$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/56AAA41CE2BF11EFBAC5A282C4F9AE02.roa File: 56AAA41CE2BF11EFBAC5A282C4F9AE02.roa (raw, json) Hash identifier: xL/jB9qeoO4hEyco8SsjaJm9EZaDpQtDcufIiVgH0FU= Subject key identifier: 23:E3:0C:D3:B7:8B:D8:AC:24:DA:13:BD:32:D7:39:66:A6:58:F4:96 Certificate issuer: /CN=A91C1A14/serialNumber=598DD5A39AE477658AD5BCBFE36264A1A61D6708 Certificate serial: 0963 Authority key identifier: 59:8D:D5:A3:9A:E4:77:65:8A:D5:BC:BF:E3:62:64:A1:A6:1D:67:08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/56AAA41CE2BF11EFBAC5A282C4F9AE02.roa Signing time: Tue 04 Feb 2025 06:14:49 +0000 ROA not before: Tue 04 Feb 2025 06:14:49 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 17557 IP address blocks: 43.225.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.crl rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:03:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2403 (0x963) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1A14, serialNumber=598DD5A39AE477658AD5BCBFE36264A1A61D6708 Validity Not Before: Feb 4 06:14:49 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=67a1b059-3b70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:2b:be:e4:8f:33:4d:44:fa:fa:08:7c:da:d1: eb:6f:3a:22:b8:4d:6d:df:86:bb:36:1e:4c:14:59: 29:99:77:af:b0:fb:77:94:47:be:32:90:bd:5a:73: d6:59:b3:b6:59:cc:3f:cd:7a:c3:38:69:24:8a:82: 44:64:fa:42:be:0f:07:08:75:9f:c4:32:b9:9e:d1: d3:d0:65:bc:58:44:d3:a3:3a:41:95:1c:9e:7a:f0: bd:b3:1a:f4:7d:2f:09:84:0f:cb:96:f2:57:f2:9c: bb:f8:11:11:e1:7b:98:68:8f:cf:f3:1b:ca:7f:e6: cd:8c:6a:d1:06:37:d6:36:fc:e2:2e:e7:be:c5:f0: cc:a8:f4:24:86:96:9b:c5:9b:fb:31:b1:cc:07:4d: ff:d6:79:5e:7c:8d:6f:a5:e4:b4:7f:dc:8b:e8:db: f4:66:c2:64:d1:99:06:16:c2:ad:64:92:d9:ef:b6: 8b:f8:53:ae:a2:99:f8:42:bd:38:e9:df:12:ed:29: 2c:71:5c:e5:8b:c7:23:13:b9:d0:f2:f0:a4:a2:53: 45:31:ee:72:96:d1:4d:cb:77:a4:bc:a0:9c:42:7e: c2:27:db:48:b4:ef:35:2b:1a:bd:df:29:5c:b9:eb: 46:85:64:db:b6:fe:79:f0:19:b1:b7:a1:85:06:95: ed:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:E3:0C:D3:B7:8B:D8:AC:24:DA:13:BD:32:D7:39:66:A6:58:F4:96 X509v3 Authority Key Identifier: keyid:59:8D:D5:A3:9A:E4:77:65:8A:D5:BC:BF:E3:62:64:A1:A6:1D:67:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/56AAA41CE2BF11EFBAC5A282C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.225.98.0/24 Signature Algorithm: sha256WithRSAEncryption