$ rpki-client -vvf rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/B24078AA6A8D11EB82AF1144C4F9AE02.roa File: B24078AA6A8D11EB82AF1144C4F9AE02.roa (raw, json) Hash identifier: uYKsV4sv50u9alr+4EgeUv5NJJKiEhEbHCBbGXsadQo= Subject key identifier: BE:F2:98:6E:E4:31:44:46:F1:29:E0:68:F3:75:6E:97:4E:96:82:F6 Certificate issuer: /CN=A911DF1F/serialNumber=D37179CBB97D680E6A80DC12EE422FE8B6E363F5 Certificate serial: 079B Authority key identifier: D3:71:79:CB:B9:7D:68:0E:6A:80:DC:12:EE:42:2F:E8:B6:E3:63:F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03F5y7l9aA5qgNwS7kIv6LbjY_U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/B24078AA6A8D11EB82AF1144C4F9AE02.roa Signing time: Thu 30 Oct 2025 22:12:05 +0000 ROA not before: Thu 30 Oct 2025 22:12:05 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 10103 IP address blocks: 58.64.128.0/17 maxlen: 24 59.188.0.0/16 maxlen: 24 103.84.32.0/22 maxlen: 24 113.10.128.0/17 maxlen: 24 123.1.128.0/17 maxlen: 24 192.188.82.0/23 maxlen: 24 202.4.162.0/23 maxlen: 24 203.98.128.0/18 maxlen: 24 203.176.192.0/18 maxlen: 24 210.209.64.0/18 maxlen: 24 210.245.128.0/17 maxlen: 24 2401:4a00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.crl rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03F5y7l9aA5qgNwS7kIv6LbjY_U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:57:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1947 (0x79b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DF1F, serialNumber=D37179CBB97D680E6A80DC12EE422FE8B6E363F5 Validity Not Before: Oct 30 22:12:05 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=6903e2b4-cbcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:0f:36:a0:f3:df:02:6c:1e:44:7f:c8:d1:b1: 38:ee:a3:71:45:85:3b:d7:0a:27:31:ac:75:f6:d8: ca:3e:77:e3:4e:fd:34:5b:1e:eb:75:03:4f:92:e7: 37:18:aa:87:8b:41:dd:ad:b9:4e:76:9c:c6:1d:1c: db:82:fb:72:01:82:06:b1:27:21:47:10:72:e3:ca: 27:8b:27:f8:07:b1:e4:fe:99:5d:22:5e:c9:0c:44: 56:cd:a3:ae:b0:c3:c0:a4:e9:51:1a:56:2d:37:0a: ee:3d:bf:52:99:0b:ea:c9:47:6d:b5:93:af:6e:f1: 6e:e6:b4:9a:e2:a9:c9:17:d9:8a:33:18:3b:0f:f1: 09:44:62:52:96:9a:09:1b:f6:d1:cb:60:21:bc:39: 13:77:1f:10:65:b7:6b:97:50:95:8b:8d:5e:69:a8: 46:41:a0:0f:45:e0:44:68:94:55:05:36:ea:d9:02: 7e:1e:0b:0c:8f:51:60:24:82:70:6f:47:65:7f:7a: 61:1e:e0:be:e4:6d:d4:39:ea:3a:6a:86:dd:25:f1: 1a:47:98:3c:62:84:78:33:e8:1d:ec:b1:d8:2c:c9: b1:c6:b5:9a:de:37:42:39:36:0d:ab:d5:68:fa:a9: cf:86:30:a3:84:ca:03:78:03:3a:2e:a8:20:08:ba: 4d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:F2:98:6E:E4:31:44:46:F1:29:E0:68:F3:75:6E:97:4E:96:82:F6 X509v3 Authority Key Identifier: keyid:D3:71:79:CB:B9:7D:68:0E:6A:80:DC:12:EE:42:2F:E8:B6:E3:63:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03F5y7l9aA5qgNwS7kIv6LbjY_U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/B24078AA6A8D11EB82AF1144C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 