$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC5BE/D401619A1D6911E2AFB64EA708B02CD2/DCD41E8E98D511F0B3824663C4F9AE02.roa File: DCD41E8E98D511F0B3824663C4F9AE02.roa (raw, json) Hash identifier: EWlSDhZJpxeihw3aeM/sQAa10hdfChLc1MQCCqHexiw= Subject key identifier: 9A:28:86:6A:9F:19:0B:69:FF:92:10:84:EB:D3:A3:5E:F9:9C:15:AB Certificate issuer: /CN=A91DC5BE/serialNumber=ADA8AED32B15B87E611252D29D1E1D5BDE581646 Certificate serial: 35B5 Authority key identifier: AD:A8:AE:D3:2B:15:B8:7E:61:12:52:D2:9D:1E:1D:5B:DE:58:16:46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raiu0ysVuH5hElLSnR4dW95YFkY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC5BE/D401619A1D6911E2AFB64EA708B02CD2/DCD41E8E98D511F0B3824663C4F9AE02.roa Signing time: Tue 23 Sep 2025 23:34:35 +0000 ROA not before: Tue 23 Sep 2025 23:34:35 +0000 ROA not after: Mon 31 Mar 2031 00:00:00 +0000 asID: 24555 IP address blocks: 220.247.144.0/20 maxlen: 21 2001:df9::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC5BE/D401619A1D6911E2AFB64EA708B02CD2/raiu0ysVuH5hElLSnR4dW95YFkY.crl rsync://rpki.apnic.net/member_repository/A91DC5BE/D401619A1D6911E2AFB64EA708B02CD2/raiu0ysVuH5hElLSnR4dW95YFkY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raiu0ysVuH5hElLSnR4dW95YFkY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Nov 2025 14:16:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13749 (0x35b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC5BE, serialNumber=ADA8AED32B15B87E611252D29D1E1D5BDE581646 Validity Not Before: Sep 23 23:34:35 2025 GMT Not After : Mar 31 00:00:00 2031 GMT Subject: CN=68d32e8b-cda2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:21:56:78:96:b8:0d:58:00:47:5a:dc:a7:42: 4a:f4:bc:c6:e6:28:2c:24:0d:08:bb:4a:3e:50:c7: ec:d8:a1:73:2a:ff:b6:11:b9:35:84:73:66:10:06: 88:8e:02:b2:81:75:75:40:f4:5f:5a:4b:f0:0a:6c: 0d:06:7a:20:0f:b9:59:3b:41:96:5f:30:93:34:f5: 84:42:66:62:c6:d2:2b:f9:a9:f2:55:2b:f7:9c:bb: e2:bf:62:37:d4:3d:d0:c1:e4:8f:24:41:ee:de:6a: 7f:ec:e1:06:a8:28:e0:87:2c:9c:cc:5d:f7:82:f3: 9c:c2:02:16:51:90:5b:c5:2f:c5:79:3c:08:db:d6: 2b:59:f9:58:8e:ae:cf:e0:42:98:81:38:32:3a:cc: 3b:a7:7d:b9:9d:d2:a9:ab:03:47:3b:a7:e0:8d:46: 13:bb:b0:66:39:71:16:b0:2b:81:7d:dc:ef:0e:7c: e6:cb:5c:dd:2d:86:43:df:46:6b:b8:a0:f2:e4:f1: d8:7c:c9:b0:ab:65:06:83:09:5c:69:7c:04:19:4b: c0:4c:11:a9:67:59:62:37:de:3f:61:3d:c3:b3:fd: d6:3d:6e:03:1c:c1:56:06:f7:14:9c:55:82:fe:3a: 21:a3:33:4b:2b:de:db:e4:55:91:10:6c:29:2b:02: 47:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:28:86:6A:9F:19:0B:69:FF:92:10:84:EB:D3:A3:5E:F9:9C:15:AB X509v3 Authority Key Identifier: keyid:AD:A8:AE:D3:2B:15:B8:7E:61:12:52:D2:9D:1E:1D:5B:DE:58:16:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC5BE/D401619A1D6911E2AFB64EA708B02CD2/raiu0ysVuH5hElLSnR4dW95YFkY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raiu0ysVuH5hElLSnR4dW95YFkY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC5BE/D401619A1D6911E2AFB64EA708B02CD2/DCD41E8E98D511F0B3824663C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.247.144.0/20 IPv6: 2001:df9::/32 Signature Algorithm: sha256WithRSAEncryption a0:70:90:7e:60:0c:8b:53:a7:9a:ab:71:27:cf:02:52:10:26: fd:a4:8e:c1:39:ce:f7:0c:48:59:b0:9e:ce:5d:1a:d3:13:13: 4d:20:1b:06:64:81:9d:2c:09:fc:4e:db:b3:64:ef:1f:25:25: ff:37:3a:1c:a6:53:fe:93:1e:0e:75:33:ac:0a:3a:b4:32:b1: 90:68:4f:de:ea:2b:1b:38:03:01:1b:03:d0:79:b8:bb:99:e5: d7:bb:40:06:1d:98:66:e6:6b:c8:ae:ab:e8:c0:19:1c:d6:f8: fd:74:7b:fe:e6:41:c8:1b:81:77:f0:73:9a:90:8f:a5:1a:a6: 2a:3a:6b:e9:6b:41:40:0a:00:36:ba:d0:d1:08:d5:5d:86:66: 92:60:98:ef:4b:9e:e6:5b:90:5f:e5:05:ef:27:81:51:a6:64: 42:49:8a:ef:ff:09:b5:ec:88:83:33:51:88:59:18:0e:1b:75: e0:fd:15:5c:ea:5b:c5:0f:19:0f:0b:d7:1e:e8:e5:fd:c0:29: f0:3a:35:e2:13:b0:87:f8:24:5a:8b:fc:19:39:5a:b9:a1:b6: 14:11:00:02:6a:29:8e:f0:8b:b3:18:5c:02:4b:db:9d:60:43: 00:5e:c0:fe:b5:53:af:5d:dd:26:cf:af:ce:d4:ed:f1:59:de: 98:4c:d0:fc -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICNbUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM1QkUxMTAvBgNVBAUTKEFEQThBRUQzMkIxNUI4N0U2MTEyNTJEMjlEMUUxRDVC REU1ODE2NDYwHhcNMjUwOTIzMjMzNDM1WhcNMzEwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGQzMmU4Yi1jZGEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoyFWeJa4DVgAR1rcp0JK9LzG5igsJA0Iu0o+UMfs2KFzKv+2Ebk1hHNmEAaI jgKygXV1QPRfWkvwCmwNBnogD7lZO0GWXzCTNPWEQmZixtIr+anyVSv3nLviv2I3 1D3QweSPJEHu3mp/7OEGqCjghyyczF33gvOcwgIWUZBbxS/FeTwI29YrWflYjq7P 4EKYgTgyOsw7p325ndKpqwNHO6fgjUYTu7BmOXEWsCuBfdzvDnzmy1zdLYZD30Zr uKDy5PHYfMmwq2UGgwlcaXwEGUvATBGpZ1liN94/YT3Ds/3WPW4DHMFWBvcUnFWC /johozNLK97b5FWREGwpKwJH6QIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFJoohmqf GQtp/5IQhOvTo175nBWrMB8GA1UdIwQYMBaAFK2ortMrFbh+YRJS0p0eHVveWBZG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzVCRS9ENDAxNjE5QTFE NjkxMUUyQUZCNjRFQTcwOEIwMkNEMi9yYWl1MHlzVnVINWhFbExTblI0ZFc5NVlG a1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JhaXUweXNWdUg1aEVsTFNuUjRkVzk1WUZrWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REM1QkUvRDQwMTYxOUExRDY5MTFFMkFGQjY0RUE3MDhCMDJDRDIvRENENDFFOEU5 OEQ1MTFGMEIzODI0NjYzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBATc95AwDQQCAAIwBwMFACABDfkwDQYJKoZIhvcNAQELBQAD ggEBAKBwkH5gDItTp5qrcSfPAlIQJv2kjsE5zvcMSFmwns5dGtMTE00gGwZkgZ0s CfxO27Nk7x8lJf83OhymU/6THg51M6wKOrQysZBoT97qKxs4AwEbA9B5uLuZ5de7 QAYdmGbma8iuq+jAGRzW+P10e/7mQcgbgXfwc5qQj6Uapio6a+lrQUAKADa60NEI 1V2GZpJgmO9LnuZbkF/lBe8ngVGmZEJJiu//CbXsiIMzUYhZGA4bdeD9FVzqW8UP GQ8L1x7o5f3AKfA6NeITsIf4JFqL/Bk5WrmhthQRAAJqKY7wi7MYXAJL251gQwBe wP61U69d3SbPr87U7fFZ3phM0Pw= -----END CERTIFICATE-----Generated at Mon Oct 27 16:31:48 2025 by rpki-client