$ rpki-client -vvf rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/3FC1B85E431811EA84E68121C4F9AE02.roa File: 3FC1B85E431811EA84E68121C4F9AE02.roa (raw, json) Hash identifier: UC5fAcuOiaup4uE6RhB6Ul5GKkjN2FqHQr3rrq2JOA4= Subject key identifier: 58:39:21:FB:30:96:5B:8C:F5:9B:71:F6:74:33:49:9F:A0:EB:AA:6B Certificate issuer: /CN=A91325DC/serialNumber=D10E43E0593DEF1DB8D7F44C6F1CD13E73C2F230 Certificate serial: 0B54 Authority key identifier: D1:0E:43:E0:59:3D:EF:1D:B8:D7:F4:4C:6F:1C:D1:3E:73:C2:F2:30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Q5D4Fk97x241_RMbxzRPnPC8jA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/3FC1B85E431811EA84E68121C4F9AE02.roa Signing time: Wed 08 Oct 2025 19:20:19 +0000 ROA not before: Wed 08 Oct 2025 19:20:19 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 17408 IP address blocks: 58.84.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.crl rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Q5D4Fk97x241_RMbxzRPnPC8jA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 19:47:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2900 (0xb54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91325DC, serialNumber=D10E43E0593DEF1DB8D7F44C6F1CD13E73C2F230 Validity Not Before: Oct 8 19:20:19 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68e6b973-d038 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:26:f2:ed:6b:10:aa:91:6c:47:41:e4:bf:e4: 82:50:09:9b:61:e2:93:c0:9a:a0:2b:3b:bb:58:2d: 37:37:cd:aa:66:eb:7e:58:8c:57:60:33:e2:d6:7d: 57:f4:c0:d3:7c:6d:85:e3:72:86:96:c0:38:03:9c: e9:53:3f:d1:0c:29:e0:e7:64:a7:7c:2c:f1:28:f5: d9:40:3e:fb:14:b4:c5:0c:7d:91:d0:33:d1:7d:5d: 81:c6:ff:a4:5b:8f:03:02:84:45:c3:46:ca:bd:22: b9:af:a0:4d:20:87:b6:0d:a7:d6:97:3b:83:0f:ab: c2:0d:f1:07:68:49:7c:81:23:d7:04:13:65:f6:65: 86:a2:9d:e5:60:71:1c:24:fc:31:48:ea:a3:ab:ab: a0:bb:91:cf:2c:b8:c6:72:02:35:d2:d1:f8:4d:53: de:7c:41:e6:32:34:ac:1a:72:bf:76:80:01:d3:2e: 16:d0:0f:d7:c2:08:60:ac:41:c3:05:c6:cc:47:e9: b9:1f:bb:72:4c:cb:21:50:34:a5:e8:b9:99:a0:63: 40:d3:be:c6:c6:1e:fd:88:57:f5:65:fe:0c:89:11: 13:8e:98:10:ff:fe:97:43:6a:09:7a:da:d8:95:b9: 5a:b6:70:ea:a6:10:8e:c1:58:19:d9:a2:31:1b:1f: ed:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:39:21:FB:30:96:5B:8C:F5:9B:71:F6:74:33:49:9F:A0:EB:AA:6B X509v3 Authority Key Identifier: keyid:D1:0E:43:E0:59:3D:EF:1D:B8:D7:F4:4C:6F:1C:D1:3E:73:C2:F2:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Q5D4Fk97x241_RMbxzRPnPC8jA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/3FC1B85E431811EA84E68121C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 