$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/C09C5F7A939311F08A23CC30C4F9AE02.roa File: C09C5F7A939311F08A23CC30C4F9AE02.roa (raw, json) Hash identifier: 9UkwYr6RxIOU+VmHhcff4g0hfkxJiT6GBYh6i9TGpz4= Subject key identifier: 04:E1:ED:DE:94:B6:61:84:EE:70:5A:3F:D5:60:16:33:B2:18:21:73 Certificate issuer: /CN=A91C3B8A/serialNumber=4550C69051BAA18AF112DC76B5F5DF9E6B7940D5 Certificate serial: 0BA9 Authority key identifier: 45:50:C6:90:51:BA:A1:8A:F1:12:DC:76:B5:F5:DF:9E:6B:79:40:D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RVDGkFG6oYrxEtx2tfXfnmt5QNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/C09C5F7A939311F08A23CC30C4F9AE02.roa Signing time: Wed 17 Sep 2025 06:58:45 +0000 ROA not before: Wed 17 Sep 2025 06:58:45 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 56286 IP address blocks: 116.193.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.crl rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RVDGkFG6oYrxEtx2tfXfnmt5QNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:59:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2985 (0xba9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3B8A, serialNumber=4550C69051BAA18AF112DC76B5F5DF9E6B7940D5 Validity Not Before: Sep 17 06:58:45 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=68ca5c25-9424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:30:5e:a6:94:fb:80:eb:27:9a:78:b1:0f:86: c6:ca:55:be:12:bc:08:32:c2:7f:c3:83:f9:26:ac: 3c:eb:f3:9a:a0:e9:83:f3:3a:33:bc:c7:cf:2a:0c: a4:a5:f1:21:84:75:e6:39:9c:bf:3e:db:d9:e9:8e: 29:af:00:dc:b4:c9:ea:b0:1e:6a:5d:95:fc:a2:d3: eb:a6:3b:8d:86:7f:ab:e8:2d:66:50:08:98:42:bf: 52:bf:3c:ee:57:de:8c:3d:26:d4:50:1c:6c:b6:9b: 07:c2:a5:8b:bf:6e:fc:4f:a3:2e:fc:09:3a:f2:22: 61:68:fe:70:ec:2c:c8:78:76:91:15:ba:db:48:28: 3c:23:63:20:6c:b8:c4:54:33:df:d9:ed:f2:26:0b: 6c:2d:bc:db:6e:e0:d0:7c:29:b3:02:ba:66:0e:d5: 83:32:dd:87:3d:c7:8c:0d:c2:89:d0:ec:94:8f:f9: f4:7b:f4:d2:84:bc:7a:fc:62:1f:14:d1:f5:34:e7: 04:c5:23:f9:f8:6d:54:d0:16:27:06:94:3a:dd:2a: 4d:65:c6:85:ad:99:46:fb:b0:de:ca:89:63:36:7b: 27:c3:a5:e1:f6:45:cd:73:7d:0a:b7:10:3b:3b:1f: a6:cc:24:d9:b9:4f:57:0f:12:94:a3:86:dd:2d:c5: 3d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:E1:ED:DE:94:B6:61:84:EE:70:5A:3F:D5:60:16:33:B2:18:21:73 X509v3 Authority Key Identifier: keyid:45:50:C6:90:51:BA:A1:8A:F1:12:DC:76:B5:F5:DF:9E:6B:79:40:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RVDGkFG6oYrxEtx2tfXfnmt5QNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/C09C5F7A939311F08A23CC30C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 