$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA294/BDC09A2A9DAA11F096420B63C4F9AE02/208EBFD6A2F811F0ACA39B18C4F9AE02.roa File: 208EBFD6A2F811F0ACA39B18C4F9AE02.roa (raw, json) Hash identifier: eFEue/RfyteO6Qa9ns27FA3e4ja3uTb1hbjiGbGNmwg= Subject key identifier: 13:76:E4:2D:B9:8C:23:2A:DD:5D:DB:C7:96:3C:36:DA:E7:4E:3E:3B Certificate issuer: /CN=A91CA294/serialNumber=19BD822D3EB6FF6E9370245EE874BEA9EB8BEE55 Certificate serial: 0B Authority key identifier: 19:BD:82:2D:3E:B6:FF:6E:93:70:24:5E:E8:74:BE:A9:EB:8B:EE:55 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gb2CLT62_26TcCRe6HS-qeuL7lU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA294/BDC09A2A9DAA11F096420B63C4F9AE02/208EBFD6A2F811F0ACA39B18C4F9AE02.roa Signing time: Mon 06 Oct 2025 21:05:03 +0000 ROA not before: Mon 06 Oct 2025 21:05:03 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 4768 IP address blocks: 156.69.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA294/BDC09A2A9DAA11F096420B63C4F9AE02/Gb2CLT62_26TcCRe6HS-qeuL7lU.crl rsync://rpki.apnic.net/member_repository/A91CA294/BDC09A2A9DAA11F096420B63C4F9AE02/Gb2CLT62_26TcCRe6HS-qeuL7lU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gb2CLT62_26TcCRe6HS-qeuL7lU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 11:52:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA294, serialNumber=19BD822D3EB6FF6E9370245EE874BEA9EB8BEE55 Validity Not Before: Oct 6 21:05:03 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68e42eff-054e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:25:9f:4a:f0:36:39:2a:50:d3:0c:9c:ac:19: fe:6b:f7:86:82:17:a7:c9:30:1e:58:3e:05:ff:d6: d9:6b:0a:02:e5:a1:8a:52:bc:b9:7f:74:49:68:ca: c2:e6:4e:b0:b6:94:20:2a:74:55:75:47:f1:15:5e: 7d:c2:d4:00:ee:19:50:49:02:06:29:27:3a:a1:b7: 19:44:2a:b6:9e:3a:3b:dd:52:f0:36:8c:84:7c:09: 99:05:96:8b:4e:4f:19:31:77:8c:06:3d:80:61:42: d0:62:99:65:51:45:96:09:48:af:d0:cb:94:54:c3: bb:d9:dc:ee:58:8f:4a:cf:b5:43:4f:79:b8:15:42: 15:2c:a4:cc:69:3c:39:42:04:3c:69:1c:4f:33:76: 6b:d0:b9:29:13:6b:1b:67:97:7a:39:16:f3:bf:fc: 51:09:07:24:73:ae:b9:dd:f7:76:44:d4:62:83:24: a8:06:f3:a2:fc:c8:25:d6:51:a7:77:08:34:34:3b: e0:9f:a5:d8:d0:45:de:0f:f0:14:07:67:e1:0e:6d: a8:12:3b:aa:ab:48:a6:ab:23:0c:64:49:97:ef:0f: dc:ec:dc:a1:f0:f3:e6:8b:21:ae:5c:b0:e1:f3:1d: 3b:63:8c:54:f9:43:36:35:6e:1a:4b:07:6f:2c:0e: b8:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:76:E4:2D:B9:8C:23:2A:DD:5D:DB:C7:96:3C:36:DA:E7:4E:3E:3B X509v3 Authority Key Identifier: keyid:19:BD:82:2D:3E:B6:FF:6E:93:70:24:5E:E8:74:BE:A9:EB:8B:EE:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA294/BDC09A2A9DAA11F096420B63C4F9AE02/Gb2CLT62_26TcCRe6HS-qeuL7lU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gb2CLT62_26TcCRe6HS-qeuL7lU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA294/BDC09A2A9DAA11F096420B63C4F9AE02/208EBFD6A2F811F0ACA39B18C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 