$ rpki-client -vvf rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/0A4D6250833411ECBB74C786C4F9AE02.roa File: 0A4D6250833411ECBB74C786C4F9AE02.roa (raw, json) Hash identifier: VgSITVgJXx7CtfsO3tS4g2hXC7FovkKg8hqJW4bz6zU= Subject key identifier: 68:E3:3B:7B:42:9D:00:F5:31:3C:01:6F:C7:77:8C:80:24:7F:1B:82 Certificate issuer: /CN=A91596C4/serialNumber=3EE26FBA4BE359DEAE500792EBFF78D00ACB760C Certificate serial: 043A Authority key identifier: 3E:E2:6F:BA:4B:E3:59:DE:AE:50:07:92:EB:FF:78:D0:0A:CB:76:0C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PuJvukvjWd6uUAeS6_940ArLdgw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/0A4D6250833411ECBB74C786C4F9AE02.roa Signing time: Fri 31 Oct 2025 00:44:34 +0000 ROA not before: Fri 31 Oct 2025 00:44:34 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 141435 IP address blocks: 149.234.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.crl rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PuJvukvjWd6uUAeS6_940ArLdgw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:24:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1082 (0x43a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91596C4, serialNumber=3EE26FBA4BE359DEAE500792EBFF78D00ACB760C Validity Not Before: Oct 31 00:44:34 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69040672-61c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3a:92:ae:ac:d6:dc:b6:4b:e4:17:59:3b:4f: 85:99:17:cd:05:12:5d:be:0f:8e:99:e5:81:13:3f: 95:14:7e:c0:ab:e3:c9:ea:47:dc:d5:e6:59:b5:63: f7:59:30:8d:38:b6:9c:be:0b:e1:af:74:5b:de:ac: 66:48:2d:04:b8:3d:81:c6:b9:95:b3:d3:aa:a8:65: fa:94:05:95:d3:4a:13:6a:71:c6:d5:1f:1a:6a:ba: ef:5f:45:38:47:fc:63:c2:cf:9c:0f:11:af:e9:bf: 20:49:9c:a9:0e:9a:e9:b0:b7:51:1b:75:8d:09:a5: bd:c6:b8:f0:10:5a:eb:c4:a0:95:5b:71:06:f8:32: 6f:18:09:f8:ac:81:62:04:b8:19:71:96:43:7f:1d: bc:28:c4:68:f0:67:16:1c:53:f1:b6:b9:c5:39:77: 6e:4c:0c:82:3b:05:e5:ca:8c:d8:28:45:38:16:01: 3c:a0:c3:98:a4:b2:2b:fa:21:40:2e:92:34:3e:7c: f9:ae:8a:cf:8a:76:59:71:a0:e8:bc:0e:ff:be:a0: 78:a7:da:68:e6:ca:e2:fc:35:50:26:5c:fc:77:b8: ec:dd:50:8c:a8:a1:86:ac:18:f2:54:af:9b:3a:45: 5e:73:e4:a1:be:98:b3:a8:80:10:94:95:aa:72:4a: f6:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:E3:3B:7B:42:9D:00:F5:31:3C:01:6F:C7:77:8C:80:24:7F:1B:82 X509v3 Authority Key Identifier: keyid:3E:E2:6F:BA:4B:E3:59:DE:AE:50:07:92:EB:FF:78:D0:0A:CB:76:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PuJvukvjWd6uUAeS6_940ArLdgw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/0A4D6250833411ECBB74C786C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 149.234.189.