$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1022/9CC00A4A0FFE11EEB6192B76C4F9AE02/8C8CCAC624B311EFB8698E5CC4F9AE02.roa File: 8C8CCAC624B311EFB8698E5CC4F9AE02.roa (raw, json) Hash identifier: F3i7VzcQGdswwV9fygisnLiZTWWriLX9b+TBk69f4oQ= Subject key identifier: 11:E3:78:9E:A7:E2:51:31:0C:A6:23:AE:DE:43:E0:64:00:42:08:6E Certificate issuer: /CN=A91E1022/serialNumber=76AA20CA24A6C2E328876D004D1314E117A6E7D0 Certificate serial: 01BF Authority key identifier: 76:AA:20:CA:24:A6:C2:E3:28:87:6D:00:4D:13:14:E1:17:A6:E7:D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dqogyiSmwuMoh20ATRMU4Rem59A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1022/9CC00A4A0FFE11EEB6192B76C4F9AE02/8C8CCAC624B311EFB8698E5CC4F9AE02.roa Signing time: Sat 27 Sep 2025 04:01:31 +0000 ROA not before: Sat 27 Sep 2025 04:01:31 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 398704 IP address blocks: 45.123.192.0/24 maxlen: 24 103.192.36.0/23 maxlen: 23 103.192.36.0/24 maxlen: 24 103.192.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1022/9CC00A4A0FFE11EEB6192B76C4F9AE02/dqogyiSmwuMoh20ATRMU4Rem59A.crl rsync://rpki.apnic.net/member_repository/A91E1022/9CC00A4A0FFE11EEB6192B76C4F9AE02/dqogyiSmwuMoh20ATRMU4Rem59A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dqogyiSmwuMoh20ATRMU4Rem59A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 04:41:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 447 (0x1bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1022, serialNumber=76AA20CA24A6C2E328876D004D1314E117A6E7D0 Validity Not Before: Sep 27 04:01:31 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68d7619b-9538 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:33:a5:18:d7:44:2f:33:70:98:46:12:d9:b3: 8b:1b:ed:eb:c3:7e:0a:e0:23:c0:9e:9d:6f:ba:85: 4f:83:0a:ca:03:e2:4c:ee:7a:5a:b5:ec:50:be:a7: 46:02:62:fb:69:f2:5e:c1:c9:00:bb:91:8a:57:57: 2c:63:36:cb:f7:e2:58:39:87:f8:7b:85:76:26:99: 06:15:b8:ed:7c:d1:14:25:a1:1e:2f:29:8e:e7:3d: 81:6d:a8:35:05:3f:42:e4:6e:2b:5d:3f:cc:57:7a: 91:02:21:91:9f:ef:53:7c:73:57:86:7f:13:66:e7: 9f:00:2f:1d:46:34:b8:a5:0e:e7:33:19:a7:c9:12: be:5f:6f:cb:11:50:fc:ea:5e:1a:13:e8:bd:28:e3: 36:85:62:c4:4b:ba:6f:05:ff:54:70:7b:f9:bd:a5: 02:bd:bb:99:4e:09:ce:aa:d7:53:ee:98:2f:cb:7f: 64:1d:e7:29:91:e2:f8:c3:01:8f:9b:b6:1c:66:50: 99:56:ab:64:e8:4c:07:8d:08:50:a6:6c:8f:62:a8: 39:d9:2d:ea:10:f1:ea:8a:bc:f7:49:41:11:b7:64: 39:3e:71:2d:4d:c3:77:31:0e:42:89:cb:89:85:30: 42:cf:ed:fa:34:a1:e0:00:9c:27:f3:01:11:2b:a5: 69:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:E3:78:9E:A7:E2:51:31:0C:A6:23:AE:DE:43:E0:64:00:42:08:6E X509v3 Authority Key Identifier: keyid:76:AA:20:CA:24:A6:C2:E3:28:87:6D:00:4D:13:14:E1:17:A6:E7:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1022/9CC00A4A0FFE11EEB6192B76C4F9AE02/dqogyiSmwuMoh20ATRMU4Rem59A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dqogyiSmwuMoh20ATRMU4Rem59A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1022/9CC00A4A0FFE11EEB6192B76C4F9AE02/8C8CCAC624B311EFB8698E5CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.123.192.0/24 103.192.36.0/23 Signature Algorithm: sha256WithRSAEncryption 72:ec:1f:62:41:93:22:e1:25:eb:0b:1c:41:b5:46:85:23:05: 7f:3e:7e:41:f5:34:77:26:24:d3:93:ea:80:73:07:fb:61:a6: 66:49:92:89:00:3a:64:c0:2e:29:61:1b:cb:98:01:fb:a5:4d: ca:d0:2c:48:e8:67:97:98:50:18:2b:b4:8a:67:2f:66:55:7a: dd:8e:e5:22:b2:44:ef:8c:0c:fe:9b:47:64:67:31:08:a1:e2: 4e:47:8d:de:c0:88:e9:9d:14:fb:53:c8:92:a4:51:8c:72:d0: 48:99:a9:b5:e7:9d:10:e9:cf:e6:92:b3:ce:42:1c:82:b6:7a: 71:7a:a3:76:0f:c1:94:e8:34:e2:a7:44:45:b7:68:e3:c8:e4: 6c:18:78:3e:1c:55:c3:a1:c9:49:dc:63:cc:27:0f:33:01:d9: 00:82:fe:10:d0:78:db:9d:3a:36:59:18:11:81:fd:76:4b:eb: 00:02:df:c0:2b:61:43:f2:ec:6a:0e:48:f1:bd:44:61:9f:79: b1:d0:7a:0e:ea:67:ab:82:ed:96:c5:5f:bf:e9:a9:89:02:cb: 5a:ef:ab:89:48:21:55:2a:2c:3e:c8:a2:52:8c:9e:e5:eb:0e: 39:9c:d2:12:18:99:a2:4d:8e:f3:91:13:2a:5d:bd:73:77:be: 56:1a:61:6e -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAb8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTEwMjIxMTAvBgNVBAUTKDc2QUEyMENBMjRBNkMyRTMyODg3NkQwMDREMTMxNEUx MTdBNkU3RDAwHhcNMjUwOTI3MDQwMTMxWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGQ3NjE5Yi05NTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3TOlGNdELzNwmEYS2bOLG+3rw34K4CPAnp1vuoVPgwrKA+JM7npatexQvqdG AmL7afJewckAu5GKV1csYzbL9+JYOYf4e4V2JpkGFbjtfNEUJaEeLymO5z2Bbag1 BT9C5G4rXT/MV3qRAiGRn+9TfHNXhn8TZuefAC8dRjS4pQ7nMxmnyRK+X2/LEVD8 6l4aE+i9KOM2hWLES7pvBf9UcHv5vaUCvbuZTgnOqtdT7pgvy39kHecpkeL4wwGP m7YcZlCZVqtk6EwHjQhQpmyPYqg52S3qEPHqirz3SUERt2Q5PnEtTcN3MQ5CicuJ hTBCz+36NKHgAJwn8wERK6VpLQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFBHjeJ6n 4lExDKYjrt5D4GQAQghuMB8GA1UdIwQYMBaAFHaqIMokpsLjKIdtAE0TFOEXpufQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTAyMi85Q0MwMEE0QTBG RkUxMUVFQjYxOTJCNzZDNEY5QUUwMi9kcW9neWlTbXd1TW9oMjBBVFJNVTRSZW01 OUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Rxb2d5aVNtd3VNb2gyMEFUUk1VNFJlbTU5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTEwMjIvOUNDMDBBNEEwRkZFMTFFRUI2MTkyQjc2QzRGOUFFMDIvOEM4Q0NBQzYy NEIzMTFFRkI4Njk4RTVDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAAte8ADBAFnwCQwDQYJKoZIhvcNAQELBQADggEBAHLsH2JB kyLhJesLHEG1RoUjBX8+fkH1NHcmJNOT6oBzB/thpmZJkokAOmTALilhG8uYAful TcrQLEjoZ5eYUBgrtIpnL2ZVet2O5SKyRO+MDP6bR2RnMQih4k5Hjd7AiOmdFPtT yJKkUYxy0EiZqbXnnRDpz+aSs85CHIK2enF6o3YPwZToNOKnREW3aOPI5GwYeD4c VcOhyUncY8wnDzMB2QCC/hDQeNudOjZZGBGB/XZL6wAC38ArYUPy7GoOSPG9RGGf ebHQeg7qZ6uC7ZbFX7/pqYkCy1rvq4lIIVUqLD7IolKMnuXrDjmc0hIYmaJNjvOR EypdvXN3vlYaYW4= -----END CERTIFICATE-----Generated at Fri Oct 24 07:23:16 2025 by rpki-client