$ rpki-client -vvf rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/692243D640AA11F096F2746AC4F9AE02.roa File: 692243D640AA11F096F2746AC4F9AE02.roa (raw, json) Hash identifier: 9g7lOOD5JnVMfPoV+CkyAbWN9NrLgMODndTwuqHyDZ8= Subject key identifier: FB:93:E5:2F:7B:9A:5A:16:7D:45:84:E4:AC:31:41:2F:FB:CB:B3:43 Certificate issuer: /CN=A91516FF/serialNumber=DFCA8FDAA5FEF948E0ECF6F9C703639B56539D99 Certificate serial: 7D Authority key identifier: DF:CA:8F:DA:A5:FE:F9:48:E0:EC:F6:F9:C7:03:63:9B:56:53:9D:99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/692243D640AA11F096F2746AC4F9AE02.roa Signing time: Mon 27 Oct 2025 09:50:55 +0000 ROA not before: Mon 27 Oct 2025 09:50:55 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 38195 IP address blocks: 202.40.164.0/22 maxlen: 24 2401:c0e0::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.crl rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:57:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 125 (0x7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91516FF, serialNumber=DFCA8FDAA5FEF948E0ECF6F9C703639B56539D99 Validity Not Before: Oct 27 09:50:55 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68ff407f-ae4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e3:c6:85:73:93:81:b3:64:e7:b4:a9:e4:f9: bb:b6:74:7d:2c:2d:92:14:a9:74:ab:9a:c6:d7:a8: 4c:0e:a2:c4:f5:54:c9:98:e5:b8:b2:b3:50:66:f4: 5f:f9:14:cb:16:8e:68:09:40:3b:19:a3:89:d9:5e: 81:b0:2f:5d:04:be:07:8c:c4:80:f9:7b:04:04:51: a5:c7:20:e5:20:93:51:90:d2:5c:30:ea:dc:bf:6a: 84:6a:86:cb:e9:50:90:9d:ef:1a:52:e2:b6:9a:64: 81:e4:1c:92:c4:94:bc:e9:da:4b:16:8a:bd:d0:96: dc:57:4d:9c:03:3c:57:18:22:71:07:fa:cf:de:50: 3c:a1:6a:32:82:0f:0d:55:9e:a1:ff:20:97:62:f0: 3c:c0:be:83:28:1b:7b:3b:2b:c2:00:82:58:71:d8: a3:f9:77:5b:ac:05:64:ed:58:43:74:29:01:53:54: 87:85:3f:c8:88:77:1e:fe:1f:a4:5b:02:ac:af:11: 15:02:c4:44:4a:d2:8f:f3:b2:da:a3:4e:5a:b0:a2: 10:d6:89:20:67:85:ab:00:4b:51:0f:28:46:cd:e8: 0a:95:86:09:ab:23:c3:f3:dd:fa:18:1e:68:9a:c7: cb:d5:36:4b:56:1e:b3:1d:e1:52:d6:96:07:2c:36: 97:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:93:E5:2F:7B:9A:5A:16:7D:45:84:E4:AC:31:41:2F:FB:CB:B3:43 X509v3 Authority Key Identifier: keyid:DF:CA:8F:DA:A5:FE:F9:48:E0:EC:F6:F9:C7:03:63:9B:56:53:9D:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/692243D640AA11F096F2746AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.40.164.0/22 IPv6: 2401:c0e0::/32 Signature Algorithm: sha256WithRSAEncryption 2b:1e:55:1b:cc:03:2d:d3:84:7b:16:14:42:35:1f:41:04:13: cc:16:72:7b:f7:9f:f8:d9:d6:7d:0b:3c:51:4a:7e:ea:82:9a: 99:59:4c:69:0d:86:89:29:ca:4a:77:27:62:9c:f5:a2:40:98: e5:17:25:2a:01:ea:81:56:93:84:55:af:b4:5c:b5:81:5d:e7: b6:02:42:16:29:fa:5f:d1:c1:15:ee:05:01:29:35:ad:cd:dd: c4:52:86:1e:7c:ca:87:1e:0b:a0:b9:a3:b4:cf:47:d1:92:81: 49:43:f1:82:6e:a7:f4:1e:9d:54:67:85:af:3f:45:b7:03:32: 46:56:f3:52:9e:cf:31:c5:ea:44:f3:5f:04:7f:3e:d6:48:1e: 7a:0c:78:0e:45:b6:b3:84:61:3e:23:d5:a8:78:3e:6b:51:61: 75:d5:d8:1f:42:a8:91:91:42:63:12:e2:30:22:c8:64:c4:af: 17:ab:60:30:e2:06:7c:ef:e0:ff:c1:f1:a5:5d:57:25:8f:1a: 68:01:d7:46:5c:84:ba:87:26:9c:f8:fe:69:4f:4c:73:02:e2: 97:c2:38:56:44:91:fd:59:ac:75:95:c3:89:65:16:ec:c5:93: 44:5f:28:0a:a7:c4:03:4e:36:64:a6:2d:07:9e:ed:5c:e8:05: 66:c1:9b:24 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIBfTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MTZGRjExMC8GA1UEBRMoREZDQThGREFBNUZFRjk0OEUwRUNGNkY5QzcwMzYzOUI1 NjUzOUQ5OTAeFw0yNTEwMjcwOTUwNTVaFw0yNjEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY4ZmY0MDdmLWFlNGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDa48aFc5OBs2TntKnk+bu2dH0sLZIUqXSrmsbXqEwOosT1VMmY5biys1Bm9F/5 FMsWjmgJQDsZo4nZXoGwL10EvgeMxID5ewQEUaXHIOUgk1GQ0lww6ty/aoRqhsvp UJCd7xpS4raaZIHkHJLElLzp2ksWir3QltxXTZwDPFcYInEH+s/eUDyhajKCDw1V nqH/IJdi8DzAvoMoG3s7K8IAglhx2KP5d1usBWTtWEN0KQFTVIeFP8iIdx7+H6Rb AqyvERUCxERK0o/zstqjTlqwohDWiSBnhasAS1EPKEbN6AqVhgmrI8Pz3foYHmia x8vVNktWHrMd4VLWlgcsNpfhAgMBAAGjggKkMIICoDAdBgNVHQ4EFgQU+5PlL3ua WhZ9RYTkrDFBL/vLs0MwHwYDVR0jBBgwFoAU38qP2qX++Ujg7Pb5xwNjm1ZTnZkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUxNkZGLzJEQTU1OTEyMTQx NjExRjBBODUyMzIxOUM0RjlBRTAyLzM4cVAycVgtLVVqZzdQYjV4d05qbTFaVG5a ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMzhxUDJxWC0tVWpnN1BiNXh3TmptMVpUblprLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTZGRi8yREE1NTkxMjE0MTYxMUYwQTg1MjMyMTlDNEY5QUUwMi82OTIyNDNENjQw QUExMUYwOTZGMjc0NkFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAuBggrBgEFBQcBBwEB/wQf MB0wDAQCAAEwBgMEAsoopDANBAIAAjAHAwUAJAHA4DANBgkqhkiG9w0BAQsFAAOC AQEAKx5VG8wDLdOEexYUQjUfQQQTzBZye/ef+NnWfQs8UUp+6oKamVlMaQ2GiSnK SncnYpz1okCY5RclKgHqgVaThFWvtFy1gV3ntgJCFin6X9HBFe4FASk1rc3dxFKG HnzKhx4LoLmjtM9H0ZKBSUPxgm6n9B6dVGeFrz9FtwMyRlbzUp7PMcXqRPNfBH8+ 1kgeegx4DkW2s4RhPiPVqHg+a1FhddXYH0KokZFCYxLiMCLIZMSvF6tgMOIGfO/g /8HxpV1XJY8aaAHXRlyEuocmnPj+aU9McwLil8I4VkSR/VmsdZXDiWUW7MWTRF8o CqfEA042ZKYtB57tXOgFZsGbJA== -----END CERTIFICATE-----Generated at Wed Nov 5 05:14:29 2025 by rpki-client