$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/0E1AD8C2982011F0A7A0894CC4F9AE02.roa File: 0E1AD8C2982011F0A7A0894CC4F9AE02.roa (raw, json) Hash identifier: CMTbivAHiLt7IGuG9Zl/8u4+Wi8bG4wbS4CS9kYqibQ= Subject key identifier: 01:33:E8:4B:94:1E:61:6B:CD:98:D5:ED:4E:D4:55:84:DB:B7:39:5F Certificate issuer: /CN=A91EAE3D/serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00 Certificate serial: 1934 Authority key identifier: C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/0E1AD8C2982011F0A7A0894CC4F9AE02.roa Signing time: Tue 30 Sep 2025 04:04:35 +0000 ROA not before: Tue 30 Sep 2025 04:04:35 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 9912 IP address blocks: 203.55.11.0/24 maxlen: 24 2001:de8:17::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 17:14:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6452 (0x1934) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAE3D, serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00 Validity Not Before: Sep 30 04:04:35 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=68db56d3-cb45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:31:87:00:42:ca:ee:09:59:f4:47:21:9c:47: d8:df:c8:35:57:a8:f4:91:e4:34:f3:ec:73:d4:44: 61:7f:03:5b:07:a6:b5:57:00:3e:73:af:cf:52:b6: 3a:b1:66:fc:f6:ea:b7:0e:98:b8:28:f2:4f:1c:7f: 8a:84:df:de:c7:ac:21:9f:96:b1:e1:67:5a:34:29: fd:e3:84:0a:97:60:cd:64:16:c2:34:1f:91:c9:d4: f0:ac:c4:14:c9:12:81:cf:a6:e0:41:60:71:6e:d8: 80:fc:a4:6d:d0:6a:b7:84:62:b4:73:51:e8:0b:23: 92:42:8e:6a:37:fc:80:77:2a:fa:0f:0f:9f:a0:1a: aa:eb:2b:c1:8e:07:71:53:1c:a0:20:aa:6a:3f:8d: d8:59:b5:00:f0:5f:88:28:53:d0:e7:eb:83:c9:f0: a7:cb:04:0b:e3:f8:90:74:4a:6f:76:59:28:7b:e6: 96:2f:09:68:aa:09:db:da:2c:e1:f7:ec:af:91:72: a4:08:ab:62:ba:dd:49:2c:b9:6b:3e:25:87:21:29: 18:ed:8c:dd:16:a4:73:a5:1d:4f:49:c9:4f:f3:0a: 8c:74:70:b3:da:66:cd:8e:02:80:de:39:f6:62:5e: 70:b1:ad:28:6f:11:00:41:a4:79:35:55:f2:ad:9b: b0:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:33:E8:4B:94:1E:61:6B:CD:98:D5:ED:4E:D4:55:84:DB:B7:39:5F X509v3 Authority Key Identifier: keyid:C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/0E1AD8C2982011F0A7A0894CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.55.11.0/24 IPv6: 2001:de8:17::/48 Signature Algorithm: sha256WithRSAEncryption a8:6a:93:38:62:bb:ea:60:5f:08:1a:5f:3c:5e:c4:98:46:01: 36:af:6b:d4:5b:f5:71:07:95:30:53:be:43:bf:4f:e1:8d:78: 0c:22:1e:8b:63:cd:e2:ca:d7:73:48:83:03:c3:c1:ae:14:87: 06:6c:41:a6:ed:a7:68:00:00:e6:c5:2e:03:3b:d8:95:eb:a3: 5e:1a:9b:7c:15:7f:60:d2:5a:ae:1c:9c:f2:43:99:8e:05:9a: 17:c1:ee:48:67:68:ae:82:17:2e:ab:c2:52:a0:d1:bf:f7:94: fd:88:64:fa:dd:10:81:ae:5a:18:61:97:6c:b7:ca:15:ae:cb: 19:27:26:bb:28:c5:94:84:65:74:8b:91:77:3e:62:c2:33:92: 60:9b:70:e3:e6:b5:d6:d3:2b:70:e5:14:1e:4a:0e:ee:3b:86: ae:38:dc:85:fd:ec:d8:ef:32:f3:60:dc:69:60:75:19:a5:b0: 3c:16:db:b7:02:42:eb:23:77:8c:08:2d:40:73:f5:bc:09:ec: bc:bc:a4:8a:eb:e7:c5:a8:61:b0:ca:d5:4e:d2:0b:90:af:30: 3f:0a:7d:87:52:e8:11:9a:1b:45:16:60:1e:2c:c0:80:b7:68: 0f:1a:d4:11:8e:58:b3:31:dd:83:e3:58:2c:75:42:b2:7c:35: 18:3e:16:a8 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICGTQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFFM0QxMTAvBgNVBAUTKEM3MjY5QjEyNEM0MjBDNTVFMjlGQjUxRDNDMUIwRDlE NDc2Q0JEMDAwHhcNMjUwOTMwMDQwNDM1WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGRiNTZkMy1jYjQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9zGHAELK7glZ9EchnEfY38g1V6j0keQ08+xz1ERhfwNbB6a1VwA+c6/PUrY6 sWb89uq3Dpi4KPJPHH+KhN/ex6whn5ax4WdaNCn944QKl2DNZBbCNB+RydTwrMQU yRKBz6bgQWBxbtiA/KRt0Gq3hGK0c1HoCyOSQo5qN/yAdyr6Dw+foBqq6yvBjgdx UxygIKpqP43YWbUA8F+IKFPQ5+uDyfCnywQL4/iQdEpvdlkoe+aWLwloqgnb2izh 9+yvkXKkCKtiut1JLLlrPiWHISkY7YzdFqRzpR1PSclP8wqMdHCz2mbNjgKA3jn2 Yl5wsa0obxEAQaR5NVXyrZuwDQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFAEz6EuU HmFrzZjV7U7UVYTbtzlfMB8GA1UdIwQYMBaAFMcmmxJMQgxV4p+1HTwbDZ1HbL0A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUUzRC85N0I2RTBDRTc1 REUxMUU4QjcwNEEyNDZDNEY5QUUwMi94eWFiRWt4Q0RGWGluN1VkUEJzTm5VZHN2 UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h5YWJFa3hDREZYaW43VWRQQnNOblVkc3ZRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUFFM0QvOTdCNkUwQ0U3NURFMTFFOEI3MDRBMjQ2QzRGOUFFMDIvMEUxQUQ4QzI5 ODIwMTFGMEE3QTA4OTRDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBADLNwswDwQCAAIwCQMHACABDegAFzANBgkqhkiG9w0BAQsF AAOCAQEAqGqTOGK76mBfCBpfPF7EmEYBNq9r1Fv1cQeVMFO+Q79P4Y14DCIei2PN 4srXc0iDA8PBrhSHBmxBpu2naAAA5sUuAzvYleujXhqbfBV/YNJarhyc8kOZjgWa F8HuSGdoroIXLqvCUqDRv/eU/Yhk+t0Qga5aGGGXbLfKFa7LGScmuyjFlIRldIuR dz5iwjOSYJtw4+a11tMrcOUUHkoO7juGrjjchf3s2O8y82DcaWB1GaWwPBbbtwJC 6yN3jAgtQHP1vAnsvLykiuvnxahhsMrVTtILkK8wPwp9h1LoEZobRRZgHizAgLdo DxrUEY5YszHdg+NYLHVCsnw1GD4WqA== -----END CERTIFICATE-----Generated at Wed Oct 22 20:24:57 2025 by rpki-client