$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/05596FAEBA1811F080138957C4F9AE02.roa File: 05596FAEBA1811F080138957C4F9AE02.roa (raw, json) Hash identifier: h0JWy7ziGkjmOsJL8dHAJhvnalo12yE0dGnYrcqdH2A= Subject key identifier: 91:DF:19:6C:F7:9B:D2:02:3A:4F:0D:89:D2:54:44:19:3C:79:45:BB Certificate issuer: /CN=A91C2663/serialNumber=1A97C2F4711F7BC802E268AC66F110862BE57888 Certificate serial: 234E Authority key identifier: 1A:97:C2:F4:71:1F:7B:C8:02:E2:68:AC:66:F1:10:86:2B:E5:78:88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GpfC9HEfe8gC4misZvEQhivleIg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/05596FAEBA1811F080138957C4F9AE02.roa Signing time: Wed 05 Nov 2025 07:21:18 +0000 ROA not before: Wed 05 Nov 2025 07:21:18 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 135004 IP address blocks: 202.165.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.crl rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GpfC9HEfe8gC4misZvEQhivleIg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:21:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9038 (0x234e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2663, serialNumber=1A97C2F4711F7BC802E268AC66F110862BE57888 Validity Not Before: Nov 5 07:21:18 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=690afaee-b933 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:9a:cd:da:61:2f:d1:96:82:c6:3f:91:d1:92: 08:5a:d7:91:bc:ad:42:fe:03:f4:ab:92:3b:dc:b3: ff:42:7b:8f:bb:9b:72:b0:3b:df:93:c2:2c:f4:c6: 2a:56:5c:ae:8e:a2:bf:d9:3d:49:19:58:ae:cf:fd: ea:7c:98:51:ef:c2:84:71:67:8f:99:9d:24:fa:a4: 51:18:9a:58:98:75:bc:83:1a:6f:b1:79:8f:90:8c: d3:77:d6:77:40:81:4c:9a:91:16:e2:ca:4c:3c:69: f0:c2:55:19:8d:eb:1e:af:f9:63:9b:8e:ec:42:50: f7:72:5f:f1:a2:46:04:12:e1:54:ab:19:1f:a7:02: a4:90:df:8a:1d:75:71:ef:b3:6c:7f:39:ae:de:3f: be:ec:00:7d:1c:8b:9a:27:fb:00:2b:13:af:66:7d: b1:c7:ed:09:62:6f:73:d9:7e:48:aa:68:7e:a0:e9: f1:01:05:e6:28:00:cd:06:95:0d:8d:a9:8e:e7:84: e8:b2:44:1b:e4:fb:36:e4:97:21:2b:f1:9e:71:65: ec:05:f8:25:90:c2:d7:a5:3d:3e:da:a3:51:b4:6d: 03:85:bc:be:ca:dd:42:ea:a8:e7:99:0e:98:97:79: 3f:5f:17:16:96:53:38:95:c6:9c:8b:ec:01:19:09: 1f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:DF:19:6C:F7:9B:D2:02:3A:4F:0D:89:D2:54:44:19:3C:79:45:BB X509v3 Authority Key Identifier: keyid:1A:97:C2:F4:71:1F:7B:C8:02:E2:68:AC:66:F1:10:86:2B:E5:78:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GpfC9HEfe8gC4misZvEQhivleIg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/05596FAEBA1811F080138957C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.165.124.0/22 