$ rpki-client -vvf rpki.apnic.net/member_repository/A91F264C/241AC7BE0E1811F0B69B8B38C4F9AE02/DB5AB9A0195A11F081485C3AC4F9AE02.roa File: DB5AB9A0195A11F081485C3AC4F9AE02.roa (raw, json) Hash identifier: m59M0ncJUCK36ckQ6/eIEjMQn3u/pmDKVn3V21psl70= Subject key identifier: 08:5A:A8:14:85:50:A5:21:1E:4E:F7:F2:B7:15:5D:05:18:FF:A3:77 Certificate issuer: /CN=A91F264C/serialNumber=EFA423BAF5BFD189316E65031E8CEAF5A3FFA14B Certificate serial: 79 Authority key identifier: EF:A4:23:BA:F5:BF:D1:89:31:6E:65:03:1E:8C:EA:F5:A3:FF:A1:4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/76QjuvW_0YkxbmUDHozq9aP_oUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F264C/241AC7BE0E1811F0B69B8B38C4F9AE02/DB5AB9A0195A11F081485C3AC4F9AE02.roa Signing time: Tue 04 Nov 2025 17:38:08 +0000 ROA not before: Tue 04 Nov 2025 17:38:08 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 136396 IP address blocks: 163.223.220.0/23 maxlen: 24 2001:df5:4d40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F264C/241AC7BE0E1811F0B69B8B38C4F9AE02/76QjuvW_0YkxbmUDHozq9aP_oUs.crl rsync://rpki.apnic.net/member_repository/A91F264C/241AC7BE0E1811F0B69B8B38C4F9AE02/76QjuvW_0YkxbmUDHozq9aP_oUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/76QjuvW_0YkxbmUDHozq9aP_oUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:06:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 121 (0x79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F264C, serialNumber=EFA423BAF5BFD189316E65031E8CEAF5A3FFA14B Validity Not Before: Nov 4 17:38:08 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=690a3a00-d097 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a8:2e:d5:a4:de:aa:92:25:f4:b5:21:57:d8: 52:0d:88:e3:92:c5:b4:5e:87:06:64:6b:af:74:6c: c3:48:3c:06:52:84:86:59:bd:c5:fa:ca:dc:36:10: 4a:9c:77:a9:09:28:d5:ab:78:23:a7:6c:6c:1a:97: db:36:bd:af:b7:da:90:9e:c9:48:83:e6:21:20:26: fe:66:7d:f4:c4:64:ca:81:19:41:12:cf:79:6b:2d: cc:48:16:b7:fc:b1:45:17:6f:f6:75:bc:83:c3:04: 87:1d:3b:90:68:0f:d6:69:92:99:f6:95:b7:c7:41: 74:0d:96:cc:5b:26:c6:75:92:18:e1:83:7d:b2:71: f1:ad:da:05:23:33:ba:10:0f:f4:0a:e5:7c:58:7c: 84:6c:32:a5:39:1c:6a:59:d1:c2:0e:dd:fb:87:2b: e6:81:07:5f:48:09:9c:24:38:60:8d:f7:c8:31:5e: dc:e8:5b:4c:11:17:eb:35:fe:29:15:b9:95:40:c4: e1:b3:39:c9:83:f0:27:16:70:ad:be:ca:e0:43:8c: 08:f9:75:e9:de:87:31:f1:34:74:e7:dd:72:7d:a6: de:44:78:10:fd:b1:b8:66:a3:da:8a:6a:33:b4:f0: 55:b0:d4:e4:7a:6c:9e:d1:07:45:8b:4e:5c:b1:92: 5b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:5A:A8:14:85:50:A5:21:1E:4E:F7:F2:B7:15:5D:05:18:FF:A3:77 X509v3 Authority Key Identifier: