$ rpki-client -vvf rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/0F91DE9EAD4C11EB903C150DC4F9AE02.roa File: 0F91DE9EAD4C11EB903C150DC4F9AE02.roa (raw, json) Hash identifier: UMY2SMXz/mJaifHHi29M/g1LYVd8AUhMyEaWSsVqYYY= Subject key identifier: D1:0D:93:2E:6E:8B:86:ED:17:FB:6B:7C:11:9C:4A:E2:E2:67:BA:A6 Certificate issuer: /CN=A91452AC/serialNumber=36D77E9243ABBA2FD5496A291830B7D38B0BCBC4 Certificate serial: 0921 Authority key identifier: 36:D7:7E:92:43:AB:BA:2F:D5:49:6A:29:18:30:B7:D3:8B:0B:CB:C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ntd-kkOrui_VSWopGDC304sLy8Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/0F91DE9EAD4C11EB903C150DC4F9AE02.roa Signing time: Tue 04 Nov 2025 20:39:35 +0000 ROA not before: Tue 04 Nov 2025 20:39:35 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 45250 IP address blocks: 202.43.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.crl rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ntd-kkOrui_VSWopGDC304sLy8Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:39:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2337 (0x921) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91452AC, serialNumber=36D77E9243ABBA2FD5496A291830B7D38B0BCBC4 Validity Not Before: Nov 4 20:39:35 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=690a6487-4f07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a3:98:4f:9d:4c:e4:4e:a3:c3:d6:7f:d3:35: e2:75:36:00:61:2a:2c:e2:df:61:13:4e:04:11:89: a7:92:03:b5:e1:69:bc:95:f4:66:3d:77:96:60:f2: 9b:73:28:96:6a:0f:ee:1a:ae:df:59:6d:06:ba:ce: 9b:ed:6b:d0:f7:2c:ec:6e:a8:0d:fd:bb:90:66:21: bb:fd:a6:a1:bf:2c:3a:92:69:9f:c4:3c:10:2b:53: 3b:17:22:36:da:d1:89:13:a9:1c:dc:21:8b:6d:03: e7:42:ab:4e:86:3d:5a:8c:1b:71:d1:72:8f:0b:c7: 5f:12:d4:e6:54:ff:c5:55:30:dc:20:cb:43:80:67: 6c:e8:a9:24:ce:06:a2:36:6c:cb:eb:27:7d:7f:f2: 92:27:c8:63:b2:55:54:65:34:11:32:3a:33:b1:c3: 71:cd:de:a4:82:e5:4f:c8:46:d8:28:e1:e4:e1:17: fa:59:81:82:ae:79:34:50:b3:1c:e4:00:16:98:21: cb:9f:97:79:7a:b5:db:92:7e:2a:dc:8e:a1:c7:8b: a5:b9:95:12:c4:24:79:4e:55:f9:5a:ab:41:a7:73: b1:9a:f4:0b:ce:fe:23:2e:43:59:39:8c:49:df:eb: 02:ff:6e:1d:ae:49:36:90:86:bd:e4:3c:02:63:2f: a4:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:0D:93:2E:6E:8B:86:ED:17:FB:6B:7C:11:9C:4A:E2:E2:67:BA:A6 X509v3 Authority Key Identifier: keyid:36:D7:7E:92:43:AB:BA:2F:D5:49:6A:29:18:30:B7:D3:8B:0B:CB:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ntd-kkOrui_VSWopGDC304sLy8Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/0F91DE9EAD4C11EB903C150DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.43.239.0/24 