$ rpki-client -vvf rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/8BFEF29C3AEA11EC84E6634EC4F9AE02.roa File: 8BFEF29C3AEA11EC84E6634EC4F9AE02.roa (raw, json) Hash identifier: /y7NWQduX3GTEc5x8Izyd0MrTIM9crgcIhmlI915KvA= Subject key identifier: 32:C1:34:47:CF:E9:07:5A:C0:E9:BF:23:E9:80:C4:15:7D:A4:0A:7A Certificate issuer: /CN=A91B885C/serialNumber=5374C6E75F186052455A2D8DA5292FEF009CC9AF Certificate serial: 0D95 Authority key identifier: 53:74:C6:E7:5F:18:60:52:45:5A:2D:8D:A5:29:2F:EF:00:9C:C9:AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3TG518YYFJFWi2NpSkv7wCcya8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/8BFEF29C3AEA11EC84E6634EC4F9AE02.roa Signing time: Fri 31 Oct 2025 18:36:44 +0000 ROA not before: Fri 31 Oct 2025 18:36:44 +0000 ROA not after: Sun 01 Mar 2026 00:00:00 +0000 asID: 134520 IP address blocks: 27.122.56.0/24 maxlen: 24 27.122.57.0/24 maxlen: 24 43.239.156.0/22 maxlen: 24 43.251.157.0/24 maxlen: 24 43.251.158.0/24 maxlen: 24 43.251.159.0/24 maxlen: 24 103.1.152.0/24 maxlen: 24 103.1.153.0/24 maxlen: 24 103.1.154.0/24 maxlen: 24 103.10.196.0/24 maxlen: 24 103.10.198.0/24 maxlen: 24 103.35.72.0/22 maxlen: 22 103.35.72.0/24 maxlen: 24 103.35.73.0/24 maxlen: 24 103.35.74.0/24 maxlen: 24 103.35.75.0/24 maxlen: 24 2402:c480:8000::/48 maxlen: 48 2402:c480:9000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.crl rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3TG518YYFJFWi2NpSkv7wCcya8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:10:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3477 (0xd95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B885C, serialNumber=5374C6E75F186052455A2D8DA5292FEF009CC9AF Validity Not Before: Oct 31 18:36:44 2025 GMT Not After : Mar 1 00:00:00 2026 GMT Subject: CN=690501bc-8404 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a6:55:07:0c:29:c4:26:16:09:f6:a3:b7:ad: 94:20:1f:b2:25:b7:ce:ac:df:97:0d:f5:83:d9:d0: fc:90:cc:e1:ef:85:bf:af:6d:0d:ce:c4:be:f7:03: 9a:e3:dd:5c:84:6a:72:85:5e:bb:ab:6b:cb:43:9c: ea:b0:7c:01:06:77:ec:42:b3:15:c1:80:d2:54:12: ad:c2:a9:15:fd:e9:b6:e7:21:34:0b:2f:8e:6b:73: d3:c9:61:2e:15:7d:01:6f:d8:f2:db:fa:9b:ba:66: 94:21:7f:59:b0:b5:6d:fb:95:f6:59:9d:a1:ab:af: c9:de:cb:fc:4f:0f:12:a1:e7:b7:78:fc:2f:a3:b6: bd:ac:c3:90:24:66:92:00:5f:c8:fc:62:6e:7c:7f: 92:81:35:4d:9b:57:44:a5:bc:d3:1b:3e:4a:d8:4e: 62:c5:22:8e:fd:e7:bc:81:5d:a9:97:78:81:32:cc: f0:df:9e:3b:ae:19:09:64:c0:98:5f:1d:80:96:3f: 4c:93:2a:70:7d:95:e9:e1:1d:60:8a:c7:53:ea:24: 41:19:e3:ed:e0:f0:89:04:3c:ee:45:31:4b:38:b3: 82:5a:ca:d2:d3:39:f7:7a:e9:52:f5:18:5f:c8:d1: 78:e9:73:fb:61:5d:8d:d1:5a:8a:b3:20:46:25:60: 0f:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:C1:34:47:CF:E9:07:5A:C0:E9:BF:23:E9:80:C4:15:7D:A4:0A:7A X509v3 Authority Key Identifier: keyid:53:74:C6:E7:5F:18:60:52:45:5A:2D:8D:A5:29:2F:EF:00:9C:C9:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3TG518YYFJFWi2NpSkv7wCcya8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/8BFEF29C3AEA11EC84E6634EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.122.56.0/23 