$ rpki-client -vvf rpki.apnic.net/member_repository/A913BC05/83559C7CB21911EB82031482C4F9AE02/9C89E3D2B21A11EBAC1DBF83C4F9AE02.roa File: 9C89E3D2B21A11EBAC1DBF83C4F9AE02.roa (raw, json) Hash identifier: OSWl7ervYdSnu18zoA6Uux9/93xAUT4fzl/D6bD5FUk= Subject key identifier: 80:CD:CE:04:D0:E2:BC:3A:EA:14:AC:71:14:63:5D:08:FE:4D:83:9E Certificate issuer: /CN=A913BC05/serialNumber=278AAC9FC6223BB037157EB39F96DBBDA8E6D256 Certificate serial: 0644 Authority key identifier: 27:8A:AC:9F:C6:22:3B:B0:37:15:7E:B3:9F:96:DB:BD:A8:E6:D2:56 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/J4qsn8YiO7A3FX6zn5bbvajm0lY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913BC05/83559C7CB21911EB82031482C4F9AE02/9C89E3D2B21A11EBAC1DBF83C4F9AE02.roa Signing time: Thu 30 Oct 2025 19:07:53 +0000 ROA not before: Thu 30 Oct 2025 19:07:53 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 58427 IP address blocks: 91.109.216.0/24 maxlen: 24 91.109.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913BC05/83559C7CB21911EB82031482C4F9AE02/J4qsn8YiO7A3FX6zn5bbvajm0lY.crl rsync://rpki.apnic.net/member_repository/A913BC05/83559C7CB21911EB82031482C4F9AE02/J4qsn8YiO7A3FX6zn5bbvajm0lY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/J4qsn8YiO7A3FX6zn5bbvajm0lY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:54:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1604 (0x644) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913BC05, serialNumber=278AAC9FC6223BB037157EB39F96DBBDA8E6D256 Validity Not Before: Oct 30 19:07:53 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=6903b789-b1a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:80:b0:64:de:5e:67:d5:1e:73:ec:3c:45:75: 67:a9:5a:4e:7a:bc:e8:17:d7:a4:d8:84:a1:a5:d7: cb:51:29:de:bc:e8:bf:16:fc:ea:4b:38:2f:55:4d: 93:58:37:42:6e:be:d0:8c:ce:af:b5:fd:ba:1e:83: 6f:10:27:3d:b9:71:18:e8:3a:0b:91:80:6b:58:ed: 98:6c:2b:90:3f:31:30:96:85:ad:c1:25:3b:ff:08: 0d:80:37:33:ac:64:9a:43:0f:ac:7c:32:c6:67:e7: 1b:9e:32:ce:e2:0a:15:e3:c7:b2:5d:d0:3f:2e:55: 7a:5a:d2:f3:71:6c:69:dc:ef:2f:09:3e:fb:2f:77: 73:a2:ca:ae:a9:7b:41:71:af:0e:e4:36:66:b9:ba: 29:5a:6d:75:14:59:ab:7f:b1:af:5f:93:5f:ee:65: 22:36:63:30:ac:ae:ad:a6:d6:b8:2d:d9:da:89:48: 21:88:0c:da:41:d9:09:ba:a2:b2:e2:26:69:a7:ff: bb:6a:db:be:0e:4b:37:38:72:f3:c6:a7:4d:2c:b8: 80:ac:bc:bb:bd:0a:ea:19:87:fe:62:af:bd:80:b1: 66:36:f8:54:48:cd:c7:d7:f0:34:bb:d6:f3:e9:64: 00:0e:cf:76:cf:dc:87:f2:e7:4d:f2:78:b1:54:b7: ca:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:CD:CE:04:D0:E2:BC:3A:EA:14:AC:71:14:63:5D:08:FE:4D:83:9E X509v3 Authority Key Identifier: keyid:27:8A:AC:9F:C6:22:3B:B0:37:15:7E:B3:9F:96:DB:BD:A8:E6:D2:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913BC05/83559C7CB21911EB82031482C4F9AE02/J4qsn8YiO7A3FX6zn5bbvajm0lY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/J4qsn8YiO7A3FX6zn5bbvajm0lY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BC05/83559C7CB21911EB82031482C4F9AE02/9C89E3D2B21A11EBAC1DBF83C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 91.109.216.0/24 91.109.218.