$ rpki-client -vvf rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/947F9724B93411F0909C206FC4F9AE02.roa File: 947F9724B93411F0909C206FC4F9AE02.roa (raw, json) Hash identifier: alPFbBRcOswykY6CDpgLiaSVoTM2OjUAdTBuklnb8AI= Subject key identifier: 44:C5:EF:9E:2D:A5:A7:97:4D:2B:C6:14:90:63:30:C8:61:16:4F:3B Certificate issuer: /CN=A91168B5/serialNumber=DC901815DC91973CAFA19A8B576F868E98413E39 Certificate serial: 1C20 Authority key identifier: DC:90:18:15:DC:91:97:3C:AF:A1:9A:8B:57:6F:86:8E:98:41:3E:39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3JAYFdyRlzyvoZqLV2-GjphBPjk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/947F9724B93411F0909C206FC4F9AE02.roa Signing time: Tue 04 Nov 2025 04:13:13 +0000 ROA not before: Tue 04 Nov 2025 04:13:13 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 9432 IP address blocks: 202.36.178.0/24 maxlen: 24 202.36.179.0/24 maxlen: 24 2404:6a00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.crl rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3JAYFdyRlzyvoZqLV2-GjphBPjk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:18:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7200 (0x1c20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91168B5, serialNumber=DC901815DC91973CAFA19A8B576F868E98413E39 Validity Not Before: Nov 4 04:13:13 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69097d59-c9af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:18:56:be:bc:2a:ff:d9:2d:f4:95:3d:ff:c5: 0a:74:c8:93:29:9b:6f:c4:b2:bc:eb:00:81:f4:cb: c1:10:1f:5d:09:3c:8f:8f:41:82:0d:95:e5:df:63: 08:94:d0:a7:f0:2f:6d:09:4c:38:28:83:2c:04:dc: 2e:1a:75:ab:1f:31:c5:68:4d:6e:10:53:72:7c:c9: 0c:59:1b:28:bb:30:83:3b:d7:7e:9f:bb:ca:82:45: df:b4:7d:86:b5:55:5c:d9:10:5b:5e:a2:04:4b:a5: 33:ae:d2:d2:c8:88:54:4c:46:31:c0:5a:1a:04:72: 68:31:e0:25:3b:b0:fa:ff:aa:e2:fe:7e:4f:aa:7a: 13:30:92:46:33:34:62:8b:0f:96:41:f4:ef:67:13: d4:40:ec:6c:b3:00:5b:4d:c0:f5:5e:a0:a3:4b:ed: 86:0a:2d:fa:1d:6c:63:b9:7f:94:b5:08:d9:70:c1: c0:0f:47:88:ac:1d:3c:a1:ef:8b:3d:d1:a4:10:3e: 2e:81:a4:a8:ea:66:1e:be:ad:92:a5:7f:32:00:ca: 2f:74:88:06:91:0a:17:f3:f7:b6:5f:b0:31:75:b4: 68:0c:51:2a:d7:ef:ed:e6:77:2f:13:b7:e2:64:ac: 2f:ae:29:05:5b:dc:2a:fd:2e:72:e6:6e:58:18:87: db:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:C5:EF:9E:2D:A5:A7:97:4D:2B:C6:14:90:63:30:C8:61:16:4F:3B X509v3 Authority Key Identifier: keyid:DC:90:18:15:DC:91:97:3C:AF:A1:9A:8B:57:6F:86:8E:98:41:3E:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3JAYFdyRlzyvoZqLV2-GjphBPjk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/947F9724B93411F0909C206FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.36.178.0/23 