$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/2DDA16845B7C11EDAAFAB831C4F9AE02.roa File: 2DDA16845B7C11EDAAFAB831C4F9AE02.roa (raw, json) Hash identifier: 871uvrhz95uu9PNNNjkaUPMmnQGHPUEZxKLtNFNyiww= Subject key identifier: BD:CE:98:27:E9:FD:04:22:14:E7:FC:F2:75:B0:8B:94:F7:F7:A0:08 Certificate issuer: /CN=A91ADB98/serialNumber=661C64E293B87F473AF61D89DE48FC4538570157 Certificate serial: 02A9 Authority key identifier: 66:1C:64:E2:93:B8:7F:47:3A:F6:1D:89:DE:48:FC:45:38:57:01:57 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/2DDA16845B7C11EDAAFAB831C4F9AE02.roa Signing time: Wed 01 Oct 2025 02:29:01 +0000 ROA not before: Wed 01 Oct 2025 02:29:01 +0000 ROA not after: Fri 30 Jan 2026 00:00:00 +0000 asID: 132621 IP address blocks: 140.168.244.0/22 maxlen: 22 140.168.244.0/24 maxlen: 24 140.168.245.0/24 maxlen: 24 140.168.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.crl rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 03:16:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 681 (0x2a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADB98, serialNumber=661C64E293B87F473AF61D89DE48FC4538570157 Validity Not Before: Oct 1 02:29:01 2025 GMT Not After : Jan 30 00:00:00 2026 GMT Subject: CN=68dc91ed-b3b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5f:7c:40:be:ab:96:31:4b:f9:be:e2:8d:53: a7:d0:27:93:31:e9:61:2d:92:a1:77:bb:a9:cf:d6: 90:25:0e:b9:77:85:b1:b4:df:46:a7:cf:ad:08:b3: 71:33:6a:a4:7e:15:fc:ee:4f:8f:b6:d6:22:38:53: 81:07:8e:e6:16:8f:72:e7:97:90:34:8c:19:fb:97: 5b:e3:45:02:5b:27:b8:25:73:d4:fa:10:e1:60:74: 5c:a4:c3:ee:85:b8:af:30:bd:fd:2f:39:ec:d7:af: 3b:18:21:21:aa:d9:a9:54:b8:73:f5:0d:cd:c9:4e: 93:c9:02:f0:87:e5:9e:ab:d0:f2:23:50:53:18:4e: 30:17:28:f7:bf:60:68:cd:24:77:58:a9:2c:26:4f: bb:01:1a:cd:ad:37:d7:79:63:df:e7:35:d5:fd:bc: 79:39:28:dc:67:70:a0:8f:31:e7:de:eb:0b:a1:a9: 23:7b:36:a7:0b:18:18:f5:f4:5f:72:02:48:0d:ab: e9:aa:29:9e:7b:cd:ac:84:4e:36:90:f6:e9:61:10: 02:7f:a9:4b:bb:df:21:e7:6c:b7:3b:bc:d6:f2:e0: 0f:54:c1:e5:5d:b6:bf:9d:ab:28:1e:e5:b6:3a:70: 5b:a4:70:b2:9f:df:29:cc:af:ae:6e:af:ae:a9:9e: 4e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:CE:98:27:E9:FD:04:22:14:E7:FC:F2:75:B0:8B:94:F7:F7:A0:08 X509v3 Authority Key Identifier: keyid:66:1C:64:E2:93:B8:7F:47:3A:F6:1D:89:DE:48:FC:45:38:57:01:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/2DDA16845B7C11EDAAFAB831C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 140.168.244.0/22 Signature Algorithm: sha256WithRSAEncryption 16:7d:1a:98:70:b2:d7:c5:69:1e:be:c1:e3:74:85:2e:88:c3: 88:95:63:30:eb:e3:ec:98:fe:91:62:44:19:f4:24:a7:23:f1: fd:2d:3d:9f:df:c4:87:81:aa:c0:e1:da:02:2c:75:df:32:4c: 04:2b:95:46:e5:26:29:b0:f1:8f:95:e1:70:da:5e:8b:c7:d6: 4d:16:f9:0c:c7:b1:cf:ad:de:45:9c:55:52:a4:ad:57:9c:69: e3:fc:9f:a9:83:5e:3c:5b:2c:52:da:b6:2c:d6:27:f3:43:8e: 49:5b:86:00:ec:f1:d9:ad:6b:cd:e7:bd:a1:da:cd:17:07:85: 13:89:c8:c4:39:14:59:00:c4:03:2f:7f:94:53:74:33:2d:18: 4a:00:e5:ef:a4:fc:11:9b:42:c5:c6:bf:b6:d6:11:c4:b3:ec: e5:17:20:68:b1:d9:b0:50:78:d3:af:e5:36:17:92:06:75:be: 67:07:51:41:a2:08:78:ca:e0:aa:85:00:6e:65:09:0d:3a:3d: 20:b7:86:37:07:44:49:33:a6:32:fe:49:11:aa:24:ad:2c:91: c9:c1:b1:57:8c:29:a9:2a:40:08:ff:76:47:9a:2c:73:d3:02: 65:04:30:98:43:68:12:56:9c:c1:28:d4:92:ef:ed:92:a2:d7: 46:b3:99:cb -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAqkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURCOTgxMTAvBgNVBAUTKDY2MUM2NEUyOTNCODdGNDczQUY2MUQ4OURFNDhGQzQ1 Mzg1NzAxNTcwHhcNMjUxMDAxMDIyOTAxWhcNMjYwMTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGRjOTFlZC1iM2IyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw198QL6rljFL+b7ijVOn0CeTMelhLZKhd7upz9aQJQ65d4WxtN9Gp8+tCLNx M2qkfhX87k+PttYiOFOBB47mFo9y55eQNIwZ+5db40UCWye4JXPU+hDhYHRcpMPu hbivML39Lzns1687GCEhqtmpVLhz9Q3NyU6TyQLwh+Weq9DyI1BTGE4wFyj3v2Bo zSR3WKksJk+7ARrNrTfXeWPf5zXV/bx5OSjcZ3CgjzHn3usLoakjezanCxgY9fRf cgJIDavpqimee82shE42kPbpYRACf6lLu98h52y3O7zW8uAPVMHlXba/nasoHuW2 OnBbpHCyn98pzK+ubq+uqZ5OjwIDAQABo4IClTCCApEwHQYDVR0OBBYEFL3OmCfp /QQiFOf88nWwi5T396AIMB8GA1UdIwQYMBaAFGYcZOKTuH9HOvYdid5I/EU4VwFX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREI5OC9EOTNFOTNEQzQ5 MjExMUVEQUJENTlDNTNDNEY5QUUwMi9aaHhrNHBPNGYwYzY5aDJKM2tqOFJUaFhB VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1poeGs0cE80ZjBjNjloMkoza2o4UlRoWEFWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QURCOTgvRDkzRTkzREM0OTIxMTFFREFCRDU5QzUzQzRGOUFFMDIvMkREQTE2ODQ1 QjdDMTFFREFBRkFCODMxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAKMqPQwDQYJKoZIhvcNAQELBQADggEBABZ9GphwstfFaR6+ weN0hS6Iw4iVYzDr4+yY/pFiRBn0JKcj8f0tPZ/fxIeBqsDh2gIsdd8yTAQrlUbl Jimw8Y+V4XDaXovH1k0W+QzHsc+t3kWcVVKkrVecaeP8n6mDXjxbLFLatizWJ/ND jklbhgDs8dmta83nvaHazRcHhROJyMQ5FFkAxAMvf5RTdDMtGEoA5e+k/BGbQsXG v7bWEcSz7OUXIGix2bBQeNOv5TYXkgZ1vmcHUUGiCHjK4KqFAG5lCQ06PSC3hjcH REkzpjL+SRGqJK0skcnBsVeMKakqQAj/dkeaLHPTAmUEMJhDaBJWnMEo1JLv7ZKi 10azmcs= -----END CERTIFICATE-----Generated at Fri Oct 24 12:52:23 2025 by rpki-client