$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/E454FEF2689311F09107C42BC4F9AE02.roa File: E454FEF2689311F09107C42BC4F9AE02.roa (raw, json) Hash identifier: GyGMKgS9X/eYqbsrmXREtsm2FLIobZJ8M53ERZyQ3yc= Subject key identifier: F2:11:2A:A6:B0:6E:9E:07:6E:30:68:13:0F:0F:B9:1A:36:90:50:CB Certificate issuer: /CN=A91A6F68/serialNumber=620D39B3A1837973BD13269F2B06AC9B2738820D Certificate serial: A1 Authority key identifier: 62:0D:39:B3:A1:83:79:73:BD:13:26:9F:2B:06:AC:9B:27:38:82:0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yg05s6GDeXO9EyafKwasmyc4gg0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/E454FEF2689311F09107C42BC4F9AE02.roa Signing time: Wed 05 Nov 2025 06:51:01 +0000 ROA not before: Wed 05 Nov 2025 06:51:01 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 18381 IP address blocks: 43.250.52.0/22 maxlen: 24 103.41.176.0/22 maxlen: 22 2406:4fc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/Yg05s6GDeXO9EyafKwasmyc4gg0.crl rsync://rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/Yg05s6GDeXO9EyafKwasmyc4gg0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yg05s6GDeXO9EyafKwasmyc4gg0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:51:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161 (0xa1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6F68, serialNumber=620D39B3A1837973BD13269F2B06AC9B2738820D Validity Not Before: Nov 5 06:51:01 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=690af3d5-e4a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4d:87:79:61:d1:f5:d5:41:9f:e6:73:ab:e2: d0:aa:32:10:a4:ed:d4:5e:e7:99:06:0e:b3:c4:43: e2:3c:cd:16:1c:74:86:8d:b9:c5:d5:57:17:eb:6e: 90:e2:da:07:47:1a:8f:00:86:8d:7e:8b:d8:2c:b3: 5f:e6:d9:7a:a5:27:35:e9:2c:78:cf:b6:4d:29:0d: a5:c2:34:94:94:b7:b1:0c:f7:ba:41:67:0a:8e:10: 6d:04:14:8d:9f:bd:79:4c:e6:c5:09:85:d9:62:71: aa:9a:fe:93:41:27:dc:f4:68:1d:a8:ed:30:d5:73: 9e:e1:30:de:c2:de:0f:1a:7d:f1:ad:08:7e:80:1b: 72:4b:ce:9d:fd:6f:61:10:86:34:c4:e7:fd:42:2e: e0:6d:e3:05:a8:e9:c9:e9:35:27:a7:76:5d:c2:ef: 30:e7:ae:45:2e:30:b5:fd:25:88:d8:f5:b3:4c:6e: ee:8f:f8:c1:6d:c0:6f:6d:da:f1:7e:d3:44:65:eb: ec:51:67:3d:ba:b0:3c:71:af:d3:aa:cd:8a:05:79: 0f:a9:45:5e:1e:5a:4f:08:da:5c:32:49:33:f4:69: a2:1d:76:70:01:b7:ea:bd:07:d8:b0:ae:b0:2c:d1: b7:89:2f:99:53:c9:ed:97:76:6a:1e:d1:13:d7:f0: ac:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:11:2A:A6:B0:6E:9E:07:6E:30:68:13:0F:0F:B9:1A:36:90:50:CB X509v3 Authority Key Identifier: keyid:62:0D:39:B3:A1:83:79:73:BD:13:26:9F:2B:06:AC:9B:27:38:82:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/Yg05s6GDeXO9EyafKwasmyc4gg0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yg05s6GDeXO9EyafKwasmyc4gg0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/E454FEF2689311F09107C42BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.250.52.0/22 