IPv6: 2404:6a00::/32 Signature Algorithm: sha256WithRSAEncryption 0a:9b:2a:e1:ae:ed:ae:75:11:05:48:54:ef:51:68:28:88:a4: 99:ec:10:1a:ef:b5:bb:57:ea:94:91:85:3a:ac:e5:46:63:8c: 22:77:2b:fa:0f:f4:a3:6a:20:24:37:09:04:55:e9:af:9b:cb: 68:a0:c1:66:73:28:d2:e6:2e:51:08:51:bc:0f:0c:ac:1b:87: e4:d1:ad:cf:c1:72:73:16:86:90:3d:11:a2:35:01:e5:c2:a1: 8d:6f:b2:75:23:97:7e:62:f3:5c:41:2d:85:ff:c9:84:df:a2: 44:04:bc:30:b3:08:20:da:b3:f5:fa:31:68:92:a0:45:68:fd: fb:9a:53:68:36:ec:92:9c:9e:f8:54:36:7e:2f:68:06:8b:34: 66:b8:fc:b9:87:fb:c7:b9:36:af:35:69:6c:93:3c:51:bc:c1: 7c:d7:e3:6a:00:d1:73:02:f1:87:ef:b8:0b:49:f6:c6:24:14: 66:71:19:d5:bc:d7:4f:29:da:14:ae:aa:bc:db:11:b2:bc:a8: 66:ec:c9:3a:ae:f5:94:d2:24:e3:b5:fe:ce:70:ce:fc:c5:26: f2:a5:f7:b1:f0:6d:0c:b6:34:15:81:3f:4c:41:29:de:74:b3: 5d:12:6d:59:3b:4b:14:2f:75:7f:c5:a1:3b:31:52:ed:bd:f2: 7d:ac:d3:c8 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICHCAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY4QjUxMTAvBgNVBAUTKERDOTAxODE1REM5MTk3M0NBRkExOUE4QjU3NkY4NjhF OTg0MTNFMzkwHhcNMjUxMTA0MDQxMzEzWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTA5N2Q1OS1jOWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqxhWvrwq/9kt9JU9/8UKdMiTKZtvxLK86wCB9MvBEB9dCTyPj0GCDZXl32MI lNCn8C9tCUw4KIMsBNwuGnWrHzHFaE1uEFNyfMkMWRsouzCDO9d+n7vKgkXftH2G tVVc2RBbXqIES6UzrtLSyIhUTEYxwFoaBHJoMeAlO7D6/6ri/n5PqnoTMJJGMzRi iw+WQfTvZxPUQOxsswBbTcD1XqCjS+2GCi36HWxjuX+UtQjZcMHAD0eIrB08oe+L PdGkED4ugaSo6mYevq2SpX8yAMovdIgGkQoX8/e2X7AxdbRoDFEq1+/t5ncvE7fi ZKwvrikFW9wq/S5y5m5YGIfbzwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFETF754t paeXTSvGFJBjMMhhFk87MB8GA1UdIwQYMBaAFNyQGBXckZc8r6Gai1dvho6YQT45 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjhCNS8zMkM2NTY4Q0Y2 RTAxMUU2OTJBMjBCODdDNEY5QUUwMi8zSkFZRmR5Umx6eXZvWnFMVjItR2pwaEJQ amsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNKQVlGZHlSbHp5dm9acUxWMi1HanBoQlBqay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTY4QjUvMzJDNjU2OENGNkUwMTFFNjkyQTIwQjg3QzRGOUFFMDIvOTQ3Rjk3MjRC OTM0MTFGMDkwOUMyMDZGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAHKJLIwDQQCAAIwBwMFACQEagAwDQYJKoZIhvcNAQELBQAD ggEBAAqbKuGu7a51EQVIVO9RaCiIpJnsEBrvtbtX6pSRhTqs5UZjjCJ3K/oP9KNq ICQ3CQRV6a+by2igwWZzKNLmLlEIUbwPDKwbh+TRrc/BcnMWhpA9EaI1AeXCoY1v snUjl35i81xBLYX/yYTfokQEvDCzCCDas/X6MWiSoEVo/fuaU2g27JKcnvhUNn4v aAaLNGa4/LmH+8e5Nq81aWyTPFG8wXzX42oA0XMC8YfvuAtJ9sYkFGZxGdW8108p 2hSuqrzbEbK8qGbsyTqu9ZTSJOO1/s5wzvzFJvKl97HwbQy2NBWBP0xBKd50s10S bVk7SxQvdX/FoTsxUu298n2s08g= -----END CERTIFICATE-----Generated at Wed Nov 5 16:55:12 2025 by rpki-client