$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/981DEAC6B1C711F08CEB3C61C4F9AE02.roa File: 981DEAC6B1C711F08CEB3C61C4F9AE02.roa (raw, json) Hash identifier: Xd/ha+8Rf40EUcmF2S28Em4xm72VBdQzvds2dDfnPNU= Subject key identifier: 8C:CA:25:FB:11:37:48:46:D6:A3:E4:07:1F:4B:F0:ED:4F:87:38:54 Certificate issuer: /CN=A91E57DC/serialNumber=22B1A7175E75FFD847391F2C2E9665E4EEE1B742 Certificate serial: 1199 Authority key identifier: 22:B1:A7:17:5E:75:FF:D8:47:39:1F:2C:2E:96:65:E4:EE:E1:B7:42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/981DEAC6B1C711F08CEB3C61C4F9AE02.roa Signing time: Sat 25 Oct 2025 17:25:27 +0000 ROA not before: Sat 25 Oct 2025 17:25:27 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 153568 IP address blocks: 220.152.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.crl rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Nov 2025 17:32:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4505 (0x1199) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E57DC, serialNumber=22B1A7175E75FFD847391F2C2E9665E4EEE1B742 Validity Not Before: Oct 25 17:25:27 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=68fd0806-1035 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:21:49:ba:10:68:40:2b:98:1c:ed:22:a2:85: c9:ec:80:39:0c:bf:0b:5e:29:73:73:47:28:a5:33: e9:78:59:de:03:75:b4:03:92:f5:f8:6a:40:e5:5f: 89:94:f7:2d:60:dc:44:f7:ad:5c:3a:aa:b2:e7:3f: 95:f2:29:ed:82:82:5b:fb:04:3e:4a:77:99:b6:c5: 1b:3e:6f:55:f2:1b:d3:44:16:22:b0:30:0a:97:27: 25:aa:34:ed:83:57:f7:8a:e5:a7:0f:ba:77:89:cd: 05:eb:10:09:b1:9f:aa:2f:b8:72:d9:ee:d6:17:8e: 5e:5f:27:bb:36:d7:03:4b:65:eb:42:64:c7:04:7f: c0:32:8c:96:31:c4:a5:55:f9:f8:12:2f:e9:a6:b8: c3:0f:75:10:99:76:cb:af:7b:26:10:f2:5e:b5:c0: 02:1e:c8:fa:33:1f:7e:0e:70:8b:01:83:80:f0:70: 30:b0:f0:b7:81:30:0b:1a:54:14:87:8d:bd:a7:03: 2d:8b:f9:3d:f5:4f:f8:a1:ed:05:c5:71:e2:26:9e: 82:7c:3c:ea:9f:b8:96:f3:36:fa:c5:06:d6:65:08: 1b:cc:a7:b1:7d:7d:87:3b:fa:40:81:98:aa:85:b2: 43:00:d4:c4:cd:a0:63:d3:06:fc:5a:80:57:4b:5f: fc:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:CA:25:FB:11:37:48:46:D6:A3:E4:07:1F:4B:F0:ED:4F:87:38:54 X509v3 Authority Key Identifier: keyid:22:B1:A7:17:5E:75:FF:D8:47:39:1F:2C:2E:96:65:E4:EE:E1:B7:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/981DEAC6B1C711F08CEB3C61C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.152.113.0/24 Signature Algorithm: sha256WithRSAEncryption 