keyid:EF:A4:23:BA:F5:BF:D1:89:31:6E:65:03:1E:8C:EA:F5:A3:FF:A1:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F264C/241AC7BE0E1811F0B69B8B38C4F9AE02/76QjuvW_0YkxbmUDHozq9aP_oUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/76QjuvW_0YkxbmUDHozq9aP_oUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F264C/241AC7BE0E1811F0B69B8B38C4F9AE02/DB5AB9A0195A11F081485C3AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 163.223.220.0/23 IPv6: 2001:df5:4d40::/48 Signature Algorithm: sha256WithRSAEncryption 2e:0a:99:db:99:63:00:3d:04:e2:a8:a1:e5:f1:7a:d5:06:e5: 09:9f:d5:b8:cc:5e:bd:f4:05:12:77:c0:90:cf:db:a0:86:4e: 99:fe:67:7f:fa:99:fd:43:53:e0:19:9b:8e:4e:84:b9:7d:fc: ae:54:52:b7:47:76:8c:f9:ea:f7:52:f4:73:00:72:1d:61:99: 6d:d0:4e:fd:7a:e2:39:d0:dd:f8:76:b4:f7:be:4f:b0:ac:09: 39:5f:02:55:ab:01:4d:45:10:4e:cb:6a:d3:20:c6:ee:2f:0e: 2f:aa:78:b3:d5:da:14:9a:60:91:37:07:5a:21:5e:08:2b:cb: 27:af:7c:7c:48:0f:11:c6:ab:b3:e2:10:40:ba:0f:80:ce:8d: 57:c5:fb:77:d4:d4:50:e3:7d:f5:9b:6c:cf:7f:81:b3:43:92: 4b:1b:c4:13:86:95:88:e5:79:bc:d9:4c:07:52:6b:0e:9c:b0: e1:58:db:f2:a5:f2:a3:80:e6:0e:2a:a3:20:5a:6f:0d:39:d6: 42:82:ce:04:f6:d0:02:60:25:3f:34:bd:d2:a9:43:4b:d8:93: aa:fc:73:a0:dc:b1:9e:ee:3f:39:44:a2:99:24:eb:98:70:02: cf:3a:42:10:c5:c1:4f:15:d8:01:47:2a:32:4f:e9:7d:60:50: 03:cd:84:58 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIBeTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MjY0QzExMC8GA1UEBRMoRUZBNDIzQkFGNUJGRDE4OTMxNkU2NTAzMUU4Q0VBRjVB M0ZGQTE0QjAeFw0yNTExMDQxNzM4MDhaFw0yNjA3MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MGEzYTAwLWQwOTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJqC7VpN6qkiX0tSFX2FINiOOSxbRehwZka690bMNIPAZShIZZvcX6ytw2EEqc d6kJKNWreCOnbGwal9s2va+32pCeyUiD5iEgJv5mffTEZMqBGUESz3lrLcxIFrf8 sUUXb/Z1vIPDBIcdO5BoD9Zpkpn2lbfHQXQNlsxbJsZ1khjhg32ycfGt2gUjM7oQ D/QK5XxYfIRsMqU5HGpZ0cIO3fuHK+aBB19ICZwkOGCN98gxXtzoW0wRF+s1/ikV uZVAxOGzOcmD8CcWcK2+yuBDjAj5denehzHxNHTn3XJ9pt5EeBD9sbhmo9qKajO0 8FWw1OR6bJ7RB0WLTlyxklv7AgMBAAGjggKmMIICojAdBgNVHQ4EFgQUCFqoFIVQ pSEeTvfytxVdBRj/o3cwHwYDVR0jBBgwFoAU76QjuvW/0YkxbmUDHozq9aP/oUsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYyNjRDLzI0MUFDN0JFMEUx ODExRjBCNjlCOEIzOEM0RjlBRTAyLzc2UWp1dldfMFlreGJtVURIb3pxOWFQX29V cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNzZRanV2V18wWWt4Ym1VREhvenE5YVBfb1VzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MjY0Qy8yNDFBQzdCRTBFMTgxMUYwQjY5QjhCMzhDNEY5QUUwMi9EQjVBQjlBMDE5 NUExMUYwODE0ODVDM0FDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEAaPf3DAPBAIAAjAJAwcAIAEN9U1AMA0GCSqGSIb3DQEBCwUA A4IBAQAuCpnbmWMAPQTiqKHl8XrVBuUJn9W4zF699AUSd8CQz9ughk6Z/md/+pn9 Q1PgGZuOToS5ffyuVFK3R3aM+er3UvRzAHIdYZlt0E79euI50N34drT3vk+wrAk5 XwJVqwFNRRBOy2rTIMbuLw4vqniz1doUmmCRNwdaIV4IK8snr3x8SA8Rxquz4hBA ug+Azo1Xxft31NRQ4331m2zPf4GzQ5JLG8QThpWI5Xm82UwHUmsOnLDhWNvypfKj gOYOKqMgWm8NOdZCgs4E9tACYCU/NL3SqUNL2JOq/HOg3LGe7j85RKKZJOuYcALP OkIQxcFPFdgBRyoyT+l9YFADzYRY -----END CERTIFICATE-----Generated at Wed Nov 5 14:41:05 2025 by rpki-client