$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/A355C1A8B6D511F089793D6DC4F9AE02.roa File: A355C1A8B6D511F089793D6DC4F9AE02.roa (raw, json) Hash identifier: 0SnBjCkd1/QSiUJjvI651mo+kVttGehwO0xz/nqsNeY= Subject key identifier: FF:6E:21:D5:F7:EF:F5:5B:D4:7C:FC:17:E1:0C:57:32:A6:75:18:51 Certificate issuer: /CN=A91F8A49/serialNumber=D5871E9FC6FBDE7DC71B7E895C8A04C3D0021D85 Certificate serial: 01A2 Authority key identifier: D5:87:1E:9F:C6:FB:DE:7D:C7:1B:7E:89:5C:8A:04:C3:D0:02:1D:85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Ycen8b73n3HG36JXIoEw9ACHYU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/A355C1A8B6D511F089793D6DC4F9AE02.roa Signing time: Sat 01 Nov 2025 03:48:33 +0000 ROA not before: Sat 01 Nov 2025 03:48:33 +0000 ROA not after: Tue 31 Oct 2028 00:00:00 +0000 asID: 134783 IP address blocks: 202.6.120.0/22 maxlen: 24 202.58.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.crl rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Ycen8b73n3HG36JXIoEw9ACHYU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 418 (0x1a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8A49, serialNumber=D5871E9FC6FBDE7DC71B7E895C8A04C3D0021D85 Validity Not Before: Nov 1 03:48:33 2025 GMT Not After : Oct 31 00:00:00 2028 GMT Subject: CN=69058311-86c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:7f:d8:79:7c:c7:c1:e3:c1:59:7e:7e:68:cb: 40:39:18:64:09:76:18:ed:b6:7f:6b:c2:c6:0d:c4: ad:73:3e:88:98:90:a9:3a:a6:63:d1:81:c9:4c:09: f4:14:9f:54:bc:c3:ca:7c:20:39:ca:c5:01:cf:ce: ba:e4:80:7c:e4:3b:f9:a4:9a:62:c7:61:0d:be:ce: 4f:5a:c9:dd:1b:28:92:58:c6:c9:ee:c7:aa:85:bc: fb:a3:e7:f5:c2:53:8d:9c:3b:da:fa:33:a0:40:e5: 14:38:97:25:c4:2d:b4:e6:20:2b:2e:41:57:b9:0a: e1:38:69:98:b4:68:00:b8:bf:19:f1:d8:0f:cf:7c: ef:e4:30:09:8d:2c:e7:b7:82:b4:73:92:bd:bb:f1: e0:e3:3b:aa:50:b1:80:c4:1b:26:7c:4f:e1:8b:55: 46:d0:62:52:35:a9:ef:54:78:ac:d1:ce:8b:3f:1f: c2:f6:22:d5:90:c4:85:c2:f5:29:26:f5:96:64:5e: e4:46:a1:bd:fc:1c:6b:dc:9b:7e:3c:83:42:81:47: 72:ef:61:7a:e8:08:95:54:ea:1c:21:86:38:a1:3e: b1:57:28:81:35:21:c4:9d:0a:13:21:52:08:9a:17: b5:f9:48:bb:64:d5:e5:c1:51:a9:cf:c2:51:eb:fe: 3f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:6E:21:D5:F7:EF:F5:5B:D4:7C:FC:17:E1:0C:57:32:A6:75:18:51 X509v3 Authority Key Identifier: keyid:D5:87:1E:9F:C6:FB:DE:7D:C7:1B:7E:89:5C:8A:04:C3:D0:02:1D:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Ycen8b73n3HG36JXIoEw9ACHYU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/A355C1A8B6D511F089793D6DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.6.120.0/22 