$ rpki-client -vvf rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/8205A466A73111ED97576186C4F9AE02.roa File: 8205A466A73111ED97576186C4F9AE02.roa (raw, json) Hash identifier: AVydiAPOqJ2iC+mxuyxEb7zkq3SOfZVPinLk82qjLgc= Subject key identifier: 63:23:59:E9:9F:79:7E:0D:9F:E4:A8:4E:1D:B1:45:28:5A:1F:13:E1 Certificate issuer: /CN=A91406AA/serialNumber=315513E54AB0C99B8BCA84042E38358B60DB1B2C Certificate serial: 07FE Authority key identifier: 31:55:13:E5:4A:B0:C9:9B:8B:CA:84:04:2E:38:35:8B:60:DB:1B:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/8205A466A73111ED97576186C4F9AE02.roa Signing time: Wed 08 Oct 2025 22:24:36 +0000 ROA not before: Wed 08 Oct 2025 22:24:36 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 45459 IP address blocks: 202.89.57.0/24 maxlen: 24 203.89.178.0/24 maxlen: 24 203.89.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.crl rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 23:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2046 (0x7fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91406AA, serialNumber=315513E54AB0C99B8BCA84042E38358B60DB1B2C Validity Not Before: Oct 8 22:24:36 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68e6e4a4-b113 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5f:d0:2d:d4:bf:17:12:bf:fb:e4:04:1e:ec: 56:e2:db:02:26:b4:1f:dc:64:8d:b1:0d:df:86:90: 87:cc:70:2d:25:01:90:d3:03:36:50:b8:be:1f:f1: e1:1f:d4:b6:9d:8f:bb:af:67:8f:22:40:cb:57:77: 03:65:93:25:3c:64:5d:ed:df:4f:db:95:79:0b:b0: 99:05:9a:4f:fd:39:e2:94:a1:1c:33:8a:32:a4:46: 64:a2:d9:ab:f4:70:18:69:57:66:d2:a1:57:f7:5b: 1e:a1:0f:07:d7:03:dd:7c:92:62:94:0e:00:c5:ea: 1c:3c:55:5a:ee:73:db:85:10:f0:bb:10:21:e7:d1: ed:d6:ac:90:71:d2:3c:40:08:4d:1f:71:6e:16:19: 5a:4a:3a:1d:8a:80:5e:9c:07:1e:a8:9f:ab:7e:47: 22:b4:8d:f7:e2:e1:74:c1:1d:d2:8e:64:39:97:b1: ef:73:ff:3f:7b:50:2c:61:0d:2b:62:e7:df:b0:7b: 9e:3d:b4:c6:e7:12:35:2c:dc:07:5d:d0:38:ea:c6: 0b:8f:26:86:1e:85:53:80:72:e4:95:f6:ff:1e:29: c5:4b:9c:9c:27:fc:6f:c7:b8:99:6e:e9:7a:ce:10: ca:a9:d9:15:d3:a3:92:9d:5d:9a:43:7d:cb:40:99: 47:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:23:59:E9:9F:79:7E:0D:9F:E4:A8:4E:1D:B1:45:28:5A:1F:13:E1 X509v3 Authority Key Identifier: keyid:31:55:13:E5:4A:B0:C9:9B:8B:CA:84:04:2E:38:35:8B:60:DB:1B:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/8205A466A73111ED97576186C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.89.57.0/24 203.89.178.0/24 203.89.187.