58.84.4.0/24 Signature Algorithm: sha256WithRSAEncryption 9d:06:22:92:86:08:cc:34:12:27:3c:97:59:01:27:03:47:c8: ff:66:f8:24:0d:57:03:7c:44:0d:db:9c:f0:84:03:0f:1c:48: b6:be:b7:56:61:4d:74:5d:50:77:e8:9b:cf:6f:2f:79:66:d1: 16:7e:bd:ee:79:31:53:50:c8:f1:d4:ab:a7:66:97:ca:44:17: 3b:ad:52:de:55:97:0b:b6:3c:3e:20:8f:26:fb:5d:c5:17:47: b0:f0:d1:55:d5:ca:be:7d:6e:18:1f:c6:6a:81:3e:89:34:c9: e5:ad:b9:d8:b1:c8:bc:10:12:8e:34:4b:63:92:c1:23:bd:47: 4a:20:b8:04:f6:fb:bd:65:81:8a:01:1a:70:65:38:9b:8f:34: aa:93:15:80:7c:f8:31:19:ef:91:03:b0:a3:9b:01:20:c3:d2: 68:95:31:27:37:00:58:2f:4f:56:10:91:a8:b6:78:a4:c3:aa: 66:79:02:2c:2c:b8:13:c1:5e:71:5b:9e:38:ab:b9:89:5a:89: ce:bd:e2:fb:8a:f1:b3:94:0b:d4:31:5b:1b:a7:3b:c5:78:1a: 39:2a:c2:16:e3:9a:62:d3:16:5b:24:aa:9c:a8:d2:c8:24:d0: 95:85:37:8e:e8:c9:65:c4:7b:70:12:65:40:04:7c:fb:08:d9: 53:24:4c:53 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICC1QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI1REMxMTAvBgNVBAUTKEQxMEU0M0UwNTkzREVGMURCOEQ3RjQ0QzZGMUNEMTNF NzNDMkYyMzAwHhcNMjUxMDA4MTkyMDE5WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGU2Yjk3My1kMDM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAviby7WsQqpFsR0Hkv+SCUAmbYeKTwJqgKzu7WC03N82qZut+WIxXYDPi1n1X 9MDTfG2F43KGlsA4A5zpUz/RDCng52SnfCzxKPXZQD77FLTFDH2R0DPRfV2Bxv+k W48DAoRFw0bKvSK5r6BNIIe2DafWlzuDD6vCDfEHaEl8gSPXBBNl9mWGop3lYHEc JPwxSOqjq6ugu5HPLLjGcgI10tH4TVPefEHmMjSsGnK/doAB0y4W0A/XwghgrEHD BcbMR+m5H7tyTMshUDSl6LmZoGNA077Gxh79iFf1Zf4MiRETjpgQ//6XQ2oJetrY lblatnDqphCOwVgZ2aIxGx/txQIDAQABo4IClTCCApEwHQYDVR0OBBYEFFg5Ifsw lluM9Ztx9nQzSZ+g66prMB8GA1UdIwQYMBaAFNEOQ+BZPe8duNf0TG8c0T5zwvIw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjVEQy80NjEyRDUxRTQz MTYxMUVBQjI2Mjc4MURDNEY5QUUwMi8wUTVENEZrOTd4MjQxX1JNYnh6UlBuUEM4 akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBRNUQ0Rms5N3gyNDFfUk1ieHpSUG5QQzhqQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzI1REMvNDYxMkQ1MUU0MzE2MTFFQUIyNjI3ODFEQzRGOUFFMDIvM0ZDMUI4NUU0 MzE4MTFFQTg0RTY4MTIxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAA6VAQwDQYJKoZIhvcNAQELBQADggEBAJ0GIpKGCMw0Eic8 l1kBJwNHyP9m+CQNVwN8RA3bnPCEAw8cSLa+t1ZhTXRdUHfom89vL3lm0RZ+ve55 MVNQyPHUq6dml8pEFzutUt5Vlwu2PD4gjyb7XcUXR7Dw0VXVyr59bhgfxmqBPok0 yeWtudixyLwQEo40S2OSwSO9R0oguAT2+71lgYoBGnBlOJuPNKqTFYB8+DEZ75ED sKObASDD0miVMSc3AFgvT1YQkai2eKTDqmZ5AiwsuBPBXnFbnjiruYlaic694vuK 8bOUC9QxWxunO8V4GjkqwhbjmmLTFlskqpyo0sgk0JWFN47oyWXEe3ASZUAEfPsI 2VMkTFM= -----END CERTIFICATE-----Generated at Fri Oct 24 09:17:08 2025 by rpki-client