b7:10:2a:03:ec:c3:c5:09:5e:15:8a:4d:ee:24:6b:2b:63:ba: 5b:93:52:37:2b:ac:51:26:4f:4c:27:37:33:a5:cc:4b:ea:07: 59:43:26:3e:30:ed:8c:db:b3:84:f9:f3:a0:79:54:c6:cc:54: 60:20:b9:de:f5:62:8c:c8:81:d1:03:d5:91:81:30:db:9e:71: 35:95:9a:18:13:a8:ea:f7:53:18:f1:84:32:5b:4c:70:e6:62: c9:17:03:c8:dd:b3:08:86:cb:14:35:42:a4:98:c9:71:38:63: 8d:4b:24:a4:e7:02:44:e4:a6:95:82:42:d4:d1:48:42:78:9d: 08:f7:61:6d:50:67:b7:d6:81:a6:39:19:70:26:ec:fa:23:fc: 0e:48:c0:73:e3:94:4d:58:cb:04:5c:40:f6:45:ab:46:8f:fc: c7:02:85:88:15:53:cd:dd:56:9f:a5:5b:c2:af:cd:ee:cf:b9: 08:7a:39:d7:da:8c:82:b5:64:24:ff:28:ba:c0:89:63:6c:e6: 39:b8:88:e6:ae:26:59:79:9e:f9:ff:81:88:10:43:3e:57:1d: 03:e9:30:4d:6c:2d:d1:ff:cf:0a:13:d0:b8:00:ef:10:81:90: e6:2f:c7:03:0a:0e:d0:76:b5:a8:45:f5:c1:d4:8b:e7:b6:4c: ba:b2:d9:69 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFBMTQxMTAvBgNVBAUTKDU5OERENUEzOUFFNDc3NjU4QUQ1QkNCRkUzNjI2NEEx QTYxRDY3MDgwHhcNMjUwMjA0MDYxNDQ5WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2ExYjA1OS0zYjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4iu+5I8zTUT6+gh82tHrbzoiuE1t34a7Nh5MFFkpmXevsPt3lEe+MpC9WnPW WbO2Wcw/zXrDOGkkioJEZPpCvg8HCHWfxDK5ntHT0GW8WETTozpBlRyeevC9sxr0 fS8JhA/LlvJX8py7+BER4XuYaI/P8xvKf+bNjGrRBjfWNvziLue+xfDMqPQkhpab xZv7MbHMB03/1nlefI1vpeS0f9yL6Nv0ZsJk0ZkGFsKtZJLZ77aL+FOuopn4Qr04 6d8S7SkscVzli8cjE7nQ8vCkolNFMe5yltFNy3ekvKCcQn7CJ9tItO81Kxq93ylc uetGhWTbtv558Bmxt6GFBpXtWwIDAQABo4IClTCCApEwHQYDVR0OBBYEFCPjDNO3 i9isJNoTvTLXOWamWPSWMB8GA1UdIwQYMBaAFFmN1aOa5HdlitW8v+NiZKGmHWcI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUExNC9GN0U4NjQ0NjhG QkMxMUVBQThDMzEyN0JDNEY5QUUwMi9XWTNWbzVya2QyV0sxYnlfNDJKa29hWWRa d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dZM1ZvNXJrZDJXSzFieV80Mkprb2FZZFp3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzFBMTQvRjdFODY0NDY4RkJDMTFFQUE4QzMxMjdCQzRGOUFFMDIvNTZBQUE0MUNF MkJGMTFFRkJBQzVBMjgyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAr4WIwDQYJKoZIhvcNAQELBQADggEBALcQKgPsw8UJXhWK Te4kaytjuluTUjcrrFEmT0wnNzOlzEvqB1lDJj4w7Yzbs4T586B5VMbMVGAgud71 YozIgdED1ZGBMNuecTWVmhgTqOr3UxjxhDJbTHDmYskXA8jdswiGyxQ1QqSYyXE4 Y41LJKTnAkTkppWCQtTRSEJ4nQj3YW1QZ7fWgaY5GXAm7Poj/A5IwHPjlE1YywRc QPZFq0aP/McChYgVU83dVp+lW8Kvze7PuQh6OdfajIK1ZCT/KLrAiWNs5jm4iOau Jll5nvn/gYgQQz5XHQPpME1sLdH/zwoT0LgA7xCBkOYvxwMKDtB2tahF9cHUi+e2 TLqy2Wk= -----END CERTIFICATE-----Generated at Wed Nov 5 04:27:52 2025 by rpki-client