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:7a:b6:32:05:46:f6:dc:6f:5f:af:32:cb:6c:6d:e5:fe:87: 8e:04:63:bf:10:ff:83:98:00:a5:5c:ce:31:ca:09:79:90:8a: f1:4d:62:24:49:0f:96:f9:62:f4:4d:56:e2:75:74:54:df:b5: cb:54:8a:62:18:15:73:2d:39:fc:48:53:1a:c1:d2:c4:fc:a7: 8c:b5:81:97:cd:89:0c:db:b9:87:44:75:f7:32:49:c0:22:15: 86:f4:e0:9c:fb:c6:ea:b2:d0:1f:65:ae:f5:34:13:ff:03:b7: 85:7a:ab:ae:63:32:fe:99:b5:a4:9d:b8:cb:55:ba:46:bc:e7: 9e:8c:74:e7:c8:ab:44:71:fd:cf:92:e3:4f:aa:e7:01:40:9d: c1:46:51:3b:8c:bb:05:50:72:03:83:50:d3:fe:0c:ec:17:5c: 59:5c:db:1c:f5:85:f9:a7:b7:e0:82:98:79:5a:a5:49:56:c9: 5d:46:0a:fc:f8:58:3c:ca:ac:f5:b6:8a:3c:47:80:b1:c3:be: 0d:3d:e4:26:1b:6f:0b:cb:49:cc:8b:3f:83:cc:7c:9f:ea:76: 99:87:10:c5:68:97:4a:19:72:d4:67:14:0d:61:92:88:91:5a: c4:a4:38:7f:61:17:ec:5b:0d:a4:bd:14:20:77:81:b7:f0:63: ab:50:e8:94 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICB/4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDA2QUExMTAvBgNVBAUTKDMxNTUxM0U1NEFCMEM5OUI4QkNBODQwNDJFMzgzNThC NjBEQjFCMkMwHhcNMjUxMDA4MjIyNDM2WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGU2ZTRhNC1iMTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvV/QLdS/FxK/++QEHuxW4tsCJrQf3GSNsQ3fhpCHzHAtJQGQ0wM2ULi+H/Hh H9S2nY+7r2ePIkDLV3cDZZMlPGRd7d9P25V5C7CZBZpP/TnilKEcM4oypEZkotmr 9HAYaVdm0qFX91seoQ8H1wPdfJJilA4AxeocPFVa7nPbhRDwuxAh59Ht1qyQcdI8 QAhNH3FuFhlaSjodioBenAceqJ+rfkcitI334uF0wR3SjmQ5l7Hvc/8/e1AsYQ0r YuffsHuePbTG5xI1LNwHXdA46sYLjyaGHoVTgHLklfb/HinFS5ycJ/xvx7iZbul6 zhDKqdkV06OSnV2aQ33LQJlH0wIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFGMjWemf eX4Nn+SoTh2xRShaHxPhMB8GA1UdIwQYMBaAFDFVE+VKsMmbi8qEBC44NYtg2xss MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDZBQS84RjVCQjRGODg2 QzExMUVCQkFCMzE4NEJDNEY5QUUwMi9NVlVUNVVxd3ladUx5b1FFTGpnMWkyRGJH eXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01WVVQ1VXF3eVp1THlvUUVMamcxaTJEYkd5dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDA2QUEvOEY1QkI0Rjg4NkMxMTFFQkJBQjMxODRCQzRGOUFFMDIvODIwNUE0NjZB NzMxMTFFRDk3NTc2MTg2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBADKWTkDBADLWbIDBADLWbswDQYJKoZIhvcNAQELBQADggEB AHx6tjIFRvbcb1+vMstsbeX+h44EY78Q/4OYAKVczjHKCXmQivFNYiRJD5b5YvRN VuJ1dFTftctUimIYFXMtOfxIUxrB0sT8p4y1gZfNiQzbuYdEdfcyScAiFYb04Jz7 xuqy0B9lrvU0E/8Dt4V6q65jMv6ZtaSduMtVuka8556MdOfIq0Rx/c+S40+q5wFA ncFGUTuMuwVQcgODUNP+DOwXXFlc2xz1hfmnt+CCmHlapUlWyV1GCvz4WDzKrPW2 ijxHgLHDvg095CYbbwvLScyLP4PMfJ/qdpmHEMVol0oZctRnFA1hkoiRWsSkOH9h F+xbDaS9FCB3gbfwY6tQ6JQ= -----END CERTIFICATE-----Generated at Thu Oct 23 01:31:01 2025 by rpki-client