$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/02EA5FFC9EBC11F09AF0472DC4F9AE02.roa File: 02EA5FFC9EBC11F09AF0472DC4F9AE02.roa (raw, json) Hash identifier: pWB5XmkyQkIJX6VT83Icq4ouDP45IlQtI/F1JSbGUwk= Subject key identifier: 2A:8A:15:D2:9E:67:02:61:7E:DF:BE:DF:0A:E8:6E:2D:41:9F:D3:80 Certificate issuer: /CN=A91F5972/serialNumber=AF798743DAB647868AB66673AF7A136C2EA0EA5B Certificate serial: 05B6 Authority key identifier: AF:79:87:43:DA:B6:47:86:8A:B6:66:73:AF:7A:13:6C:2E:A0:EA:5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/02EA5FFC9EBC11F09AF0472DC4F9AE02.roa Signing time: Wed 01 Oct 2025 11:44:39 +0000 ROA not before: Wed 01 Oct 2025 11:44:39 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 45237 IP address blocks: 202.170.64.0/24 maxlen: 24 202.170.65.0/24 maxlen: 24 202.170.66.0/24 maxlen: 24 202.170.67.0/24 maxlen: 24 202.170.68.0/24 maxlen: 24 202.170.69.0/24 maxlen: 24 202.170.70.0/24 maxlen: 24 202.170.71.0/24 maxlen: 24 202.170.74.0/24 maxlen: 24 202.170.75.0/24 maxlen: 24 202.170.76.0/24 maxlen: 24 202.170.77.0/24 maxlen: 24 202.170.78.0/24 maxlen: 24 202.170.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.crl rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Nov 2025 22:59:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1462 (0x5b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5972, serialNumber=AF798743DAB647868AB66673AF7A136C2EA0EA5B Validity Not Before: Oct 1 11:44:39 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68dd1427-2401 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f4:e5:5c:4d:99:7d:4c:49:a9:8b:62:a6:5d: fb:70:90:7e:3d:8f:8b:c9:d4:8e:3f:3e:fc:98:f3: fc:c8:95:19:8f:22:7f:2e:df:16:51:b9:92:1c:d9: ce:dd:c8:54:1e:31:eb:0a:68:50:18:18:52:fb:48: 43:20:82:9d:49:5c:11:51:17:94:b9:fa:b6:7a:eb: 98:d7:83:fd:37:a8:61:3a:f6:bf:78:2f:75:aa:85: 01:60:9a:4e:f9:cf:8d:ef:1e:7d:84:66:84:db:27: 22:27:76:8f:5f:79:ff:dd:fb:3a:cb:82:80:7f:5d: a8:1e:6d:9d:fb:bc:50:ed:58:48:e0:28:82:60:36: 57:a3:2a:72:2a:0f:37:d3:3b:b9:3d:e1:d1:a6:ca: 2e:df:39:76:0b:10:13:b9:8b:a3:ea:41:8f:1e:ba: 0a:f1:d4:6d:14:2d:17:27:7c:26:8d:48:17:35:82: b3:59:77:08:3e:c9:c6:ee:9c:b8:42:6e:fe:73:b9: f2:59:6d:4b:64:19:19:1e:22:80:92:a1:45:e8:40: ba:b3:a1:35:45:52:f1:f1:3c:dd:f3:d6:1c:6d:a5: 43:26:97:82:cb:74:66:a0:90:17:54:da:f9:4c:f2: 20:42:b2:33:09:2c:82:98:64:b6:77:97:f0:f6:34: f6:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:8A:15:D2:9E:67:02:61:7E:DF:BE:DF:0A:E8:6E:2D:41:9F:D3:80 X509v3 Authority Key Identifier: keyid:AF:79:87:43:DA:B6:47:86:8A:B6:66:73:AF:7A:13:6C:2E:A0:EA:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/02EA5FFC9EBC11F09AF0472DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.170.64.0/21 