$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/A59E2538BA0211F0892F7E0BC4F9AE02.roa File: A59E2538BA0211F0892F7E0BC4F9AE02.roa (raw, json) Hash identifier: OtbmYjd+mWe6biEFLJDUdTXgoAn8SFa04cxMhMepJCc= Subject key identifier: EB:39:72:B9:60:77:BC:4A:1E:18:53:58:79:D5:90:B0:C6:97:E1:99 Certificate issuer: /CN=A91B2A6F/serialNumber=8C5A8997FCA5BF0270EAF86EE8C0CB6551AB97D1 Certificate serial: 0A8A Authority key identifier: 8C:5A:89:97:FC:A5:BF:02:70:EA:F8:6E:E8:C0:CB:65:51:AB:97:D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFqJl_ylvwJw6vhu6MDLZVGrl9E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/A59E2538BA0211F0892F7E0BC4F9AE02.roa Signing time: Wed 05 Nov 2025 04:48:18 +0000 ROA not before: Wed 05 Nov 2025 04:48:18 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 4764 IP address blocks: 43.247.64.0/22 maxlen: 22 103.26.172.0/22 maxlen: 22 2401:f80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.crl rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFqJl_ylvwJw6vhu6MDLZVGrl9E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:48:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2698 (0xa8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2A6F, serialNumber=8C5A8997FCA5BF0270EAF86EE8C0CB6551AB97D1 Validity Not Before: Nov 5 04:48:18 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=690ad712-f610 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:12:82:db:10:5b:ba:4f:2b:05:a1:2d:31:46: 21:68:7c:2e:38:22:5c:62:e5:cb:8b:1a:ae:8b:5a: fd:ef:a8:a3:8b:1c:70:d4:7f:d7:3b:c6:77:22:1d: a5:a2:7e:4a:87:02:84:8b:e5:11:1f:c9:35:1e:6d: 5f:32:0a:13:7e:7e:47:5e:b5:64:f5:01:52:e9:13: 19:e5:d6:c5:ac:1d:2c:09:e9:44:db:4b:09:33:34: 3a:7c:7a:bb:d7:13:c4:c1:ad:50:83:85:10:44:59: 8d:23:88:fb:c9:06:c3:04:23:74:df:91:e9:cc:ff: be:b3:be:3c:42:c9:4e:76:23:d6:dc:c7:e4:d3:98: d8:4f:bf:1f:40:52:c7:04:db:ef:bf:fb:95:90:2a: 5c:d1:3f:05:2d:2f:6b:04:75:35:f4:fe:33:08:db: 26:22:00:a2:6c:b6:51:8d:ac:2f:f9:6f:bc:8c:bf: bd:b7:d5:18:69:d3:73:44:44:10:7d:ab:af:0a:6e: 3e:bf:84:a4:30:dc:09:b4:9d:7a:6c:e8:fa:ed:24: 9a:b9:19:f5:8c:41:11:67:b8:5d:99:5b:57:1f:93: 19:5e:c0:02:33:bc:7e:dd:7b:8c:ce:8b:38:4d:89: 6f:2a:7e:3e:47:52:b4:e4:33:be:01:de:24:1c:f9: 77:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:39:72:B9:60:77:BC:4A:1E:18:53:58:79:D5:90:B0:C6:97:E1:99 X509v3 Authority Key Identifier: keyid:8C:5A:89:97:FC:A5:BF:02:70:EA:F8:6E:E8:C0:CB:65:51:AB:97:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFqJl_ylvwJw6vhu6MDLZVGrl9E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/A59E2538BA0211F0892F7E0BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.247.64.0/22 