$ rpki-client -vvf rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/4CBC0878AA5111ECBEC4A312C4F9AE02.roa File: 4CBC0878AA5111ECBEC4A312C4F9AE02.roa (raw, json) Hash identifier: nwY3XOAdSWHWQClj8gA6vZzRQBvYNcJIrQ5O7yr8CLI= Subject key identifier: A8:E4:AA:CD:D0:51:35:7E:81:55:5E:9A:46:F6:FC:B9:35:DB:09:B2 Certificate issuer: /CN=A911DF1F/serialNumber=D37179CBB97D680E6A80DC12EE422FE8B6E363F5 Certificate serial: 079D Authority key identifier: D3:71:79:CB:B9:7D:68:0E:6A:80:DC:12:EE:42:2F:E8:B6:E3:63:F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03F5y7l9aA5qgNwS7kIv6LbjY_U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/4CBC0878AA5111ECBEC4A312C4F9AE02.roa Signing time: Thu 30 Oct 2025 22:12:06 +0000 ROA not before: Thu 30 Oct 2025 22:12:06 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 24462 IP address blocks: 58.64.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.crl rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03F5y7l9aA5qgNwS7kIv6LbjY_U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:57:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1949 (0x79d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DF1F, serialNumber=D37179CBB97D680E6A80DC12EE422FE8B6E363F5 Validity Not Before: Oct 30 22:12:06 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=6903e2b6-9a45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:48:2f:44:58:27:9a:76:1f:f4:a4:56:57:24: d5:55:9f:50:52:d3:e5:fd:6f:85:0c:9b:dc:97:41: 3d:75:18:82:ee:29:a9:dc:d7:a8:25:2e:b1:cd:67: 5d:67:55:e2:9e:af:c0:bb:dd:52:75:98:b9:7b:c2: 2e:d2:cb:47:87:bf:e3:61:c4:fa:32:b3:b3:83:5a: 0a:16:ce:1b:13:d1:3b:69:c6:77:bf:c7:66:bf:3e: 87:f3:08:c1:41:9e:02:04:94:27:fd:61:da:7b:28: 2d:ee:75:0d:c7:6d:78:0e:e8:b7:52:08:de:31:16: 22:2a:09:bd:a7:a3:8b:d9:96:f8:95:94:c3:15:55: 84:e5:a3:79:cd:01:ed:9e:42:a6:eb:cb:4f:1a:b3: 76:80:79:69:c2:76:ef:f6:0a:78:ad:da:b5:49:ef: a6:23:40:50:73:e5:c2:b2:a5:54:64:f5:85:54:29: 6f:4c:ef:e7:f0:59:1a:dd:33:1f:0b:8e:c0:83:63: df:96:10:4f:23:80:14:69:25:ee:ba:46:ed:eb:67: 23:de:35:97:a9:77:a2:b6:02:13:a9:6a:9b:07:8e: ec:f4:b1:41:99:8d:3c:2a:a2:c1:ad:70:a9:d3:d1: 95:58:fc:62:8f:ca:65:63:aa:ff:11:72:d5:ab:da: 15:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:E4:AA:CD:D0:51:35:7E:81:55:5E:9A:46:F6:FC:B9:35:DB:09:B2 X509v3 Authority Key Identifier: keyid:D3:71:79:CB:B9:7D:68:0E:6A:80:DC:12:EE:42:2F:E8:B6:E3:63:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03F5y7l9aA5qgNwS7kIv6LbjY_U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/4CBC0878AA5111ECBEC4A312C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 