$ rpki-client -vvf rpki.apnic.net/member_repository/A91C23FE/825CE9AAF9EB11E6BDE7A968C4F9AE02/A88F22ECCC7011ED931BD15FC4F9AE02.roa File: A88F22ECCC7011ED931BD15FC4F9AE02.roa (raw, json) Hash identifier: 0F+HyKS0ioPFvzCaqyJQESCSfvE7rRFOPbWjnK2cB34= Subject key identifier: D3:83:28:4F:69:42:F3:2A:82:45:B4:99:03:32:E9:83:92:E9:19:6C Certificate issuer: /CN=A91C23FE/serialNumber=E2F0742AD80A9DBB2875184EE0DD5E94DD75784B Certificate serial: 1C33 Authority key identifier: E2:F0:74:2A:D8:0A:9D:BB:28:75:18:4E:E0:DD:5E:94:DD:75:78:4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4vB0KtgKnbsodRhO4N1elN11eEs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C23FE/825CE9AAF9EB11E6BDE7A968C4F9AE02/A88F22ECCC7011ED931BD15FC4F9AE02.roa Signing time: Wed 05 Nov 2025 05:56:56 +0000 ROA not before: Wed 05 Nov 2025 05:56:56 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 134674 IP address blocks: 45.127.47.0/24 maxlen: 24 58.84.60.0/22 maxlen: 24 103.76.100.0/22 maxlen: 24 103.80.160.0/22 maxlen: 24 103.113.140.0/24 maxlen: 24 103.113.141.0/24 maxlen: 24 103.113.142.0/24 maxlen: 24 103.113.143.0/24 maxlen: 24 103.197.72.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C23FE/825CE9AAF9EB11E6BDE7A968C4F9AE02/4vB0KtgKnbsodRhO4N1elN11eEs.crl rsync://rpki.apnic.net/member_repository/A91C23FE/825CE9AAF9EB11E6BDE7A968C4F9AE02/4vB0KtgKnbsodRhO4N1elN11eEs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4vB0KtgKnbsodRhO4N1elN11eEs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:33:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7219 (0x1c33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C23FE, serialNumber=E2F0742AD80A9DBB2875184EE0DD5E94DD75784B Validity Not Before: Nov 5 05:56:56 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=690ae727-ac32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:69:1f:86:7a:56:47:11:a4:ae:50:d6:7c:87: c0:5e:f1:3a:9f:7a:8d:c2:b8:8c:66:25:6b:26:42: d2:04:ae:48:47:dc:80:79:1c:ca:48:fc:46:55:c3: 0a:62:c0:26:0c:67:57:fb:60:fc:8a:dc:e7:ea:6d: 81:82:69:af:28:0c:48:73:9e:d0:35:b0:4b:fb:b7: 16:4a:bb:8b:84:bd:05:39:a8:98:66:4e:a1:3a:79: 4e:3e:40:1f:6c:4d:96:44:a5:4c:a7:44:f0:7f:cd: 34:50:dd:05:db:16:fb:ba:bb:ce:5d:82:dd:e8:8d: 32:89:f9:4c:69:67:d7:81:f2:77:dc:e4:ee:d7:18: e6:87:87:d5:5a:6c:f0:81:55:22:87:ea:f6:50:bb: 80:59:d9:ab:3e:8d:36:6a:c7:14:78:41:61:e6:c2: fe:61:90:34:b3:cb:e3:2a:bc:4f:e1:51:1c:be:25: 7d:9e:6b:ea:b8:87:9d:0a:83:f8:9d:d8:21:da:32: 3f:c5:01:80:f4:91:39:ea:f7:e1:9c:99:88:54:18: fb:75:07:82:5b:55:5a:5c:9e:c4:6b:84:1d:c7:05: 1d:2f:5d:30:09:04:66:3e:dc:49:fb:8e:a5:1b:49: 0a:b2:97:07:e1:06:db:64:95:1e:cc:06:36:2a:0a: d1:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:83:28:4F:69:42:F3:2A:82:45:B4:99:03:32:E9:83:92:E9:19:6C X509v3 Authority Key Identifier: