$ rpki-client -vvf rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/9781D91CB36B11EEA3394737C4F9AE02.roa File: 9781D91CB36B11EEA3394737C4F9AE02.roa (raw, json) Hash identifier: HWgtJZZShVOjpJyOjZHOrob9TQCrmSDpAAlvfRMr4WY= Subject key identifier: 4E:1F:B2:0A:9A:13:1F:E2:83:C1:F1:AF:93:28:5D:DB:5E:18:D5:35 Certificate issuer: /CN=A91991D3/serialNumber=19581338A9D63D95A96D1711623E2F660EB0FB17 Certificate serial: 01D6 Authority key identifier: 19:58:13:38:A9:D6:3D:95:A9:6D:17:11:62:3E:2F:66:0E:B0:FB:17 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/9781D91CB36B11EEA3394737C4F9AE02.roa Signing time: Mon 03 Nov 2025 02:17:27 +0000 ROA not before: Mon 03 Nov 2025 02:17:27 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 34985 IP address blocks: 185.254.240.0/24 maxlen: 24 185.254.241.0/24 maxlen: 24 194.246.40.0/24 maxlen: 24 194.246.41.0/24 maxlen: 24 194.246.42.0/24 maxlen: 24 194.246.43.0/24 maxlen: 24 213.139.233.0/24 maxlen: 24 213.139.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.crl rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:19:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 470 (0x1d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91991D3, serialNumber=19581338A9D63D95A96D1711623E2F660EB0FB17 Validity Not Before: Nov 3 02:17:27 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=690810b7-0ffc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:60:ce:a7:c7:fc:9a:d7:be:21:b9:9d:b3:09: a3:b2:b7:bd:a1:81:97:60:b3:1b:13:51:b6:4b:d0: d9:1b:9a:cd:91:dc:37:3e:78:fb:38:35:96:8d:d3: 9b:b9:a9:52:a5:a0:5c:19:3c:8c:1e:a4:9e:ca:78: 3c:d0:ff:cd:f3:b7:e6:97:61:21:95:94:b7:02:86: ff:af:72:3e:61:35:96:00:f2:ce:e8:fc:43:91:11: e1:0d:44:11:8b:f6:e2:2b:2c:8d:40:6a:0c:63:c9: 7d:6d:39:30:0c:36:33:3a:c2:3a:23:63:ee:4e:71: 9e:0e:75:d4:48:72:ea:07:95:bd:c0:59:15:1e:a8: 70:e0:93:db:3c:4e:be:ae:22:e3:1b:90:9e:c1:17: 8c:4b:1f:eb:e0:a2:c7:36:ac:70:b6:6b:89:6e:26: 88:b0:2e:e6:f5:ce:70:41:62:3c:f9:8a:5d:7b:84: 05:da:d9:59:e1:be:dd:96:ad:3d:0d:89:50:d0:d0: 1e:aa:e0:dc:43:71:c9:f8:e9:eb:b8:d1:f1:34:e7: 63:3e:2c:00:91:f3:82:68:32:c3:1c:6b:ae:80:69: 0a:9d:40:cf:4e:c1:2f:ef:4c:b5:c5:db:1f:e7:ac: c0:53:67:ee:1d:45:8c:fd:f4:4d:2a:3d:6f:6d:67: 56:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:1F:B2:0A:9A:13:1F:E2:83:C1:F1:AF:93:28:5D:DB:5E:18:D5:35 X509v3 Authority Key Identifier: keyid:19:58:13:38:A9:D6:3D:95:A9:6D:17:11:62:3E:2F:66:0E:B0:FB:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/9781D91CB36B11EEA3394737C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 185.254.240.0/23 194.246.40.0/22 