$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF84F/DD487A5C981411EBA4B32150C4F9AE02/2F320256981611EB904AF150C4F9AE02.roa File: 2F320256981611EB904AF150C4F9AE02.roa (raw, json) Hash identifier: E4TUFKJ6pvq2MnnX/Fp4K5QwjuZ8zkimayyU0Jn+DJw= Subject key identifier: 18:AD:51:3F:FB:A6:E0:D1:F5:F2:7C:B1:67:93:4A:C7:62:53:7A:09 Certificate issuer: /CN=A91FF84F/serialNumber=7141C319BB44BFBCDE3382B3BB691265F95D309F Certificate serial: 0681 Authority key identifier: 71:41:C3:19:BB:44:BF:BC:DE:33:82:B3:BB:69:12:65:F9:5D:30:9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF84F/DD487A5C981411EBA4B32150C4F9AE02/2F320256981611EB904AF150C4F9AE02.roa Signing time: Sun 02 Nov 2025 22:42:24 +0000 ROA not before: Sun 02 Nov 2025 22:42:24 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 141365 IP address blocks: 203.7.172.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF84F/DD487A5C981411EBA4B32150C4F9AE02/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.crl rsync://rpki.apnic.net/member_repository/A91FF84F/DD487A5C981411EBA4B32150C4F9AE02/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:34:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1665 (0x681) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF84F, serialNumber=7141C319BB44BFBCDE3382B3BB691265F95D309F Validity Not Before: Nov 2 22:42:24 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=6907de50-4af3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:28:0d:9a:f5:ac:f9:2d:6f:df:a4:1f:04:73: 38:2c:4c:01:5b:9b:74:cf:f6:37:ff:de:60:89:3a: 0b:36:6c:48:da:18:ef:8e:c8:42:94:2b:f7:f4:a3: 28:de:40:03:49:e7:dd:5b:ad:ad:0a:59:bd:e4:8d: db:a3:70:f5:03:3a:65:e2:aa:73:e9:65:6f:76:93: 56:39:e1:0a:ad:b7:e7:3f:e9:70:e7:5a:de:19:73: 1a:3b:5e:1c:94:d9:d6:34:c9:da:23:1f:84:96:bb: a9:eb:76:fd:97:d5:a8:a8:45:a7:c8:96:11:fd:60: c9:4f:d4:d4:f5:8d:a6:f9:0c:a3:95:a6:cb:d0:63: b1:44:32:e5:1f:04:b6:3f:34:52:fe:3c:a6:4e:61: 9c:96:3e:5f:e0:7b:9b:2b:b5:b9:46:15:15:f1:6b: d9:60:e9:4e:b3:65:2a:ab:d1:87:a3:4e:c8:17:b6: 87:80:84:1b:55:f1:d9:83:72:0a:0a:c8:26:ff:9e: 94:93:a5:fd:5b:28:27:2b:b0:b8:d2:74:1a:f6:35: 75:8e:f2:94:ee:23:54:9d:7c:4b:67:57:b9:3e:65: e2:13:b1:41:39:df:75:31:9b:6e:07:ed:0e:a3:f3: 91:e0:70:d1:32:ef:07:a2:2f:e4:8a:29:57:35:6e: 33:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:AD:51:3F:FB:A6:E0:D1:F5:F2:7C:B1:67:93:4A:C7:62:53:7A:09 X509v3 Authority Key Identifier: keyid:71:41:C3:19:BB:44:BF:BC:DE:33:82:B3:BB:69:12:65:F9:5D:30:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF84F/DD487A5C981411EBA4B32150C4F9AE02/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF84F/DD487A5C981411EBA4B32150C4F9AE02/2F320256981611EB904AF150C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.7.172.0/23 