$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3DDB/0E3BDAEC472411F095F91B23C4F9AE02/B24F568A4C7A11F09CF1A77BC4F9AE02.roa File: B24F568A4C7A11F09CF1A77BC4F9AE02.roa (raw, json) Hash identifier: iZRDXQppbsQwPvsyTvXzZpqvjaraKsPpnctxXUoNoxk= Subject key identifier: D5:62:C8:DA:65:03:29:9A:34:35:DA:AB:47:41:74:77:8E:81:1B:DC Certificate issuer: /CN=A91E3DDB/serialNumber=34CDA65B02F176BFC248784DAA9AC8A7BE1653DB Certificate serial: 0C Authority key identifier: 34:CD:A6:5B:02:F1:76:BF:C2:48:78:4D:AA:9A:C8:A7:BE:16:53:DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NM2mWwLxdr_CSHhNqprIp74WU9s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3DDB/0E3BDAEC472411F095F91B23C4F9AE02/B24F568A4C7A11F09CF1A77BC4F9AE02.roa Signing time: Wed 18 Jun 2025 19:31:31 +0000 ROA not before: Wed 18 Jun 2025 19:31:31 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 55785 IP address blocks: 43.252.68.0/22 maxlen: 24 103.247.152.0/22 maxlen: 24 2403:4d00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3DDB/0E3BDAEC472411F095F91B23C4F9AE02/NM2mWwLxdr_CSHhNqprIp74WU9s.crl rsync://rpki.apnic.net/member_repository/A91E3DDB/0E3BDAEC472411F095F91B23C4F9AE02/NM2mWwLxdr_CSHhNqprIp74WU9s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NM2mWwLxdr_CSHhNqprIp74WU9s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:30:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12 (0xc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3DDB, serialNumber=34CDA65B02F176BFC248784DAA9AC8A7BE1653DB Validity Not Before: Jun 18 19:31:31 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68531412-bb53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2d:07:18:d1:06:a3:f6:1b:0b:b0:18:16:96: 96:8d:e1:76:2f:27:a0:72:27:cf:26:b6:cb:90:5c: 3c:4e:c4:60:f9:16:02:a7:db:fb:08:aa:94:fe:11: 33:2e:f0:47:4b:51:bf:2a:61:f4:1b:28:c0:61:b3: c5:dc:1b:1b:36:a8:7f:a3:79:4d:dd:f3:0d:0c:63: 08:2c:51:2b:38:d9:92:86:f9:1a:9b:ea:d3:04:30: 00:42:45:6b:e3:0a:3c:e1:51:f6:fd:e6:c4:96:00: 14:b3:f8:1a:b9:c4:0f:42:f6:70:13:5c:c4:ef:f7: 44:79:76:7d:33:aa:41:32:12:21:99:b7:aa:a5:53: 68:f0:66:1b:45:69:4d:8e:74:50:39:8a:e2:0f:49: ef:9a:79:79:07:0a:ec:18:5d:33:6a:17:cc:b7:57: 3c:8f:d9:89:8a:90:6b:fc:c0:d3:9f:e3:e4:e8:07: 83:af:0d:31:b6:3b:22:e4:53:d8:cc:83:a0:95:96: be:4a:bd:75:8f:cf:4a:1c:27:98:74:fa:78:46:04: cc:36:9c:db:d6:f7:30:8a:74:55:8d:6b:eb:d5:d6: b9:e4:e6:fe:74:c7:e0:ef:ae:7a:a5:e9:a4:2e:c1: f0:de:97:24:56:e4:f8:92:79:5f:2d:89:26:bc:86: c1:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:62:C8:DA:65:03:29:9A:34:35:DA:AB:47:41:74:77:8E:81:1B:DC X509v3 Authority Key Identifier: keyid:34:CD:A6:5B:02:F1:76:BF:C2:48:78:4D:AA:9A:C8:A7:BE:16:53:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3DDB/0E3BDAEC472411F095F91B23C4F9AE02/NM2mWwLxdr_CSHhNqprIp74WU9s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NM2mWwLxdr_CSHhNqprIp74WU9s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3DDB/0E3BDAEC472411F095F91B23C4F9AE02/B24F568A4C7A11F09CF1A77BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.252.68.0/22 