213.139.233.0-213.139.234.255 Signature Algorithm: sha256WithRSAEncryption 97:08:ff:a2:36:d5:27:6b:a9:de:75:53:85:df:71:e2:4a:4b: bc:42:f3:98:f1:39:04:88:90:a2:db:35:7d:75:28:64:6b:6e: 46:11:1f:17:0e:c3:5e:c0:89:5a:a7:39:f7:be:52:e0:1c:33: 1a:2d:9a:54:77:3f:62:2d:6d:56:3d:d4:2e:bf:a2:98:ec:b2: 0d:ee:c5:14:54:e8:13:59:cb:f5:1c:84:e6:2c:d2:88:c9:20: c6:24:7a:01:f8:3e:70:3e:4a:10:54:43:b2:2b:d3:1f:cd:9f: 79:ca:6a:d8:e4:0f:d5:0a:67:83:3a:ac:9f:9f:bf:2e:be:29: ef:bc:1d:41:5d:8e:6b:e1:ec:00:6c:9e:c9:29:81:12:09:eb: 17:ef:25:54:bb:2c:11:6e:d4:84:e8:7b:12:e3:3f:e2:45:90: e3:7a:2d:6d:78:fe:a1:3e:30:2f:d9:01:a2:7e:7a:06:e4:f5: 4e:02:fa:53:54:75:81:cb:99:ab:31:80:22:82:91:e4:67:49: ec:92:bc:61:fb:9c:ee:d7:8f:22:26:fa:84:b0:24:7f:b1:00: 1f:75:ad:08:86:75:2b:23:17:a6:61:4f:31:3d:39:f3:24:41: f2:53:04:78:c0:85:00:a6:eb:6f:f2:a1:06:cb:33:a1:b0:f8: 76:61:9e:53 -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgICAdYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTkxRDMxMTAvBgNVBAUTKDE5NTgxMzM4QTlENjNEOTVBOTZEMTcxMTYyM0UyRjY2 MEVCMEZCMTcwHhcNMjUxMTAzMDIxNzI3WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTA4MTBiNy0wZmZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzmDOp8f8mte+Ibmdswmjsre9oYGXYLMbE1G2S9DZG5rNkdw3Pnj7ODWWjdOb ualSpaBcGTyMHqSeyng80P/N87fml2EhlZS3Aob/r3I+YTWWAPLO6PxDkRHhDUQR i/biKyyNQGoMY8l9bTkwDDYzOsI6I2PuTnGeDnXUSHLqB5W9wFkVHqhw4JPbPE6+ riLjG5CewReMSx/r4KLHNqxwtmuJbiaIsC7m9c5wQWI8+Ypde4QF2tlZ4b7dlq09 DYlQ0NAequDcQ3HJ+OnruNHxNOdjPiwAkfOCaDLDHGuugGkKnUDPTsEv70y1xdsf 56zAU2fuHUWM/fRNKj1vbWdWNwIDAQABo4ICqTCCAqUwHQYDVR0OBBYEFE4fsgqa Ex/ig8Hxr5MoXdteGNU1MB8GA1UdIwQYMBaAFBlYEzip1j2VqW0XEWI+L2YOsPsX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTFEMy82MjlFOEIyMDNC MjMxMUVFQTQzQjAyMTlDNEY5QUUwMi9HVmdUT0tuV1BaV3BiUmNSWWo0dlpnNnct eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0dWZ1RPS25XUFpXcGJSY1JZajR2Wmc2dy14Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTkxRDMvNjI5RThCMjAzQjIzMTFFRUE0M0IwMjE5QzRGOUFFMDIvOTc4MUQ5MUNC MzZCMTFFRUEzMzk0NzM3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMwYIKwYBBQUHAQcBAf8E JDAiMCAEAgABMBoDBAG5/vADBALC9igwDAMEANWL6QMEANWL6jANBgkqhkiG9w0B AQsFAAOCAQEAlwj/ojbVJ2up3nVThd9x4kpLvELzmPE5BIiQots1fXUoZGtuRhEf Fw7DXsCJWqc5975S4BwzGi2aVHc/Yi1tVj3ULr+imOyyDe7FFFToE1nL9RyE5izS iMkgxiR6Afg+cD5KEFRDsivTH82fecpq2OQP1Qpngzqsn5+/Lr4p77wdQV2Oa+Hs AGyeySmBEgnrF+8lVLssEW7UhOh7EuM/4kWQ43otbXj+oT4wL9kBon56BuT1TgL6 U1R1gcuZqzGAIoKR5GdJ7JK8Yfuc7tePIib6hLAkf7EAH3WtCIZ1KyMXpmFPMT05 8yRB8lMEeMCFAKbrb/KhBsszobD4dmGeUw== -----END CERTIFICATE-----Generated at Wed Nov 5 20:25:53 2025 by rpki-client