Signature Algorithm: sha256WithRSAEncryption 3e:fb:8a:37:86:d8:a5:f2:00:f9:84:b9:17:95:92:01:87:0c: c4:b3:87:f0:16:be:58:a7:4a:14:e3:16:8e:b3:e6:a5:21:72: 37:b7:a9:82:dd:2d:37:8c:aa:2d:1d:ed:45:66:d2:2a:1d:ce: d5:ab:f0:22:af:45:d2:b7:4d:f4:67:ec:60:ee:ae:4f:ef:89: 56:1c:40:80:ff:66:44:06:9a:94:a9:14:51:01:3a:ae:7a:1c: 44:82:97:0a:05:fb:4b:3e:b2:61:34:4f:2c:5e:3e:42:b4:73: f4:47:3d:d0:08:60:87:4b:24:44:1c:89:95:63:94:b8:bc:41: 8b:bb:b3:97:75:cc:c0:48:bc:ef:92:e2:c0:3a:85:0d:61:ce: 94:06:6e:5f:3f:40:4a:f7:36:32:77:fd:09:08:a8:f6:f9:4a: 2a:ae:a6:0e:e1:f9:33:1a:8a:e3:db:bb:14:00:26:ab:16:d7: f8:b0:12:25:54:32:df:5b:3a:84:bc:a0:69:ad:29:5b:37:7d: 80:8d:84:2e:a7:bf:b9:75:9f:5d:57:6c:60:01:36:a5:b9:49: 83:5b:06:79:7f:2a:33:51:4c:15:ae:e7:10:d3:18:44:e5:7a: 3a:81:0d:a8:27:d0:83:ac:52:b5:dc:71:b3:b7:a1:6b:37:a2: 13:e5:c5:05 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBoEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY4NEYxMTAvBgNVBAUTKDcxNDFDMzE5QkI0NEJGQkNERTMzODJCM0JCNjkxMjY1 Rjk1RDMwOUYwHhcNMjUxMTAyMjI0MjI0WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTA3ZGU1MC00YWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6SgNmvWs+S1v36QfBHM4LEwBW5t0z/Y3/95giToLNmxI2hjvjshClCv39KMo 3kADSefdW62tClm95I3bo3D1Azpl4qpz6WVvdpNWOeEKrbfnP+lw51reGXMaO14c lNnWNMnaIx+Elrup63b9l9WoqEWnyJYR/WDJT9TU9Y2m+QyjlabL0GOxRDLlHwS2 PzRS/jymTmGclj5f4HubK7W5RhUV8WvZYOlOs2Uqq9GHo07IF7aHgIQbVfHZg3IK Csgm/56Uk6X9WygnK7C40nQa9jV1jvKU7iNUnXxLZ1e5PmXiE7FBOd91MZtuB+0O o/OR4HDRMu8Hoi/kiilXNW4z5wIDAQABo4IClTCCApEwHQYDVR0OBBYEFBitUT/7 puDR9fJ8sWeTSsdiU3oJMB8GA1UdIwQYMBaAFHFBwxm7RL+83jOCs7tpEmX5XTCf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjg0Ri9ERDQ4N0E1Qzk4 MTQxMUVCQTRCMzIxNTBDNEY5QUUwMi9jVUhER2J0RXY3emVNNEt6dTJrU1pmbGRN SjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NVSERHYnRFdjd6ZU00S3p1MmtTWmZsZE1KOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkY4NEYvREQ0ODdBNUM5ODE0MTFFQkE0QjMyMTUwQzRGOUFFMDIvMkYzMjAyNTY5 ODE2MTFFQjkwNEFGMTUwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAHLB6wwDQYJKoZIhvcNAQELBQADggEBAD77ijeG2KXyAPmE uReVkgGHDMSzh/AWvlinShTjFo6z5qUhcje3qYLdLTeMqi0d7UVm0iodztWr8CKv RdK3TfRn7GDurk/viVYcQID/ZkQGmpSpFFEBOq56HESClwoF+0s+smE0TyxePkK0 c/RHPdAIYIdLJEQciZVjlLi8QYu7s5d1zMBIvO+S4sA6hQ1hzpQGbl8/QEr3NjJ3 /QkIqPb5Siqupg7h+TMaiuPbuxQAJqsW1/iwEiVUMt9bOoS8oGmtKVs3fYCNhC6n v7l1n11XbGABNqW5SYNbBnl/KjNRTBWu5xDTGETlejqBDagn0IOsUrXccbO3oWs3 ohPlxQU= -----END CERTIFICATE-----Generated at Wed Nov 5 20:04:44 2025 by rpki-client