$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/ECE8975685D811F09A4FFA45C4F9AE02.roa File: ECE8975685D811F09A4FFA45C4F9AE02.roa (raw, json) Hash identifier: kbQycqq6uhbmllHh50J5L3MKomIfAJJoAz4btbBqKyw= Subject key identifier: FE:0B:33:BC:AE:8D:61:16:1E:D7:BB:29:9D:32:64:BB:AE:8F:69:7B Certificate issuer: /CN=A91D4834/serialNumber=A350FAF3B6F14BC8EE1B2996EED48E27020E1083 Certificate serial: 088F Authority key identifier: A3:50:FA:F3:B6:F1:4B:C8:EE:1B:29:96:EE:D4:8E:27:02:0E:10:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1D687bxS8juGymW7tSOJwIOEIM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/ECE8975685D811F09A4FFA45C4F9AE02.roa Signing time: Sat 30 Aug 2025 19:38:38 +0000 ROA not before: Sat 30 Aug 2025 19:38:38 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 9304 IP address blocks: 45.125.48.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.crl rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1D687bxS8juGymW7tSOJwIOEIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 20:51:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2191 (0x88f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4834, serialNumber=A350FAF3B6F14BC8EE1B2996EED48E27020E1083 Validity Not Before: Aug 30 19:38:38 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68b3533e-f53e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:77:96:80:f1:78:7d:70:a4:da:aa:da:dc:48: 22:02:3d:da:d0:7e:74:67:1c:3b:ad:6d:54:79:d3: 72:1b:21:47:49:34:28:11:5d:9b:78:0e:ec:08:95: d7:99:8b:43:ba:73:98:ba:85:6f:2c:3d:b0:ee:63: 3d:2a:2f:57:a4:b2:21:0e:2e:8f:c0:28:44:74:bf: ab:88:1e:50:6f:d5:f4:0e:3a:c9:d9:8a:16:4d:c9: d8:cd:c2:83:fd:4a:cc:c6:9b:08:4f:1f:a6:ee:6f: 91:70:27:0b:7d:e2:40:71:3b:8f:7d:60:c7:e0:62: b1:86:58:1c:2c:a5:3d:40:76:47:7b:db:6b:fd:6c: 17:31:ba:af:60:4a:fb:b0:ce:82:7b:f4:7e:46:70: a7:38:d4:c6:f2:06:19:9b:a3:dc:40:a7:dd:95:70: 02:88:bc:90:ca:63:e6:83:63:af:40:3e:e2:88:07: fa:fd:57:47:50:24:77:35:f0:54:61:38:88:13:67: 88:20:d9:8c:3f:a8:bf:a7:cc:69:6e:1e:49:b6:09: 46:00:03:9d:5b:0e:41:db:2f:68:5c:69:b8:79:8d: f1:e7:e7:98:17:3c:25:33:6e:f4:79:0a:af:09:2e: 03:e8:c5:50:a0:f5:e8:21:53:e9:7f:28:42:47:10: 8a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:0B:33:BC:AE:8D:61:16:1E:D7:BB:29:9D:32:64:BB:AE:8F:69:7B X509v3 Authority Key Identifier: keyid:A3:50:FA:F3:B6:F1:4B:C8:EE:1B:29:96:EE:D4:8E:27:02:0E:10:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1D687bxS8juGymW7tSOJwIOEIM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/ECE8975685D811F09A4FFA45C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.125.48.0/23 