$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/FF7450F48FEB11EC818F190FC4F9AE02.roa File: FF7450F48FEB11EC818F190FC4F9AE02.roa (raw, json) Hash identifier: u3ZQaSWyQAHWZYaVmUOMeP79owb8Gqya+nlvbAou200= Subject key identifier: 5C:2C:C7:EF:D0:F0:E0:EB:28:5D:54:E1:ED:69:58:8E:63:BD:4D:23 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4E30 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/FF7450F48FEB11EC818F190FC4F9AE02.roa Signing time: Thu 28 Aug 2025 14:57:39 +0000 ROA not before: Thu 28 Aug 2025 14:57:39 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 56147 IP address blocks: 45.120.228.0/22 maxlen: 24 103.3.248.0/22 maxlen: 24 2001:df5:c200::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:37:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20016 (0x4e30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Aug 28 14:57:39 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68b06e63-6cdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:07:09:73:a4:21:f3:16:4b:71:dc:43:12:16: fa:72:87:f4:72:c2:a1:93:4f:47:55:aa:8b:b9:3c: ce:5e:55:51:7c:eb:ce:e4:fc:8f:dd:4f:2b:f1:b2: 52:e0:c0:31:a5:49:8f:2c:26:1a:af:90:3d:96:54: 4e:08:44:91:40:c6:81:6e:65:1e:7b:be:20:77:f4: 3d:1a:2c:1f:22:e8:6b:65:09:ee:50:8c:3e:17:93: 7e:82:64:7c:5d:64:95:bc:62:fa:eb:d9:cf:65:4b: 80:6f:c7:59:54:94:e0:c9:8b:91:23:6c:58:4e:ca: 3b:2f:ce:79:99:a2:8b:68:91:ee:0d:81:8e:df:51: a3:71:1d:cd:dc:74:df:93:29:2a:dd:1d:b1:e3:73: 75:aa:56:c2:5d:4b:ab:17:06:fd:b7:e9:6a:9d:bf: 8e:c6:91:44:9f:39:12:0e:87:2d:0f:73:11:c5:32: 9a:8b:d5:60:b6:a1:2f:68:63:7b:6d:df:01:10:8e: 77:05:00:91:7a:b7:41:c9:01:6c:65:1a:ba:b7:b0: 12:4e:45:c7:bc:a5:d5:8b:b2:64:4b:71:48:59:cd: f1:9b:12:c5:f0:74:b1:1a:86:c8:ba:2b:16:61:0b: a3:2c:db:64:df:f2:de:83:d1:f5:6a:ea:ac:21:7d: 24:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:2C:C7:EF:D0:F0:E0:EB:28:5D:54:E1:ED:69:58:8E:63:BD:4D:23 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/FF7450F48FEB11EC818F190FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.120.228.0/22 103.3.248.0/22 IPv6: 2001:df5:c200::/48 Signature Algorithm: sha256WithRSAEncryption 00:e3:27:9f:18:ab:78:0c:ef:b3:2a:e6:5b:39:dd:37:3c:0f: 44:f5:8b:2e:c3:35:6a:13:64:aa:00:a5:6a:36:bd:2d:36:17: a9:3b:0c:5a:af:e3:30:06:77:03:ca:db:1d:94:af:b6:d4:e1: 3e:df:1c:cb:7a:fd:5f:8f:ae:f0:e4:ec:2f:72:b9:95:63:50: 0a:66:3b:2a:85:da:47:2c:50:f4:56:be:3e:31:d1:55:a4:65: 6d:3c:f0:c1:06:d7:38:bc:31:d4:c2:e1:66:15:b0:03:f8:35: a7:54:29:06:cd:25:0e:d0:a1:6c:88:17:7e:2b:5b:0c:49:7e: 14:f9:fa:33:67:70:37:b2:9a:5c:da:2d:5f:8a:cf:06:cb:1b: 7d:da:97:65:97:26:2e:11:33:70:76:e1:31:02:10:2c:a9:b4: 67:ed:5f:f1:fe:22:52:5f:c3:b7:90:bf:6c:9f:25:4c:b1:b6: dd:17:b4:23:b1:0e:4f:2b:6b:92:f7:84:c1:1b:ea:c8:63:d6: dc:e9:82:37:ab:a8:10:80:81:3c:41:30:3e:79:e1:9b:c9:3f: 86:6a:86:d3:bc:87:a6:73:7c:d0:a7:32:68:60:5f:d4:23:5e: 42:a7:7f:25:9e:a6:ba:ca:87:08:bd:02:a1:ae:4e:bd:6d:be: 2d:88:ca:f5 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICTjAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjUwODI4MTQ1NzM5WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGIwNmU2My02Y2RkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+gcJc6Qh8xZLcdxDEhb6cof0csKhk09HVaqLuTzOXlVRfOvO5PyP3U8r8bJS 4MAxpUmPLCYar5A9llROCESRQMaBbmUee74gd/Q9GiwfIuhrZQnuUIw+F5N+gmR8 XWSVvGL669nPZUuAb8dZVJTgyYuRI2xYTso7L855maKLaJHuDYGO31GjcR3N3HTf kykq3R2x43N1qlbCXUurFwb9t+lqnb+OxpFEnzkSDoctD3MRxTKai9VgtqEvaGN7 bd8BEI53BQCRerdByQFsZRq6t7ASTkXHvKXVi7JkS3FIWc3xmxLF8HSxGobIuisW YQujLNtk3/Leg9H1auqsIX0kVwIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFFwsx+/Q 8ODrKF1U4e1pWI5jvU0jMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvRkY3NDUwRjQ4 RkVCMTFFQzgxOEYxOTBGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBAIteOQDBAJnA/gwDwQCAAIwCQMHACABDfXCADANBgkqhkiG 9w0BAQsFAAOCAQEAAOMnnxireAzvsyrmWzndNzwPRPWLLsM1ahNkqgClaja9LTYX qTsMWq/jMAZ3A8rbHZSvttThPt8cy3r9X4+u8OTsL3K5lWNQCmY7KoXaRyxQ9Fa+ PjHRVaRlbTzwwQbXOLwx1MLhZhWwA/g1p1QpBs0lDtChbIgXfitbDEl+FPn6M2dw N7KaXNotX4rPBssbfdqXZZcmLhEzcHbhMQIQLKm0Z+1f8f4iUl/Dt5C/bJ8lTLG2 3Re0I7EOTytrkveEwRvqyGPW3OmCN6uoEICBPEEwPnnhm8k/hmqG07yHpnN80Kcy aGBf1CNeQqd/JZ6musqHCL0Coa5OvW2+LYjK9Q== -----END CERTIFICATE-----Generated at Tue Nov 4 18:59:52 2025 by rpki-client