$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2913/8B43B736FE4911EFA735AD6FC4F9AE02/7273BDA4FE4A11EF8A0EDD73C4F9AE02.roa File: 7273BDA4FE4A11EF8A0EDD73C4F9AE02.roa (raw, json) Hash identifier: t9LgVYyuR76/7PmfedGxaDrMAlK0pUEQonnQh6SyVwE= Subject key identifier: FF:1D:F8:0D:E2:FF:3E:B1:9E:44:C2:D6:3C:8F:57:5D:3F:5E:15:76 Certificate issuer: /CN=A91C2913/serialNumber=30DFCDC892E73EE25464282742E29C567EA3CE03 Certificate serial: 7D Authority key identifier: 30:DF:CD:C8:92:E7:3E:E2:54:64:28:27:42:E2:9C:56:7E:A3:CE:03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MN_NyJLnPuJUZCgnQuKcVn6jzgM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2913/8B43B736FE4911EFA735AD6FC4F9AE02/7273BDA4FE4A11EF8A0EDD73C4F9AE02.roa Signing time: Fri 31 Oct 2025 06:51:19 +0000 ROA not before: Fri 31 Oct 2025 06:51:19 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 18111 IP address blocks: 202.92.240.0/21 maxlen: 24 203.20.62.0/24 maxlen: 24 203.22.236.0/22 maxlen: 24 203.28.45.0/24 maxlen: 24 203.30.98.0/23 maxlen: 23 203.31.48.0/24 maxlen: 24 203.33.171.0/24 maxlen: 24 203.55.120.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2913/8B43B736FE4911EFA735AD6FC4F9AE02/MN_NyJLnPuJUZCgnQuKcVn6jzgM.crl rsync://rpki.apnic.net/member_repository/A91C2913/8B43B736FE4911EFA735AD6FC4F9AE02/MN_NyJLnPuJUZCgnQuKcVn6jzgM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MN_NyJLnPuJUZCgnQuKcVn6jzgM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:47:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 125 (0x7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2913, serialNumber=30DFCDC892E73EE25464282742E29C567EA3CE03 Validity Not Before: Oct 31 06:51:19 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69045c66-dd8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1f:1e:f2:9c:3b:a3:a1:b3:b5:b1:99:0b:01: b3:a6:1c:93:87:d4:37:7e:49:bc:82:29:fe:1a:50: 59:bf:55:71:f6:2b:38:15:84:fb:2b:e2:f6:26:87: 47:97:e8:bd:81:3f:b2:db:89:54:f3:75:62:02:28: e0:45:dc:17:6d:16:63:ae:19:3d:6b:ce:55:b0:64: cf:65:78:2b:0e:a2:e0:9b:0a:73:15:bd:82:5b:41: 70:a1:98:ba:74:d1:d0:97:ab:87:b1:88:2c:ba:47: b9:d4:d7:23:b7:84:a3:2f:20:85:01:f0:08:05:a2: 76:8b:09:1f:02:74:13:45:da:76:58:b9:a2:13:b0: 91:3f:1c:bb:99:e8:00:91:6b:13:5e:fb:2a:3b:7a: be:12:88:7a:30:f9:c1:ee:f7:ab:54:83:13:62:74: d6:58:b8:8b:3c:5b:45:7d:f2:d0:22:2a:00:12:bd: ec:3a:b7:d7:2b:36:d5:d5:4b:c2:83:b2:bb:e1:11: c1:86:4b:3c:97:8d:eb:c7:23:14:19:29:5c:79:b1: 92:ed:81:83:53:d2:b8:04:cb:45:35:3c:28:5e:46: a2:71:f3:ff:64:72:bb:f1:3a:4e:64:18:54:66:6c: 08:e2:53:dd:e9:d8:d6:98:08:11:1e:a3:8a:12:f0: cd:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:1D:F8:0D:E2:FF:3E:B1:9E:44:C2:D6:3C:8F:57:5D:3F:5E:15:76 X509v3 Authority Key Identifier: keyid:30:DF:CD:C8:92:E7:3E:E2:54:64:28:27:42:E2:9C:56:7E:A3:CE:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2913/8B43B736FE4911EFA735AD6FC4F9AE02/MN_NyJLnPuJUZCgnQuKcVn6jzgM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MN_NyJLnPuJUZCgnQuKcVn6jzgM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2913/8B43B736FE4911EFA735AD6FC4F9AE02/7273BDA4FE4A11EF8A0EDD73C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.92.240.0/21 203.20.62.0/24 203.22.236.0/22 203.28.45.0/24 203.30.98.0/23 203.31.48.0/24 203.33.171.0/24 203.55.120.0/23 Signature Algorithm: sha256WithRSAEncryption ab:8a:ab:0a:b1:af:8a:39:08:f8:c5:ca:88:85:68:4b:9e:22: 77:92:19:1b:8a:29:0f:36:98:4d:63:27:f7:7e:81:7b:2b:92: 04:6e:60:e9:50:7c:06:d2:45:29:e6:4c:d5:c2:df:ee:66:37: fd:06:ab:08:7b:83:c6:db:e6:98:11:7c:fb:36:0f:99:2e:e4: 76:93:b0:06:22:7f:9e:75:1a:b2:2f:c4:0a:e9:f7:a7:b2:0a: a3:1d:b9:bc:26:b7:5f:56:68:43:c5:94:1c:71:74:37:4f:17: 80:3a:d2:43:db:b7:4f:69:a7:44:dc:27:91:6f:d8:ae:30:8d: 4c:55:f9:e3:f5:67:f0:d7:54:47:fb:90:b8:17:2d:e6:97:87: 3d:ab:d3:9e:9b:3d:b3:03:7f:ff:e7:27:50:8d:11:99:d8:30: e6:99:5b:fd:47:f0:38:49:a2:41:a3:cc:cf:2b:30:b3:b8:3f: 51:71:9e:dc:ba:4a:95:56:1c:05:38:bd:1b:23:06:3e:d2:53: 94:1b:0b:5e:bf:03:81:20:5e:1f:cc:65:70:e5:28:26:b7:54: 3a:da:ce:34:98:7a:5c:0d:99:39:73:4c:8c:14:f0:39:2b:10: 6f:6f:f9:14:3c:a2:a4:6e:ac:c4:33:01:a3:2a:28:04:07:fd: 88:cb:b3:25 -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgIBfTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD MjkxMzExMC8GA1UEBRMoMzBERkNEQzg5MkU3M0VFMjU0NjQyODI3NDJFMjlDNTY3 RUEzQ0UwMzAeFw0yNTEwMzEwNjUxMTlaFw0yNjEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MDQ1YzY2LWRkOGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAHx7ynDujobO1sZkLAbOmHJOH1Dd+SbyCKf4aUFm/VXH2KzgVhPsr4vYmh0eX 6L2BP7LbiVTzdWICKOBF3BdtFmOuGT1rzlWwZM9leCsOouCbCnMVvYJbQXChmLp0 0dCXq4exiCy6R7nU1yO3hKMvIIUB8AgFonaLCR8CdBNF2nZYuaITsJE/HLuZ6ACR axNe+yo7er4SiHow+cHu96tUgxNidNZYuIs8W0V98tAiKgASvew6t9crNtXVS8KD srvhEcGGSzyXjevHIxQZKVx5sZLtgYNT0rgEy0U1PCheRqJx8/9kcrvxOk5kGFRm bAjiU93p2NaYCBEeo4oS8M0xAgMBAAGjggK/MIICuzAdBgNVHQ4EFgQU/x34DeL/ PrGeRMLWPI9XXT9eFXYwHwYDVR0jBBgwFoAUMN/NyJLnPuJUZCgnQuKcVn6jzgMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMyOTEzLzhCNDNCNzM2RkU0 OTExRUZBNzM1QUQ2RkM0RjlBRTAyL01OX055SkxuUHVKVVpDZ25RdUtjVm42anpn TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTU5fTnlKTG5QdUpVWkNnblF1S2NWbjZqemdNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MjkxMy84QjQzQjczNkZFNDkxMUVGQTczNUFENkZDNEY5QUUwMi83MjczQkRBNEZF NEExMUVGOEEwRURENzNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDBJBggrBgEFBQcBBwEB/wQ6 MDgwNgQCAAEwMAMEA8pc8AMEAMsUPgMEAssW7AMEAMscLQMEAcseYgMEAMsfMAME AMshqwMEAcs3eDANBgkqhkiG9w0BAQsFAAOCAQEAq4qrCrGvijkI+MXKiIVoS54i d5IZG4opDzaYTWMn936BeyuSBG5g6VB8BtJFKeZM1cLf7mY3/QarCHuDxtvmmBF8 +zYPmS7kdpOwBiJ/nnUasi/ECun3p7IKox25vCa3X1ZoQ8WUHHF0N08XgDrSQ9u3 T2mnRNwnkW/YrjCNTFX54/Vn8NdUR/uQuBct5peHPavTnps9swN//+cnUI0Rmdgw 5plb/UfwOEmiQaPMzysws7g/UXGe3LpKlVYcBTi9GyMGPtJTlBsLXr8DgSBeH8xl cOUoJrdUOtrONJh6XA2ZOXNMjBTwOSsQb2/5FDyipG6sxDMBoyooBAf9iMuzJQ== -----END CERTIFICATE-----Generated at Wed Nov 5 05:23:43 2025 by rpki-client