$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFDD0/9E0EE844887411F08BD73B3FC4F9AE02/0D06C406887511F094C09643C4F9AE02.roa File: 0D06C406887511F094C09643C4F9AE02.roa (raw, json) Hash identifier: 8NVdhPpscq33NdTMYxVu51BUZJlZbS+DpruUrgyU1TM= Subject key identifier: 0E:9D:75:68:2B:1B:ED:AA:78:69:0F:14:A4:5B:F2:6F:E8:0A:2D:E2 Certificate issuer: /CN=A91CFDD0/serialNumber=92B4C2A692940B548E635044335A985BEE22BDA1 Certificate serial: 02 Authority key identifier: 92:B4:C2:A6:92:94:0B:54:8E:63:50:44:33:5A:98:5B:EE:22:BD:A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/krTCppKUC1SOY1BEM1qYW-4ivaE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFDD0/9E0EE844887411F08BD73B3FC4F9AE02/0D06C406887511F094C09643C4F9AE02.roa Signing time: Wed 03 Sep 2025 03:21:16 +0000 ROA not before: Wed 03 Sep 2025 03:21:16 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 154166 IP address blocks: 203.174.16.0/23 maxlen: 23 2402:2560::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFDD0/9E0EE844887411F08BD73B3FC4F9AE02/krTCppKUC1SOY1BEM1qYW-4ivaE.crl rsync://rpki.apnic.net/member_repository/A91CFDD0/9E0EE844887411F08BD73B3FC4F9AE02/krTCppKUC1SOY1BEM1qYW-4ivaE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/krTCppKUC1SOY1BEM1qYW-4ivaE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:45:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFDD0, serialNumber=92B4C2A692940B548E635044335A985BEE22BDA1 Validity Not Before: Sep 3 03:21:16 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68b7b42c-e9be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:bc:ff:6b:ca:37:04:65:b4:03:ec:b3:fe:97: 08:5a:79:de:2a:db:af:c0:d9:7d:89:29:88:c0:d3: d5:b2:cd:53:93:63:cb:5d:0f:20:01:4a:0b:4e:21: 4b:da:70:c2:f5:d8:6e:66:b4:d9:27:df:b1:91:32: 44:7e:d9:3e:28:24:c3:7b:3f:30:18:c2:fa:92:7d: 61:00:e1:91:75:a6:56:94:cd:f6:25:db:4c:5f:22: 61:fc:24:d9:48:9d:af:d3:00:7b:bf:c3:b7:89:dd: 53:95:4a:fb:f9:8e:85:e3:fa:51:69:a7:92:97:da: 4a:fb:da:2c:12:c5:01:9d:d7:22:98:86:6f:0d:a0: db:94:57:da:23:f2:cc:df:cb:6c:db:30:cc:28:71: 6e:72:f0:dd:9d:2e:34:31:bd:be:b1:d9:3b:44:e5: ce:52:fc:0e:ec:eb:dc:23:b2:ce:97:22:ff:cc:62: ff:02:b8:64:63:33:ed:b7:5c:6b:8e:c0:cb:a8:6b: 53:fc:79:3a:32:5c:dc:24:75:d1:bc:94:80:a2:3c: f3:54:50:4e:58:79:dd:68:5b:6d:d8:90:69:44:8e: 23:02:45:1c:62:34:7a:9e:db:69:eb:24:86:4e:4d: ae:43:9a:9b:ce:cd:67:3f:1d:eb:6b:47:69:49:16: 9c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:9D:75:68:2B:1B:ED:AA:78:69:0F:14:A4:5B:F2:6F:E8:0A:2D:E2 X509v3 Authority Key Identifier: keyid:92:B4:C2:A6:92:94:0B:54:8E:63:50:44:33:5A:98:5B:EE:22:BD:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFDD0/9E0EE844887411F08BD73B3FC4F9AE02/krTCppKUC1SOY1BEM1qYW-4ivaE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/krTCppKUC1SOY1BEM1qYW-4ivaE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFDD0/9E0EE844887411F08BD73B3FC4F9AE02/0D06C406887511F094C09643C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.174.16.0/23 