: 14:a1:8c:2b:74:82:30:36:0b:26:79:34:d8:ac:27: 8a:85:62:9c:f5:a7:15:b4:4f:6f:1f:aa:59:02:5f: ca:56:a7:f6:65:0d:89:65:fe:38:e9:83:ef:ff:87: 86:f5:d6:90:c1:1f:87:8e:80:03:df:7f:67:bc:68: 57:1e:b8:19:fe:86:77:11:10:62:84:98:0b:8f:e3: b7:74:6a:4b:68:b3:c1:a6:34:76:c7:16:42:62:78: c7:17:26:3d:0a:18:20:f1:5b:7e:63:8d:7a:01:83: a1:a5:04:65:56:26:1c:75:b9:bf:ca:5a:58:39:bd: 64:15:21:e8:a2:54:d1:70:51:36:4d:e4:49:e9:43: 86:b3:43:34:10:dd:41:ce:b7:1d:37:a1:f9:1b:77: b6:1d:14:2c:e6:14:07:d3:75:38:c1:b8:45:4f:89: 73:2d:55:c4:79:1f:fe:12:e3:40:92:4e:c2:3d:83: d5:11:7b:a3:64:59:cf:01:db:0a:66:1f:79:5c:23: e5:df:5b:e7:a9:ac:77:cb:dd:f9:b3:94:ee:83:97: 04:ba:e7:ee:09:c5:5f:01:9e:9b:c1:2d:72:09:a2: 8e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:B4:C2:D3:FD:AA:09:7F:12:BB:77:DD:E6:28:6B:70:B8:10:E2:E4 X509v3 Authority Key Identifier: keyid:74:DC:EA:A8:50:6A:2B:32:7F:87:A4:2D:07:41:AC:36:EE:DE:EB:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNzqqFBqKzJ_h6QtB0GsNu7e60k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/ED3D0F9E48C911F0B59FB71DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.36.227.0/24 Signature Algorithm: sha256WithRSAEncryption ea:ba:59:5f:3f:0a:42:f1:80:f6:f3:65:c1:32:55:db:c9:36: fa:06:b2:74:3d:40:e7:c9:b5:5f:9a:23:dd:ce:27:bf:e1:75: 74:7d:d4:50:44:6b:07:68:06:4f:5d:a7:c4:b5:6d:09:04:4d: a6:62:0e:6c:9a:31:03:33:d1:cf:73:7a:73:83:b3:d3:2d:e3: c9:76:95:fc:98:c8:34:1f:a8:2e:b6:68:d9:74:d8:1f:b4:87: a0:72:44:35:00:55:d9:83:10:c1:94:78:00:55:a8:5e:e8:18: de:92:aa:c9:78:9c:d7:5a:4d:91:a0:e9:06:11:58:39:8e:93: 0f:b9:4d:5b:c0:49:c3:81:54:65:92:1b:e3:2e:be:6d:ba:df: 10:33:5b:9c:30:09:6f:de:15:cb:68:2c:61:98:13:7c:92:69: 34:6d:de:5b:0b:b3:26:c8:ea:ea:ac:13:a8:8c:b8:7d:f7:22: 93:bd:d9:23:cc:18:26:2d:c1:c1:e5:1a:09:53:e4:45:19:0a: ca:c3:8f:e7:a1:da:3f:42:a3:fa:d9:82:05:17:8f:98:6e:ce: 9d:11:a0:2b:94:dc:8e:40:f0:e1:17:ba:2d:ee:e5:98:34:44: 7e:c4:89:51:58:f0:ad:b9:33:e3:0a:85:ca:1c:87:92:ac:2e: a2:a5:52:87 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBUDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NDlDMjExMC8GA1UEBRMoNzREQ0VBQTg1MDZBMkIzMjdGODdBNDJEMDc0MUFDMzZF RURFRUI0OTAeFw0yNTExMDMwNzIyMDhaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MDg1ODIwLTkyNjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDdDj9cUl659l7jQM5xUQfSJfIxGUBls1Eegdp3UBShjCt0gjA2CyZ5NNisJ4qF Ypz1pxW0T28fqlkCX8pWp/ZlDYll/jjpg+//h4b11pDBH4eOgAPff2e8aFceuBn+ hncREGKEmAuP47d0aktos8GmNHbHFkJieMcXJj0KGCDxW35jjXoBg6GlBGVWJhx1 ub/KWlg5vWQVIeiiVNFwUTZN5EnpQ4azQzQQ3UHOtx03ofkbd7YdFCzmFAfTdTjB uEVPiXMtVcR5H/4S40CSTsI9g9URe6NkWc8B2wpmH3lcI+XfW+eprHfL3fmzlO6D lwS65+4JxV8BnpvBLXIJoo6DAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUAbTC0/2q CX8Su3fd5ihrcLgQ4uQwHwYDVR0jBBgwFoAUdNzqqFBqKzJ/h6QtB0GsNu7e60kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI0OUMyL0UzQTNERUU2NDhD ODExRjBCOTU3MjYxQ0M0RjlBRTAyL2ROenFxRkJxS3pKX2g2UXRCMEdzTnU3ZTYw ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZE56cXFGQnFLekpfaDZRdEIwR3NOdTdlNjBrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDlDMi9FM0EzREVFNjQ4QzgxMUYwQjk1NzI2MUNDNEY5QUUwMi9FRDNEMEY5RTQ4 QzkxMUYwQjU5RkI3MURDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAMok4zANBgkqhkiG9w0BAQsFAAOCAQEA6rpZXz8KQvGA9vNl wTJV28k2+gaydD1A58m1X5oj3c4nv+F1dH3UUERrB2gGT12nxLVtCQRNpmIObJox AzPRz3N6c4Oz0y3jyXaV/JjINB+oLrZo2XTYH7SHoHJENQBV2YMQwZR4AFWoXugY 3pKqyXic11pNkaDpBhFYOY6TD7lNW8BJw4FUZZIb4y6+bbrfEDNbnDAJb94Vy2gs YZgTfJJpNG3eWwuzJsjq6qwTqIy4ffcik73ZI8wYJi3BweUaCVPkRRkKysOP56Ha P0Kj+tmCBRePmG7OnRGgK5TcjkDw4Re6Le7lmDREfsSJUVjwrbkz4wqFyhyHkqwu oqVShw== -----END CERTIFICATE-----Generated at Wed Nov 5 13:26:29 2025 by rpki-client