$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/A73C0BF6D93511E6B2617F7BC4F9AE02.roa File: A73C0BF6D93511E6B2617F7BC4F9AE02.roa (raw, json) Hash identifier: tha3MuUqAY4uta6oQkpRf/6b/EDrjv+89kT9R3U6DBE= Subject key identifier: FD:64:AF:08:EA:D6:92:E6:51:AD:B4:02:99:EC:E2:F4:D4:FC:04:F6 Certificate issuer: /CN=A91F0EBF/serialNumber=3ACCB69539AC9F4288BCD0F0A54250D592F540D4 Certificate serial: 2220 Authority key identifier: 3A:CC:B6:95:39:AC:9F:42:88:BC:D0:F0:A5:42:50:D5:92:F5:40:D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/A73C0BF6D93511E6B2617F7BC4F9AE02.roa Signing time: Thu 02 Oct 2025 16:13:43 +0000 ROA not before: Thu 02 Oct 2025 16:13:43 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 54836 IP address blocks: 43.230.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.crl rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 16:10:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8736 (0x2220) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0EBF, serialNumber=3ACCB69539AC9F4288BCD0F0A54250D592F540D4 Validity Not Before: Oct 2 16:13:43 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68dea4b7-3661 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:3b:8d:ec:58:77:de:cd:5d:26:6f:75:ab:7c: 43:0b:c0:83:50:86:41:0c:49:49:94:07:1a:b0:f0: dc:e4:74:be:af:2a:45:f8:60:17:68:7c:53:0e:59: ce:1e:ad:14:10:64:1d:58:d0:0d:43:23:bb:03:51: b2:20:1d:d7:f9:b6:bb:26:e2:e8:18:3e:9a:6f:ae: 28:f7:3b:0b:b2:75:70:d0:55:85:38:8f:cb:0b:4c: f2:d6:61:cc:52:44:3d:73:bf:ab:3b:e1:85:d5:44: ec:9a:80:1e:6b:e4:48:e9:0f:fb:e6:28:4a:b6:45: 3e:4a:d1:d1:a8:a1:97:d3:fc:98:7b:62:c9:2b:e1: fe:bb:a3:6d:f8:aa:30:db:23:61:52:44:fa:2d:33: b6:43:f8:b9:8f:30:ef:14:72:57:5e:ee:55:d6:f6: 4f:76:ef:d5:ca:87:98:b5:93:7a:d9:9e:ef:85:4b: 81:94:5e:a6:6c:c8:55:7b:0e:b5:94:8f:5b:aa:c1: 17:03:a2:a2:46:54:f1:d4:e4:11:50:b1:72:9d:06: fa:71:19:bc:7a:be:ca:4b:a6:67:55:50:a4:90:f3: 93:98:d2:df:1d:06:2c:12:c3:76:e0:cb:7d:45:4b: 77:2a:2c:e5:69:cb:ee:a6:23:09:55:cd:25:32:69: a7:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:64:AF:08:EA:D6:92:E6:51:AD:B4:02:99:EC:E2:F4:D4:FC:04:F6 X509v3 Authority Key Identifier: keyid:3A:CC:B6:95:39:AC:9F:42:88:BC:D0:F0:A5:42:50:D5:92:F5:40:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/A73C0BF6D93511E6B2617F7BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.230.26.0/24 Signature Algorithm: sha256WithRSAEncryption 