$ rpki-client -vvf rpki.apnic.net/member_repository/A91394E7/F4CFD1DAAC7311EF87FC554CC4F9AE02/F7078BC4B73511EF8537DE81C4F9AE02.roa File: F7078BC4B73511EF8537DE81C4F9AE02.roa (raw, json) Hash identifier: dHwTXNF7nxQj+usP14EJUs8ePEKM62O1dTyVaEZxO3I= Subject key identifier: 49:3E:E8:07:71:04:31:37:00:BE:41:04:E2:86:90:99:C3:B1:1D:EC Certificate issuer: /CN=A91394E7/serialNumber=891ED8BAAC2C73BD13ADCAA1A16AAF00D224A877 Certificate serial: B3 Authority key identifier: 89:1E:D8:BA:AC:2C:73:BD:13:AD:CA:A1:A1:6A:AF:00:D2:24:A8:77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iR7Yuqwsc70TrcqhoWqvANIkqHc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91394E7/F4CFD1DAAC7311EF87FC554CC4F9AE02/F7078BC4B73511EF8537DE81C4F9AE02.roa Signing time: Sat 25 Oct 2025 10:20:10 +0000 ROA not before: Sat 25 Oct 2025 10:20:10 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 23921 IP address blocks: 202.38.157.0/24 maxlen: 24 203.31.183.0/24 maxlen: 24 203.92.27.0/24 maxlen: 24 203.190.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91394E7/F4CFD1DAAC7311EF87FC554CC4F9AE02/iR7Yuqwsc70TrcqhoWqvANIkqHc.crl rsync://rpki.apnic.net/member_repository/A91394E7/F4CFD1DAAC7311EF87FC554CC4F9AE02/iR7Yuqwsc70TrcqhoWqvANIkqHc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iR7Yuqwsc70TrcqhoWqvANIkqHc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 08:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 179 (0xb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91394E7, serialNumber=891ED8BAAC2C73BD13ADCAA1A16AAF00D224A877 Validity Not Before: Oct 25 10:20:10 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=68fca459-ed3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:05:5b:64:bf:e0:b2:7d:3e:b9:f6:74:8f:d7: 0c:c9:f5:6d:11:0f:a6:6b:f2:de:43:12:8b:77:f3: 9f:7b:ef:43:cb:6a:8b:7b:68:32:13:28:7d:b4:bf: cf:3a:23:cc:b6:e5:bf:91:5b:29:68:e0:f8:e3:44: 6f:41:5e:f6:1e:07:d4:3a:77:50:7b:6a:d6:0f:e8: 16:63:04:9c:95:af:91:7d:d9:67:6e:af:ed:89:12: 94:c4:1f:94:2b:ae:d9:50:1d:2b:75:1d:b7:16:96: a8:ef:9e:53:c6:b1:06:f2:5f:76:6d:f8:65:68:f3: de:34:ef:e7:74:96:5f:07:e1:90:72:35:90:56:44: 6b:9d:5e:fc:02:5b:a2:bc:1b:68:31:a1:6a:d9:a7: 00:71:46:be:94:fa:06:23:38:c5:c9:25:36:db:cf: b3:ac:36:23:2a:aa:f4:6d:ca:ce:5b:58:da:9c:9d: c2:b6:c8:a3:c6:d0:d8:e1:33:9c:96:76:af:46:ce: dc:26:db:54:1c:6b:7b:a5:1b:42:3b:5c:62:4e:69: de:f3:ce:27:60:8d:d2:de:e4:b4:f8:bb:c9:14:67: 93:68:6c:e9:24:25:2c:b3:39:14:12:24:64:49:83: 9a:f9:54:9f:c2:b1:5a:08:b5:b3:36:1a:ab:f6:c1: 8e:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:3E:E8:07:71:04:31:37:00:BE:41:04:E2:86:90:99:C3:B1:1D:EC X509v3 Authority Key Identifier: keyid:89:1E:D8:BA:AC:2C:73:BD:13:AD:CA:A1:A1:6A:AF:00:D2:24:A8:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91394E7/F4CFD1DAAC7311EF87FC554CC4F9AE02/iR7Yuqwsc70TrcqhoWqvANIkqHc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iR7Yuqwsc70TrcqhoWqvANIkqHc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91394E7/F4CFD1DAAC7311EF87FC554CC4F9AE02/F7078BC4B73511EF8537DE81C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.38.157.0/24 203.31.183.0/24 203.92.27.0/24 203.190.25.0/24 Signature Algorithm: sha256WithRSAEncryption ec:70:df:3b:0e:8f:66:58:d8:3b:27:d6:5a:1d:f4:63:31:7f: e2:fa:8d:1e:b8:f6:85:28:31:3f:d8:d8:a6:41:d7:9d:45:69: 0f:a8:58:03:db:73:ae:c8:48:00:f3:14:5a:1d:db:41:12:20: 84:79:6d:85:1e:0e:d4:fb:ef:db:e4:13:ea:7f:5f:29:88:7a: 6e:95:d2:72:3a:02:2b:92:ae:0c:3c:17:f8:48:a0:19:d8:29: 9b:41:2d:c5:3d:cd:b3:b0:be:0f:a3:e1:e1:2e:f2:83:7f:54: b8:c2:5e:32:56:b9:e1:91:80:f7:09:85:c9:4b:66:2b:6a:75: 72:fb:72:a5:b2:44:1f:3c:12:5c:16:85:cd:4c:39:28:7e:f3: 97:74:b9:4a:26:16:a3:a9:dd:37:41:a2:43:e3:7c:60:65:85: 28:d0:19:30:77:f6:e6:5a:2d:a5:96:19:51:e8:17:b0:cf:f9: 83:22:79:09:7b:14:a6:c1:08:ea:7b:10:22:a8:6c:1f:1a:80: 8b:1c:43:ac:d8:1b:83:f2:e8:fc:5c:0c:6a:db:f1:6e:74:e0: 8d:0f:e4:da:a9:5a:7b:87:1a:62:0c:00:6b:62:bc:fb:c6:6e: 3d:12:66:bb:5f:f6:b6:59:78:bd:27:cb:2e:13:cb:cc:1e:aa: c3:b3:c7:eb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICALMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzk0RTcxMTAvBgNVBAUTKDg5MUVEOEJBQUMyQzczQkQxM0FEQ0FBMUExNkFBRjAw RDIyNEE4NzcwHhcNMjUxMDI1MTAyMDEwWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGZjYTQ1OS1lZDNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyAVbZL/gsn0+ufZ0j9cMyfVtEQ+ma/LeQxKLd/Ofe+9Dy2qLe2gyEyh9tL/P OiPMtuW/kVspaOD440RvQV72HgfUOndQe2rWD+gWYwScla+Rfdlnbq/tiRKUxB+U K67ZUB0rdR23Fpao755TxrEG8l92bfhlaPPeNO/ndJZfB+GQcjWQVkRrnV78Alui vBtoMaFq2acAcUa+lPoGIzjFySU228+zrDYjKqr0bcrOW1janJ3CtsijxtDY4TOc lnavRs7cJttUHGt7pRtCO1xiTmne884nYI3S3uS0+LvJFGeTaGzpJCUsszkUEiRk SYOa+VSfwrFaCLWzNhqr9sGODwIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFEk+6Adx BDE3AL5BBOKGkJnDsR3sMB8GA1UdIwQYMBaAFIke2LqsLHO9E63KoaFqrwDSJKh3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTRFNy9GNENGRDFEQUFD NzMxMUVGODdGQzU1NENDNEY5QUUwMi9pUjdZdXF3c2M3MFRyY3Fob1dxdkFOSWtx SGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lSN1l1cXdzYzcwVHJjcWhvV3F2QU5Ja3FIYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Mzk0RTcvRjRDRkQxREFBQzczMTFFRjg3RkM1NTRDQzRGOUFFMDIvRjcwNzhCQzRC NzM1MTFFRjg1MzdERTgxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBADKJp0DBADLH7cDBADLXBsDBADLvhkwDQYJKoZIhvcNAQEL BQADggEBAOxw3zsOj2ZY2Dsn1lod9GMxf+L6jR649oUoMT/Y2KZB151FaQ+oWAPb c67ISADzFFod20ESIIR5bYUeDtT779vkE+p/XymIem6V0nI6AiuSrgw8F/hIoBnY KZtBLcU9zbOwvg+j4eEu8oN/VLjCXjJWueGRgPcJhclLZitqdXL7cqWyRB88ElwW hc1MOSh+85d0uUomFqOp3TdBokPjfGBlhSjQGTB39uZaLaWWGVHoF7DP+YMieQl7 FKbBCOp7ECKobB8agIscQ6zYG4Py6PxcDGrb8W504I0P5NqpWnuHGmIMAGtivPvG bj0SZrtf9rZZeL0nyy4Ty8weqsOzx+s= -----END CERTIFICATE-----Generated at Tue Oct 28 20:32:09 2025 by rpki-client