$ rpki-client -vvf rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/BF9C655E7A4711EF9C7A0E5AC4F9AE02.roa File: BF9C655E7A4711EF9C7A0E5AC4F9AE02.roa (raw, json) Hash identifier: AGeEiq7USDpmKzktvODn9IUhC/OYAfI+o7JYSyD+iMw= Subject key identifier: 8A:50:73:C5:7F:EF:48:59:38:86:06:F5:1E:6E:D8:EE:7B:2A:BE:92 Certificate issuer: /CN=A91F13B9/serialNumber=7EAC0C2CB27A30A138EE475B07FE97E8E933FDCA Certificate serial: 2918 Authority key identifier: 7E:AC:0C:2C:B2:7A:30:A1:38:EE:47:5B:07:FE:97:E8:E9:33:FD:CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/BF9C655E7A4711EF9C7A0E5AC4F9AE02.roa Signing time: Thu 23 Oct 2025 08:59:45 +0000 ROA not before: Thu 23 Oct 2025 08:59:45 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 141718 IP address blocks: 43.250.124.0/24 maxlen: 24 43.250.125.0/24 maxlen: 24 43.250.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.crl rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 09:02:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10520 (0x2918) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F13B9, serialNumber=7EAC0C2CB27A30A138EE475B07FE97E8E933FDCA Validity Not Before: Oct 23 08:59:45 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=68f9ee81-2d60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9c:10:de:2a:5c:8a:51:70:5f:a9:9a:e3:78: dc:65:0b:62:3d:3f:bc:92:99:5e:7c:c6:da:b5:1a: 69:4e:fb:f0:e2:c2:69:94:05:d7:08:c2:23:b1:ca: 5c:ee:15:3a:9c:4c:df:5a:d9:92:e2:37:80:87:32: e1:31:50:27:55:36:df:66:8b:0f:29:a7:36:e2:66: 65:c3:c7:1e:c6:c7:55:55:94:0c:63:01:6b:0c:23: af:c2:c4:ec:83:2a:d1:ff:04:27:66:f3:3d:9b:32: d2:73:33:f5:b9:b6:30:0d:7f:79:8c:ad:14:64:5d: 5f:c1:b7:17:84:47:3d:5b:d4:91:8a:1d:aa:3d:23: 37:77:24:4d:59:9c:b0:06:d4:fc:9d:7b:a0:aa:15: 2e:a0:05:bb:4c:d5:3b:b4:7f:15:df:2a:dd:a6:9d: 3f:66:8b:a1:96:ff:a1:90:d1:1f:d2:6c:7b:0b:59: 44:11:d8:3d:70:3d:4e:90:e9:6e:e8:a1:4c:4e:4a: 7a:1c:e4:76:02:be:b6:06:c0:d8:10:91:56:ad:af: 22:56:d8:a0:52:1d:b7:e6:56:7c:e5:24:7d:8f:08: dd:3f:70:ff:94:b4:f4:6d:bb:63:97:9a:02:6e:b9: 08:6e:31:a2:70:90:43:2a:b2:c8:47:9b:3f:9c:40: 0e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:50:73:C5:7F:EF:48:59:38:86:06:F5:1E:6E:D8:EE:7B:2A:BE:92 X509v3 Authority Key Identifier: keyid:7E:AC:0C:2C:B2:7A:30:A1:38:EE:47:5B:07:FE:97:E8:E9:33:FD:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/BF9C655E7A4711EF9C7A0E5AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.250.124.0/23 43.250.127.0/24 Signature Algorithm: sha256WithRSAEncryption 