$ rpki-client -vvf rpki.apnic.net/member_repository/A91650A5/17DFB35A46E611E5B08DA17BC4F9AE02/2486E806F0E311EAA1C58D62C4F9AE02.roa File: 2486E806F0E311EAA1C58D62C4F9AE02.roa (raw, json) Hash identifier: o9TQ5zjWOlGJay3aR5mHzl6v5wxGxk4ue+WpHK/fjik= Subject key identifier: 48:C5:79:07:01:9F:BF:63:3B:90:50:5E:1C:19:55:E3:8A:1E:E1:44 Certificate issuer: /CN=A91650A5/serialNumber=408C999C3C1EC01644945B3477A9F2234EB5791C Certificate serial: 24F3 Authority key identifier: 40:8C:99:9C:3C:1E:C0:16:44:94:5B:34:77:A9:F2:23:4E:B5:79:1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIyZnDwewBZElFs0d6nyI061eRw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91650A5/17DFB35A46E611E5B08DA17BC4F9AE02/2486E806F0E311EAA1C58D62C4F9AE02.roa Signing time: Fri 24 Oct 2025 16:03:09 +0000 ROA not before: Fri 24 Oct 2025 16:03:09 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 19905 IP address blocks: 116.0.107.0/24 maxlen: 24 124.158.230.0/24 maxlen: 24 124.158.233.0/24 maxlen: 24 203.223.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91650A5/17DFB35A46E611E5B08DA17BC4F9AE02/QIyZnDwewBZElFs0d6nyI061eRw.crl rsync://rpki.apnic.net/member_repository/A91650A5/17DFB35A46E611E5B08DA17BC4F9AE02/QIyZnDwewBZElFs0d6nyI061eRw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIyZnDwewBZElFs0d6nyI061eRw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 15:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9459 (0x24f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91650A5, serialNumber=408C999C3C1EC01644945B3477A9F2234EB5791C Validity Not Before: Oct 24 16:03:09 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68fba33d-9291 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f8:1b:bf:d1:82:e3:62:51:15:3b:80:3c:26: 4c:eb:68:18:9a:5b:f2:83:1e:90:ed:de:56:1f:63: 05:17:74:02:92:b7:3c:6b:aa:af:d1:dc:03:18:5f: 0c:c6:08:d3:cd:f3:c8:c0:08:b6:2d:57:69:46:0d: d4:ce:10:c1:94:10:ba:f7:ab:57:09:a4:a8:3d:af: 68:c6:25:4d:5b:d4:23:dd:9c:98:d6:e1:ed:ea:c7: 0c:1b:e2:c6:91:b9:1b:6b:7e:52:44:c2:ce:76:86: 7e:78:69:e1:ff:5a:8e:44:67:3b:87:26:fe:79:75: 62:82:c0:54:5e:0b:2c:2d:37:0a:fb:a3:cc:28:0f: 32:56:96:b2:e4:16:8f:58:3c:02:dd:19:81:50:de: 7e:06:eb:6b:b6:e7:90:62:f6:f7:db:f9:97:c0:4a: 4c:8f:14:4c:69:24:a1:39:bb:5d:fd:55:bd:3f:45: e5:68:2c:16:dc:23:f0:14:21:e2:2d:90:b0:51:e4: 78:c8:f4:78:08:7a:62:ee:29:c4:3e:25:3c:70:30: 42:2d:30:c4:21:e2:d4:a9:71:1e:f6:5b:99:ab:2c: 7f:4e:55:11:80:99:48:c5:b4:0f:d2:28:37:71:63: 91:f7:2c:d7:5f:dc:07:1c:18:95:d1:82:24:4e:20: 0e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:C5:79:07:01:9F:BF:63:3B:90:50:5E:1C:19:55:E3:8A:1E:E1:44 X509v3 Authority Key Identifier: keyid:40:8C:99:9C:3C:1E:C0:16:44:94:5B:34:77:A9:F2:23:4E:B5:79:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91650A5/17DFB35A46E611E5B08DA17BC4F9AE02/QIyZnDwewBZElFs0d6nyI061eRw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIyZnDwewBZElFs0d6nyI061eRw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91650A5/17DFB35A46E611E5B08DA17BC4F9AE02/2486E806F0E311EAA1C58D62C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 116.0.107.0/24 124.158.230.0/24 124.158.233.0/24 203.223.145.0/24 Signature Algorithm: sha256WithRSAEncryption d1:41:f3:99:34:21:be:89:4a:cc:ef:1e:36:a6:ac:12:70:9b: a2:6d:9c:30:70:6a:fc:6f:00:11:8d:4d:14:8f:f1:5a:ff:89: 37:d0:a1:13:f6:4e:3b:8d:da:79:b7:15:8d:34:c5:39:a6:08: f4:f5:4b:16:81:74:1a:2e:c8:58:11:80:f6:7b:6d:66:1d:ca: 3b:b3:05:c2:76:9a:94:3c:4b:24:e6:f7:9f:5e:ea:f7:6b:23: b1:5c:a9:b9:72:05:47:c8:8a:1e:a7:c7:63:fd:84:5f:95:b9: 35:3f:f6:19:2b:4e:a9:ff:59:ba:14:97:26:45:02:79:d4:16: 26:8a:54:66:6b:19:43:f8:24:ff:67:01:54:ab:46:1c:2b:40: 53:31:ae:76:6c:98:ed:a2:5e:16:ae:39:21:68:55:47:f1:f2: ea:0e:d6:85:7a:b5:ca:ac:82:34:8f:e1:a9:03:61:e7:00:a2: 43:83:82:03:02:c2:f2:52:26:00:45:cf:8d:06:4c:38:3b:a4: 50:c0:df:a8:c9:15:e3:34:c2:dc:de:54:2b:c5:72:a9:c1:36: 4f:14:cf:69:a1:14:52:8b:5f:70:85:05:00:b5:fa:05:26:5a: b2:81:dc:8c:e4:6d:8b:b9:05:00:0b:31:34:47:2b:f5:06:da: 34:3f:d6:a8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICJPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjUwQTUxMTAvBgNVBAUTKDQwOEM5OTlDM0MxRUMwMTY0NDk0NUIzNDc3QTlGMjIz NEVCNTc5MUMwHhcNMjUxMDI0MTYwMzA5WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGZiYTMzZC05MjkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmfgbv9GC42JRFTuAPCZM62gYmlvygx6Q7d5WH2MFF3QCkrc8a6qv0dwDGF8M xgjTzfPIwAi2LVdpRg3UzhDBlBC696tXCaSoPa9oxiVNW9Qj3ZyY1uHt6scMG+LG kbkba35SRMLOdoZ+eGnh/1qORGc7hyb+eXVigsBUXgssLTcK+6PMKA8yVpay5BaP WDwC3RmBUN5+ButrtueQYvb32/mXwEpMjxRMaSShObtd/VW9P0XlaCwW3CPwFCHi LZCwUeR4yPR4CHpi7inEPiU8cDBCLTDEIeLUqXEe9luZqyx/TlURgJlIxbQP0ig3 cWOR9yzXX9wHHBiV0YIkTiAO8QIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFEjFeQcB n79jO5BQXhwZVeOKHuFEMB8GA1UdIwQYMBaAFECMmZw8HsAWRJRbNHep8iNOtXkc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTBBNS8xN0RGQjM1QTQ2 RTYxMUU1QjA4REExN0JDNEY5QUUwMi9RSXlabkR3ZXdCWkVsRnMwZDZueUkwNjFl UncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FJeVpuRHdld0JaRWxGczBkNm55STA2MWVSdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjUwQTUvMTdERkIzNUE0NkU2MTFFNUIwOERBMTdCQzRGOUFFMDIvMjQ4NkU4MDZG MEUzMTFFQUExQzU4RDYyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBAB0AGsDBAB8nuYDBAB8nukDBADL35EwDQYJKoZIhvcNAQEL BQADggEBANFB85k0Ib6JSszvHjamrBJwm6JtnDBwavxvABGNTRSP8Vr/iTfQoRP2 TjuN2nm3FY00xTmmCPT1SxaBdBouyFgRgPZ7bWYdyjuzBcJ2mpQ8SyTm959e6vdr I7FcqblyBUfIih6nx2P9hF+VuTU/9hkrTqn/WboUlyZFAnnUFiaKVGZrGUP4JP9n AVSrRhwrQFMxrnZsmO2iXhauOSFoVUfx8uoO1oV6tcqsgjSP4akDYecAokODggMC wvJSJgBFz40GTDg7pFDA36jJFeM0wtzeVCvFcqnBNk8Uz2mhFFKLX3CFBQC1+gUm WrKB3IzkbYu5BQALMTRHK/UG2jQ/1qg= -----END CERTIFICATE-----Generated at Tue Nov 4 17:01:51 2025 by rpki-client