$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/11D9E3F865DB11F0A01C3E60C4F9AE02.roa File: 11D9E3F865DB11F0A01C3E60C4F9AE02.roa (raw, json) Hash identifier: SkqOP3HGJvJNACUcXS+nN5Zr4p2eXR8/AXO6wYAFnB4= Subject key identifier: 8C:17:97:BD:15:81:97:8D:C2:D6:6C:A9:5E:4B:57:73:EE:0F:8C:63 Certificate issuer: /CN=A91E4845/serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6 Certificate serial: 222D Authority key identifier: 01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/11D9E3F865DB11F0A01C3E60C4F9AE02.roa Signing time: Mon 21 Jul 2025 02:33:22 +0000 ROA not before: Mon 21 Jul 2025 02:33:22 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 213513 IP address blocks: 180.210.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.crl rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 15:54:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8749 (0x222d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4845, serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6 Validity Not Before: Jul 21 02:33:22 2025 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=687da6f2-6b0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f2:bb:07:e7:d2:52:89:5c:77:df:77:2f:04: 30:06:c3:b3:d6:87:51:eb:87:e7:36:f3:59:06:d7: ad:af:61:53:d7:64:22:70:38:32:d1:7d:de:a3:53: 49:dd:5b:02:73:f5:1e:c9:38:50:df:2c:a3:02:09: 7b:16:a8:21:f1:93:37:84:56:6b:24:b2:ac:99:db: b7:3d:21:b1:41:88:43:78:30:97:61:d7:1d:5e:9f: 98:ab:92:44:ed:76:a4:52:86:58:c3:ea:1d:83:79: 88:09:d3:3b:bb:f2:85:a3:93:b6:bf:3f:2f:b8:d1: 2d:e5:4d:b9:4e:81:24:3f:e7:83:54:22:ee:76:8f: 97:ec:91:e1:f9:6b:47:8f:97:af:6b:1a:2c:e9:92: 00:9d:70:64:4c:dd:18:14:69:46:a6:3f:5d:bc:61: 7a:ee:c7:31:36:8e:86:5f:97:99:87:a9:46:0b:06: b4:ef:83:0d:98:b6:c6:55:f2:49:fd:26:aa:4b:a6: 8a:3b:a7:ac:3f:aa:50:8b:58:3f:2e:50:6f:14:59: 57:05:eb:a6:ec:7c:e6:9f:b8:e9:ec:d7:93:2c:f2: 80:e8:de:54:45:e6:e1:a8:d0:b2:cb:49:7e:3a:b9: 84:25:3c:d4:a0:89:7a:e3:5d:e8:be:f6:49:9e:f3: fd:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:17:97:BD:15:81:97:8D:C2:D6:6C:A9:5E:4B:57:73:EE:0F:8C:63 X509v3 Authority Key Identifier: keyid:01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/11D9E3F865DB11F0A01C3E60C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 180.210.221.0/24 Signature Algorithm: sha256WithRSAEncryption b1:e1:0b:c9:d0:28:7d:81:79:c9:62:e6:f2:a0:7e:c0:19:bc: f1:c3:76:e5:69:b3:1e:7e:c3:8c:be:ff:50:9a:98:f1:74:7a: 1b:8b:f3:23:80:97:9c:75:7a:fb:2b:22:08:7c:8c:72:01:6c: 08:c0:8d:15:d6:f6:21:66:18:f5:94:fa:a4:f0:bc:91:cf:b0: d2:a9:a5:8d:93:1f:5b:bf:89:31:ca:db:a3:82:88:11:a4:1b: a9:e5:90:4f:ba:0b:8a:aa:50:67:2a:f9:b6:d3:b7:8f:35:ae: ce:59:b4:88:b8:fc:bc:3f:60:99:7a:ef:ba:d8:fc:c6:11:94: 24:3f:78:05:d6:6b:a0:a9:50:c0:6b:5f:17:8e:6e:59:c1:43: 38:6b:af:1c:90:85:1f:ab:1b:31:aa:0e:dd:07:4e:13:f9:02: 2b:e5:2c:81:5d:83:0d:f1:1f:a1:71:de:c3:71:e5:3f:01:b6: 4d:93:89:db:af:88:4a:11:f0:d4:3a:c6:fa:e1:dc:85:48:63: d7:1f:2f:41:fc:61:f6:81:27:12:1c:26:8d:9f:e0:ac:48:21: 39:c4:c7:9a:7d:b4:54:70:75:f4:0b:ce:b4:f9:c4:94:5e:df: 1c:8d:fe:c2:9d:e7:8a:b1:59:07:60:c4:58:66:3b:1d:0c:b9: ad:ab:fc:96 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICIi0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ4NDUxMTAvBgNVBAUTKDAxQTQxMkVGNDE2Qzg4NEY2RjYzN0YxQkRBODAwRUI2 RUY2N0I2RDYwHhcNMjUwNzIxMDIzMzIyWhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODdkYTZmMi02YjBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsPK7B+fSUolcd993LwQwBsOz1odR64fnNvNZBtetr2FT12QicDgy0X3eo1NJ 3VsCc/UeyThQ3yyjAgl7Fqgh8ZM3hFZrJLKsmdu3PSGxQYhDeDCXYdcdXp+Yq5JE 7XakUoZYw+odg3mICdM7u/KFo5O2vz8vuNEt5U25ToEkP+eDVCLudo+X7JHh+WtH j5evaxos6ZIAnXBkTN0YFGlGpj9dvGF67scxNo6GX5eZh6lGCwa074MNmLbGVfJJ /SaqS6aKO6esP6pQi1g/LlBvFFlXBeum7Hzmn7jp7NeTLPKA6N5URebhqNCyy0l+ OrmEJTzUoIl6413ovvZJnvP9iwIDAQABo4IClTCCApEwHQYDVR0OBBYEFIwXl70V gZeNwtZsqV5LV3PuD4xjMB8GA1UdIwQYMBaAFAGkEu9BbIhPb2N/G9qADrbvZ7bW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDg0NS80MDAxNTNCNkQy RUIxMUU1QjREMTVBNEVDNEY5QUUwMi9BYVFTNzBGc2lFOXZZMzhiMm9BT3R1OW50 dFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FhUVM3MEZzaUU5dlkzOGIyb0FPdHU5bnR0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTQ4NDUvNDAwMTUzQjZEMkVCMTFFNUI0RDE1QTRFQzRGOUFFMDIvMTFEOUUzRjg2 NURCMTFGMEEwMUMzRTYwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAC00t0wDQYJKoZIhvcNAQELBQADggEBALHhC8nQKH2Becli 5vKgfsAZvPHDduVpsx5+w4y+/1CamPF0ehuL8yOAl5x1evsrIgh8jHIBbAjAjRXW 9iFmGPWU+qTwvJHPsNKppY2TH1u/iTHK26OCiBGkG6nlkE+6C4qqUGcq+bbTt481 rs5ZtIi4/Lw/YJl677rY/MYRlCQ/eAXWa6CpUMBrXxeOblnBQzhrrxyQhR+rGzGq Dt0HThP5AivlLIFdgw3xH6Fx3sNx5T8Btk2TiduviEoR8NQ6xvrh3IVIY9cfL0H8 YfaBJxIcJo2f4KxIITnEx5p9tFRwdfQLzrT5xJRe3xyN/sKd54qxWQdgxFhmOx0M ua2r/JY= -----END CERTIFICATE-----Generated at Sat Nov 1 15:25:20 2025 by rpki-client