$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/9F3A919468D811EFB2FE405FC4F9AE02.roa File: 9F3A919468D811EFB2FE405FC4F9AE02.roa (raw, json) Hash identifier: nVehuPJuIkWIOjh795nZonFcwqqWF8/uu32Co6wlMr4= Subject key identifier: 31:77:2B:28:CE:ED:50:BB:F7:BA:45:99:00:E9:C0:CC:2C:BD:BF:80 Certificate issuer: /CN=A91B6F47/serialNumber=538B076E0AADD8FAE2970C9543E849A90FE73752 Certificate serial: 35BC Authority key identifier: 53:8B:07:6E:0A:AD:D8:FA:E2:97:0C:95:43:E8:49:A9:0F:E7:37:52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/9F3A919468D811EFB2FE405FC4F9AE02.roa Signing time: Tue 04 Nov 2025 14:30:20 +0000 ROA not before: Tue 04 Nov 2025 14:30:20 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 131611 IP address blocks: 203.203.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.crl rsync://rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:30:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13756 (0x35bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6F47, serialNumber=538B076E0AADD8FAE2970C9543E849A90FE73752 Validity Not Before: Nov 4 14:30:20 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=690a0dfb-22c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:56:ea:29:7c:d5:74:5b:83:6a:c5:ea:10:95: 12:1f:9f:60:f7:af:8a:bf:ca:06:16:52:be:26:8f: 4f:61:ae:a0:96:d7:7b:12:9b:41:34:70:94:c7:fd: ea:d5:80:8c:09:14:ea:1f:0b:f2:8c:41:88:f7:83: 0d:14:43:24:da:ad:80:66:47:7c:a0:08:79:83:89: c7:85:47:fd:be:2e:f9:74:af:71:17:fb:cc:07:c4: 08:ec:0d:a3:7b:e4:8a:3c:05:3d:b8:97:42:2e:84: c8:7c:8d:09:c5:be:ad:b2:32:cd:39:f9:17:64:43: c4:a4:d5:3c:4a:a5:2f:36:02:2d:54:cc:43:d7:0e: 36:ca:ce:81:d3:90:ca:5f:8a:4b:52:0d:56:1e:fb: e4:8c:b6:8a:5f:bf:ca:d9:f9:54:9b:d7:e8:95:87: 45:f9:9a:1e:27:37:e5:c9:74:d2:20:49:50:da:0d: 3b:a4:3d:39:fc:19:59:30:f8:b0:e7:49:fd:b2:c1: 64:ee:6c:43:87:15:2e:7f:9d:27:68:7b:36:6c:c0: c0:40:67:53:1f:a1:9f:f4:67:8a:6f:8d:55:be:98: 2b:7e:68:24:6a:22:04:8b:ae:05:0d:b2:48:a2:09: 1e:f5:25:ce:11:b1:80:81:2d:0c:bf:52:a6:90:d2: 69:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:77:2B:28:CE:ED:50:BB:F7:BA:45:99:00:E9:C0:CC:2C:BD:BF:80 X509v3 Authority Key Identifier: keyid:53:8B:07:6E:0A:AD:D8:FA:E2:97:0C:95:43:E8:49:A9:0F:E7:37:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/9F3A919468D811EFB2FE405FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.203.0.0/17 Signature Algorithm: sha256WithRSAEncryption 