26:6c:84:d9:17:eb:1f:5a:86:94:02:34:62:b1:b9:d2:a7:fd: 1a:67:f6:dd:6e:0a:8f:89:59:97:62:2f:f9:ee:fb:6c:91:50: 1b:75:38:ba:17:7e:bf:91:1d:dd:35:a6:62:52:f4:2d:e4:2e: c9:33:d6:67:9c:99:b7:ec:a5:b5:3e:fd:a6:21:55:3c:d0:74: 2e:b5:70:98:fc:4f:8c:f2:fa:a1:a4:85:95:c0:d5:88:83:e1: 75:5f:8a:6d:43:14:33:89:b5:88:55:12:26:96:0c:b9:4a:b7: 4c:26:90:72:59:d7:ee:f8:a4:07:23:1e:4d:52:4f:e5:c6:ae: 35:0a:bb:cd:16:c7:f0:f1:c8:16:11:06:2a:dc:d5:c4:e1:78: fb:ab:58:97:45:fc:b7:6a:f6:0c:b7:95:17:03:fd:a6:46:24: 4c:86:13:42:73:75:4b:6f:36:90:a3:ce:6a:26:12:84:47:7f: 6c:58:bd:ad:ad:f0:ce:03:b2:b0:b0:11:cb:37:a5:97:2d:76: 18:70:55:ab:85:2b:13:61:13:62:59:5b:d5:96:1a:cf:65:34: 34:32:6a:8f:0a:47:15:70:07:98:ba:6a:86:2a:2f:ea:c3:66: e6:3a:5d:3d:18:84:70:f6:a2:e9:69:fd:ac:c2:97:87:71:8c: 30:52:5e:68 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICEZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU3REMxMTAvBgNVBAUTKDIyQjFBNzE3NUU3NUZGRDg0NzM5MUYyQzJFOTY2NUU0 RUVFMUI3NDIwHhcNMjUxMDI1MTcyNTI3WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OGZkMDgwNi0xMDM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8SFJuhBoQCuYHO0iooXJ7IA5DL8LXilzc0copTPpeFneA3W0A5L1+GpA5V+J lPctYNxE961cOqqy5z+V8intgoJb+wQ+SneZtsUbPm9V8hvTRBYisDAKlyclqjTt g1f3iuWnD7p3ic0F6xAJsZ+qL7hy2e7WF45eXye7NtcDS2XrQmTHBH/AMoyWMcSl Vfn4Ei/pprjDD3UQmXbLr3smEPJetcACHsj6Mx9+DnCLAYOA8HAwsPC3gTALGlQU h429pwMti/k99U/4oe0FxXHiJp6CfDzqn7iW8zb6xQbWZQgbzKexfX2HO/pAgZiq hbJDANTEzaBj0wb8WoBXS1/8PQIDAQABo4IClTCCApEwHQYDVR0OBBYEFIzKJfsR N0hG1qPkBx9L8O1PhzhUMB8GA1UdIwQYMBaAFCKxpxdedf/YRzkfLC6WZeTu4bdC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTdEQy8zNUY3OTg2NjFG MDExMUU5QjFBQTk0MzZDNEY5QUUwMi9JckduRjE1MV85aEhPUjhzTHBabDVPN2h0 MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lyR25GMTUxXzloSE9SOHNMcFpsNU83aHQwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTU3REMvMzVGNzk4NjYxRjAxMTFFOUIxQUE5NDM2QzRGOUFFMDIvOTgxREVBQzZC MUM3MTFGMDhDRUIzQzYxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADcmHEwDQYJKoZIhvcNAQELBQADggEBACZshNkX6x9ahpQC NGKxudKn/Rpn9t1uCo+JWZdiL/nu+2yRUBt1OLoXfr+RHd01pmJS9C3kLskz1mec mbfspbU+/aYhVTzQdC61cJj8T4zy+qGkhZXA1YiD4XVfim1DFDOJtYhVEiaWDLlK t0wmkHJZ1+74pAcjHk1ST+XGrjUKu80Wx/DxyBYRBirc1cThePurWJdF/Ldq9gy3 lRcD/aZGJEyGE0JzdUtvNpCjzmomEoRHf2xYva2t8M4DsrCwEcs3pZctdhhwVauF KxNhE2JZW9WWGs9lNDQyao8KRxVwB5i6aoYqL+rDZuY6XT0YhHD2oulp/azCl4dx jDBSXmg= -----END CERTIFICATE-----Generated at Mon Oct 27 07:15:35 2025 by rpki-client