$ rpki-client -vvf rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/B7E86B40595311EC9ECF510BC4F9AE02.roa File: B7E86B40595311EC9ECF510BC4F9AE02.roa (raw, json) Hash identifier: Lnyzv8UILVvSxBwFCz0H7Yvcdy+f/I6Ub3qLIXVIRQ4= Subject key identifier: 79:3F:B6:D9:CF:38:0D:96:27:A9:4A:0E:0C:53:77:56:E9:A1:EB:C7 Certificate issuer: /CN=A919C47E/serialNumber=E79E9B5212637E33CA5DCB6176909CE19621BA64 Certificate serial: 0499 Authority key identifier: E7:9E:9B:52:12:63:7E:33:CA:5D:CB:61:76:90:9C:E1:96:21:BA:64 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/556bUhJjfjPKXcthdpCc4ZYhumQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/B7E86B40595311EC9ECF510BC4F9AE02.roa Signing time: Sat 04 Oct 2025 17:16:01 +0000 ROA not before: Sat 04 Oct 2025 17:16:01 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 138398 IP address blocks: 91.208.208.0/24 maxlen: 24 91.208.228.0/24 maxlen: 24 91.208.230.0/24 maxlen: 24 91.208.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/556bUhJjfjPKXcthdpCc4ZYhumQ.crl rsync://rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/556bUhJjfjPKXcthdpCc4ZYhumQ.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/556bUhJjfjPKXcthdpCc4ZYhumQ.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:05:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1177 (0x499) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C47E, serialNumber=E79E9B5212637E33CA5DCB6176909CE19621BA64 Validity Not Before: Oct 4 17:16:01 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68e15651-d0b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:bd:b2:76:07:4f:aa:f3:a5:66:7e:4a:eb:1a: ec:43:0a:71:19:d2:e4:35:de:6c:c1:f1:4f:be:b9: ea:a0:b9:e6:c6:b4:62:00:91:62:b5:c2:07:ab:8d: de:bb:d7:ff:a5:ba:fb:cb:5c:c6:a1:70:8f:53:f6: 92:dd:a0:69:0d:f3:d3:f9:9c:dc:68:72:1e:93:bd: 1e:37:13:23:3c:99:1b:f1:33:a4:9e:b3:cc:86:f1: 7e:c4:a1:ad:6b:e0:f2:2d:b9:36:86:ab:8e:67:6b: 6d:58:0e:73:aa:6b:e1:9e:6b:ce:19:c3:b5:49:23: 98:ac:56:38:4b:13:e8:d1:32:31:d4:fb:0d:a5:63: 05:0c:74:02:b9:1a:0d:95:22:d3:ff:c7:0a:c0:c2: c4:53:3d:b5:ef:38:44:5a:06:71:74:32:70:f8:e3: fc:fe:08:10:aa:ad:e8:df:a0:bc:71:d9:95:35:96: 5b:8f:ad:88:17:b9:f7:e4:25:59:a2:a1:75:f2:f9: cd:a5:3f:24:4e:07:34:63:53:bd:92:4b:b3:a6:9b: c3:c8:6d:d9:69:94:42:28:19:45:24:f0:de:18:1a: a9:f9:41:1a:ff:a5:bb:23:83:4a:f5:13:13:f5:69: 3b:c9:f4:bb:53:d9:3b:6b:1b:fb:60:e5:8d:c3:c0: 12:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:3F:B6:D9:CF:38:0D:96:27:A9:4A:0E:0C:53:77:56:E9:A1:EB:C7 X509v3 Authority Key Identifier: keyid:E7:9E:9B:52:12:63:7E:33:CA:5D:CB:61:76:90:9C:E1:96:21:BA:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/556bUhJjfjPKXcthdpCc4ZYhumQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/556bUhJjfjPKXcthdpCc4ZYhumQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/B7E86B40595311EC9ECF510BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 91.208.208.0/24 91.208.228.0/24 91.208.230.0/24 91.208.233.