$ rpki-client -vvf rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/ECF2B5A8A72B11EDAC3DA56CC4F9AE02.roa File: ECF2B5A8A72B11EDAC3DA56CC4F9AE02.roa (raw, json) Hash identifier: EbkFTiXwUuM4uKc+Le4LDTESLEZ3plcvfpf4GyS68jQ= Subject key identifier: 0E:E2:77:C3:40:F8:2C:20:68:FC:D2:55:FC:60:D6:E9:C7:76:15:F8 Certificate issuer: /CN=A91406AA/serialNumber=218A8AA050267B0805E3FDC8A939BF8FBCB00101 Certificate serial: 06F1 Authority key identifier: 21:8A:8A:A0:50:26:7B:08:05:E3:FD:C8:A9:39:BF:8F:BC:B0:01:01 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IYqKoFAmewgF4_3IqTm_j7ywAQE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/ECF2B5A8A72B11EDAC3DA56CC4F9AE02.roa Signing time: Wed 08 Oct 2025 22:24:22 +0000 ROA not before: Wed 08 Oct 2025 22:24:22 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 56068 IP address blocks: 131.203.76.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.crl rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IYqKoFAmewgF4_3IqTm_j7ywAQE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:48:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1777 (0x6f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91406AA, serialNumber=218A8AA050267B0805E3FDC8A939BF8FBCB00101 Validity Not Before: Oct 8 22:24:22 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68e6e496-5993 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:a0:a5:0f:bf:9c:04:ed:47:19:a4:9e:5e:c3: c9:1e:24:75:8d:2b:c9:0c:ad:d9:2c:2a:7d:ee:06: 31:d9:ad:da:7c:8e:91:cd:9b:14:9d:ca:2e:dc:cf: 1f:d4:d8:71:ee:86:0e:08:3f:86:22:84:ad:33:34: 8e:17:45:73:36:22:63:24:90:43:a6:84:17:6a:41: fa:22:1f:10:58:8c:09:ef:06:ac:65:ba:80:2e:39: 8d:22:20:3c:5c:96:95:b4:91:a4:14:67:2e:fe:35: 26:b9:4a:15:b9:5d:10:16:ae:06:55:9a:56:88:78: c5:02:16:73:cb:e5:73:a8:4c:b5:32:f4:e5:f9:b2: f7:d5:1f:64:79:3a:f6:f4:65:cb:c4:3e:b9:e7:b8: e0:e7:9d:8e:25:39:3e:cc:c3:81:85:e6:ee:c8:79: 02:dd:d3:18:39:99:de:af:76:62:e1:dd:12:2c:31: 72:27:08:08:96:a9:10:63:87:08:21:f5:b6:35:b3: 8a:14:74:85:a6:7e:b6:86:08:d9:d9:cb:b6:6f:7f: b8:36:97:47:06:8d:7a:33:a9:ac:53:5a:49:89:e0: 81:14:9f:d3:83:b9:de:ac:ee:b0:04:94:fc:77:75: 93:a9:c8:09:28:2f:51:90:9d:3b:b8:3d:7b:be:ac: 56:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:E2:77:C3:40:F8:2C:20:68:FC:D2:55:FC:60:D6:E9:C7:76:15:F8 X509v3 Authority Key Identifier: keyid:21:8A:8A:A0:50:26:7B:08:05:E3:FD:C8:A9:39:BF:8F:BC:B0:01:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IYqKoFAmewgF4_3IqTm_j7ywAQE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/ECF2B5A8A72B11EDAC3DA56CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 