156.69.30.0/24 Signature Algorithm: sha256WithRSAEncryption f3:0a:aa:bc:9e:0f:4c:c6:d6:35:c7:18:eb:36:20:84:ca:f3: fd:96:86:3a:69:b5:85:c0:6c:bd:53:66:74:26:b3:59:e1:9b: 52:cc:98:f3:4e:59:e8:46:e2:78:37:4d:b1:44:4e:14:05:0a: c4:71:de:70:9f:44:de:de:2d:b4:b0:4f:85:5c:60:e1:65:90: 39:5c:e4:e2:0b:28:83:f4:f5:0d:5e:70:ce:80:aa:70:4c:6b: 49:e3:22:87:31:b0:a4:60:31:5c:c9:fd:88:50:f0:dd:28:27: 47:de:37:fd:df:9b:5d:b9:a2:99:c6:ef:81:f9:e7:3c:19:45: 1b:79:b3:17:c2:42:69:b7:0b:97:e0:40:86:79:8b:f8:94:2a: fd:79:34:51:33:d6:18:28:d0:49:81:4a:23:d8:eb:81:2d:99: 0b:47:0f:ed:6b:78:2a:68:30:e3:df:3c:36:d4:08:30:08:7b: 06:50:9b:fe:5e:e0:27:32:37:7e:25:f0:58:a4:00:31:cf:e4: 92:17:61:a2:96:9c:d0:1b:84:04:e6:68:a3:9f:ff:f4:d2:8c: 39:f3:95:6b:64:4e:46:97:f2:80:af:a7:d6:ae:33:a4:eb:7c: de:fd:f0:36:18:f3:7a:8b:72:ad:bd:d3:db:97:c0:4c:b5:63: 3d:e3:0e:55 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QTI5NDExMC8GA1UEBRMoMTlCRDgyMkQzRUI2RkY2RTkzNzAyNDVFRTg3NEJFQTlF QjhCRUU1NTAeFw0yNTEwMDYyMTA1MDNaFw0yNjEyMDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4ZTQyZWZmLTA1NGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD2JZ9K8DY5KlDTDJysGf5r94aCF6fJMB5YPgX/1tlrCgLloYpSvLl/dEloysLm TrC2lCAqdFV1R/EVXn3C1ADuGVBJAgYpJzqhtxlEKraeOjvdUvA2jIR8CZkFlotO Txkxd4wGPYBhQtBimWVRRZYJSK/Qy5RUw7vZ3O5Yj0rPtUNPebgVQhUspMxpPDlC BDxpHE8zdmvQuSkTaxtnl3o5FvO//FEJByRzrrnd93ZE1GKDJKgG86L8yCXWUad3 CDQ0O+CfpdjQRd4P8BQHZ+EObagSO6qrSKarIwxkSZfvD9zs3KHw8+aLIa5csOHz HTtjjFT5QzY1bhpLB28sDrhVAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUE3bkLbmM IyrdXdvHljw22udOPjswHwYDVR0jBBgwFoAUGb2CLT62/26TcCRe6HS+qeuL7lUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNBMjk0L0JEQzA5QTJBOURB QTExRjA5NjQyMEI2M0M0RjlBRTAyL0diMkNMVDYyXzI2VGNDUmU2SFMtcWV1TDds VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvR2IyQ0xUNjJfMjZUY0NSZTZIUy1xZXVMN2xVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTI5NC9CREMwOUEyQTlEQUExMUYwOTY0MjBCNjNDNEY5QUUwMi8yMDhFQkZENkEy RjgxMUYwQUNBMzlCMThDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAJxFHjANBgkqhkiG9w0BAQsFAAOCAQEA8wqqvJ4PTMbWNccY 6zYghMrz/ZaGOmm1hcBsvVNmdCazWeGbUsyY805Z6EbieDdNsUROFAUKxHHecJ9E 3t4ttLBPhVxg4WWQOVzk4gsog/T1DV5wzoCqcExrSeMihzGwpGAxXMn9iFDw3Sgn R943/d+bXbmimcbvgfnnPBlFG3mzF8JCabcLl+BAhnmL+JQq/Xk0UTPWGCjQSYFK I9jrgS2ZC0cP7Wt4Kmgw4988NtQIMAh7BlCb/l7gJzI3fiXwWKQAMc/kkhdhopac 0BuEBOZoo5//9NKMOfOVa2RORpfygK+n1q4zpOt83v3wNhjzeotyrb3T25fATLVj PeMOVQ== -----END CERTIFICATE-----Generated at Sun Oct 19 01:31:55 2025 by rpki-client