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:ee:65:85:2d:f0:9b:59:1b:9c:7d:e9:04:a5:c4:c5:7c:bd: 92:d3:c4:2a:b9:25:42:f9:8a:48:15:40:67:2e:90:85:67:d5: 50:7f:5f:99:6b:69:82:56:72:f9:e8:c1:5f:a4:38:32:ad:c2: 0d:29:77:95:cd:9a:b6:40:23:3a:7e:c7:ae:d5:86:c9:74:5f: 92:58:3a:e3:7d:2e:91:08:76:7b:8a:91:55:6d:7f:80:28:d5: f7:37:22:37:fc:cc:20:75:0d:e8:be:3d:7e:83:7a:37:ca:ed: fb:62:c7:bb:ce:48:77:be:87:38:26:af:f0:eb:f6:6e:cf:46: aa:26:7c:d1:7a:d6:56:f3:68:1d:1e:a0:d8:6a:57:cf:a0:e6: 25:b2:88:3e:63:1f:27:4d:1b:48:73:14:f6:f6:4e:f8:50:e9: f6:a3:ce:3f:49:77:1a:b4:ea:0f:46:0f:03:1a:c5:d3:34:63: 4d:71:57:0e:ff:df:94:53:56:90:e6:a2:e2:39:b0:84:29:ea: 30:fa:7f:fa:d4:5e:c4:ce:ee:54:01:57:45:70:46:42:4a:13: 0e:f1:d9:90:60:fb:41:bf:a4:3b:ca:ce:d9:fb:25:2d:c3:cf: c6:df:ce:82:02:1b:41:35:60:48:24:b3:66:b9:2a:16:0c:bf: 2c:5c:fd:77 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICBJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM0N0UxMTAvBgNVBAUTKEU3OUU5QjUyMTI2MzdFMzNDQTVEQ0I2MTc2OTA5Q0Ux OTYyMUJBNjQwHhcNMjUxMDA0MTcxNjAxWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGUxNTY1MS1kMGIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1L2ydgdPqvOlZn5K6xrsQwpxGdLkNd5swfFPvrnqoLnmxrRiAJFitcIHq43e u9f/pbr7y1zGoXCPU/aS3aBpDfPT+ZzcaHIek70eNxMjPJkb8TOknrPMhvF+xKGt a+DyLbk2hquOZ2ttWA5zqmvhnmvOGcO1SSOYrFY4SxPo0TIx1PsNpWMFDHQCuRoN lSLT/8cKwMLEUz217zhEWgZxdDJw+OP8/ggQqq3o36C8cdmVNZZbj62IF7n35CVZ oqF18vnNpT8kTgc0Y1O9kkuzppvDyG3ZaZRCKBlFJPDeGBqp+UEa/6W7I4NK9RMT 9Wk7yfS7U9k7axv7YOWNw8ASYQIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFHk/ttnP OA2WJ6lKDgxTd1bpoevHMB8GA1UdIwQYMBaAFOeem1ISY34zyl3LYXaQnOGWIbpk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzQ3RS8xRTc1MzY1MDU5 NEUxMUVDQTA2MjkyNTZDNEY5QUUwMi81NTZiVWhKamZqUEtYY3RoZHBDYzRaWWh1 bVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzU1NmJVaEpqZmpQS1hjdGhkcENjNFpZaHVtUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUM0N0UvMUU3NTM2NTA1OTRFMTFFQ0EwNjI5MjU2QzRGOUFFMDIvQjdFODZCNDA1 OTUzMTFFQzlFQ0Y1MTBCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBABb0NADBABb0OQDBABb0OYDBABb0OkwDQYJKoZIhvcNAQEL BQADggEBAD7uZYUt8JtZG5x96QSlxMV8vZLTxCq5JUL5ikgVQGcukIVn1VB/X5lr aYJWcvnowV+kODKtwg0pd5XNmrZAIzp+x67Vhsl0X5JYOuN9LpEIdnuKkVVtf4Ao 1fc3Ijf8zCB1Dei+PX6DejfK7ftix7vOSHe+hzgmr/Dr9m7PRqomfNF61lbzaB0e oNhqV8+g5iWyiD5jHydNG0hzFPb2TvhQ6fajzj9Jdxq06g9GDwMaxdM0Y01xVw7/ 35RTVpDmouI5sIQp6jD6f/rUXsTO7lQBV0VwRkJKEw7x2ZBg+0G/pDvKztn7JS3D z8bfzoICG0E1YEgks2a5KhYMvyxc/Xc= -----END CERTIFICATE-----Generated at Wed Nov 5 21:40:24 2025 by rpki-client