$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/756C3370F38611EFBF7CEF35C4F9AE02.roa File: 756C3370F38611EFBF7CEF35C4F9AE02.roa (raw, json) Hash identifier: ufRP0kK3djHrA/ocR3A1nqvMa2k06cLGhMe2wbwduh4= Subject key identifier: 17:8C:60:8A:37:EC:62:D8:F8:C9:D1:32:E5:E2:9D:A0:91:80:F1:79 Certificate issuer: /CN=A91E4845/serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6 Certificate serial: 2284 Authority key identifier: 01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/756C3370F38611EFBF7CEF35C4F9AE02.roa Signing time: Sun 02 Nov 2025 16:03:23 +0000 ROA not before: Sun 02 Nov 2025 16:03:23 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 134712 IP address blocks: 220.158.204.0/22 maxlen: 22 220.158.204.0/24 maxlen: 24 220.158.205.0/24 maxlen: 24 220.158.206.0/24 maxlen: 24 220.158.207.0/24 maxlen: 24 2405:d340::/32 maxlen: 32 2405:d340::/48 maxlen: 48 2405:d340:1::/48 maxlen: 48 2405:d340:2::/48 maxlen: 48 2405:d340:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.crl rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 16:03:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8836 (0x2284) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4845, serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6 Validity Not Before: Nov 2 16:03:23 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=690780cb-011e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6d:54:ae:73:51:99:d6:2f:48:b8:ae:74:a8: e6:a9:57:c7:be:81:bd:89:b8:96:cb:79:a0:38:1e: 79:5d:5a:8b:4b:35:00:4f:57:4b:0e:50:77:95:ae: 46:ef:5e:52:e6:3f:18:e7:71:20:58:68:02:0d:46: 84:b4:3a:f4:ee:c2:8e:4f:03:dd:3a:c4:7b:6a:2f: 4b:ea:2a:16:d2:7a:4c:29:fe:8a:cc:84:4f:85:7f: 3a:ad:ab:d0:b8:8f:64:81:64:8c:00:d0:dc:85:cd: 11:13:2a:75:6b:fc:21:00:9a:1b:4f:14:56:d4:72: c8:f5:f6:a3:dc:70:e8:ca:0f:cc:72:62:6b:aa:e5: ed:8f:23:90:02:90:16:da:d9:56:59:5f:89:c1:83: 65:8f:0d:c6:6d:ec:02:37:43:dd:f1:1c:d7:57:59: 63:ff:46:77:be:44:71:a3:7a:1c:07:d7:e6:fc:28: c2:38:c3:9a:16:14:ce:ad:c0:23:c5:3b:ed:ba:ce: 05:53:59:78:56:5f:f6:3f:ff:6f:22:e6:29:6a:96: 05:6c:2d:4f:fb:66:01:1f:ff:d3:7d:e2:37:9e:7a: 3e:b3:c1:b4:26:ae:8a:e7:f2:72:cf:19:c0:b6:86: 23:fb:9d:a8:db:03:4a:5e:48:da:75:a2:05:1d:dd: 42:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:8C:60:8A:37:EC:62:D8:F8:C9:D1:32:E5:E2:9D:A0:91:80:F1:79 X509v3 Authority Key Identifier: keyid:01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/756C3370F38611EFBF7CEF35C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.158.204.0/22 IPv6: 2405:d340::/32 Signature