$ rpki-client -vvf rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/9609416A33D611EFB34E2C40C4F9AE02.roa File: 9609416A33D611EFB34E2C40C4F9AE02.roa (raw, json) Hash identifier: yTRObH5HORzIjpQc8hjpzukLHQFJTBfO9ossVqi4KUU= Subject key identifier: 2F:EE:EB:2C:D9:95:F8:B8:CC:08:BB:BB:9D:13:F0:DC:AF:36:C4:E7 Certificate issuer: /CN=A91813E4/serialNumber=9068DE20332CBD1DB39B237435B174DE70994F03 Certificate serial: 062E Authority key identifier: 90:68:DE:20:33:2C:BD:1D:B3:9B:23:74:35:B1:74:DE:70:99:4F:03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kGjeIDMsvR2zmyN0NbF03nCZTwM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/9609416A33D611EFB34E2C40C4F9AE02.roa Signing time: Tue 28 Oct 2025 22:25:45 +0000 ROA not before: Tue 28 Oct 2025 22:25:45 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 153039 IP address blocks: 202.12.127.0/24 maxlen: 24 2001:df6:36c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.crl rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kGjeIDMsvR2zmyN0NbF03nCZTwM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:50:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1582 (0x62e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91813E4, serialNumber=9068DE20332CBD1DB39B237435B174DE70994F03 Validity Not Before: Oct 28 22:25:45 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=690142e9-d63f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:6a:04:0e:a0:1b:4f:10:14:4e:06:ab:b7:e5: 8b:ea:15:5e:73:54:24:0b:86:4b:cb:dc:22:ba:8e: ab:e2:3d:7c:3e:f6:a2:24:c7:2e:a0:c1:d4:87:f8: d4:5c:7c:1b:34:2a:14:53:db:c2:49:03:2a:5c:cc: d0:f8:f4:4b:c4:b8:0f:f6:de:bb:80:cb:28:5b:24: 45:1a:15:97:d9:4b:21:f0:12:21:1c:b5:33:fb:c3: 7f:91:98:09:4f:40:88:b9:1f:bd:df:8b:94:e6:20: 6a:4d:8e:63:a3:a6:9f:e8:c0:50:55:08:f9:e8:04: c1:f7:bf:31:72:73:6e:ea:26:3e:27:7e:9f:11:92: 46:73:60:c4:9f:e2:b6:a1:96:8f:7d:75:1b:4f:d4: bf:cd:44:69:0f:39:2f:ff:c8:e2:66:46:b0:6b:90: 6b:0c:5a:33:b6:a8:8c:e2:b2:03:b5:1b:7e:2b:9d: a7:38:7c:0e:87:1e:f4:72:19:1d:43:2f:50:74:54: 89:48:cf:63:1e:54:51:2c:50:12:e7:f5:82:1b:ca: b0:4c:e9:50:d4:d6:38:46:b7:c1:db:18:38:be:24: 76:3a:16:c1:1f:41:df:78:e8:34:ef:e8:79:fa:c6: 02:b7:ea:f8:5c:df:54:b8:dc:ee:0a:69:15:43:7c: 8c:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:EE:EB:2C:D9:95:F8:B8:CC:08:BB:BB:9D:13:F0:DC:AF:36:C4:E7 X509v3 Authority Key Identifier: keyid:90:68:DE:20:33:2C:BD:1D:B3:9B:23:74:35:B1:74:DE:70:99:4F:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kGjeIDMsvR2zmyN0NbF03nCZTwM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/9609416A33D611EFB34E2C40C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.12.127.0/24 