202.58.248.0/22 Signature Algorithm: sha256WithRSAEncryption a8:e8:ca:2b:30:11:75:e9:2d:69:0b:a6:3a:27:9b:4b:b7:ce: 1e:dc:36:b1:5f:12:f3:ba:ac:1c:9b:a4:00:59:e0:16:ec:9d: b0:c8:18:6a:06:b0:4c:a0:1e:d7:01:78:84:39:61:cc:c8:1c: 1b:6e:57:5b:3c:8a:c9:e2:a5:c6:eb:fa:6a:05:07:5c:19:3c: 02:14:d8:99:e2:86:91:8d:18:f1:a0:06:32:fd:99:54:e8:6b: 7a:f7:1e:62:fb:10:fd:e9:75:7a:34:76:14:ef:f9:07:d5:17: 1a:75:e9:05:56:c6:44:00:c9:70:60:e1:05:e3:d1:cf:6a:0e: e2:f9:e5:fb:83:7b:1d:e7:1c:f3:71:bc:b9:4b:15:51:41:9b: df:59:b7:50:89:67:35:76:66:17:07:f8:33:65:b4:8b:8f:5c: 5c:73:5d:3f:46:a3:3d:49:de:76:44:7e:fb:97:3e:36:b6:c9: fa:7f:87:02:00:4e:3c:12:65:ca:11:00:1c:b2:64:89:c3:f0: 1e:a4:16:6a:62:fb:83:1a:07:6f:b6:95:01:2d:db:60:10:f0: 2c:f9:89:8b:b7:40:34:5c:6c:13:d6:ad:e9:46:8f:e2:ec:59: 16:dc:df:5c:7f:22:ae:98:0d:e1:34:a8:b2:be:20:d3:31:ce: 51:4f:91:a1 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhBNDkxMTAvBgNVBAUTKEQ1ODcxRTlGQzZGQkRFN0RDNzFCN0U4OTVDOEEwNEMz RDAwMjFEODUwHhcNMjUxMTAxMDM0ODMzWhcNMjgxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTA1ODMxMS04NmM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqX/YeXzHwePBWX5+aMtAORhkCXYY7bZ/a8LGDcStcz6ImJCpOqZj0YHJTAn0 FJ9UvMPKfCA5ysUBz8665IB85Dv5pJpix2ENvs5PWsndGyiSWMbJ7seqhbz7o+f1 wlONnDva+jOgQOUUOJclxC205iArLkFXuQrhOGmYtGgAuL8Z8dgPz3zv5DAJjSzn t4K0c5K9u/Hg4zuqULGAxBsmfE/hi1VG0GJSNanvVHis0c6LPx/C9iLVkMSFwvUp JvWWZF7kRqG9/Bxr3Jt+PINCgUdy72F66AiVVOocIYY4oT6xVyiBNSHEnQoTIVII mhe1+Ui7ZNXlwVGpz8JR6/4/xwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFP9uIdX3 7/Vb1Hz8F+EMVzKmdRhRMB8GA1UdIwQYMBaAFNWHHp/G+959xxt+iVyKBMPQAh2F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEE0OS80N0QwNDQ2NDQ3 QjcxMUVFOEEwQTlDNDNDNEY5QUUwMi8xWWNlbjhiNzNuM0hHMzZKWElvRXc5QUNI WVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFZY2VuOGI3M24zSEczNkpYSW9FdzlBQ0hZVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjhBNDkvNDdEMDQ0NjQ0N0I3MTFFRThBMEE5QzQzQzRGOUFFMDIvQTM1NUMxQThC NkQ1MTFGMDg5NzkzRDZEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBALKBngDBALKOvgwDQYJKoZIhvcNAQELBQADggEBAKjoyisw EXXpLWkLpjonm0u3zh7cNrFfEvO6rBybpABZ4BbsnbDIGGoGsEygHtcBeIQ5YczI HBtuV1s8isnipcbr+moFB1wZPAIU2JnihpGNGPGgBjL9mVToa3r3HmL7EP3pdXo0 dhTv+QfVFxp16QVWxkQAyXBg4QXj0c9qDuL55fuDex3nHPNxvLlLFVFBm99Zt1CJ ZzV2ZhcH+DNltIuPXFxzXT9Goz1J3nZEfvuXPja2yfp/hwIATjwSZcoRAByyZInD 8B6kFmpi+4MaB2+2lQEt22AQ8Cz5iYu3QDRcbBPWrelGj+LsWRbc31x/Iq6YDeE0 qLK+INMxzlFPkaE= -----END CERTIFICATE-----Generated at Tue Nov 4 12:18:18 2025 by rpki-client