$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0853/5B94390E044111EB91C43E45C4F9AE02/3DAD522E1D7611EB8673F476C4F9AE02.roa File: 3DAD522E1D7611EB8673F476C4F9AE02.roa (raw, json) Hash identifier: GAAl2FKpxbhzibjhh8Ygaavm0l/cpCR9EhU9gObhxBc= Subject key identifier: EC:55:2C:53:68:D1:CD:47:0B:03:5E:18:35:6A:DC:6A:C7:29:08:F8 Certificate issuer: /CN=A91D0853/serialNumber=E0F3CFBDFA7D074274FA749D4029CEE3588F77C3 Certificate serial: 0801 Authority key identifier: E0:F3:CF:BD:FA:7D:07:42:74:FA:74:9D:40:29:CE:E3:58:8F:77:C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4PPPvfp9B0J0-nSdQCnO41iPd8M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0853/5B94390E044111EB91C43E45C4F9AE02/3DAD522E1D7611EB8673F476C4F9AE02.roa Signing time: Tue 04 Nov 2025 21:10:56 +0000 ROA not before: Tue 04 Nov 2025 21:10:56 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 17452 IP address blocks: 202.91.160.0/20 maxlen: 20 202.91.160.0/24 maxlen: 24 202.91.161.0/24 maxlen: 24 202.91.162.0/24 maxlen: 24 202.91.163.0/24 maxlen: 24 202.91.164.0/24 maxlen: 24 202.91.165.0/24 maxlen: 24 202.91.166.0/24 maxlen: 24 202.91.167.0/24 maxlen: 24 202.91.168.0/24 maxlen: 24 202.91.169.0/24 maxlen: 24 202.91.170.0/24 maxlen: 24 202.91.171.0/24 maxlen: 24 202.91.172.0/24 maxlen: 24 202.91.173.0/24 maxlen: 24 202.91.174.0/24 maxlen: 24 202.91.175.0/24 maxlen: 24 2401:2880::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0853/5B94390E044111EB91C43E45C4F9AE02/4PPPvfp9B0J0-nSdQCnO41iPd8M.crl rsync://rpki.apnic.net/member_repository/A91D0853/5B94390E044111EB91C43E45C4F9AE02/4PPPvfp9B0J0-nSdQCnO41iPd8M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4PPPvfp9B0J0-nSdQCnO41iPd8M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 09:22:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2049 (0x801) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0853, serialNumber=E0F3CFBDFA7D074274FA749D4029CEE3588F77C3 Validity Not Before: Nov 4 21:10:56 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=690a6bdf-b34d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ab:5a:7e:0b:5e:50:12:be:ab:bc:49:cb:eb: 0b:c0:c9:f0:ef:bd:b4:1a:ad:b8:71:97:e7:0b:a0: 91:fb:70:d1:5b:bf:a4:a3:f7:25:5a:22:28:ff:2f: 84:c0:16:09:60:82:4c:6a:bf:c8:09:84:af:c4:12: 54:e7:b6:d2:31:01:35:df:45:69:05:56:4b:f5:96: 78:76:b3:78:fe:3e:3e:e7:86:a6:40:64:d2:39:81: bd:d4:2a:89:5f:d7:e4:2e:c6:3d:92:14:92:05:82: bb:c7:ee:7d:60:f5:ac:ff:8f:05:05:aa:b0:c9:df: c8:69:0f:f9:96:3e:62:10:b7:f4:65:cf:86:25:aa: b1:fb:b7:c8:9a:84:01:09:01:32:0b:ad:0d:4d:0f: 59:1b:6e:64:fd:e9:88:67:87:96:a1:39:0a:1f:e0: 2e:d1:68:3f:66:e8:67:4d:cf:85:14:bf:68:82:3f: a5:21:21:7f:48:07:66:98:01:9d:51:84:34:40:4b: bd:bb:36:1f:27:7f:4c:06:54:b3:de:fe:d7:6d:cf: 31:3d:4f:45:7b:d3:d1:7e:a0:08:d0:67:bc:27:42: df:61:42:cc:4e:56:30:d6:ab:c8:d4:6f:84:4e:8f: c3:fb:9d:d3:05:40:5e:ae:3b:7f:e4:12:1a:95:6b: 55:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:55:2C:53:68:D1:CD:47:0B:03:5E:18:35:6A:DC:6A:C7:29:08:F8 X509v3 Authority Key Identifier: