$ rpki-client -vvf rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/EF40C4AC404611EFA2014651C4F9AE02.roa File: EF40C4AC404611EFA2014651C4F9AE02.roa (raw, json) Hash identifier: RS+KqDnuBA3KXl6QfXiySnp4B7GTc2r4VfCYjRG5dSM= Subject key identifier: 00:D3:6E:4E:7F:BC:F0:8D:22:BD:71:B5:84:15:C7:B8:B8:44:CE:37 Certificate issuer: /CN=A91E96D9/serialNumber=219EA63C6AC966DDB285886BD711C78A14DF512B Certificate serial: 08A1 Authority key identifier: 21:9E:A6:3C:6A:C9:66:DD:B2:85:88:6B:D7:11:C7:8A:14:DF:51:2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/EF40C4AC404611EFA2014651C4F9AE02.roa Signing time: Wed 22 Oct 2025 21:39:51 +0000 ROA not before: Wed 22 Oct 2025 21:39:51 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 24435 IP address blocks: 116.0.35.0/24 maxlen: 24 116.0.36.0/24 maxlen: 24 116.0.37.0/24 maxlen: 24 116.0.39.0/24 maxlen: 24 116.0.45.0/24 maxlen: 24 116.0.47.0/24 maxlen: 24 116.0.48.0/24 maxlen: 24 116.0.49.0/24 maxlen: 24 116.0.50.0/24 maxlen: 24 116.0.51.0/24 maxlen: 24 116.0.52.0/24 maxlen: 24 116.0.53.0/24 maxlen: 24 116.0.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 21:39:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2209 (0x8a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E96D9, serialNumber=219EA63C6AC966DDB285886BD711C78A14DF512B Validity Not Before: Oct 22 21:39:51 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68f94f27-bc81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:52:49:1b:12:e2:36:1e:3a:f1:7a:5a:73:92: f7:30:e0:a4:84:52:ae:18:c7:91:7a:1f:db:77:34: 07:74:fc:5d:02:80:67:8a:ef:d4:6d:e7:9d:0d:ce: 6f:58:02:a9:0b:b9:96:85:33:27:4d:d3:62:db:69: 07:07:25:6a:20:13:39:0f:27:48:cd:29:a6:b2:7d: ef:1b:b9:dd:b9:c4:9a:2d:e5:3b:05:e4:f1:d7:88: ef:0c:3f:3e:88:b9:fb:17:d2:ce:3c:4f:f8:0f:ae: d9:0a:a2:3f:52:17:32:32:76:b9:72:5c:c6:ae:a6: e2:d1:67:0c:13:cb:7a:81:8b:d6:e6:55:40:75:36: 9d:83:74:91:44:f2:e9:c4:8c:ec:70:e2:a0:56:ed: 94:38:06:10:98:57:cf:47:b9:87:30:06:f6:67:8d: 4b:bf:e0:8c:b1:d8:1d:68:f7:38:ed:ad:ca:cd:fd: bf:a4:89:b1:82:0e:4a:18:ba:b6:5f:cc:ce:7b:56: 33:d9:21:e1:41:3f:c1:df:f2:db:f3:ca:7a:9f:5c: 4d:35:86:8d:d3:02:6c:37:cb:40:5c:d2:53:8d:4a: 85:e5:63:0b:86:3e:8e:23:ff:dc:1e:5e:25:12:b9: a7:da:72:9b:d1:58:34:b2:b1:8f:e3:64:48:f6:20: 67:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:D3:6E:4E:7F:BC:F0:8D:22:BD:71:B5:84:15:C7:B8:B8:44:CE:37 X509v3 Authority Key Identifier: keyid:21:9E:A6:3C:6A:C9:66:DD:B2:85:88:6B:D7:11:C7:8A:14:DF:51:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/EF40C4AC404611EFA2014651C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 116.0.35.0-116.0.37.255 