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:6e:84:f3:04:62:69:35:68:db:5d:2e:43:82:3c:3e:ec:e2: 06:db:2a:5f:22:aa:8a:52:62:61:49:01:2b:69:18:69:90:6a: f4:1c:11:81:42:52:7b:9a:7e:f6:f8:03:90:ed:ee:61:23:c5: ca:ca:ee:a2:68:00:ae:a3:4e:e1:48:28:b0:70:8f:11:cd:d9: 6c:8a:1d:cb:b0:61:a9:12:91:aa:87:39:f9:41:d4:62:63:7a: fb:1e:7c:8a:35:84:94:68:f7:34:9d:c4:b0:72:75:21:81:93: 01:91:25:49:d6:46:ac:57:17:8c:79:31:62:da:1e:69:39:fd: 72:45:0b:a6:62:e2:ea:4c:57:cc:16:19:73:a2:d2:11:1a:9a: 46:62:7a:82:d2:6d:6e:41:26:66:1f:8c:a6:ad:25:80:eb:ff: 11:db:79:75:bb:2a:97:01:eb:72:53:dd:90:1e:2a:0b:81:f6: f3:9e:a8:f9:dc:2f:98:7c:d4:2c:84:5b:bc:36:ae:c0:89:1b: f8:d4:f3:43:0e:a9:c0:ef:42:8a:37:56:8c:2b:10:f5:f8:ca: 5a:54:e3:6d:66:cb:12:a1:f4:04:30:9c:ca:4b:bc:6f:3a:c9: 17:ef:b1:a3:c3:5f:7f:73:e9:1e:78:1a:df:b0:ab:df:aa:c5: 69:f8:db:95 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBDowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTk2QzQxMTAvBgNVBAUTKDNFRTI2RkJBNEJFMzU5REVBRTUwMDc5MkVCRkY3OEQw MEFDQjc2MEMwHhcNMjUxMDMxMDA0NDM0WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTA0MDY3Mi02MWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAozqSrqzW3LZL5BdZO0+FmRfNBRJdvg+OmeWBEz+VFH7Aq+PJ6kfc1eZZtWP3 WTCNOLacvgvhr3Rb3qxmSC0EuD2BxrmVs9OqqGX6lAWV00oTanHG1R8aarrvX0U4 R/xjws+cDxGv6b8gSZypDprpsLdRG3WNCaW9xrjwEFrrxKCVW3EG+DJvGAn4rIFi BLgZcZZDfx28KMRo8GcWHFPxtrnFOXduTAyCOwXlyozYKEU4FgE8oMOYpLIr+iFA LpI0Pnz5rorPinZZcaDovA7/vqB4p9po5sri/DVQJlz8d7js3VCMqKGGrBjyVK+b OkVec+ShvpizqIAQlJWqckr2PQIDAQABo4IClTCCApEwHQYDVR0OBBYEFGjjO3tC nQD1MTwBb8d3jIAkfxuCMB8GA1UdIwQYMBaAFD7ib7pL41nerlAHkuv/eNAKy3YM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTZDNC9GM0RERUVERTgz MzAxMUVDOEZGMzkzODNDNEY5QUUwMi9QdUp2dWt2aldkNnVVQWVTNl85NDBBckxk Z3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1B1SnZ1a3ZqV2Q2dVVBZVM2Xzk0MEFyTGRndy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTk2QzQvRjNEREVFREU4MzMwMTFFQzhGRjM5MzgzQzRGOUFFMDIvMEE0RDYyNTA4 MzM0MTFFQ0JCNzRDNzg2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBACV6r0wDQYJKoZIhvcNAQELBQADggEBAB1uhPMEYmk1aNtd LkOCPD7s4gbbKl8iqopSYmFJAStpGGmQavQcEYFCUnuafvb4A5Dt7mEjxcrK7qJo AK6jTuFIKLBwjxHN2WyKHcuwYakSkaqHOflB1GJjevsefIo1hJRo9zSdxLBydSGB kwGRJUnWRqxXF4x5MWLaHmk5/XJFC6Zi4upMV8wWGXOi0hEamkZieoLSbW5BJmYf jKatJYDr/xHbeXW7KpcB63JT3ZAeKguB9vOeqPncL5h81CyEW7w2rsCJG/jU80MO qcDvQoo3VowrEPX4ylpU421myxKh9AQwnMpLvG86yRfvsaPDX39z6R54Gt+wq9+q xWn425U= -----END CERTIFICATE-----Generated at Wed Nov 5 12:03:53 2025 by rpki-client