131.203.76.0/23 Signature Algorithm: sha256WithRSAEncryption 05:1f:01:e1:74:b0:29:bb:e8:07:0a:24:b8:6f:84:87:b3:74: 8e:1c:28:26:0d:17:b9:a5:0c:8d:7c:02:18:58:79:ae:31:ed: c9:29:f9:5f:8e:cc:74:36:41:d5:64:b7:31:3d:0d:73:0a:c2: dd:ab:d5:ea:67:4d:8a:5b:dd:be:d5:d3:2f:2d:97:9e:bd:49: e0:b1:43:14:f5:0e:bc:0f:3d:53:22:4b:76:b3:55:3d:cb:4c: c6:d9:6c:58:11:ed:64:ec:fd:19:92:6e:7a:51:3b:1c:fe:b2: 27:c8:a8:5b:11:35:15:a4:be:54:82:37:90:96:8d:f5:20:10: c7:3a:2e:0c:1c:3e:90:4a:c4:7d:97:69:0c:ba:43:7d:a1:e8: 79:93:f0:9d:95:3d:b9:da:2f:d0:37:80:28:4f:28:10:f5:97: 88:c0:4d:ef:40:62:48:28:db:38:d9:d6:b9:76:47:f4:4a:83: fc:b8:23:5a:96:8c:45:2c:59:65:4d:3a:04:73:c0:36:8d:71: 46:ab:53:e4:bd:0f:bc:50:ee:54:bc:53:67:47:85:d5:f3:e3: ec:37:cb:1f:ed:60:ef:ad:07:83:68:bf:27:87:27:6b:ab:c3: 3e:b9:48:c1:aa:b6:cd:01:f3:7c:09:81:ef:16:5b:16:1d:80: 40:2c:63:ba -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBvEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDA2QUExMTAvBgNVBAUTKDIxOEE4QUEwNTAyNjdCMDgwNUUzRkRDOEE5MzlCRjhG QkNCMDAxMDEwHhcNMjUxMDA4MjIyNDIyWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGU2ZTQ5Ni01OTkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA36ClD7+cBO1HGaSeXsPJHiR1jSvJDK3ZLCp97gYx2a3afI6RzZsUncou3M8f 1Nhx7oYOCD+GIoStMzSOF0VzNiJjJJBDpoQXakH6Ih8QWIwJ7wasZbqALjmNIiA8 XJaVtJGkFGcu/jUmuUoVuV0QFq4GVZpWiHjFAhZzy+VzqEy1MvTl+bL31R9keTr2 9GXLxD6557jg552OJTk+zMOBhebuyHkC3dMYOZner3Zi4d0SLDFyJwgIlqkQY4cI IfW2NbOKFHSFpn62hgjZ2cu2b3+4NpdHBo16M6msU1pJieCBFJ/Tg7nerO6wBJT8 d3WTqcgJKC9RkJ07uD17vqxWSwIDAQABo4IClTCCApEwHQYDVR0OBBYEFA7id8NA +CwgaPzSVfxg1unHdhX4MB8GA1UdIwQYMBaAFCGKiqBQJnsIBeP9yKk5v4+8sAEB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDZBQS84NjU4RTQ2Njg2 QzExMUVCQkFCMzE4NEJDNEY5QUUwMi9JWXFLb0ZBbWV3Z0Y0XzNJcVRtX2o3eXdB UUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0lZcUtvRkFtZXdnRjRfM0lxVG1fajd5d0FRRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDA2QUEvODY1OEU0NjY4NkMxMTFFQkJBQjMxODRCQzRGOUFFMDIvRUNGMkI1QThB NzJCMTFFREFDM0RBNTZDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGDy0wwDQYJKoZIhvcNAQELBQADggEBAAUfAeF0sCm76AcK JLhvhIezdI4cKCYNF7mlDI18AhhYea4x7ckp+V+OzHQ2QdVktzE9DXMKwt2r1epn TYpb3b7V0y8tl569SeCxQxT1DrwPPVMiS3azVT3LTMbZbFgR7WTs/RmSbnpROxz+ sifIqFsRNRWkvlSCN5CWjfUgEMc6LgwcPpBKxH2XaQy6Q32h6HmT8J2VPbnaL9A3 gChPKBD1l4jATe9AYkgo2zjZ1rl2R/RKg/y4I1qWjEUsWWVNOgRzwDaNcUarU+S9 D7xQ7lS8U2dHhdXz4+w3yx/tYO+tB4NovyeHJ2urwz65SMGqts0B83wJge8WWxYd gEAsY7o= -----END CERTIFICATE-----Generated at Wed Oct 22 21:26:34 2025 by rpki-client