$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/2EF3EBF0E0CD11ECB03A892AC4F9AE02.roa File: 2EF3EBF0E0CD11ECB03A892AC4F9AE02.roa (raw, json) Hash identifier: 5zf6KG3oytoKwEjI0+t0seHR5ivAdM4+AHfLlUggH6s= Subject key identifier: 00:E1:63:E6:07:B9:59:77:0E:67:04:98:BD:39:43:92:A8:E3:12:D7 Certificate issuer: /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19 Certificate serial: 067E Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/2EF3EBF0E0CD11ECB03A892AC4F9AE02.roa Signing time: Wed 27 Aug 2025 01:06:21 +0000 ROA not before: Wed 27 Aug 2025 01:06:21 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 7568 IP address blocks: 202.183.136.0/22 maxlen: 22 2404:b0:f::/48 maxlen: 48 2404:b0:10::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:28:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1662 (0x67e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91262CA, serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19 Validity Not Before: Aug 27 01:06:21 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68ae5a0c-6c6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:29:0a:13:ff:22:ba:f5:85:19:3d:96:75:71: e3:52:d1:de:f1:37:b4:14:55:bb:0a:46:bc:fc:6b: da:00:2a:5f:18:5e:55:f9:a7:d6:43:c6:0f:8c:e9: e5:63:a3:6c:ec:e8:ab:56:0b:14:ac:04:96:96:67: 46:95:b0:50:d3:74:fa:19:3d:39:7b:ee:a0:01:f1: a7:f7:df:e0:ca:c8:e5:0a:4c:82:20:9a:6e:44:21: 1a:58:7a:f8:45:76:8c:5c:7b:f5:14:cb:a5:d4:ff: 9e:17:ef:f4:80:ad:b6:4a:8d:24:7c:9f:01:1e:cd: 27:2f:7b:e5:1c:fa:d7:57:f3:43:17:0f:73:a5:b1: 88:e8:dd:42:f6:b5:f9:b1:bd:93:63:f2:a9:b8:bc: 73:36:81:47:8b:17:19:01:d7:22:2d:be:6a:97:ac: 7b:43:32:f7:f7:f7:8f:b2:aa:c6:c1:16:87:db:8e: 13:90:c1:b7:c3:8b:42:d4:2c:d7:b3:2b:bf:08:0e: 38:56:b0:bd:5a:ed:6a:84:50:db:50:a4:34:10:b2: c9:cb:bd:43:8d:09:5d:44:1f:62:51:35:50:08:24: 28:fe:25:ed:40:79:ae:d3:4f:eb:fb:ac:43:0b:de: 56:84:a7:7a:d9:75:41:5a:ed:ee:cc:5d:32:0a:6d: d8:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:E1:63:E6:07:B9:59:77:0E:67:04:98:BD:39:43:92:A8:E3:12:D7 X509v3 Authority Key Identifier: keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/2EF3EBF0E0CD11ECB03A892AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.183.136.0/22 IPv6: 2404:b0:f::-2404:b0:10:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 2a:ee:2a:69:f4:86:63:e7:62:4a:68:49:f7:e3:14:08:a0:19: 09:c9:0e:59:0b:f7:ca:25:7d:28:56:3f:16:64:a7:1f:cd:fa: ab:ec:be:a8:46:f5:6d:9f:28:7e:57:6e:14:82:d2:b1:bc:cc: b8:01:e7:cb:b2:98:4b:82:a4:6b:15:04:26:a1:75:81:7a:6d: 22:20:3d:fa:13:b8:7e:87:3d:10:20:58:41:72:27:e3:24:75: 72:20:63:91:0c:01:49:db:5c:a9:37:4d:0b:00:7b:9c:fb:69: a3:da:6f:88:0e:15:34:0e:ef:1b:98:8f:d0:8b:93:f1:22:17: a1:53:83:f2:06:f8:f2:90:04:ca:45:e5:5c:8d:1e:da:2e:1b: ac:13:00:d6:f7:f1:0c:7a:f4:2e:ed:dc:4a:f4:66:65:b8:73: 19:77:46:e3:1d:49:8e:98:0a:c9:94:74:c4:83:36:66:09:26: 15:94:42:2e:0e:a3:e0:06:f7:77:26:3e:c3:e7:96:d6:ef:7f: c8:f5:c4:38:e6:71:9c:e7:f4:52:e5:58:33:1a:e6:b0:3d:2f: 48:39:26:90:d1:b3:fa:d0:ea:1c:49:bf:76:96:25:80:37:19: 9b:4e:9d:f2:82:96:32:15:68:2b:ea:93:28:33:75:a7:24:3c: 53:1a:00:57 -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgICBn4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYyQ0ExMTAvBgNVBAUTKDc3QTIwMUM1OEVCM0I0MjA4QzkxQkE3RUNFRDkzNkU1 OTVFNjFBMTkwHhcNMjUwODI3MDEwNjIxWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGFlNWEwYy02YzZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtSkKE/8iuvWFGT2WdXHjUtHe8Te0FFW7Cka8/GvaACpfGF5V+afWQ8YPjOnl Y6Ns7OirVgsUrASWlmdGlbBQ03T6GT05e+6gAfGn99/gysjlCkyCIJpuRCEaWHr4 RXaMXHv1FMul1P+eF+/0gK22So0kfJ8BHs0nL3vlHPrXV/NDFw9zpbGI6N1C9rX5 sb2TY/KpuLxzNoFHixcZAdciLb5ql6x7QzL39/ePsqrGwRaH244TkMG3w4tC1CzX syu/CA44VrC9Wu1qhFDbUKQ0ELLJy71DjQldRB9iUTVQCCQo/iXtQHmu00/r+6xD C95WhKd62XVBWu3uzF0yCm3YxwIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFADhY+YH uVl3DmcEmL05Q5Ko4xLXMB8GA1UdIwQYMBaAFHeiAcWOs7QgjJG6fs7ZNuWV5hoZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjJDQS9GNUVEQzdGQzhB NTcxMUVDOTZFQkMwMTRDNEY5QUUwMi9kNklCeFk2enRDQ01rYnAtenRrMjVaWG1H aGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Q2SUJ4WTZ6dENDTWticC16dGsyNVpYbUdoay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjYyQ0EvRjVFREM3RkM4QTU3MTFFQzk2RUJDMDE0QzRGOUFFMDIvMkVGM0VCRjBF MENEMTFFQ0IwM0E4OTJBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOwYIKwYBBQUHAQcBAf8E LDAqMAwEAgABMAYDBALKt4gwGgQCAAIwFDASAwcAJAQAsAAPAwcAJAQAsAAQMA0G CSqGSIb3DQEBCwUAA4IBAQAq7ipp9IZj52JKaEn34xQIoBkJyQ5ZC/fKJX0oVj8W ZKcfzfqr7L6oRvVtnyh+V24UgtKxvMy4AefLsphLgqRrFQQmoXWBem0iID36E7h+ hz0QIFhBcifjJHVyIGORDAFJ21ypN00LAHuc+2mj2m+IDhU0Du8bmI/Qi5PxIheh U4PyBvjykATKReVcjR7aLhusEwDW9/EMevQu7dxK9GZluHMZd0bjHUmOmArJlHTE gzZmCSYVlEIuDqPgBvd3Jj7D55bW73/I9cQ45nGc5/RS5VgzGuawPS9IOSaQ0bP6 0OocSb92liWANxmbTp3ygpYyFWgr6pMoM3WnJDxTGgBX -----END CERTIFICATE-----Generated at Wed Nov 5 16:46:05 2025 by rpki-client