$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A0EF6C88655D11ED8378684BC4F9AE02.roa File: A0EF6C88655D11ED8378684BC4F9AE02.roa (raw, json) Hash identifier: vUn/UdR0AhzF6Va8inrwA9a7mKrbfAcSl3FvAhJB0vw= Subject key identifier: 22:1C:A9:13:E8:00:4C:86:CF:CF:C9:FC:90:10:FF:BC:64:2F:9C:FB Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4E45 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A0EF6C88655D11ED8378684BC4F9AE02.roa Signing time: Thu 28 Aug 2025 14:57:59 +0000 ROA not before: Thu 28 Aug 2025 14:57:59 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 63747 IP address blocks: 45.252.240.0/22 maxlen: 23 45.252.240.0/24 maxlen: 24 45.252.241.0/24 maxlen: 24 45.252.242.0/24 maxlen: 24 45.252.243.0/24 maxlen: 24 45.252.244.0/22 maxlen: 24 103.221.224.0/22 maxlen: 24 103.221.228.0/22 maxlen: 24 2001:df2:ce00::/48 maxlen: 48 2405:53c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:37:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20037 (0x4e45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Aug 28 14:57:59 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68b06e76-0e6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:9a:28:63:88:19:74:16:ff:10:31:25:bb:b6: 97:61:25:54:54:16:78:1a:50:ae:c6:b4:a8:f4:a2: 36:2e:8c:ba:0b:e4:f6:2b:e5:52:6d:31:64:8f:be: 10:be:4e:ec:7f:4d:40:b4:9f:cf:22:61:2f:e8:a7: 2c:6b:c2:7b:30:68:d9:c1:a6:1c:8c:1b:d7:53:cf: d7:db:12:2c:77:8e:9c:8f:12:88:b6:b9:16:cb:ff: d5:a7:b3:a6:a3:34:c6:50:23:85:80:e7:1c:5f:c1: 6b:17:74:f5:3a:9e:63:88:15:8b:65:11:93:65:71: 14:7b:0e:4d:60:45:a1:56:fd:32:7c:e6:3d:c4:6a: 8b:f3:88:7f:d7:f5:69:8b:a1:f0:a3:76:5a:4c:94: aa:1d:56:96:db:91:f3:0f:f8:59:36:52:65:f9:db: 02:fc:b3:0e:82:c7:a1:af:64:7f:28:53:d8:35:dc: b4:71:57:ac:ed:6d:1e:30:02:82:e4:b5:c8:d1:19: 1a:92:aa:98:cf:73:57:86:f8:f9:43:84:60:50:4b: a5:ba:b4:ee:df:aa:7d:d6:b2:5b:23:84:ac:65:a7: 74:8e:ec:df:60:e7:2e:24:3f:bc:5b:a0:bb:a5:d3: 98:42:61:f6:41:f2:bc:f2:54:bd:1b:83:f9:5e:fe: b6:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:1C:A9:13:E8:00:4C:86:CF:CF:C9:FC:90:10:FF:BC:64:2F:9C:FB X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A0EF6C88655D11ED8378684BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.252.240.0/21 103.221.224.0/21 IPv6: 2001:df2:ce00::/48 2405:53c0::/32 Signature Algorithm: sha256WithRSAEncryption 85:8e:d1:bc:b0:23:30:bc:7a:be:66:98:90:e3:38:e9:30:b7: 10:9d:2c:21:3d:02:d0:8a:7e:23:eb:9f:a2:9a:31:5c:0a:8d: cc:37:16:b7:20:44:c7:bc:db:e3:71:7f:d5:29:49:f3:fa:55: b5:cc:a8:d8:0f:7c:a9:a4:9f:b2:f3:f0:6f:0a:42:52:1d:47: d0:d3:97:68:08:ef:da:7b:12:d4:d8:d1:c1:12:2d:f5:2d:c7: 96:b3:00:a9:00:0a:b5:1c:82:8f:19:05:7b:9b:6a:c9:8e:24: d1:25:a9:e1:fe:c9:78:91:24:84:db:eb:a1:f3:19:47:50:54: df:46:e2:03:76:46:f1:e8:ea:7f:d4:01:0c:af:83:27:9e:99: ce:a5:ac:ea:66:e6:93:18:c3:3e:84:6f:e1:a4:58:ce:76:a7: 64:2c:ae:39:e5:4d:6f:79:ea:ef:da:fa:eb:98:53:cc:56:c3: 0b:ca:02:d9:90:8e:39:c5:0d:19:6e:ca:1b:3a:47:85:f3:dd: 8b:1e:c3:34:50:5c:7f:9e:c8:78:94:29:60:f1:86:58:57:cf: 0e:e4:b3:ab:9f:45:cd:0a:5a:c3:63:82:ca:93:28:a4:da:56: aa:56:47:d3:4c:43:fa:da:a1:92:eb:e0:b7:94:7d:b7:79:76: 52:48:bc:02 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgICTkUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjUwODI4MTQ1NzU5WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGIwNmU3Ni0wZTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3ZooY4gZdBb/EDElu7aXYSVUVBZ4GlCuxrSo9KI2Loy6C+T2K+VSbTFkj74Q vk7sf01AtJ/PImEv6Kcsa8J7MGjZwaYcjBvXU8/X2xIsd46cjxKItrkWy//Vp7Om ozTGUCOFgOccX8FrF3T1Op5jiBWLZRGTZXEUew5NYEWhVv0yfOY9xGqL84h/1/Vp i6Hwo3ZaTJSqHVaW25HzD/hZNlJl+dsC/LMOgsehr2R/KFPYNdy0cVes7W0eMAKC 5LXI0RkakqqYz3NXhvj5Q4RgUEulurTu36p91rJbI4SsZad0juzfYOcuJD+8W6C7 pdOYQmH2QfK88lS9G4P5Xv62FwIDAQABo4ICszCCAq8wHQYDVR0OBBYEFCIcqRPo AEyGz8/J/JAQ/7xkL5z7MB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvQTBFRjZDODg2 NTVEMTFFRDgzNzg2ODRCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPQYIKwYBBQUHAQcBAf8E LjAsMBIEAgABMAwDBAMt/PADBANn3eAwFgQCAAIwEAMHACABDfLOAAMFACQFU8Aw DQYJKoZIhvcNAQELBQADggEBAIWO0bywIzC8er5mmJDjOOkwtxCdLCE9AtCKfiPr n6KaMVwKjcw3FrcgRMe82+Nxf9UpSfP6VbXMqNgPfKmkn7Lz8G8KQlIdR9DTl2gI 79p7EtTY0cESLfUtx5azAKkACrUcgo8ZBXubasmOJNElqeH+yXiRJITb66HzGUdQ VN9G4gN2RvHo6n/UAQyvgyeemc6lrOpm5pMYwz6Eb+GkWM52p2QsrjnlTW956u/a +uuYU8xWwwvKAtmQjjnFDRluyhs6R4Xz3YsewzRQXH+eyHiUKWDxhlhXzw7ks6uf Rc0KWsNjgsqTKKTaVqpWR9NMQ/raoZLr4LeUfbd5dlJIvAI= -----END CERTIFICATE-----Generated at Tue Nov 4 21:31:56 2025 by rpki-client