$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/08A71970723811EDB0BD0312C4F9AE02.roa File: 08A71970723811EDB0BD0312C4F9AE02.roa (raw, json) Hash identifier: Z3Pgsl7gnEpPUpQRogkAmZeZ95NlxutDljfa11ERFDo= Subject key identifier: 29:ED:44:23:E9:8B:98:AA:50:1F:C0:E7:C8:01:1A:4A:F1:5E:94:1A Certificate issuer: /CN=A91B6172/serialNumber=21B2EA742FF0EF9EBCCEF3998790E3F5B08D6B63 Certificate serial: 022B Authority key identifier: 21:B2:EA:74:2F:F0:EF:9E:BC:CE:F3:99:87:90:E3:F5:B0:8D:6B:63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IbLqdC_w7568zvOZh5Dj9bCNa2M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/08A71970723811EDB0BD0312C4F9AE02.roa Signing time: Thu 23 Oct 2025 03:46:13 +0000 ROA not before: Thu 23 Oct 2025 03:46:13 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 4826 IP address blocks: 203.23.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.crl rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IbLqdC_w7568zvOZh5Dj9bCNa2M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:10:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 555 (0x22b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6172, serialNumber=21B2EA742FF0EF9EBCCEF3998790E3F5B08D6B63 Validity Not Before: Oct 23 03:46:13 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68f9a504-6a1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:d0:12:eb:cf:b6:09:12:50:8c:e1:e6:0f:da: cd:f4:f4:58:41:5d:14:9d:a8:03:46:93:a6:58:3c: 4b:86:29:74:a8:0e:df:ed:0c:22:bc:d5:08:67:87: 6b:13:d1:c2:00:b6:0b:9c:02:8d:92:b6:c7:b9:2f: c9:d5:9b:ff:8d:1c:1e:a0:6c:c6:a4:9a:c5:42:0d: 22:a3:fb:55:08:5e:12:0a:61:15:47:8d:e3:bf:35: da:08:07:4f:d9:14:86:af:49:2e:ea:dc:c2:04:06: 33:20:fa:67:0f:35:ce:90:11:c2:4a:7a:b4:89:44: b8:9d:bf:36:42:c1:55:a0:5d:b5:cd:03:b3:de:52: e0:51:83:34:40:44:9c:8b:7a:8e:68:79:b8:0f:5b: b6:6b:cc:90:63:9a:cc:5c:8f:dc:e8:de:fd:11:5b: 15:a5:63:33:bc:e6:6c:65:06:54:d7:94:c2:fa:89: de:27:18:e4:74:91:08:27:00:10:5f:f9:29:70:9a: bc:1e:b4:62:9d:45:d5:3e:92:30:92:1c:f0:66:ac: f3:79:e0:c2:bd:2a:f7:49:f8:65:df:5f:bf:03:c3: fd:3f:5c:53:a6:be:15:16:ce:cb:fc:1e:85:75:21: ff:9b:d6:9b:a3:bd:f1:9d:39:b9:fa:c0:fe:b0:d4: 6c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:ED:44:23:E9:8B:98:AA:50:1F:C0:E7:C8:01:1A:4A:F1:5E:94:1A X509v3 Authority Key Identifier: keyid:21:B2:EA:74:2F:F0:EF:9E:BC:CE:F3:99:87:90:E3:F5:B0:8D:6B:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IbLqdC_w7568zvOZh5Dj9bCNa2M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/08A71970723811EDB0BD0312C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.23.97.0/24 