58.64.251.0/24 Signature Algorithm: sha256WithRSAEncryption ac:de:68:54:75:51:36:60:64:75:22:4d:52:4d:d3:b2:32:35: 66:0a:76:de:57:63:19:09:7e:28:28:ee:a0:8f:c4:9e:77:6a: 14:bf:81:4f:da:ef:ac:41:f3:06:7b:89:8f:b9:a2:90:f9:fb: 76:2f:07:b0:69:f3:d4:52:22:4e:78:14:32:53:fd:6a:30:26: 12:bd:d2:9e:df:15:f4:72:0a:eb:67:6d:1d:86:8b:b3:7b:82: 7e:b3:65:e7:2f:a3:a9:c3:4b:5b:f1:0a:ee:d4:b2:c0:cf:bd: 79:95:bf:cb:1b:17:43:a9:b3:9a:3f:20:5d:f4:d5:67:f0:38: 9e:43:0a:f1:19:54:22:4a:06:c1:4a:d4:6f:60:34:67:95:b7: f8:d7:6f:5e:13:3f:86:18:99:1b:49:66:12:7f:93:58:41:9c: 04:cb:52:03:3a:ac:b1:6f:12:05:fd:58:9b:2c:70:e7:5c:65: be:06:fd:db:cb:32:03:0a:fe:47:24:1a:0a:74:54:77:27:5f: 0d:65:6c:e1:9b:ba:9f:1b:12:52:4d:ab:9c:04:2e:60:89:d1: 55:9e:c1:5f:20:e7:e7:55:ac:9b:70:82:6a:3f:ff:44:af:a6: 3e:81:4d:2a:56:d4:94:19:29:c5:78:b2:96:da:0f:d3:38:44: ff:71:9f:88 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB50wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURGMUYxMTAvBgNVBAUTKEQzNzE3OUNCQjk3RDY4MEU2QTgwREMxMkVFNDIyRkU4 QjZFMzYzRjUwHhcNMjUxMDMwMjIxMjA2WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTAzZTJiNi05YTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxUgvRFgnmnYf9KRWVyTVVZ9QUtPl/W+FDJvcl0E9dRiC7imp3NeoJS6xzWdd Z1Xinq/Au91SdZi5e8Iu0stHh7/jYcT6MrOzg1oKFs4bE9E7acZ3v8dmvz6H8wjB QZ4CBJQn/WHaeygt7nUNx214Dui3UgjeMRYiKgm9p6OL2Zb4lZTDFVWE5aN5zQHt nkKm68tPGrN2gHlpwnbv9gp4rdq1Se+mI0BQc+XCsqVUZPWFVClvTO/n8Fka3TMf C47Ag2PflhBPI4AUaSXuukbt62cj3jWXqXeitgITqWqbB47s9LFBmY08KqLBrXCp 09GVWPxij8plY6r/EXLVq9oVuwIDAQABo4IClTCCApEwHQYDVR0OBBYEFKjkqs3Q UTV+gVVemkb2/Lk12wmyMB8GA1UdIwQYMBaAFNNxecu5fWgOaoDcEu5CL+i242P1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREYxRi9GNUNCNkU2QTVD NTMxMUVCQjY2Mjc4NTNDNEY5QUUwMi8wM0Y1eTdsOWFBNXFnTndTN2tJdjZMYmpZ X1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzAzRjV5N2w5YUE1cWdOd1M3a0l2NkxiallfVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MURGMUYvRjVDQjZFNkE1QzUzMTFFQkI2NjI3ODUzQzRGOUFFMDIvNENCQzA4NzhB QTUxMTFFQ0JFQzRBMzEyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAA6QPswDQYJKoZIhvcNAQELBQADggEBAKzeaFR1UTZgZHUi TVJN07IyNWYKdt5XYxkJfigo7qCPxJ53ahS/gU/a76xB8wZ7iY+5opD5+3YvB7Bp 89RSIk54FDJT/WowJhK90p7fFfRyCutnbR2Gi7N7gn6zZecvo6nDS1vxCu7UssDP vXmVv8sbF0Ops5o/IF301WfwOJ5DCvEZVCJKBsFK1G9gNGeVt/jXb14TP4YYmRtJ ZhJ/k1hBnATLUgM6rLFvEgX9WJsscOdcZb4G/dvLMgMK/kckGgp0VHcnXw1lbOGb up8bElJNq5wELmCJ0VWewV8g5+dVrJtwgmo//0Svpj6BTSpW1JQZKcV4spbaD9M4 RP9xn4g= -----END CERTIFICATE-----Generated at Wed Nov 5 21:16:43 2025 by rpki-client