28:18:b9:d1:a2:f6:b6:48:80:f6:94:5a:d7:3f:97:f8:79:40: 8b:2c:8b:03:9f:15:7d:41:bb:fb:d7:a3:d7:3e:03:99:b2:16: 87:3d:52:b7:de:21:ec:00:0a:cb:aa:9b:e9:9d:66:8d:1c:40: f0:57:ac:4d:1c:1d:65:f9:8b:53:43:3c:7b:ae:77:75:e9:fb: 79:03:10:a7:7f:09:ea:3c:7f:41:3d:78:bc:94:33:6a:52:b5: 42:15:a5:3d:46:95:56:e5:cd:35:b9:99:83:25:35:96:71:4e: 96:96:f3:f4:d4:b6:e2:51:60:7a:38:94:7f:0a:0d:6c:75:89: a1:70:6b:3a:b9:34:1d:64:d7:50:72:d0:53:1f:8c:2d:bc:d9: e5:ca:62:a6:f3:bd:24:99:8b:61:1a:1d:65:82:2d:65:2c:92: 00:52:5d:de:f4:d6:f6:bd:e6:bb:4e:7b:5d:61:6e:67:7b:20: 7a:75:59:bb:e8:47:60:24:17:29:19:d6:e2:37:d7:d3:bb:7d: d8:55:7b:c4:fc:02:d5:61:10:d3:2a:6c:85:a9:b7:d0:f0:e3: 30:b0:12:9b:35:c0:b5:4d:f8:9d:7c:45:e5:2d:bf:34:dd:f3: b9:59:8b:4f:ff:2d:d2:24:c3:96:62:af:de:92:4c:fc:4f:1c: 80:9d:99:36 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICIiAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBFQkYxMTAvBgNVBAUTKDNBQ0NCNjk1MzlBQzlGNDI4OEJDRDBGMEE1NDI1MEQ1 OTJGNTQwRDQwHhcNMjUxMDAyMTYxMzQzWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGRlYTRiNy0zNjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1DuN7Fh33s1dJm91q3xDC8CDUIZBDElJlAcasPDc5HS+rypF+GAXaHxTDlnO Hq0UEGQdWNANQyO7A1GyIB3X+ba7JuLoGD6ab64o9zsLsnVw0FWFOI/LC0zy1mHM UkQ9c7+rO+GF1UTsmoAea+RI6Q/75ihKtkU+StHRqKGX0/yYe2LJK+H+u6Nt+Kow 2yNhUkT6LTO2Q/i5jzDvFHJXXu5V1vZPdu/VyoeYtZN62Z7vhUuBlF6mbMhVew61 lI9bqsEXA6KiRlTx1OQRULFynQb6cRm8er7KS6ZnVVCkkPOTmNLfHQYsEsN24Mt9 RUt3KizlacvupiMJVc0lMmmnaQIDAQABo4IClTCCApEwHQYDVR0OBBYEFP1krwjq 1pLmUa20Apns4vTU/AT2MB8GA1UdIwQYMBaAFDrMtpU5rJ9CiLzQ8KVCUNWS9UDU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEVCRi81Rjg0RDdEOERC ODAxMUU1OUFCN0VEMUVDNEY5QUUwMi9Pc3kybFRtc24wS0l2TkR3cFVKUTFaTDFR TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09zeTJsVG1zbjBLSXZORHdwVUpRMVpMMVFOUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjBFQkYvNUY4NEQ3RDhEQjgwMTFFNTlBQjdFRDFFQzRGOUFFMDIvQTczQzBCRjZE OTM1MTFFNkIyNjE3RjdCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAr5howDQYJKoZIhvcNAQELBQADggEBACgYudGi9rZIgPaU Wtc/l/h5QIssiwOfFX1Bu/vXo9c+A5myFoc9UrfeIewACsuqm+mdZo0cQPBXrE0c HWX5i1NDPHuud3Xp+3kDEKd/Ceo8f0E9eLyUM2pStUIVpT1GlVblzTW5mYMlNZZx TpaW8/TUtuJRYHo4lH8KDWx1iaFwazq5NB1k11By0FMfjC282eXKYqbzvSSZi2Ea HWWCLWUskgBSXd701va95rtOe11hbmd7IHp1WbvoR2AkFykZ1uI319O7fdhVe8T8 AtVhENMqbIWpt9Dw4zCwEps1wLVN+J18ReUtvzTd87lZi0//LdIkw5Zir96STPxP HICdmTY= -----END CERTIFICATE-----Generated at Sat Oct 25 21:53:21 2025 by rpki-client