5e:ac:4e:18:92:b4:0e:4b:fe:e9:22:c3:f3:b5:02:b3:47:a1: d9:8f:06:2b:52:cd:4e:ed:90:68:48:81:00:83:5d:1c:18:8f: d3:b0:a3:3e:38:59:86:de:07:08:b2:5d:cc:7f:d5:a4:5a:5d: b4:d1:e9:45:c3:ce:e8:8c:23:c4:26:38:73:b4:c8:12:52:53: 0a:6c:1a:7c:cd:67:94:4a:87:af:3c:9b:36:7e:47:bf:ad:ba: 91:03:06:27:f9:50:b6:b8:80:38:d4:03:6b:05:7b:1b:c5:02: 06:7d:a1:4b:5a:7d:5f:50:5e:d9:bf:36:91:4f:db:e2:1f:49: b3:79:af:8d:d4:e4:26:29:94:ea:21:4d:b2:88:9f:05:bc:8b: 55:b1:f7:5f:1f:8a:63:a7:04:85:64:2a:bb:71:20:b4:46:d6: 20:64:00:50:fc:c0:16:6f:cd:86:7a:55:77:ce:e0:b0:a0:01: f3:1b:81:70:46:06:92:d0:e8:7e:56:39:2a:0e:85:e2:17:58: 7b:de:19:9d:5a:18:35:9f:1b:71:58:77:f0:08:e9:89:4a:63: 60:52:fc:ef:13:0b:55:3e:f9:7f:fd:f3:9e:9a:b7:48:bf:25: 06:be:23:f7:00:f6:1a:78:3a:1c:b0:8f:fd:21:89:ec:38:2e: 61:fd:9d:b1 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNbwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZGNDcxMTAvBgNVBAUTKDUzOEIwNzZFMEFBREQ4RkFFMjk3MEM5NTQzRTg0OUE5 MEZFNzM3NTIwHhcNMjUxMTA0MTQzMDIwWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTBhMGRmYi0yMmM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA01bqKXzVdFuDasXqEJUSH59g96+Kv8oGFlK+Jo9PYa6gltd7EptBNHCUx/3q 1YCMCRTqHwvyjEGI94MNFEMk2q2AZkd8oAh5g4nHhUf9vi75dK9xF/vMB8QI7A2j e+SKPAU9uJdCLoTIfI0Jxb6tsjLNOfkXZEPEpNU8SqUvNgItVMxD1w42ys6B05DK X4pLUg1WHvvkjLaKX7/K2flUm9folYdF+ZoeJzflyXTSIElQ2g07pD05/BlZMPiw 50n9ssFk7mxDhxUuf50naHs2bMDAQGdTH6Gf9GeKb41VvpgrfmgkaiIEi64FDbJI ogke9SXOEbGAgS0Mv1KmkNJpEQIDAQABo4IClTCCApEwHQYDVR0OBBYEFDF3KyjO 7VC797pFmQDpwMwsvb+AMB8GA1UdIwQYMBaAFFOLB24Krdj64pcMlUPoSakP5zdS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkY0Ny9CNEE4NkMzODFE ODQxMUUyOTY5RkM1REEwOEIwMkNEMi9VNHNIYmdxdDJQcmlsd3lWUS1oSnFRX25O MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1U0c0hiZ3F0MlByaWx3eVZRLWhKcVFfbk4xSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjZGNDcvQjRBODZDMzgxRDg0MTFFMjk2OUZDNURBMDhCMDJDRDIvOUYzQTkxOTQ2 OEQ4MTFFRkIyRkU0MDVGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAfLywAwDQYJKoZIhvcNAQELBQADggEBAF6sThiStA5L/uki w/O1ArNHodmPBitSzU7tkGhIgQCDXRwYj9Owoz44WYbeBwiyXcx/1aRaXbTR6UXD zuiMI8QmOHO0yBJSUwpsGnzNZ5RKh688mzZ+R7+tupEDBif5ULa4gDjUA2sFexvF AgZ9oUtafV9QXtm/NpFP2+IfSbN5r43U5CYplOohTbKInwW8i1Wx918fimOnBIVk KrtxILRG1iBkAFD8wBZvzYZ6VXfO4LCgAfMbgXBGBpLQ6H5WOSoOheIXWHveGZ1a GDWfG3FYd/AI6YlKY2BS/O8TC1U++X/9856at0i/JQa+I/cA9hp4Ohywj/0hiew4 LmH9nbE= -----END CERTIFICATE-----Generated at Wed Nov 5 13:47:24 2025 by rpki-client