43.239.156.0/22 43.251.157.0-43.251.159.255 103.1.152.0-103.1.154.255 103.10.196.0/24 103.10.198.0/24 103.35.72.0/22 IPv6: 2402:c480:8000::/48 2402:c480:9000::/48 Signature Algorithm: sha256WithRSAEncryption 77:de:f3:81:a5:7b:b2:3e:2e:e1:e0:81:35:f6:05:76:d3:ef: a9:78:35:04:36:ad:0a:83:49:d3:7b:11:ad:88:ad:00:f4:77: 1f:4e:1d:8b:41:0b:b0:60:81:63:ac:5a:32:6e:e2:42:41:72: bc:8c:45:5e:93:9d:ba:cb:7b:49:aa:bc:20:24:3f:26:83:71: 62:3c:8c:16:c3:4d:57:cd:f2:ff:94:e6:cb:b1:f0:bd:c6:40: 50:a7:e6:cd:15:b7:6e:f7:25:d7:ed:1c:4a:fc:bb:6a:0d:a9: 29:db:1c:d5:e7:f3:8c:24:c7:4f:3e:b5:2d:df:f9:4d:a2:4e: af:72:fc:43:c5:f8:41:d2:8b:86:8e:4c:0b:2e:c0:2b:01:c2: ff:f0:83:d1:b5:26:c8:49:42:c2:87:35:ac:f3:ce:25:06:88: 2a:99:3f:4f:8c:c0:88:3b:8a:bb:69:01:83:93:33:01:bd:1f: 14:28:fa:27:0f:50:20:59:13:3b:0c:1d:4c:81:0b:2a:e0:fa: ed:14:9d:9c:48:12:e3:b4:00:bd:47:b9:ab:ee:a9:7f:b6:ab: cf:3f:9e:f2:a7:bf:49:26:09:6c:0c:a1:2d:21:92:aa:0d:0e: 84:f0:ca:72:59:88:25:44:7b:c6:68:65:fe:33:97:f9:90:15: 7f:c2:b8:30 -----BEGIN CERTIFICATE----- MIIFvzCCBKegAwIBAgICDZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjg4NUMxMTAvBgNVBAUTKDUzNzRDNkU3NUYxODYwNTI0NTVBMkQ4REE1MjkyRkVG MDA5Q0M5QUYwHhcNMjUxMDMxMTgzNjQ0WhcNMjYwMzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTA1MDFiYy04NDA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx6ZVBwwpxCYWCfajt62UIB+yJbfOrN+XDfWD2dD8kMzh74W/r20NzsS+9wOa 491chGpyhV67q2vLQ5zqsHwBBnfsQrMVwYDSVBKtwqkV/em25yE0Cy+Oa3PTyWEu FX0Bb9jy2/qbumaUIX9ZsLVt+5X2WZ2hq6/J3sv8Tw8Soee3ePwvo7a9rMOQJGaS AF/I/GJufH+SgTVNm1dEpbzTGz5K2E5ixSKO/ee8gV2pl3iBMszw3547rhkJZMCY Xx2Alj9MkypwfZXp4R1gisdT6iRBGePt4PCJBDzuRTFLOLOCWsrS0zn3eulS9Rhf yNF46XP7YV2N0VqKsyBGJWAPPQIDAQABo4IC4zCCAt8wHQYDVR0OBBYEFDLBNEfP 6QdawOm/I+mAxBV9pAp6MB8GA1UdIwQYMBaAFFN0xudfGGBSRVotjaUpL+8AnMmv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODg1Qy81QzE5Rjg0MkYy NjcxMUU5ODdDNzEzMUZDNEY5QUUwMi9VM1RHNTE4WVlGSkZXaTJOcFNrdjd3Q2N5 YTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1UzVEc1MThZWUZKRldpMk5wU2t2N3dDY3lhOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Qjg4NUMvNUMxOUY4NDJGMjY3MTFFOTg3QzcxMzFGQzRGOUFFMDIvOEJGRUYyOUMz QUVBMTFFQzg0RTY2MzRFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwbQYIKwYBBQUHAQcBAf8E XjBcMEAEAgABMDoDBAEbejgDBAIr75wwDAMEACv7nQMEBSv7gDAMAwQDZwGYAwQA ZwGaAwQAZwrEAwQAZwrGAwQCZyNIMBgEAgACMBIDBwAkAsSAgAADBwAkAsSAkAAw DQYJKoZIhvcNAQELBQADggEBAHfe84Gle7I+LuHggTX2BXbT76l4NQQ2rQqDSdN7 Ea2IrQD0dx9OHYtBC7BggWOsWjJu4kJBcryMRV6TnbrLe0mqvCAkPyaDcWI8jBbD TVfN8v+U5sux8L3GQFCn5s0Vt273JdftHEr8u2oNqSnbHNXn84wkx08+tS3f+U2i Tq9y/EPF+EHSi4aOTAsuwCsBwv/wg9G1JshJQsKHNazzziUGiCqZP0+MwIg7irtp AYOTMwG9HxQo+icPUCBZEzsMHUyBCyrg+u0UnZxIEuO0AL1HuavuqX+2q88/nvKn v0kmCWwMoS0hkqoNDoTwynJZiCVEe8ZoZf4zl/mQFX/CuDA= -----END CERTIFICATE-----Generated at Wed Nov 5 23:50:16 2025 by rpki-client