103.247.152.0/22 IPv6: 2403:4d00::/32 Signature Algorithm: sha256WithRSAEncryption 4e:01:a0:d7:06:85:dc:4f:7b:f2:bb:62:da:bf:50:a6:59:05: 70:bf:5c:93:b3:35:18:2b:f8:6d:ca:fd:38:84:44:59:12:7d: 96:e7:03:5c:1d:62:69:e4:19:be:06:8b:ab:c8:8a:f1:52:a7: 0b:51:92:13:98:d5:8c:50:c3:ea:c4:5d:88:f0:2d:5c:01:5c: 1a:bc:c5:dd:d5:ed:fb:7c:d6:35:65:c9:d7:df:e2:21:49:71: b0:30:bb:af:63:3f:ca:6e:35:24:fb:01:47:85:3f:13:e8:30: 8c:f6:89:85:ee:e9:ad:ef:6a:30:36:1c:ad:db:2c:bd:7e:41: d3:49:56:75:83:0b:98:4e:a2:1c:f3:7f:8f:0b:97:41:31:da: fc:eb:ac:a6:4d:ed:c7:b0:5a:62:c6:42:39:9a:28:fc:30:a7: d9:82:6f:2e:e2:e7:4a:7b:81:62:a4:61:be:3b:0b:64:f7:73: 58:42:6c:ae:1c:1d:aa:ba:48:18:ec:70:64:95:1a:98:dd:04: 32:76:e2:32:eb:ca:50:4c:50:45:a9:fd:8b:73:e2:0d:1c:ac: 27:e1:30:e2:52:c5:3b:5b:fa:c3:74:d6:51:0e:40:f8:43:c3: b6:0b:21:69:4b:41:11:40:e2:a2:1b:90:ac:34:0b:65:a8:db: 50:00:a9:11 -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgIBDDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF M0REQjExMC8GA1UEBRMoMzRDREE2NUIwMkYxNzZCRkMyNDg3ODREQUE5QUM4QTdC RTE2NTNEQjAeFw0yNTA2MTgxOTMxMzFaFw0yNjA5MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY4NTMxNDEyLWJiNTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1LQcY0Qaj9hsLsBgWlpaN4XYvJ6ByJ88mtsuQXDxOxGD5FgKn2/sIqpT+ETMu 8EdLUb8qYfQbKMBhs8XcGxs2qH+jeU3d8w0MYwgsUSs42ZKG+Rqb6tMEMABCRWvj CjzhUfb95sSWABSz+Bq5xA9C9nATXMTv90R5dn0zqkEyEiGZt6qlU2jwZhtFaU2O dFA5iuIPSe+aeXkHCuwYXTNqF8y3VzyP2YmKkGv8wNOf4+ToB4OvDTG2OyLkU9jM g6CVlr5KvXWPz0ocJ5h0+nhGBMw2nNvW9zCKdFWNa+vV1rnk5v50x+Dvrnql6aQu wfDelyRW5PiSeV8tiSa8hsG5AgMBAAGjggKqMIICpjAdBgNVHQ4EFgQU1WLI2mUD KZo0NdqrR0F0d46BG9wwHwYDVR0jBBgwFoAUNM2mWwLxdr/CSHhNqprIp74WU9sw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUzRERCLzBFM0JEQUVDNDcy NDExRjA5NUY5MUIyM0M0RjlBRTAyL05NMm1Xd0x4ZHJfQ1NIaE5xcHJJcDc0V1U5 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTk0ybVd3THhkcl9DU0hoTnFwcklwNzRXVTlzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0REQi8wRTNCREFFQzQ3MjQxMUYwOTVGOTFCMjNDNEY5QUUwMi9CMjRGNTY4QTRD N0ExMUYwOUNGMUE3N0JDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDA0BggrBgEFBQcBBwEB/wQl MCMwEgQCAAEwDAMEAiv8RAMEAmf3mDANBAIAAjAHAwUAJANNADANBgkqhkiG9w0B AQsFAAOCAQEATgGg1waF3E978rti2r9QplkFcL9ck7M1GCv4bcr9OIREWRJ9lucD XB1iaeQZvgaLq8iK8VKnC1GSE5jVjFDD6sRdiPAtXAFcGrzF3dXt+3zWNWXJ19/i IUlxsDC7r2M/ym41JPsBR4U/E+gwjPaJhe7pre9qMDYcrdssvX5B00lWdYMLmE6i HPN/jwuXQTHa/Ouspk3tx7BaYsZCOZoo/DCn2YJvLuLnSnuBYqRhvjsLZPdzWEJs rhwdqrpIGOxwZJUamN0EMnbiMuvKUExQRan9i3PiDRysJ+Ew4lLFO1v6w3TWUQ5A +EPDtgshaUtBEUDiohuQrDQLZajbUACpEQ== -----END CERTIFICATE-----Generated at Wed Nov 5 18:11:15 2025 by rpki-client