$ rpki-client -vvf rpki.apnic.net/member_repository/A91A29A1/F8F0EC961E5011EB82078626C4F9AE02/D39C89F8B85D11F08E813B1BC4F9AE02.roa File: D39C89F8B85D11F08E813B1BC4F9AE02.roa (raw, json) Hash identifier: CKukLwiY2YCCZ2/mXRrRk0YTk3jfh0JJwF1Hg6Cz4Og= Subject key identifier: B3:9C:C6:5F:09:A2:F4:D1:58:FF:42:D3:73:D2:5D:D7:20:4B:64:24 Certificate issuer: /CN=A91A29A1/serialNumber=F1BB79E56D2B098692CC7D1F226F756C7961E19B Certificate serial: 07BA Authority key identifier: F1:BB:79:E5:6D:2B:09:86:92:CC:7D:1F:22:6F:75:6C:79:61:E1:9B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bt55W0rCYaSzH0fIm91bHlh4Zs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A29A1/F8F0EC961E5011EB82078626C4F9AE02/D39C89F8B85D11F08E813B1BC4F9AE02.roa Signing time: Mon 03 Nov 2025 02:35:57 +0000 ROA not before: Mon 03 Nov 2025 02:35:57 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 4764 IP address blocks: 119.18.40.0/21 maxlen: 21 2407:600::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A29A1/F8F0EC961E5011EB82078626C4F9AE02/8bt55W0rCYaSzH0fIm91bHlh4Zs.crl rsync://rpki.apnic.net/member_repository/A91A29A1/F8F0EC961E5011EB82078626C4F9AE02/8bt55W0rCYaSzH0fIm91bHlh4Zs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bt55W0rCYaSzH0fIm91bHlh4Zs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:28:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1978 (0x7ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A29A1, serialNumber=F1BB79E56D2B098692CC7D1F226F756C7961E19B Validity Not Before: Nov 3 02:35:57 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=6908150d-ff1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:df:5b:60:c3:8b:0c:a2:18:64:11:42:d1:52: 33:6a:86:5b:9a:9e:01:9c:ba:c7:cb:c2:4e:4d:40: 3c:09:99:65:9c:24:24:02:66:3b:33:79:27:4b:20: 1f:db:23:81:9e:3c:96:2c:f7:5c:36:ce:ea:68:29: d9:45:26:5b:e8:43:81:56:bf:ed:d6:10:fd:78:53: 38:5b:69:17:eb:13:a6:53:99:e0:22:ed:0d:f6:f5: 4a:5c:3e:4e:46:95:97:60:32:8e:42:01:88:8a:ac: 44:07:0f:c2:a9:ff:45:f5:a5:1e:82:81:80:9b:2a: 90:10:c8:18:19:9c:3d:22:d2:79:93:ea:61:71:d9: d2:10:2d:c1:09:cc:03:7a:aa:26:b6:16:9c:4e:4e: 3c:1b:16:18:e3:e1:92:43:d0:9d:d5:34:22:86:5c: f5:3f:4c:e6:69:69:8a:05:ec:10:55:4b:a9:62:bf: f4:19:9c:9c:fb:de:f2:32:1d:cd:f1:5a:f7:d9:8e: 87:e0:2f:8b:f0:45:07:0c:12:7e:bb:b0:3e:06:d1: 7f:7a:9b:6c:11:74:6c:44:99:bc:e1:7e:52:be:47: ab:5f:83:4c:06:84:37:41:6e:51:71:a3:ea:62:83: 24:95:a9:21:6c:84:bf:e1:e7:b0:16:71:9c:92:28: 5b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:9C:C6:5F:09:A2:F4:D1:58:FF:42:D3:73:D2:5D:D7:20:4B:64:24 X509v3 Authority Key Identifier: keyid:F1:BB:79:E5:6D:2B:09:86:92:CC:7D:1F:22:6F:75:6C:79:61:E1:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A29A1/F8F0EC961E5011EB82078626C4F9AE02/8bt55W0rCYaSzH0fIm91bHlh4Zs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bt55W0rCYaSzH0fIm91bHlh4Zs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A29A1/F8F0EC961E5011EB82078626C4F9AE02/D39C89F8B85D11F08E813B1BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 