202.170.74.0-202.170.79.255 Signature Algorithm: sha256WithRSAEncryption 0b:39:82:02:7a:43:ba:54:48:72:f7:ad:82:05:ba:00:36:56: 34:e5:63:9d:6d:e3:c6:01:81:af:24:ae:bc:15:2c:cc:58:2d: dc:10:8d:8d:f9:db:df:84:42:17:65:72:6d:ba:d3:dd:d5:f0: 4e:f7:f8:ca:bf:4f:cc:df:52:16:cc:3b:8b:7b:5e:6d:e6:f0: f3:c6:2f:26:96:c6:cf:98:31:ff:41:20:8c:8b:55:54:3c:00: f1:27:01:17:53:6b:31:b8:43:c1:d6:bd:41:b4:84:1f:c1:62: c4:92:ca:1a:c6:da:0e:c9:93:14:d4:b2:a3:57:5b:7e:72:65: 8e:52:7d:41:aa:49:48:32:2d:fd:05:ce:00:a9:6e:26:75:08: 47:0d:52:27:4a:1d:9a:74:87:b1:f0:68:a8:5f:3c:82:02:ef: fd:be:75:da:b7:e3:98:7f:7d:1e:d7:2e:9d:43:f2:94:16:a4: 6b:93:a7:38:eb:56:4a:43:c9:bc:17:76:5a:54:de:bd:b0:31: c0:ee:b8:c0:f0:85:f0:9e:7d:75:14:7b:49:53:6c:8e:1b:22: 51:6c:77:c5:97:16:87:7e:18:e6:9e:2f:f9:c0:7a:df:b0:80: 7f:ef:ea:0f:16:47:85:c0:b6:b4:13:81:bb:27:fc:57:ab:87: 01:60:2b:4a -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgICBbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU5NzIxMTAvBgNVBAUTKEFGNzk4NzQzREFCNjQ3ODY4QUI2NjY3M0FGN0ExMzZD MkVBMEVBNUIwHhcNMjUxMDAxMTE0NDM5WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGRkMTQyNy0yNDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArfTlXE2ZfUxJqYtipl37cJB+PY+LydSOPz78mPP8yJUZjyJ/Lt8WUbmSHNnO 3chUHjHrCmhQGBhS+0hDIIKdSVwRUReUufq2euuY14P9N6hhOva/eC91qoUBYJpO +c+N7x59hGaE2yciJ3aPX3n/3fs6y4KAf12oHm2d+7xQ7VhI4CiCYDZXoypyKg83 0zu5PeHRpsou3zl2CxATuYuj6kGPHroK8dRtFC0XJ3wmjUgXNYKzWXcIPsnG7py4 Qm7+c7nyWW1LZBkZHiKAkqFF6EC6s6E1RVLx8Tzd89YcbaVDJpeCy3RmoJAXVNr5 TPIgQrIzCSyCmGS2d5fw9jT2QQIDAQABo4ICozCCAp8wHQYDVR0OBBYEFCqKFdKe ZwJhft++3wrobi1Bn9OAMB8GA1UdIwQYMBaAFK95h0PatkeGirZmc696E2wuoOpb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTk3Mi85QkY2QzQ0RUYw MzExMUVCOTVGNzY3NDhDNEY5QUUwMi9yM21IUTlxMlI0YUt0bVp6cjNvVGJDNmc2 bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3IzbUhROXEyUjRhS3RtWnpyM29UYkM2ZzZscy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjU5NzIvOUJGNkM0NEVGMDMxMTFFQjk1Rjc2NzQ4QzRGOUFFMDIvMDJFQTVGRkM5 RUJDMTFGMDlBRjA0NzJEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLQYIKwYBBQUHAQcBAf8E HjAcMBoEAgABMBQDBAPKqkAwDAMEAcqqSgMEBMqqQDANBgkqhkiG9w0BAQsFAAOC AQEACzmCAnpDulRIcvetggW6ADZWNOVjnW3jxgGBrySuvBUszFgt3BCNjfnb34RC F2VybbrT3dXwTvf4yr9PzN9SFsw7i3tebebw88YvJpbGz5gx/0EgjItVVDwA8ScB F1NrMbhDwda9QbSEH8FixJLKGsbaDsmTFNSyo1dbfnJljlJ9QapJSDIt/QXOAKlu JnUIRw1SJ0odmnSHsfBoqF88ggLv/b512rfjmH99HtcunUPylBaka5OnOOtWSkPJ vBd2WlTevbAxwO64wPCF8J59dRR7SVNsjhsiUWx3xZcWh34Y5p4v+cB637CAf+/q DxZHhcC2tBOBuyf8V6uHAWArSg== -----END CERTIFICATE-----Generated at Wed Oct 29 06:04:29 2025 by rpki-client