IPv6: 2001:df6:36c0::/48 Signature Algorithm: sha256WithRSAEncryption 85:bb:d6:fa:4e:4e:27:e8:8f:1d:c1:36:f8:32:b1:9a:ab:d7: 30:6f:e3:79:81:e4:96:1a:24:26:df:77:48:32:ee:3e:15:d7: de:e7:4c:bd:3a:10:9e:11:78:cd:06:61:a6:73:a4:9e:d1:4b: e0:36:73:14:11:ab:f2:94:86:4f:48:f3:2d:ee:6b:85:7c:f1: a0:ca:3a:9b:3e:f1:6d:d4:27:76:b4:3e:d7:e8:68:5f:4b:f0: d8:17:96:db:4d:48:57:54:dd:b4:13:09:d3:0f:7c:f0:81:56: 9a:06:28:fd:55:fe:88:55:2a:83:20:36:4f:0f:28:d9:92:01: b5:b8:10:14:f5:d0:fc:27:ba:c9:bc:ad:6b:47:81:cc:aa:dc: 16:f5:98:e1:04:5a:de:7a:be:7b:17:e2:29:49:a0:5d:d8:7a: cc:9f:10:31:c5:0d:ac:db:92:ed:fa:b3:44:46:5e:b1:49:73: 71:4f:7c:ba:89:ae:85:5a:51:c6:3d:04:d1:44:4e:69:37:9d: 2e:08:0a:17:18:3d:50:f8:d2:e9:9d:ab:ae:34:c7:9f:16:55: 6c:74:05:7a:f6:94:66:32:9d:78:f1:5c:b2:b1:a4:55:8b:a7: 11:1a:17:6b:44:42:cf:44:38:5f:84:b8:8a:36:56:cc:25:9b: 69:23:7a:ae -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICBi4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODEzRTQxMTAvBgNVBAUTKDkwNjhERTIwMzMyQ0JEMURCMzlCMjM3NDM1QjE3NERF NzA5OTRGMDMwHhcNMjUxMDI4MjIyNTQ1WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTAxNDJlOS1kNjNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx2oEDqAbTxAUTgart+WL6hVec1QkC4ZLy9wiuo6r4j18PvaiJMcuoMHUh/jU XHwbNCoUU9vCSQMqXMzQ+PRLxLgP9t67gMsoWyRFGhWX2Ush8BIhHLUz+8N/kZgJ T0CIuR+934uU5iBqTY5jo6af6MBQVQj56ATB978xcnNu6iY+J36fEZJGc2DEn+K2 oZaPfXUbT9S/zURpDzkv/8jiZkawa5BrDFoztqiM4rIDtRt+K52nOHwOhx70chkd Qy9QdFSJSM9jHlRRLFAS5/WCG8qwTOlQ1NY4RrfB2xg4viR2OhbBH0HfeOg07+h5 +sYCt+r4XN9UuNzuCmkVQ3yMewIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFC/u6yzZ lfi4zAi7u50T8NyvNsTnMB8GA1UdIwQYMBaAFJBo3iAzLL0ds5sjdDWxdN5wmU8D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTNFNC8yNzUwNTg4MkI5 QTIxMUVCOTVDNjg4MzlDNEY5QUUwMi9rR2plSURNc3ZSMnpteU4wTmJGMDNuQ1pU d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tHamVJRE1zdlIyem15TjBOYkYwM25DWlR3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODEzRTQvMjc1MDU4ODJCOUEyMTFFQjk1QzY4ODM5QzRGOUFFMDIvOTYwOTQxNkEz M0Q2MTFFRkIzNEUyQzQwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBADKDH8wDwQCAAIwCQMHACABDfY2wDANBgkqhkiG9w0BAQsF AAOCAQEAhbvW+k5OJ+iPHcE2+DKxmqvXMG/jeYHklhokJt93SDLuPhXX3udMvToQ nhF4zQZhpnOkntFL4DZzFBGr8pSGT0jzLe5rhXzxoMo6mz7xbdQndrQ+1+hoX0vw 2BeW201IV1TdtBMJ0w988IFWmgYo/VX+iFUqgyA2Tw8o2ZIBtbgQFPXQ/Ce6ybyt a0eBzKrcFvWY4QRa3nq+exfiKUmgXdh6zJ8QMcUNrNuS7fqzREZesUlzcU98uomu hVpRxj0E0UROaTedLggKFxg9UPjS6Z2rrjTHnxZVbHQFevaUZjKdePFcsrGkVYun ERoXa0RCz0Q4X4S4ijZWzCWbaSN6rg== -----END CERTIFICATE-----Generated at Wed Nov 5 15:40:51 2025 by rpki-client