Signature Algorithm: sha256WithRSAEncryption 39:d5:a5:bf:f2:40:17:ac:72:af:46:0e:c8:94:98:37:14:49: b5:44:ce:0f:1d:fb:5e:36:ce:79:34:6b:20:f9:80:36:e8:37: ad:6c:e1:cd:9e:f3:3e:5e:f6:6f:92:d6:37:cd:39:2a:da:fa: 32:0b:47:06:19:6b:93:90:35:43:0d:8c:6b:54:2d:d3:d4:84: 86:9f:0c:aa:63:49:ff:0f:0b:58:c6:ed:3f:33:00:ed:31:d3: 46:b8:43:96:dc:c9:a9:7a:9b:09:a9:ad:0d:c5:30:20:eb:0e: cf:1f:21:3d:60:fd:3b:ef:20:3a:32:26:dd:5c:8a:3c:35:e1: a5:e6:00:65:61:cc:97:d1:fa:98:e8:f3:50:9d:3c:10:fd:19: ad:71:56:5c:2c:b4:11:e4:13:15:9d:6e:51:f7:34:4f:d7:53: 1a:35:e1:02:57:7c:87:73:44:f6:21:1f:37:fa:96:a4:67:af: 6b:e6:96:10:24:d8:22:81:63:4f:a4:77:95:32:e6:88:46:16: 6e:de:74:64:19:07:9c:2a:e3:12:f4:e9:7a:a6:33:4f:80:27: 2e:07:d2:b0:24:80:86:bb:f5:f1:9a:16:7d:49:6d:b5:f0:67: 51:e5:70:d2:c9:6a:48:13:2e:9e:63:69:53:de:c5:5a:e1:42: 9e:e1:74:7e -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAiswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjYxNzIxMTAvBgNVBAUTKDIxQjJFQTc0MkZGMEVGOUVCQ0NFRjM5OTg3OTBFM0Y1 QjA4RDZCNjMwHhcNMjUxMDIzMDM0NjEzWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGY5YTUwNC02YTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4NAS68+2CRJQjOHmD9rN9PRYQV0UnagDRpOmWDxLhil0qA7f7QwivNUIZ4dr E9HCALYLnAKNkrbHuS/J1Zv/jRweoGzGpJrFQg0io/tVCF4SCmEVR43jvzXaCAdP 2RSGr0ku6tzCBAYzIPpnDzXOkBHCSnq0iUS4nb82QsFVoF21zQOz3lLgUYM0QESc i3qOaHm4D1u2a8yQY5rMXI/c6N79EVsVpWMzvOZsZQZU15TC+oneJxjkdJEIJwAQ X/kpcJq8HrRinUXVPpIwkhzwZqzzeeDCvSr3Sfhl31+/A8P9P1xTpr4VFs7L/B6F dSH/m9abo73xnTm5+sD+sNRsxwIDAQABo4IClTCCApEwHQYDVR0OBBYEFCntRCPp i5iqUB/A58gBGkrxXpQaMB8GA1UdIwQYMBaAFCGy6nQv8O+evM7zmYeQ4/WwjWtj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjE3Mi9CQTU0QzEzNDcy MkIxMUVEOTdENzNDNUFDNEY5QUUwMi9JYkxxZENfdzc1Njh6dk9aaDVEajliQ05h Mk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0liTHFkQ193NzU2OHp2T1poNURqOWJDTmEyTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjYxNzIvQkE1NEMxMzQ3MjJCMTFFRDk3RDczQzVBQzRGOUFFMDIvMDhBNzE5NzA3 MjM4MTFFREIwQkQwMzEyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADLF2EwDQYJKoZIhvcNAQELBQADggEBADnVpb/yQBescq9G DsiUmDcUSbVEzg8d+142znk0ayD5gDboN61s4c2e8z5e9m+S1jfNOSra+jILRwYZ a5OQNUMNjGtULdPUhIafDKpjSf8PC1jG7T8zAO0x00a4Q5bcyal6mwmprQ3FMCDr Ds8fIT1g/TvvIDoyJt1cijw14aXmAGVhzJfR+pjo81CdPBD9Ga1xVlwstBHkExWd blH3NE/XUxo14QJXfIdzRPYhHzf6lqRnr2vmlhAk2CKBY0+kd5Uy5ohGFm7edGQZ B5wq4xL06XqmM0+AJy4H0rAkgIa79fGaFn1JbbXwZ1HlcNLJakgTLp5jaVPexVrh Qp7hdH4= -----END CERTIFICATE-----Generated at Wed Nov 5 05:16:00 2025 by rpki-client