IPv6: 2402:2560::/32 Signature Algorithm: sha256WithRSAEncryption 5d:e4:5b:d1:3f:df:80:1c:39:ff:4e:37:44:45:db:6d:6c:41: 25:ce:4f:4d:05:5a:b9:d6:e2:6f:9b:9b:fb:87:a7:1b:99:bd: e8:48:98:b5:cc:b7:7d:7e:63:2c:3d:bc:fd:80:ab:dc:79:24: c3:d2:e6:2d:70:f3:ee:5c:1b:e1:7a:eb:06:9a:3f:60:20:ee: 18:64:1a:44:92:6f:23:72:a0:c7:6b:17:62:25:bb:3e:f7:c8: 33:3a:38:dd:ec:0f:a0:dd:19:6f:01:95:91:1c:5f:72:e6:d6: fb:c0:72:bc:1f:b6:e9:0d:a2:f6:41:1b:4c:25:3e:68:ff:24: db:8d:68:4c:60:80:06:83:81:23:52:85:af:89:ff:62:f6:64: 77:be:0e:59:26:b1:67:ee:13:db:86:67:02:b3:5b:42:23:21: 70:f9:00:fa:1c:c8:97:a6:e0:b4:be:63:b5:1e:d2:1b:f3:32: bf:1e:33:8b:dc:6e:3f:9c:8f:fd:1e:2a:17:e4:24:03:70:be: 93:c3:04:39:9b:4d:76:77:41:fc:be:9c:b4:c1:01:c3:49:df: e9:6d:0f:8f:ca:b5:59:02:31:97:38:dd:1f:5e:c8:59:33:fb: b1:ad:a6:63:df:32:de:b1:f2:f0:93:a7:24:ef:26:06:bd:4a: 25:a8:71:a3 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RkREMDExMC8GA1UEBRMoOTJCNEMyQTY5Mjk0MEI1NDhFNjM1MDQ0MzM1QTk4NUJF RTIyQkRBMTAeFw0yNTA5MDMwMzIxMTZaFw0yNjEyMDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4YjdiNDJjLWU5YmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCYvP9ryjcEZbQD7LP+lwhaed4q26/A2X2JKYjA09WyzVOTY8tdDyABSgtOIUva cML12G5mtNkn37GRMkR+2T4oJMN7PzAYwvqSfWEA4ZF1plaUzfYl20xfImH8JNlI na/TAHu/w7eJ3VOVSvv5joXj+lFpp5KX2kr72iwSxQGd1yKYhm8NoNuUV9oj8szf y2zbMMwocW5y8N2dLjQxvb6x2TtE5c5S/A7s69wjss6XIv/MYv8CuGRjM+23XGuO wMuoa1P8eToyXNwkddG8lICiPPNUUE5Yed1oW23YkGlEjiMCRRxiNHqe22nrJIZO Ta5DmpvOzWc/HetrR2lJFpwpAgMBAAGjggKkMIICoDAdBgNVHQ4EFgQUDp11aCsb 7ap4aQ8UpFvyb+gKLeIwHwYDVR0jBBgwFoAUkrTCppKUC1SOY1BEM1qYW+4ivaEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNGREQwLzlFMEVFODQ0ODg3 NDExRjA4QkQ3M0IzRkM0RjlBRTAyL2tyVENwcEtVQzFTT1kxQkVNMXFZVy00aXZh RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva3JUQ3BwS1VDMVNPWTFCRU0xcVlXLTRpdmFFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkREMC85RTBFRTg0NDg4NzQxMUYwOEJENzNCM0ZDNEY5QUUwMi8wRDA2QzQwNjg4 NzUxMUYwOTRDMDk2NDNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAuBggrBgEFBQcBBwEB/wQf MB0wDAQCAAEwBgMEAcuuEDANBAIAAjAHAwUAJAIlYDANBgkqhkiG9w0BAQsFAAOC AQEAXeRb0T/fgBw5/043REXbbWxBJc5PTQVaudbib5ub+4enG5m96EiYtcy3fX5j LD28/YCr3Hkkw9LmLXDz7lwb4XrrBpo/YCDuGGQaRJJvI3Kgx2sXYiW7PvfIMzo4 3ewPoN0ZbwGVkRxfcubW+8ByvB+26Q2i9kEbTCU+aP8k241oTGCABoOBI1KFr4n/ YvZkd74OWSaxZ+4T24ZnArNbQiMhcPkA+hzIl6bgtL5jtR7SG/Myvx4zi9xuP5yP /R4qF+QkA3C+k8MEOZtNdndB/L6ctMEBw0nf6W0Pj8q1WQIxlzjdH17IWTP7sa2m Y98y3rHy8JOnJO8mBr1KJahxow== -----END CERTIFICATE-----Generated at Wed Nov 5 05:25:48 2025 by rpki-client