116.0.39.0/24 116.0.45.0/24 116.0.47.0-116.0.54.255 Signature Algorithm: sha256WithRSAEncryption ae:fd:1a:40:65:66:3f:f0:8f:cf:5c:86:d8:97:50:6b:0a:d8: 9e:84:52:39:35:bf:e3:1d:2d:07:62:62:07:33:3d:a9:4e:59: 0a:7f:9b:95:92:fb:57:1f:2b:22:63:f3:eb:03:3d:99:ab:2c: 79:25:33:e6:67:a3:da:64:49:31:21:f5:45:87:e0:54:52:90: ea:99:ad:75:af:05:7d:3e:94:b9:5a:a6:75:ce:fc:ec:cc:5e: a5:f4:39:03:63:5b:11:14:d0:e0:8e:86:86:16:67:97:81:f2: d8:7a:3b:ae:1f:b7:d8:98:b4:f9:0e:62:29:2d:d8:c2:1b:07: 93:89:c9:5e:95:23:cd:26:16:4b:c0:b9:74:b5:af:f9:3f:eb: 0e:14:84:5d:49:30:87:bf:2a:a5:5b:02:52:75:5a:c5:b9:f3: 3a:6f:e7:00:49:b3:bd:a3:e8:76:84:24:ae:da:c4:44:92:ba: d8:13:33:e6:7a:32:b4:cb:77:9d:74:bd:a5:92:ba:2e:8b:ea: 52:6d:1f:6c:59:d2:11:97:df:d6:d4:ca:ea:f1:4d:30:ce:4d: 28:6b:60:67:80:63:56:d6:61:e7:f8:60:62:18:c0:7d:3b:dd: 05:01:8f:ce:7d:9b:a4:96:69:d9:ed:1e:80:39:06:85:d2:7e: a0:63:c8:69 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgICCKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk2RDkxMTAvBgNVBAUTKDIxOUVBNjNDNkFDOTY2RERCMjg1ODg2QkQ3MTFDNzhB MTRERjUxMkIwHhcNMjUxMDIyMjEzOTUxWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGY5NGYyNy1iYzgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwlJJGxLiNh468Xpac5L3MOCkhFKuGMeReh/bdzQHdPxdAoBniu/UbeedDc5v WAKpC7mWhTMnTdNi22kHByVqIBM5DydIzSmmsn3vG7nducSaLeU7BeTx14jvDD8+ iLn7F9LOPE/4D67ZCqI/UhcyMna5clzGrqbi0WcME8t6gYvW5lVAdTadg3SRRPLp xIzscOKgVu2UOAYQmFfPR7mHMAb2Z41Lv+CMsdgdaPc47a3Kzf2/pImxgg5KGLq2 X8zOe1Yz2SHhQT/B3/Lb88p6n1xNNYaN0wJsN8tAXNJTjUqF5WMLhj6OI//cHl4l Ermn2nKb0Vg0srGP42RI9iBnuQIDAQABo4ICtzCCArMwHQYDVR0OBBYEFADTbk5/ vPCNIr1xtYQVx7i4RM43MB8GA1UdIwQYMBaAFCGepjxqyWbdsoWIa9cRx4oU31Er MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTZEOS84MERGREVDMEU1 REQxMUVBQjI0NjhENjVDNEY5QUUwMi9JWjZtUEdySlp0MnloWWhyMXhISGloVGZV U3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0laNm1QR3JKWnQyeWhZaHIxeEhIaWhUZlVTcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTk2RDkvODBERkRFQzBFNUREMTFFQUIyNDY4RDY1QzRGOUFFMDIvRUY0MEM0QUM0 MDQ2MTFFRkEyMDE0NjUxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQQYIKwYBBQUHAQcBAf8E MjAwMC4EAgABMCgwDAMEAHQAIwMEAXQAJAMEAHQAJwMEAHQALTAMAwQAdAAvAwQA dAA2MA0GCSqGSIb3DQEBCwUAA4IBAQCu/RpAZWY/8I/PXIbYl1BrCtiehFI5Nb/j HS0HYmIHMz2pTlkKf5uVkvtXHysiY/PrAz2Zqyx5JTPmZ6PaZEkxIfVFh+BUUpDq ma11rwV9PpS5WqZ1zvzszF6l9DkDY1sRFNDgjoaGFmeXgfLYejuuH7fYmLT5DmIp LdjCGweTiclelSPNJhZLwLl0ta/5P+sOFIRdSTCHvyqlWwJSdVrFufM6b+cASbO9 o+h2hCSu2sREkrrYEzPmejK0y3eddL2lkroui+pSbR9sWdIRl9/W1Mrq8U0wzk0o a2BngGNW1mHn+GBiGMB9O90FAY/OfZuklmnZ7R6AOQaF0n6gY8hp -----END CERTIFICATE-----Generated at Fri Oct 24 20:49:54 2025 by rpki-client