Signature Algorithm: sha256WithRSAEncryption 76:11:9b:8e:f4:ac:6b:bb:a2:19:8c:c1:29:ac:b2:d5:c2:90: a0:e4:c6:31:fa:5f:36:94:e8:4b:40:f0:78:30:a0:b9:c9:a6: bb:ec:ef:ae:f9:5c:55:72:4d:f5:70:5a:7b:39:98:6f:16:31: e3:92:d3:8d:50:f8:45:b2:d4:93:ee:f3:d2:86:24:2a:3e:1f: ee:b0:3a:4e:61:22:1f:0f:e9:45:f2:1c:f4:1a:ab:7b:dd:a2: ca:e7:0d:ea:02:b0:e5:40:5d:b2:6d:e7:b3:48:19:57:6e:2d: 8b:5f:5c:b6:49:b0:3f:51:d0:c3:a9:ef:e7:44:88:c9:0e:c3: 44:c4:80:25:9c:6a:42:84:13:e4:51:84:c7:dc:8d:6a:42:68: 48:d7:e3:42:53:11:e6:f8:e0:2f:df:fb:63:2e:56:2f:c5:0c: d3:81:6c:5e:c9:94:e5:8e:22:29:77:3a:55:a7:d3:96:fe:9e: 00:82:01:11:b2:bc:0c:1f:96:ba:1a:ce:41:65:af:24:f9:3e: 24:6c:d3:4c:7e:5f:9f:4d:c2:7c:e7:e1:cf:02:7e:ef:3a:f7: 40:44:20:d6:e6:cf:1f:39:ca:65:90:53:5f:42:d4:93:ae:63: 98:77:49:57:a1:bd:05:cd:d1:79:13:95:92:ec:af:33:32:8f: be:67:c7:16 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ4MzQxMTAvBgNVBAUTKEEzNTBGQUYzQjZGMTRCQzhFRTFCMjk5NkVFRDQ4RTI3 MDIwRTEwODMwHhcNMjUwODMwMTkzODM4WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGIzNTMzZS1mNTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuneWgPF4fXCk2qra3EgiAj3a0H50Zxw7rW1UedNyGyFHSTQoEV2beA7sCJXX mYtDunOYuoVvLD2w7mM9Ki9XpLIhDi6PwChEdL+riB5Qb9X0DjrJ2YoWTcnYzcKD /UrMxpsITx+m7m+RcCcLfeJAcTuPfWDH4GKxhlgcLKU9QHZHe9tr/WwXMbqvYEr7 sM6Ce/R+RnCnONTG8gYZm6PcQKfdlXACiLyQymPmg2OvQD7iiAf6/VdHUCR3NfBU YTiIE2eIINmMP6i/p8xpbh5JtglGAAOdWw5B2y9oXGm4eY3x5+eYFzwlM270eQqv CS4D6MVQoPXoIVPpfyhCRxCKtwIDAQABo4IClTCCApEwHQYDVR0OBBYEFP4LM7yu jWEWHte7KZ0yZLuuj2l7MB8GA1UdIwQYMBaAFKNQ+vO28UvI7hsplu7UjicCDhCD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDgzNC81MUJFREZDNEND OEQxMUVBQUZGRURCMzZDNEY5QUUwMi9vMUQ2ODdieFM4anVHeW1XN3RTT0p3SU9F SU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL28xRDY4N2J4UzhqdUd5bVc3dFNPSndJT0VJTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDQ4MzQvNTFCRURGQzRDQzhEMTFFQUFGRkVEQjM2QzRGOUFFMDIvRUNFODk3NTY4 NUQ4MTFGMDlBNEZGQTQ1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAEtfTAwDQYJKoZIhvcNAQELBQADggEBAHYRm470rGu7ohmM wSmsstXCkKDkxjH6XzaU6EtA8HgwoLnJprvs7675XFVyTfVwWns5mG8WMeOS041Q +EWy1JPu89KGJCo+H+6wOk5hIh8P6UXyHPQaq3vdosrnDeoCsOVAXbJt57NIGVdu LYtfXLZJsD9R0MOp7+dEiMkOw0TEgCWcakKEE+RRhMfcjWpCaEjX40JTEeb44C/f +2MuVi/FDNOBbF7JlOWOIil3OlWn05b+ngCCARGyvAwflroazkFlryT5PiRs00x+ X59Nwnzn4c8Cfu8690BEINbmzx85ymWQU19C1JOuY5h3SVehvQXN0XkTlZLsrzMy j75nxxY= -----END CERTIFICATE-----Generated at Fri Sep 5 10:02:48 2025 by rpki-client