$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/8FD552C071F111F0AE49323FC4F9AE02.roa File: 8FD552C071F111F0AE49323FC4F9AE02.roa (raw, json) Hash identifier: k0XECPDgxEsPxo1hnPOQ8t+HVImApkPuGWwQ5OUwJvs= Subject key identifier: 6E:7F:C7:70:2F:8D:13:DE:DF:29:10:D3:1D:0F:B8:84:EC:E9:ED:FD Certificate issuer: /CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34 Certificate serial: 363F Authority key identifier: 4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/8FD552C071F111F0AE49323FC4F9AE02.roa Signing time: Tue 05 Aug 2025 11:44:37 +0000 ROA not before: Tue 05 Aug 2025 11:44:36 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 134489 IP address blocks: 116.90.100.0/24 maxlen: 24 116.90.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:31:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13887 (0x363f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5D7E, serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34 Validity Not Before: Aug 5 11:44:36 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=6891eea4-5478 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7b:ed:ee:96:10:5e:6f:8a:23:26:28:4a:56: 0b:30:47:d3:c5:a5:59:86:45:2e:cc:5a:a0:ee:95: 58:8b:b7:dc:b4:33:ef:cb:94:65:9d:e7:ed:4c:dc: c8:96:08:71:2d:74:f3:8a:07:04:ec:ed:9f:f0:68: 66:06:46:c8:95:ea:4d:46:4d:1d:74:7b:62:f0:b8: 7d:8b:77:23:97:23:f2:b4:dc:d9:e6:23:5b:6b:4a: ad:4f:3f:d2:19:c1:e4:33:1a:3e:ea:ce:74:47:42: c5:28:35:af:2c:7b:cb:64:eb:95:82:e5:74:4a:7f: fd:92:d5:48:32:6f:9a:eb:d4:86:fb:3b:51:02:4b: 4b:4e:d5:82:36:8b:28:de:da:e5:c8:44:33:dc:ed: 84:84:f8:3a:72:52:a9:01:25:8d:10:0b:dd:ea:b9: 6f:c0:16:a3:cd:54:35:2b:05:05:47:c5:be:3b:b4: 4c:03:b9:7a:43:83:ff:b9:cf:66:1b:c2:de:c6:fc: 28:44:05:5b:98:96:d5:ab:16:87:19:db:65:be:41: 17:e3:7f:7c:e9:3d:8a:04:a7:06:22:bf:4a:73:86: 8b:8d:53:76:8d:8e:1f:50:cd:ba:15:2c:10:3f:8d: bd:76:c0:7f:d0:88:0c:1b:8f:6a:d9:67:f5:cd:5e: bf:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:7F:C7:70:2F:8D:13:DE:DF:29:10:D3:1D:0F:B8:84:EC:E9:ED:FD X509v3 Authority Key Identifier: keyid:4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/8FD552C071F111F0AE49323FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 116.90.100.0/24 116.90.105.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:ca:f3:ed:5f:f4:aa:6a:64:e2:85:a9:40:d0:c0:88:0d:a0: 22:17:5a:eb:f4:b2:e2:7a:c4:31:ba:3c:f5:b1:37:9c:e8:a7: a4:9d:e7:5c:3d:a7:a6:a9:db:31:ec:4d:54:c9:d9:12:95:ea: 56:f4:e6:fe:19:a4:64:20:d4:8d:10:57:6a:b3:50:21:0f:25: ee:68:9f:36:d0:44:70:ed:32:78:10:02:a2:06:9e:9c:6d:3c: 56:2c:a2:a0:56:32:6c:f1:ef:3a:79:88:e1:a2:66:cc:e7:51: 0e:3d:de:d9:8c:a1:b5:7d:4f:3c:e7:f0:e6:8e:2a:b0:91:b2: bf:57:88:56:3d:4e:fc:a9:28:9c:de:09:f9:fe:0e:27:c3:cb: 7d:55:9a:2f:37:31:84:43:46:be:7b:c3:bd:89:ef:81:f0:54: ab:67:14:10:dc:a8:92:10:8c:1a:f6:b2:ff:27:5e:6c:24:6b: d6:e1:c8:4b:87:6d:5b:e5:76:2d:32:60:9f:0b:ba:67:dc:a8: de:ab:98:29:23:ea:1b:12:59:32:51:cc:59:0d:da:43:7e:c5: 7e:3e:01:69:db:e6:4d:68:58:c1:65:ca:b0:d0:7b:9f:ca:18: cc:d9:76:35:b0:67:0d:ff:f3:a7:05:48:ce:95:f2:51:84:db: 5f:f9:88:57 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICNj8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVEN0UxMTAvBgNVBAUTKDRDQUUzQUVGQjFBQzhBQkREQjk5QkNDRUU0RkE1QTkx NkQxNTdCMzQwHhcNMjUwODA1MTE0NDM2WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02ODkxZWVhNC01NDc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtHvt7pYQXm+KIyYoSlYLMEfTxaVZhkUuzFqg7pVYi7fctDPvy5RlneftTNzI lghxLXTzigcE7O2f8GhmBkbIlepNRk0ddHti8Lh9i3cjlyPytNzZ5iNba0qtTz/S GcHkMxo+6s50R0LFKDWvLHvLZOuVguV0Sn/9ktVIMm+a69SG+ztRAktLTtWCNoso 3trlyEQz3O2EhPg6clKpASWNEAvd6rlvwBajzVQ1KwUFR8W+O7RMA7l6Q4P/uc9m G8LexvwoRAVbmJbVqxaHGdtlvkEX43986T2KBKcGIr9Kc4aLjVN2jY4fUM26FSwQ P429dsB/0IgMG49q2Wf1zV6/rwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFG5/x3Av jRPe3ykQ0x0PuITs6e39MB8GA1UdIwQYMBaAFEyuOu+xrIq925m8zuT6WpFtFXs0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUQ3RS9FQ0E2ODIzNDFE ODcxMUUyOTgzMjJERTAwOEIwMkNEMi9USzQ2NzdHc2lyM2JtYnpPNVBwYWtXMFZl elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RLNDY3N0dzaXIzYm1iek81UHBha1cwVmV6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjVEN0UvRUNBNjgyMzQxRDg3MTFFMjk4MzIyREUwMDhCMDJDRDIvOEZENTUyQzA3 MUYxMTFGMEFFNDkzMjNGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAB0WmQDBAB0WmkwDQYJKoZIhvcNAQELBQADggEBAA3K8+1f 9KpqZOKFqUDQwIgNoCIXWuv0suJ6xDG6PPWxN5zop6Sd51w9p6ap2zHsTVTJ2RKV 6lb05v4ZpGQg1I0QV2qzUCEPJe5onzbQRHDtMngQAqIGnpxtPFYsoqBWMmzx7zp5 iOGiZsznUQ493tmMobV9Tzzn8OaOKrCRsr9XiFY9TvypKJzeCfn+DifDy31Vmi83 MYRDRr57w72J74HwVKtnFBDcqJIQjBr2sv8nXmwka9bhyEuHbVvldi0yYJ8Lumfc qN6rmCkj6hsSWTJRzFkN2kN+xX4+AWnb5k1oWMFlyrDQe5/KGMzZdjWwZw3/86cF SM6V8lGE21/5iFc= -----END CERTIFICATE-----Generated at Wed Nov 5 04:55:11 2025 by rpki-client