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:d0:0b:dc:12:2a:cc:05:d2:71:2e:64:6d:5a:9d:a4:05:22: f8:57:76:c1:f5:f2:b4:4f:d3:78:a6:6e:28:7d:af:61:ce:73: 27:8b:91:e4:ab:1b:5a:46:d2:a5:4b:b9:6f:2e:10:21:9e:bd: 1c:02:e3:2d:d6:9e:d7:9f:a1:e0:2d:d8:36:77:c3:f6:0d:fa: 9c:8a:58:e0:02:fc:58:9d:2c:a9:05:38:de:e2:e3:18:b5:57: bd:44:9d:84:9f:1f:8c:70:83:31:b6:a1:07:2b:7d:72:df:b9: 93:6c:79:7c:18:3c:b1:3d:a2:0f:5b:7d:0d:2d:12:51:a5:d5: 23:d9:dc:40:7b:28:3a:82:96:bb:7c:81:5c:5b:77:e0:8a:c3: b1:23:37:15:a7:ea:1c:46:17:e4:9c:54:3d:44:98:51:fc:4e: e0:37:ea:fd:3a:3d:b6:03:02:c4:2c:ab:e4:ce:57:fb:b8:81: ee:e8:9d:2a:ec:04:93:03:9a:6a:e4:4f:ee:40:0a:8e:fa:08: 68:c3:0e:d6:9b:92:60:f3:7e:f4:64:70:07:03:18:6d:3f:00: ed:80:ca:2f:da:c6:74:f5:ea:5f:15:f6:d1:c9:0b:bf:65:7f: 2c:5a:45:5e:47:97:ed:6b:19:ed:dd:8b:fb:87:8e:d5:3e:1c: e1:fb:e7:3b -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBkQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0JDMDUxMTAvBgNVBAUTKDI3OEFBQzlGQzYyMjNCQjAzNzE1N0VCMzlGOTZEQkJE QThFNkQyNTYwHhcNMjUxMDMwMTkwNzUzWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTAzYjc4OS1iMWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzICwZN5eZ9Uec+w8RXVnqVpOerzoF9ek2IShpdfLUSnevOi/FvzqSzgvVU2T WDdCbr7QjM6vtf26HoNvECc9uXEY6DoLkYBrWO2YbCuQPzEwloWtwSU7/wgNgDcz rGSaQw+sfDLGZ+cbnjLO4goV48eyXdA/LlV6WtLzcWxp3O8vCT77L3dzosquqXtB ca8O5DZmubopWm11FFmrf7GvX5Nf7mUiNmMwrK6tpta4LdnaiUghiAzaQdkJuqKy 4iZpp/+7atu+Dks3OHLzxqdNLLiArLy7vQrqGYf+Yq+9gLFmNvhUSM3H1/A0u9bz 6WQADs92z9yH8udN8nixVLfKvQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFIDNzgTQ 4rw66hSscRRjXQj+TYOeMB8GA1UdIwQYMBaAFCeKrJ/GIjuwNxV+s5+W272o5tJW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQkMwNS84MzU1OUM3Q0Iy MTkxMUVCODIwMzE0ODJDNEY5QUUwMi9KNHFzbjhZaU83QTNGWDZ6bjViYnZham0w bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0o0cXNuOFlpTzdBM0ZYNnpuNWJidmFqbTBsWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0JDMDUvODM1NTlDN0NCMjE5MTFFQjgyMDMxNDgyQzRGOUFFMDIvOUM4OUUzRDJC MjFBMTFFQkFDMURCRjgzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBABbbdgDBABbbdowDQYJKoZIhvcNAQELBQADggEBAHzQC9wS KswF0nEuZG1anaQFIvhXdsH18rRP03imbih9r2HOcyeLkeSrG1pG0qVLuW8uECGe vRwC4y3WntefoeAt2DZ3w/YN+pyKWOAC/FidLKkFON7i4xi1V71EnYSfH4xwgzG2 oQcrfXLfuZNseXwYPLE9og9bfQ0tElGl1SPZ3EB7KDqClrt8gVxbd+CKw7EjNxWn 6hxGF+ScVD1EmFH8TuA36v06PbYDAsQsq+TOV/u4ge7onSrsBJMDmmrkT+5ACo76 CGjDDtabkmDzfvRkcAcDGG0/AO2Ayi/axnT16l8V9tHJC79lfyxaRV5Hl+1rGe3d i/uHjtU+HOH75zs= -----END CERTIFICATE-----Generated at Wed Nov 5 19:17:38 2025 by rpki-client