Signature Algorithm: sha256WithRSAEncryption 18:1d:eb:a4:21:7a:d5:a0:d9:b4:ea:06:e8:73:46:a4:8a:e1: 18:61:d6:f5:d3:dc:62:f2:0b:cf:d2:cc:0a:d3:6d:10:0e:52: 1f:de:a7:a8:31:80:3c:0e:21:30:0f:e3:13:69:58:1b:0c:4b: ad:af:b1:9a:f3:b1:89:a3:7d:78:0a:2f:18:46:b8:e1:3a:de: be:aa:b5:b9:21:9f:fc:d0:f8:e6:83:9d:da:a6:05:69:55:83: 9b:b7:10:76:2d:85:30:a0:f5:e8:5c:83:da:d2:05:6d:27:0e: 16:14:86:ff:a3:8f:1c:da:f6:9d:ca:32:67:bc:10:58:49:da: 65:8b:90:20:8a:d8:f7:00:3d:6b:6d:b5:5d:11:04:e3:2b:4f: b2:6e:6d:f9:19:da:98:74:f1:f9:c7:82:df:c1:b7:9c:a6:57: c8:22:b0:26:59:a3:4c:b3:ad:99:a7:89:f6:58:14:05:d0:81: d5:e2:cf:dd:de:e6:a5:ab:f9:7d:00:87:35:9e:8c:09:98:ad: 73:7d:ea:cc:41:d1:43:e6:31:80:ac:59:b9:a5:5f:6b:a2:a1: bc:4d:86:17:03:38:e7:90:05:b9:d5:ee:5a:54:70:a7:b4:c3: 74:9d:38:8a:b0:cb:8c:7e:0f:41:cc:50:b6:ba:a0:88:42:5a: a5:97:e8:69 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCSEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDUyQUMxMTAvBgNVBAUTKDM2RDc3RTkyNDNBQkJBMkZENTQ5NkEyOTE4MzBCN0Qz OEIwQkNCQzQwHhcNMjUxMTA0MjAzOTM1WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTBhNjQ4Ny00ZjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsKOYT51M5E6jw9Z/0zXidTYAYSos4t9hE04EEYmnkgO14Wm8lfRmPXeWYPKb cyiWag/uGq7fWW0Gus6b7WvQ9yzsbqgN/buQZiG7/aahvyw6kmmfxDwQK1M7FyI2 2tGJE6kc3CGLbQPnQqtOhj1ajBtx0XKPC8dfEtTmVP/FVTDcIMtDgGds6Kkkzgai NmzL6yd9f/KSJ8hjslVUZTQRMjozscNxzd6kguVPyEbYKOHk4Rf6WYGCrnk0ULMc 5AAWmCHLn5d5erXbkn4q3I6hx4uluZUSxCR5TlX5WqtBp3OxmvQLzv4jLkNZOYxJ 3+sC/24drkk2kIa95DwCYy+k/QIDAQABo4IClTCCApEwHQYDVR0OBBYEFNENky5u i4btF/trfBGcSuLiZ7qmMB8GA1UdIwQYMBaAFDbXfpJDq7ov1UlqKRgwt9OLC8vE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTJBQy9BNDhENTk2NkJC M0UxMUVBQTI5RUUzMjFDNEY5QUUwMi9OdGQta2tPcnVpX1ZTV29wR0RDMzA0c0x5 OFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL050ZC1ra09ydWlfVlNXb3BHREMzMDRzTHk4US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDUyQUMvQTQ4RDU5NjZCQjNFMTFFQUEyOUVFMzIxQzRGOUFFMDIvMEY5MURFOUVB RDRDMTFFQjkwM0MxNTBEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADKK+8wDQYJKoZIhvcNAQELBQADggEBABgd66QhetWg2bTq BuhzRqSK4Rhh1vXT3GLyC8/SzArTbRAOUh/ep6gxgDwOITAP4xNpWBsMS62vsZrz sYmjfXgKLxhGuOE63r6qtbkhn/zQ+OaDndqmBWlVg5u3EHYthTCg9ehcg9rSBW0n DhYUhv+jjxza9p3KMme8EFhJ2mWLkCCK2PcAPWtttV0RBOMrT7JubfkZ2ph08fnH gt/Bt5ymV8gisCZZo0yzrZmnifZYFAXQgdXiz93e5qWr+X0AhzWejAmYrXN96sxB 0UPmMYCsWbmlX2uiobxNhhcDOOeQBbnV7lpUcKe0w3SdOIqwy4x+D0HMULa6oIhC WqWX6Gk= -----END CERTIFICATE-----Generated at Wed Nov 5 15:18:17 2025 by rpki-client