Signature Algorithm: sha256WithRSAEncryption 3d:4d:e1:0a:92:b4:7c:46:00:36:17:7c:95:b1:71:8f:cb:14: 54:fe:d2:8b:e4:84:4a:b1:97:7f:d0:f2:2c:79:22:b5:93:59: 76:56:85:74:89:69:70:38:f7:de:e0:39:53:6f:12:65:53:f5: e0:99:b5:11:84:62:90:bc:be:9d:3a:ee:69:99:0f:74:18:d7: 82:c8:53:33:e2:5f:09:0b:cd:ac:5f:d3:14:36:4e:41:ca:f2: c6:3d:41:e1:89:c7:e2:1b:d2:91:3f:16:df:6e:eb:23:88:e3: ce:d5:67:fa:42:eb:ff:60:fd:f9:9b:33:b3:17:d1:23:d8:8c: a7:cf:92:51:e3:f2:25:da:94:73:39:cf:aa:bb:aa:1f:67:e6: 78:a5:70:f0:73:a8:45:6a:25:cc:37:74:6e:39:1e:50:55:18: 6b:34:4b:7e:1f:6e:68:62:b1:fd:cd:0b:2b:60:91:02:b0:6d: 5c:f5:27:9a:de:5f:3a:e1:b9:46:77:26:23:c2:f2:e5:1e:df: 5c:4a:db:ed:37:32:b8:8f:cc:17:69:e6:ef:43:3b:7c:6b:7b: 6d:c8:c7:18:04:32:d7:8f:a5:f8:2d:1e:be:3e:0a:af:b7:ea: 67:e0:78:d1:e4:7f:50:e7:bb:96:db:53:5e:66:6f:ec:ff:f1: d0:e5:c9:78 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICI04wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzI2NjMxMTAvBgNVBAUTKDFBOTdDMkY0NzExRjdCQzgwMkUyNjhBQzY2RjExMDg2 MkJFNTc4ODgwHhcNMjUxMTA1MDcyMTE4WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OTBhZmFlZS1iOTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo5rN2mEv0ZaCxj+R0ZIIWteRvK1C/gP0q5I73LP/QnuPu5tysDvfk8Is9MYq VlyujqK/2T1JGViuz/3qfJhR78KEcWePmZ0k+qRRGJpYmHW8gxpvsXmPkIzTd9Z3 QIFMmpEW4spMPGnwwlUZjeser/ljm47sQlD3cl/xokYEEuFUqxkfpwKkkN+KHXVx 77Nsfzmu3j++7AB9HIuaJ/sAKxOvZn2xx+0JYm9z2X5Iqmh+oOnxAQXmKADNBpUN jamO54ToskQb5Ps25JchK/GecWXsBfglkMLXpT0+2qNRtG0Dhby+yt1C6qjnmQ6Y l3k/XxcWllM4lcaci+wBGQkf+wIDAQABo4IClTCCApEwHQYDVR0OBBYEFJHfGWz3 m9ICOk8NidJURBk8eUW7MB8GA1UdIwQYMBaAFBqXwvRxH3vIAuJorGbxEIYr5XiI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjY2My9COEFFRjEzOEE5 NEMxMUU1ODI5MUNBNjdDNEY5QUUwMi9HcGZDOUhFZmU4Z0M0bWlzWnZFUWhpdmxl SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dwZkM5SEVmZThnQzRtaXNadkVRaGl2bGVJZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzI2NjMvQjhBRUYxMzhBOTRDMTFFNTgyOTFDQTY3QzRGOUFFMDIvMDU1OTZGQUVC QTE4MTFGMDgwMTM4OTU3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBALKpXwwDQYJKoZIhvcNAQELBQADggEBAD1N4QqStHxGADYX fJWxcY/LFFT+0ovkhEqxl3/Q8ix5IrWTWXZWhXSJaXA4997gOVNvEmVT9eCZtRGE YpC8vp067mmZD3QY14LIUzPiXwkLzaxf0xQ2TkHK8sY9QeGJx+Ib0pE/Ft9u6yOI 487VZ/pC6/9g/fmbM7MX0SPYjKfPklHj8iXalHM5z6q7qh9n5nilcPBzqEVqJcw3 dG45HlBVGGs0S34fbmhisf3NCytgkQKwbVz1J5reXzrhuUZ3JiPC8uUe31xK2+03 MriPzBdp5u9DO3xre23IxxgEMtePpfgtHr4+Cq+36mfgeNHkf1Dnu5bbU15mb+z/ 8dDlyXg= -----END CERTIFICATE-----Generated at Wed Nov 5 23:17:41 2025 by rpki-client