Algorithm: sha256WithRSAEncryption 0d:58:0e:74:a6:5f:41:fd:2a:97:56:c0:d6:31:10:d4:a7:34: c8:73:4d:c7:d7:34:3a:36:3b:3c:73:3c:62:b0:3b:37:00:2e: 83:4a:82:8d:9f:38:51:66:a4:f9:ad:7d:d7:03:10:8e:8a:a2: d9:da:99:1c:d8:09:65:48:1f:5f:ba:65:5a:b9:de:c9:c6:70: b0:b6:ea:9b:32:01:06:2a:dc:ac:ce:ed:10:a4:17:7a:83:65: 11:94:eb:7a:29:06:e5:c3:6c:f2:94:ba:dc:f9:7e:12:33:e5: 84:ed:d9:0f:e9:6d:e2:ff:fb:c3:b2:31:24:70:87:f1:5c:82: d7:77:ff:a0:c5:0a:37:4a:3a:70:e3:ac:39:d4:5b:92:0a:74: 02:fe:1c:a9:71:94:6c:42:65:94:c9:0e:5e:09:f1:08:6e:03: cd:57:88:5b:36:78:2d:f5:7d:7e:97:fe:5f:af:f0:d3:7e:80: 00:d4:77:72:b7:9b:fd:dc:cd:05:22:c4:7a:a9:f7:dd:40:bc: 35:16:25:e7:2e:ae:3e:11:ae:11:3c:6d:a9:e6:d3:24:ef:a6: 34:34:e2:c2:4d:08:d0:16:d8:5e:8a:d8:8d:0b:1b:19:cf:07: 07:00:51:63:b6:02:88:c6:0e:41:12:3c:14:41:1c:f9:24:85: 75:78:be:5f -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICIoQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ4NDUxMTAvBgNVBAUTKDAxQTQxMkVGNDE2Qzg4NEY2RjYzN0YxQkRBODAwRUI2 RUY2N0I2RDYwHhcNMjUxMTAyMTYwMzIzWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTA3ODBjYi0wMTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv21UrnNRmdYvSLiudKjmqVfHvoG9ibiWy3mgOB55XVqLSzUAT1dLDlB3la5G 715S5j8Y53EgWGgCDUaEtDr07sKOTwPdOsR7ai9L6ioW0npMKf6KzIRPhX86ravQ uI9kgWSMANDchc0REyp1a/whAJobTxRW1HLI9faj3HDoyg/McmJrquXtjyOQApAW 2tlWWV+JwYNljw3GbewCN0Pd8RzXV1lj/0Z3vkRxo3ocB9fm/CjCOMOaFhTOrcAj xTvtus4FU1l4Vl/2P/9vIuYpapYFbC1P+2YBH//TfeI3nno+s8G0Jq6K5/JyzxnA toYj+52o2wNKXkjadaIFHd1CLQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFBeMYIo3 7GLY+MnRMuXinaCRgPF5MB8GA1UdIwQYMBaAFAGkEu9BbIhPb2N/G9qADrbvZ7bW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDg0NS80MDAxNTNCNkQy RUIxMUU1QjREMTVBNEVDNEY5QUUwMi9BYVFTNzBGc2lFOXZZMzhiMm9BT3R1OW50 dFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FhUVM3MEZzaUU5dlkzOGIyb0FPdHU5bnR0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTQ4NDUvNDAwMTUzQjZEMkVCMTFFNUI0RDE1QTRFQzRGOUFFMDIvNzU2QzMzNzBG Mzg2MTFFRkJGN0NFRjM1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBALcnswwDQQCAAIwBwMFACQF00AwDQYJKoZIhvcNAQELBQAD ggEBAA1YDnSmX0H9KpdWwNYxENSnNMhzTcfXNDo2OzxzPGKwOzcALoNKgo2fOFFm pPmtfdcDEI6KotnamRzYCWVIH1+6ZVq53snGcLC26psyAQYq3KzO7RCkF3qDZRGU 63opBuXDbPKUutz5fhIz5YTt2Q/pbeL/+8OyMSRwh/Fcgtd3/6DFCjdKOnDjrDnU W5IKdAL+HKlxlGxCZZTJDl4J8QhuA81XiFs2eC31fX6X/l+v8NN+gADUd3K3m/3c zQUixHqp991AvDUWJecurj4RrhE8banm0yTvpjQ04sJNCNAW2F6K2I0LGxnPBwcA UWO2AojGDkESPBRBHPkkhXV4vl8= -----END CERTIFICATE-----Generated at Sun Nov 2 20:30:51 2025 by rpki-client