103.41.176.0/22 IPv6: 2406:4fc0::/32 Signature Algorithm: sha256WithRSAEncryption ab:9d:a0:ef:78:77:a5:64:d0:dd:70:15:2b:f3:a3:31:79:69: 7c:cd:68:51:3b:a5:33:32:e9:90:a4:f5:80:d1:e3:89:09:e7: 55:80:a6:b0:4a:5b:c9:26:10:a3:c3:d3:76:be:8e:a9:78:a5: 45:b1:45:79:f4:ca:6a:21:e3:fa:93:fb:2b:5e:ee:70:7f:4e: 17:95:16:d8:b0:ce:31:41:da:03:7e:ec:df:5e:b5:b9:15:d1: b2:87:96:6c:e8:33:4b:57:13:1d:b5:fc:6a:df:7d:57:88:89: 53:5f:a1:49:4a:ec:6c:52:2a:60:34:cf:41:55:3d:bf:cc:86: 01:0b:90:3c:41:9f:c1:53:ab:51:d8:79:7e:2e:3c:52:55:78: 96:24:a5:35:a6:95:eb:2b:71:6d:47:90:52:0e:87:90:77:06: b7:b3:d6:62:4e:de:17:23:72:6b:45:5f:b9:a8:17:d1:c1:e2: 98:59:3d:cf:0e:c8:b2:00:3b:87:48:9b:c9:28:b3:bb:57:a0: 43:a1:6b:cb:fe:9a:f2:3f:eb:c1:76:06:9f:b0:48:66:72:c7: 8d:8a:e3:a7:53:a2:77:e3:71:c8:9a:90:05:1c:a4:2a:a8:50: 5f:33:d2:5f:68:a5:e2:2a:5f:60:04:3c:4b:f1:75:b1:e3:61: 58:67:7d:a4 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICAKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTZGNjgxMTAvBgNVBAUTKDYyMEQzOUIzQTE4Mzc5NzNCRDEzMjY5RjJCMDZBQzlC MjczODgyMEQwHhcNMjUxMTA1MDY1MTAxWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTBhZjNkNS1lNGEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwU2HeWHR9dVBn+Zzq+LQqjIQpO3UXueZBg6zxEPiPM0WHHSGjbnF1VcX626Q 4toHRxqPAIaNfovYLLNf5tl6pSc16Sx4z7ZNKQ2lwjSUlLexDPe6QWcKjhBtBBSN n715TObFCYXZYnGqmv6TQSfc9GgdqO0w1XOe4TDewt4PGn3xrQh+gBtyS86d/W9h EIY0xOf9Qi7gbeMFqOnJ6TUnp3Zdwu8w565FLjC1/SWI2PWzTG7uj/jBbcBvbdrx ftNEZevsUWc9urA8ca/Tqs2KBXkPqUVeHlpPCNpcMkkz9GmiHXZwAbfqvQfYsK6w LNG3iS+ZU8ntl3ZqHtET1/CsjQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFPIRKqaw bp4HbjBoEw8PuRo2kFDLMB8GA1UdIwQYMBaAFGINObOhg3lzvRMmnysGrJsnOIIN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkY2OC85MkUyNTk2MkRG MjExMUVGODMzRjRGMkNDNEY5QUUwMi9ZZzA1czZHRGVYTzlFeWFmS3dhc215YzRn ZzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lnMDVzNkdEZVhPOUV5YWZLd2FzbXljNGdnMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTZGNjgvOTJFMjU5NjJERjIxMTFFRjgzM0Y0RjJDQzRGOUFFMDIvRTQ1NEZFRjI2 ODkzMTFGMDkxMDdDNDJCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAIr+jQDBAJnKbAwDQQCAAIwBwMFACQGT8AwDQYJKoZIhvcN AQELBQADggEBAKudoO94d6Vk0N1wFSvzozF5aXzNaFE7pTMy6ZCk9YDR44kJ51WA prBKW8kmEKPD03a+jql4pUWxRXn0ymoh4/qT+yte7nB/TheVFtiwzjFB2gN+7N9e tbkV0bKHlmzoM0tXEx21/GrffVeIiVNfoUlK7GxSKmA0z0FVPb/MhgELkDxBn8FT q1HYeX4uPFJVeJYkpTWmlesrcW1HkFIOh5B3Brez1mJO3hcjcmtFX7moF9HB4phZ Pc8OyLIAO4dIm8kos7tXoEOha8v+mvI/68F2Bp+wSGZyx42K46dTonfjcciakAUc pCqoUF8z0l9opeIqX2AEPEvxdbHjYVhnfaQ= -----END CERTIFICATE-----Generated at Wed Nov 5 15:40:47 2025 by rpki-client