116.193.156.0/24 Signature Algorithm: sha256WithRSAEncryption 64:5b:af:cd:e3:1e:61:c3:db:e9:fe:64:71:76:77:da:e5:7e: 90:91:8e:56:0b:d3:68:25:16:68:11:62:6b:59:1a:ed:1c:21: 02:41:ff:5e:27:34:08:eb:d5:fc:5c:8c:f1:f9:d1:38:fe:f8: 8d:94:29:c7:7b:62:d2:6f:8a:26:eb:52:1a:e6:bb:56:f7:4e: 71:24:22:16:e9:fa:c8:43:dc:30:2b:cd:15:9e:09:1f:e1:61: 9a:9a:4d:9b:af:0b:a3:a6:45:dc:29:c4:12:b9:45:7c:67:59: 0a:a5:14:2b:94:3f:49:e9:a3:b6:78:ee:21:e9:eb:e6:46:a9: c9:70:99:10:5c:1f:e1:b5:63:36:2f:d4:6a:ff:f6:bd:99:42: 74:f7:2b:b9:b0:4a:4a:df:1a:07:a1:82:d9:1c:81:b9:91:cf: cd:9c:2b:02:50:38:17:03:b3:07:54:9a:d5:93:72:2f:84:77: ca:2b:88:35:26:bd:3d:58:a1:39:47:1a:7a:34:65:a5:ac:a2: 98:2d:ef:f4:3b:4f:2e:82:98:35:0f:0a:cc:c6:ec:b4:33:7f: 55:12:0e:a4:f9:5c:18:96:73:84:d9:4d:b2:43:22:31:70:37: 94:fc:3d:be:a0:b0:38:c3:5c:f6:bb:e5:17:97:b8:f0:69:e2: f8:be:d9:44 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICC6kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNCOEExMTAvBgNVBAUTKDQ1NTBDNjkwNTFCQUExOEFGMTEyREM3NkI1RjVERjlF NkI3OTQwRDUwHhcNMjUwOTE3MDY1ODQ1WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGNhNWMyNS05NDI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAszBeppT7gOsnmnixD4bGylW+ErwIMsJ/w4P5Jqw86/OaoOmD8zozvMfPKgyk pfEhhHXmOZy/PtvZ6Y4prwDctMnqsB5qXZX8otPrpjuNhn+r6C1mUAiYQr9Svzzu V96MPSbUUBxstpsHwqWLv278T6Mu/Ak68iJhaP5w7CzIeHaRFbrbSCg8I2MgbLjE VDPf2e3yJgtsLbzbbuDQfCmzArpmDtWDMt2HPceMDcKJ0OyUj/n0e/TShLx6/GIf FNH1NOcExSP5+G1U0BYnBpQ63SpNZcaFrZlG+7DeyoljNnsnw6Xh9kXNc30KtxA7 Ox+mzCTZuU9XDxKUo4bdLcU9kQIDAQABo4IClTCCApEwHQYDVR0OBBYEFATh7d6U tmGE7nBaP9VgFjOyGCFzMB8GA1UdIwQYMBaAFEVQxpBRuqGK8RLcdrX1355reUDV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0I4QS8wOEM0MzkyNDM4 NEQxMUVBQTRGNTVCNzNDNEY5QUUwMi9SVkRHa0ZHNm9ZcnhFdHgydGZYZm5tdDVR TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JWREdrRkc2b1lyeEV0eDJ0Zlhmbm10NVFOVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzNCOEEvMDhDNDM5MjQzODREMTFFQUE0RjU1QjczQzRGOUFFMDIvQzA5QzVGN0E5 MzkzMTFGMDhBMjNDQzMwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAB0wZwwDQYJKoZIhvcNAQELBQADggEBAGRbr83jHmHD2+n+ ZHF2d9rlfpCRjlYL02glFmgRYmtZGu0cIQJB/14nNAjr1fxcjPH50Tj++I2UKcd7 YtJviibrUhrmu1b3TnEkIhbp+shD3DArzRWeCR/hYZqaTZuvC6OmRdwpxBK5RXxn WQqlFCuUP0npo7Z47iHp6+ZGqclwmRBcH+G1YzYv1Gr/9r2ZQnT3K7mwSkrfGgeh gtkcgbmRz82cKwJQOBcDswdUmtWTci+Ed8oriDUmvT1YoTlHGno0ZaWsopgt7/Q7 Ty6CmDUPCszG7LQzf1USDqT5XBiWc4TZTbJDIjFwN5T8Pb6gsDjDXPa75ReXuPBp 4vi+2UQ= -----END CERTIFICATE-----Generated at Tue Nov 4 13:37:58 2025 by rpki-client