keyid:E0:F3:CF:BD:FA:7D:07:42:74:FA:74:9D:40:29:CE:E3:58:8F:77:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0853/5B94390E044111EB91C43E45C4F9AE02/4PPPvfp9B0J0-nSdQCnO41iPd8M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4PPPvfp9B0J0-nSdQCnO41iPd8M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0853/5B94390E044111EB91C43E45C4F9AE02/3DAD522E1D7611EB8673F476C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.91.160.0/20 IPv6: 2401:2880::/32 Signature Algorithm: sha256WithRSAEncryption be:04:5c:51:59:f7:b8:d2:e1:95:fe:91:aa:30:d1:e5:84:84: 2f:85:2b:bc:0e:5b:29:e1:b2:43:38:16:e2:eb:78:2b:79:0f: a6:11:ca:c7:9d:78:22:10:61:2f:5c:10:5c:c5:43:af:f2:2d: 1b:70:a7:bc:13:d7:db:47:67:bd:7e:72:da:ab:f2:de:17:56: 88:24:4a:ee:8e:43:48:f9:e4:52:de:db:69:d6:f1:24:ce:43: a0:7c:73:6c:18:13:7d:0d:42:bc:75:52:39:0a:4c:08:30:f2: d2:f5:10:1f:40:4a:1d:3b:4e:90:a3:0a:ee:f1:ed:77:35:14: 26:23:f5:9f:5c:f6:7b:e1:bd:90:96:21:ac:01:cd:c6:5e:d7: 84:f5:d3:b9:24:c8:f1:88:78:32:08:1e:ae:35:81:42:54:7c: 35:28:7c:60:71:57:51:7e:14:70:f4:4b:f6:95:53:b6:ce:e9: e4:6d:5f:fe:88:87:e3:7a:67:fb:79:c4:0f:1e:79:9c:1d:d7: d3:f4:05:9f:cd:8b:57:a2:8b:49:c9:15:25:fb:49:9e:53:88: 27:82:d8:52:52:40:c8:a6:18:f4:a1:08:d4:23:4c:39:68:b2: 72:ac:be:76:87:50:97:f5:db:9f:45:92:3e:02:af:68:c9:df: a7:93:74:d9 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICCAEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDA4NTMxMTAvBgNVBAUTKEUwRjNDRkJERkE3RDA3NDI3NEZBNzQ5RDQwMjlDRUUz NTg4Rjc3QzMwHhcNMjUxMTA0MjExMDU2WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTBhNmJkZi1iMzRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtatafgteUBK+q7xJy+sLwMnw7720Gq24cZfnC6CR+3DRW7+ko/clWiIo/y+E wBYJYIJMar/ICYSvxBJU57bSMQE130VpBVZL9ZZ4drN4/j4+54amQGTSOYG91CqJ X9fkLsY9khSSBYK7x+59YPWs/48FBaqwyd/IaQ/5lj5iELf0Zc+GJaqx+7fImoQB CQEyC60NTQ9ZG25k/emIZ4eWoTkKH+Au0Wg/ZuhnTc+FFL9ogj+lISF/SAdmmAGd UYQ0QEu9uzYfJ39MBlSz3v7Xbc8xPU9Fe9PRfqAI0Ge8J0LfYULMTlYw1qvI1G+E To/D+53TBUBerjt/5BIalWtVWwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFOxVLFNo 0c1HCwNeGDVq3GrHKQj4MB8GA1UdIwQYMBaAFODzz736fQdCdPp0nUApzuNYj3fD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDg1My81Qjk0MzkwRTA0 NDExMUVCOTFDNDNFNDVDNEY5QUUwMi80UFBQdmZwOUIwSjAtblNkUUNuTzQxaVBk OE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRQUFB2ZnA5QjBKMC1uU2RRQ25PNDFpUGQ4TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDA4NTMvNUI5NDM5MEUwNDQxMTFFQjkxQzQzRTQ1QzRGOUFFMDIvM0RBRDUyMkUx RDc2MTFFQjg2NzNGNDc2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBATKW6AwDQQCAAIwBwMFACQBKIAwDQYJKoZIhvcNAQELBQAD ggEBAL4EXFFZ97jS4ZX+kaow0eWEhC+FK7wOWynhskM4FuLreCt5D6YRysedeCIQ YS9cEFzFQ6/yLRtwp7wT19tHZ71+ctqr8t4XVogkSu6OQ0j55FLe22nW8STOQ6B8 c2wYE30NQrx1UjkKTAgw8tL1EB9ASh07TpCjCu7x7Xc1FCYj9Z9c9nvhvZCWIawB zcZe14T107kkyPGIeDIIHq41gUJUfDUofGBxV1F+FHD0S/aVU7bO6eRtX/6Ih+N6 Z/t5xA8eeZwd19P0BZ/Ni1eii0nJFSX7SZ5TiCeC2FJSQMimGPShCNQjTDlosnKs vnaHUJf1259Fkj4Cr2jJ36eTdNk= -----END CERTIFICATE-----Generated at Wed Nov 5 13:35:37 2025 by rpki-client