119.18.40.0/21 IPv6: 2407:600::/32 Signature Algorithm: sha256WithRSAEncryption 51:4c:39:15:f8:6c:4e:0a:76:32:4a:6a:61:c0:98:a5:50:9a: 5d:b1:1a:d2:6e:19:62:27:3a:40:29:29:01:ad:70:42:2f:59: 7b:21:2c:ac:34:b2:0f:b7:e4:f3:63:3c:3b:ee:51:6a:e0:df: 3e:4c:8b:9e:56:ed:06:c2:fc:28:18:fe:36:61:b8:90:66:09: 05:29:1d:fb:f6:09:78:13:34:e8:44:03:72:50:da:e0:bf:8e: de:4d:14:33:2c:9b:32:62:80:20:c6:2c:24:88:7d:e4:8a:02: ff:b9:e6:55:3c:82:71:ae:7d:ea:10:ae:e6:7a:17:dc:05:70: 38:6e:a4:23:fd:2a:85:4c:bc:b0:b6:65:95:58:38:e8:f0:34: f1:a0:5a:4c:06:91:5b:a0:2e:c4:ea:b1:33:92:c9:fc:6d:8e: 16:2d:5b:2f:61:53:86:17:ff:b6:07:42:12:6e:c5:99:ef:1d: 5b:82:94:9f:44:30:26:59:58:a0:a2:3d:02:3f:7b:ba:43:7e: 10:b6:68:fb:1b:94:7b:22:c0:f2:dc:31:b5:1e:1a:90:b2:e5: b1:1b:45:a2:c5:c7:72:2f:57:bd:1c:81:89:f6:08:57:3a:41: 88:61:fe:c4:1b:ff:33:ce:6f:8c:6d:cb:05:dd:c7:7d:6a:f2: 17:2d:47:2a -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICB7owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTI5QTExMTAvBgNVBAUTKEYxQkI3OUU1NkQyQjA5ODY5MkNDN0QxRjIyNkY3NTZD Nzk2MUUxOUIwHhcNMjUxMTAzMDIzNTU3WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTA4MTUwZC1mZjFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqd9bYMOLDKIYZBFC0VIzaoZbmp4BnLrHy8JOTUA8CZllnCQkAmY7M3knSyAf 2yOBnjyWLPdcNs7qaCnZRSZb6EOBVr/t1hD9eFM4W2kX6xOmU5ngIu0N9vVKXD5O RpWXYDKOQgGIiqxEBw/Cqf9F9aUegoGAmyqQEMgYGZw9ItJ5k+phcdnSEC3BCcwD eqomthacTk48GxYY4+GSQ9Cd1TQihlz1P0zmaWmKBewQVUupYr/0GZyc+97yMh3N 8Vr32Y6H4C+L8EUHDBJ+u7A+BtF/eptsEXRsRJm84X5SvkerX4NMBoQ3QW5RcaPq YoMklakhbIS/4eewFnGckihbuQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFLOcxl8J ovTRWP9C03PSXdcgS2QkMB8GA1UdIwQYMBaAFPG7eeVtKwmGksx9HyJvdWx5YeGb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjlBMS9GOEYwRUM5NjFF NTAxMUVCODIwNzg2MjZDNEY5QUUwMi84YnQ1NVcwckNZYVN6SDBmSW05MWJIbGg0 WnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhidDU1VzByQ1lhU3pIMGZJbTkxYkhsaDRacy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTI5QTEvRjhGMEVDOTYxRTUwMTFFQjgyMDc4NjI2QzRGOUFFMDIvRDM5Qzg5RjhC ODVEMTFGMDhFODEzQjFCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAN3EigwDQQCAAIwBwMFACQHBgAwDQYJKoZIhvcNAQELBQAD ggEBAFFMORX4bE4KdjJKamHAmKVQml2xGtJuGWInOkApKQGtcEIvWXshLKw0sg+3 5PNjPDvuUWrg3z5Mi55W7QbC/CgY/jZhuJBmCQUpHfv2CXgTNOhEA3JQ2uC/jt5N FDMsmzJigCDGLCSIfeSKAv+55lU8gnGufeoQruZ6F9wFcDhupCP9KoVMvLC2ZZVY OOjwNPGgWkwGkVugLsTqsTOSyfxtjhYtWy9hU4YX/7YHQhJuxZnvHVuClJ9EMCZZ WKCiPQI/e7pDfhC2aPsblHsiwPLcMbUeGpCy5bEbRaLFx3IvV70cgYn2CFc6QYhh /sQb/zPOb4xtywXdx31q8hctRyo= -----END CERTIFICATE-----Generated at Wed Nov 5 06:58:37 2025 by rpki-client