58.64.128.0/17 59.188.0.0/16 103.84.32.0/22 113.10.128.0/17 123.1.128.0/17 192.188.82.0/23 202.4.162.0/23 203.98.128.0/18 203.176.192.0/18 210.209.64.0/18 210.245.128.0/17 IPv6: 2401:4a00::/32 Signature Algorithm: sha256WithRSAEncryption 43:30:4b:75:0e:4d:16:93:26:63:be:20:40:ec:15:34:f6:83: cb:3b:6c:37:a8:af:92:6a:4d:1b:2c:f2:06:f6:50:42:35:12: 76:ee:12:9e:45:47:0a:78:bd:f7:54:f7:80:16:96:ba:12:5f: 6a:93:d8:5a:d9:75:b7:94:d1:50:fb:e4:98:f0:a6:5b:36:e4: de:09:df:ce:15:22:bf:a7:99:70:b1:91:89:42:32:83:49:40: 7a:19:38:2e:6c:99:a0:c0:4e:7d:7f:92:af:a6:6a:97:4d:e8: b2:4c:c0:c6:2f:db:a1:38:33:a6:c1:d9:d5:1e:dc:c4:5a:ac: b1:34:60:e0:f9:b6:cc:c2:08:6a:0b:32:5e:a8:58:88:c0:3c: ac:12:be:69:80:f8:67:b3:d9:a3:22:e2:54:fb:d3:ae:a0:33: 2b:59:4f:d2:11:3f:40:ac:f1:fe:46:40:29:75:53:f6:47:1b: 0b:dc:95:fe:c1:6c:e7:4a:07:63:6d:84:4a:e1:26:c0:00:8a: 32:73:16:14:8c:77:68:38:ed:f3:57:a5:90:ec:39:db:d7:1c: 2b:1b:c4:59:b8:67:6b:02:32:19:00:54:0d:ce:1a:0e:16:8a: 02:94:28:55:7f:a7:ca:ff:4a:1e:cd:f9:f8:4c:d3:3a:50:a4: ba:ba:00:b3 -----BEGIN CERTIFICATE----- MIIFuzCCBKOgAwIBAgICB5swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURGMUYxMTAvBgNVBAUTKEQzNzE3OUNCQjk3RDY4MEU2QTgwREMxMkVFNDIyRkU4 QjZFMzYzRjUwHhcNMjUxMDMwMjIxMjA1WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTAzZTJiNC1jYmNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxw82oPPfAmweRH/I0bE47qNxRYU71wonMax19tjKPnfjTv00Wx7rdQNPkuc3 GKqHi0HdrblOdpzGHRzbgvtyAYIGsSchRxBy48oniyf4B7Hk/pldIl7JDERWzaOu sMPApOlRGlYtNwruPb9SmQvqyUdttZOvbvFu5rSa4qnJF9mKMxg7D/EJRGJSlpoJ G/bRy2AhvDkTdx8QZbdrl1CVi41eaahGQaAPReBEaJRVBTbq2QJ+HgsMj1FgJIJw b0dlf3phHuC+5G3UOeo6aobdJfEaR5g8YoR4M+gd7LHYLMmxxrWa3jdCOTYNq9Vo +qnPhjCjhMoDeAM6LqggCLpNLQIDAQABo4IC3zCCAtswHQYDVR0OBBYEFL7ymG7k MURG8SngaPN1bpdOloL2MB8GA1UdIwQYMBaAFNNxecu5fWgOaoDcEu5CL+i242P1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREYxRi9GNUNCNkU2QTVD NTMxMUVCQjY2Mjc4NTNDNEY5QUUwMi8wM0Y1eTdsOWFBNXFnTndTN2tJdjZMYmpZ X1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzAzRjV5N2w5YUE1cWdOd1M3a0l2NkxiallfVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MURGMUYvRjVDQjZFNkE1QzUzMTFFQkI2NjI3ODUzQzRGOUFFMDIvQjI0MDc4QUE2 QThEMTFFQjgyQUYxMTQ0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwaQYIKwYBBQUHAQcBAf8E WjBYMEcEAgABMEEDBAc6QIADAwA7vAMEAmdUIAMEB3EKgAMEB3sBgAMEAcC8UgME AcoEogMEBstigAMEBsuwwAMEBtLRQAMEB9L1gDANBAIAAjAHAwUAJAFKADANBgkq hkiG9w0BAQsFAAOCAQEAQzBLdQ5NFpMmY74gQOwVNPaDyztsN6ivkmpNGyzyBvZQ QjUSdu4SnkVHCni991T3gBaWuhJfapPYWtl1t5TRUPvkmPCmWzbk3gnfzhUiv6eZ cLGRiUIyg0lAehk4LmyZoMBOfX+Sr6Zql03oskzAxi/boTgzpsHZ1R7cxFqssTRg 4Pm2zMIIagsyXqhYiMA8rBK+aYD4Z7PZoyLiVPvTrqAzK1lP0hE/QKzx/kZAKXVT 9kcbC9yV/sFs50oHY22ESuEmwACKMnMWFIx3aDjt81elkOw529ccKxvEWbhnawIy GQBUDc4aDhaKApQoVX+nyv9KHs35+EzTOlCkuroAsw== -----END CERTIFICATE-----Generated at Wed Nov 5 07:53:33 2025 by rpki-client