keyid:E2:F0:74:2A:D8:0A:9D:BB:28:75:18:4E:E0:DD:5E:94:DD:75:78:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C23FE/825CE9AAF9EB11E6BDE7A968C4F9AE02/4vB0KtgKnbsodRhO4N1elN11eEs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4vB0KtgKnbsodRhO4N1elN11eEs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C23FE/825CE9AAF9EB11E6BDE7A968C4F9AE02/A88F22ECCC7011ED931BD15FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.127.47.0/24 58.84.60.0/22 103.76.100.0/22 103.80.160.0/22 103.113.140.0/22 103.197.72.0/22 Signature Algorithm: sha256WithRSAEncryption a7:d4:27:46:cb:68:d3:b2:87:35:8a:ae:a8:65:52:6f:aa:34: 53:e1:cf:c6:b9:c5:c0:c6:fc:43:ce:14:98:49:c1:15:92:c0: 38:8e:0f:f7:0a:92:69:56:ef:ba:f1:f5:8a:b9:8d:47:cf:b5: c8:ca:24:b5:b0:bb:16:39:ff:a9:86:24:ba:04:2c:d6:a1:af: cc:d0:bd:ae:93:4a:c4:eb:e5:9f:d9:1d:ef:8d:0b:26:03:61: b5:eb:e2:f0:d7:dc:76:b8:54:c4:51:51:f6:02:fd:c1:37:5b: 9d:11:aa:43:c2:ea:35:c8:eb:a9:83:26:c9:5e:c2:b3:5b:34: 70:65:3e:29:f7:58:12:73:6e:82:72:9b:bc:2e:4f:09:ad:2d: 0d:19:5c:b9:82:44:27:63:0c:bb:15:cb:ff:a6:8f:b4:66:45: 72:82:47:8f:ca:9e:33:40:9b:4a:f3:03:50:d4:c6:27:f5:66: 21:85:eb:a9:17:91:aa:cf:d7:85:5d:a5:52:7f:cf:b2:5d:a3: be:2e:71:d0:91:b9:ee:75:c1:aa:46:0c:02:22:a1:39:f1:72: f6:4a:c3:04:74:c0:03:f5:2d:1b:34:92:62:db:31:c5:74:6d: e8:f9:79:1e:72:98:c0:d4:63:53:48:bf:26:c9:91:a2:c4:7a: fe:aa:aa:92 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgICHDMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzIzRkUxMTAvBgNVBAUTKEUyRjA3NDJBRDgwQTlEQkIyODc1MTg0RUUwREQ1RTk0 REQ3NTc4NEIwHhcNMjUxMTA1MDU1NjU2WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTBhZTcyNy1hYzMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4GkfhnpWRxGkrlDWfIfAXvE6n3qNwriMZiVrJkLSBK5IR9yAeRzKSPxGVcMK YsAmDGdX+2D8itzn6m2BgmmvKAxIc57QNbBL+7cWSruLhL0FOaiYZk6hOnlOPkAf bE2WRKVMp0Twf800UN0F2xb7urvOXYLd6I0yiflMaWfXgfJ33OTu1xjmh4fVWmzw gVUih+r2ULuAWdmrPo02ascUeEFh5sL+YZA0s8vjKrxP4VEcviV9nmvquIedCoP4 ndgh2jI/xQGA9JE56vfhnJmIVBj7dQeCW1VaXJ7Ea4QdxwUdL10wCQRmPtxJ+46l G0kKspcH4QbbZJUezAY2KgrRaQIDAQABo4ICszCCAq8wHQYDVR0OBBYEFNODKE9p QvMqgkW0mQMy6YOS6RlsMB8GA1UdIwQYMBaAFOLwdCrYCp27KHUYTuDdXpTddXhL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjNGRS84MjVDRTlBQUY5 RUIxMUU2QkRFN0E5NjhDNEY5QUUwMi80dkIwS3RnS25ic29kUmhPNE4xZWxOMTFl RXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzR2QjBLdGdLbmJzb2RSaE80TjFlbE4xMWVFcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzIzRkUvODI1Q0U5QUFGOUVCMTFFNkJERTdBOTY4QzRGOUFFMDIvQTg4RjIyRUND QzcwMTFFRDkzMUJEMTVGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPQYIKwYBBQUHAQcBAf8E LjAsMCoEAgABMCQDBAAtfy8DBAI6VDwDBAJnTGQDBAJnUKADBAJncYwDBAJnxUgw DQYJKoZIhvcNAQELBQADggEBAKfUJ0bLaNOyhzWKrqhlUm+qNFPhz8a5xcDG/EPO FJhJwRWSwDiOD/cKkmlW77rx9Yq5jUfPtcjKJLWwuxY5/6mGJLoELNahr8zQva6T SsTr5Z/ZHe+NCyYDYbXr4vDX3Ha4VMRRUfYC/cE3W50RqkPC6jXI66mDJslewrNb NHBlPin3WBJzboJym7wuTwmtLQ0ZXLmCRCdjDLsVy/+mj7RmRXKCR4/KnjNAm0rz A1DUxif1ZiGF66kXkarP14VdpVJ/z7Jdo74ucdCRue51wapGDAIioTnxcvZKwwR0 wAP1LRs0kmLbMcV0bej5eR5ymMDUY1NIvybJkaLEev6qqpI= -----END CERTIFICATE-----Generated at Wed Nov 5 13:27:15 2025 by rpki-client