103.26.172.0/22 IPv6: 2401:f80::/32 Signature Algorithm: sha256WithRSAEncryption 0f:68:64:24:dd:71:73:c9:5a:8f:27:e9:d5:07:4e:4e:3b:b6: 72:dd:a6:a5:5c:e9:8c:89:48:79:e2:37:80:93:37:aa:ac:d8: 8f:87:ad:d8:52:d4:09:bf:d5:a6:12:31:72:ef:9c:5d:43:b8: f8:2a:0b:36:ab:17:b8:df:d0:3d:b0:0e:9b:bd:bb:7d:de:0c: 93:69:13:90:5f:e9:c7:a2:72:fc:24:cc:79:1b:bb:86:41:4c: 09:dc:cc:82:fe:82:63:7d:87:9a:ef:07:d7:f3:74:e8:17:53: 5b:e6:49:47:bb:a8:13:5b:06:74:27:1b:6c:53:b4:df:4a:77: 40:69:d4:18:60:2e:b5:35:c4:27:4d:18:79:0e:fe:de:f2:e7: 92:2d:bb:79:8d:6f:08:61:ac:a0:cf:1b:63:4e:0d:81:e7:d7: 30:9f:f2:dd:b4:f2:38:a4:4e:3c:9a:76:6a:ba:63:a9:55:c0: 10:4e:b1:7e:23:ff:83:6b:ca:d9:ef:31:73:35:4c:33:4e:d8: c5:b4:94:13:1b:13:ee:74:85:64:bf:67:a0:59:f8:6f:b7:1e: 0f:77:38:d3:58:3d:ba:a6:bd:dc:d8:da:69:aa:3b:e1:f2:2f: b0:10:c4:41:53:a4:74:c7:99:ea:f2:97:5b:0e:06:8f:fa:68: 2d:78:fa:a5 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICCoowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJBNkYxMTAvBgNVBAUTKDhDNUE4OTk3RkNBNUJGMDI3MEVBRjg2RUU4QzBDQjY1 NTFBQjk3RDEwHhcNMjUxMTA1MDQ0ODE4WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTBhZDcxMi1mNjEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnhKC2xBbuk8rBaEtMUYhaHwuOCJcYuXLixqui1r976ijixxw1H/XO8Z3Ih2l on5KhwKEi+URH8k1Hm1fMgoTfn5HXrVk9QFS6RMZ5dbFrB0sCelE20sJMzQ6fHq7 1xPEwa1Qg4UQRFmNI4j7yQbDBCN035HpzP++s748QslOdiPW3Mfk05jYT78fQFLH BNvvv/uVkCpc0T8FLS9rBHU19P4zCNsmIgCibLZRjawv+W+8jL+9t9UYadNzREQQ fauvCm4+v4SkMNwJtJ16bOj67SSauRn1jEERZ7hdmVtXH5MZXsACM7x+3XuMzos4 TYlvKn4+R1K05DO+Ad4kHPl34QIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFOs5crlg d7xKHhhTWHnVkLDGl+GZMB8GA1UdIwQYMBaAFIxaiZf8pb8CcOr4bujAy2VRq5fR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkE2Ri9DQURGRjJGRTZF MzYxMUVBQTEwRUZGNzZDNEY5QUUwMi9qRnFKbF95bHZ3Snc2dmh1Nk1ETFpWR3Js OUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pGcUpsX3lsdndKdzZ2aHU2TURMWlZHcmw5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjJBNkYvQ0FERkYyRkU2RTM2MTFFQUExMEVGRjc2QzRGOUFFMDIvQTU5RTI1MzhC QTAyMTFGMDg5MkY3RTBCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAIr90ADBAJnGqwwDQQCAAIwBwMFACQBD4AwDQYJKoZIhvcN AQELBQADggEBAA9oZCTdcXPJWo8n6dUHTk47tnLdpqVc6YyJSHniN4CTN6qs2I+H rdhS1Am/1aYSMXLvnF1DuPgqCzarF7jf0D2wDpu9u33eDJNpE5Bf6ceicvwkzHkb u4ZBTAnczIL+gmN9h5rvB9fzdOgXU1vmSUe7qBNbBnQnG2xTtN9Kd0Bp1BhgLrU1 xCdNGHkO/t7y55Itu3mNbwhhrKDPG2NODYHn1zCf8t208jikTjyadmq6Y6lVwBBO sX4j/4NrytnvMXM1TDNO2MW0lBMbE+50hWS/Z6BZ+G+3Hg93ONNYPbqmvdzY2mmq O+HyL7AQxEFTpHTHmeryl1sOBo/6aC14+qU= -----END CERTIFICATE-----Generated at Wed Nov 5 19:37:38 2025 by rpki-client