74:9e:f1:c9:cd:4e:b4:a7:55:79:f4:9f:f0:00:1c:40:38:af: f4:75:d3:17:87:51:84:70:4d:bf:dc:4c:ba:47:7d:fe:6f:40: 21:3a:e5:39:13:7a:a4:cf:94:e6:71:f2:73:5c:33:fb:ae:e2: 72:bb:b6:28:82:c2:ae:3d:35:0e:d2:82:49:53:28:25:f9:c9: 6f:53:fb:3b:69:c3:6e:7c:2d:65:be:f8:01:25:f0:3b:01:f2: f2:41:c5:03:ec:4b:f1:70:de:c2:8e:8d:03:56:c3:ff:c5:e2: 19:1b:ae:f0:e6:01:2b:96:bc:74:81:9d:a1:ab:4c:77:31:cf: 98:f2:51:f4:27:9a:fe:fe:33:24:7b:9c:7b:f8:e5:96:d5:4f: 52:34:18:ea:99:3d:54:4f:22:4d:ea:4b:6c:37:62:bb:45:74: ed:ce:5a:78:f7:13:67:56:e0:d4:f5:d2:c3:8e:9c:38:13:7b: 51:85:27:ac:10:10:ba:53:ed:38:fb:c2:dd:13:d5:7e:1a:ad: 98:ec:8a:fa:8d:12:b0:dc:a9:f2:b8:42:eb:cf:3f:c0:64:7d: c4:28:c7:7d:3a:b3:03:75:ab:0e:e8:50:e6:c8:55:4d:ae:16: 17:59:d4:90:8b:86:a3:d8:f6:b5:17:e0:f3:59:6d:bc:f6:2c: dd:a5:67:07 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICKRgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjEzQjkxMTAvBgNVBAUTKDdFQUMwQzJDQjI3QTMwQTEzOEVFNDc1QjA3RkU5N0U4 RTkzM0ZEQ0EwHhcNMjUxMDIzMDg1OTQ1WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OGY5ZWU4MS0yZDYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxZwQ3ipcilFwX6ma43jcZQtiPT+8kplefMbatRppTvvw4sJplAXXCMIjscpc 7hU6nEzfWtmS4jeAhzLhMVAnVTbfZosPKac24mZlw8cexsdVVZQMYwFrDCOvwsTs gyrR/wQnZvM9mzLSczP1ubYwDX95jK0UZF1fwbcXhEc9W9SRih2qPSM3dyRNWZyw BtT8nXugqhUuoAW7TNU7tH8V3yrdpp0/Zouhlv+hkNEf0mx7C1lEEdg9cD1OkOlu 6KFMTkp6HOR2Ar62BsDYEJFWra8iVtigUh235lZ85SR9jwjdP3D/lLT0bbtjl5oC brkIbjGicJBDKrLIR5s/nEAOEQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFIpQc8V/ 70hZOIYG9R5u2O57Kr6SMB8GA1UdIwQYMBaAFH6sDCyyejChOO5HWwf+l+jpM/3K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTNCOS8xODk3QjI1MjlG OUQxMUU0OTYxOTUzMkRDNEY5QUUwMi9mcXdNTExKNk1LRTQ3a2RiQl82WDZPa3pf Y28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Zxd01MTEo2TUtFNDdrZGJCXzZYNk9rel9jby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjEzQjkvMTg5N0IyNTI5RjlEMTFFNDk2MTk1MzJEQzRGOUFFMDIvQkY5QzY1NUU3 QTQ3MTFFRjlDN0EwRTVBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAEr+nwDBAAr+n8wDQYJKoZIhvcNAQELBQADggEBAHSe8cnN TrSnVXn0n/AAHEA4r/R10xeHUYRwTb/cTLpHff5vQCE65TkTeqTPlOZx8nNcM/uu 4nK7tiiCwq49NQ7SgklTKCX5yW9T+ztpw258LWW++AEl8DsB8vJBxQPsS/Fw3sKO jQNWw//F4hkbrvDmASuWvHSBnaGrTHcxz5jyUfQnmv7+MyR7nHv45ZbVT1I0GOqZ PVRPIk3qS2w3YrtFdO3OWnj3E2dW4NT10sOOnDgTe1GFJ6wQELpT7Tj7wt0T1X4a rZjsivqNErDcqfK4QuvPP8BkfcQox306swN1qw7oUObIVU2uFhdZ1JCLhqPY9rUX 4PNZbbz2LN2lZwc= -----END CERTIFICATE-----Generated at Fri Oct 24 07:02:20 2025 by rpki-client