$ rpki-client -vvf rpki.apnic.net/member_repository/A91C78A7/FAE96C4AB62011F0A749211FC4F9AE02/7EE7A08EB62111F08C9BBB5DC4F9AE02.roa File: 7EE7A08EB62111F08C9BBB5DC4F9AE02.roa (raw, json) Hash identifier: CqEVesEQUIRS9swO5wlG/SMUzejeu/Jelkeq4CxPI+w= Subject key identifier: 94:DC:05:CC:46:8F:10:3E:39:81:41:92:2B:DD:FA:A9:36:60:2D:58 Certificate issuer: /CN=A91C78A7/serialNumber=1C5968586CB4C7E283F1419F5850468EDA559682 Certificate serial: 06 Authority key identifier: 1C:59:68:58:6C:B4:C7:E2:83:F1:41:9F:58:50:46:8E:DA:55:96:82 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HFloWGy0x-KD8UGfWFBGjtpVloI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C78A7/FAE96C4AB62011F0A749211FC4F9AE02/7EE7A08EB62111F08C9BBB5DC4F9AE02.roa Signing time: Fri 31 Oct 2025 06:20:15 +0000 ROA not before: Fri 31 Oct 2025 06:20:15 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 154332 IP address blocks: 138.252.120.0/23 maxlen: 23 138.252.120.0/24 maxlen: 24 138.252.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C78A7/FAE96C4AB62011F0A749211FC4F9AE02/HFloWGy0x-KD8UGfWFBGjtpVloI.crl rsync://rpki.apnic.net/member_repository/A91C78A7/FAE96C4AB62011F0A749211FC4F9AE02/HFloWGy0x-KD8UGfWFBGjtpVloI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HFloWGy0x-KD8UGfWFBGjtpVloI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 08:05:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6 (0x6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C78A7, serialNumber=1C5968586CB4C7E283F1419F5850468EDA559682 Validity Not Before: Oct 31 06:20:15 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6904551f-aae8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:74:c9:cb:9f:bd:6c:e3:2f:46:23:d5:86:bc: 6b:b7:52:4f:fc:be:d3:e7:4b:75:21:14:00:c8:cd: 95:0e:55:b7:9b:df:e2:53:51:36:01:c4:8d:e6:04: 34:34:12:3b:a0:46:05:a1:b7:87:68:e5:3f:50:c4: 9b:93:fe:b8:52:a0:51:bd:00:f4:fb:ed:3c:b7:5f: f6:5a:bf:9e:61:65:ab:76:18:05:f7:fa:67:5a:94: 96:f2:5b:2c:17:f8:10:ff:4c:5a:e0:36:4a:80:eb: 47:54:76:44:7f:24:76:4e:a6:dc:57:ec:95:8d:1c: 4a:12:7a:a3:cd:fa:87:d6:9e:b6:0d:b2:90:30:a6: d5:e6:39:ed:a5:2a:af:b4:ad:4c:01:16:ae:8a:1d: 1c:d9:1b:cd:8b:04:bd:f0:54:9c:ff:15:9f:42:46: de:87:57:43:33:87:76:02:67:94:6a:d4:6a:83:37: c0:92:bf:fe:28:35:12:96:41:8c:a3:91:3d:a8:81: 4d:62:ec:75:4c:7a:36:57:cd:69:18:b1:c4:11:bc: 72:0c:67:e0:2a:0b:18:4d:0a:bf:f7:36:20:0f:0c: ac:da:4e:03:ee:cd:72:87:31:a4:90:06:fd:7b:7c: 29:e7:ad:c3:4b:d5:64:6f:5e:61:15:92:9f:41:cc: b3:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:DC:05:CC:46:8F:10:3E:39:81:41:92:2B:DD:FA:A9:36:60:2D:58 X509v3 Authority Key Identifier: keyid:1C:59:68:58:6C:B4:C7:E2:83:F1:41:9F:58:50:46:8E:DA:55:96:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C78A7/FAE96C4AB62011F0A749211FC4F9AE02/HFloWGy0x-KD8UGfWFBGjtpVloI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HFloWGy0x-KD8UGfWFBGjtpVloI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C78A7/FAE96C4AB62011F0A749211FC4F9AE02/7EE7A08EB62111F08C9BBB5DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 138.252.120.0/23 Signature Algorithm: sha256WithRSAEncryption 61:07:3d:a4:d1:df:c9:36:25:05:40:df:a3:56:1b:ac:2c:b8: a1:08:b1:50:0c:ba:b8:48:7e:4a:7d:62:01:b3:a5:4b:45:7f: 0e:6f:44:d5:37:92:2b:b5:e1:a4:0d:be:13:05:1a:76:39:8d: 4c:8e:34:d6:95:dc:55:ed:81:f3:76:3e:bd:21:29:cf:05:ae: 67:25:53:e8:1e:0c:6e:db:7e:ba:1a:b7:60:a4:4f:e7:3a:88: e0:dc:97:a1:e0:6d:f5:af:7a:30:e4:00:23:c3:c3:d5:d4:74: 94:dd:18:2d:13:ab:f3:c6:1b:83:73:63:f3:8b:03:fc:d6:ae: 70:22:12:52:6d:08:52:92:88:96:94:20:3f:b6:00:e0:70:6e: 6c:2a:80:59:c6:37:f0:ab:3e:87:d2:97:ad:58:e3:65:17:90: 65:53:ef:10:1e:d3:a0:5f:86:5e:e1:e6:c7:91:17:64:97:15: b4:f6:71:94:da:41:41:55:01:3a:70:55:ef:01:6c:e0:32:ac: 1c:aa:b2:6b:0d:46:47:1d:b7:65:92:b1:f0:74:a1:d2:10:cf: bf:7f:43:1e:08:d4:7c:ca:71:2e:12:70:bc:4a:4f:5b:c7:57: f6:7b:71:a7:f7:54:80:ca:36:33:f6:cf:ce:3f:59:f7:a3:1d: 43:04:b8:42 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NzhBNzExMC8GA1UEBRMoMUM1OTY4NTg2Q0I0QzdFMjgzRjE0MTlGNTg1MDQ2OEVE QTU1OTY4MjAeFw0yNTEwMzEwNjIwMTVaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MDQ1NTFmLWFhZTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4dMnLn71s4y9GI9WGvGu3Uk/8vtPnS3UhFADIzZUOVbeb3+JTUTYBxI3mBDQ0 EjugRgWht4do5T9QxJuT/rhSoFG9APT77Ty3X/Zav55hZat2GAX3+mdalJbyWywX +BD/TFrgNkqA60dUdkR/JHZOptxX7JWNHEoSeqPN+ofWnrYNspAwptXmOe2lKq+0 rUwBFq6KHRzZG82LBL3wVJz/FZ9CRt6HV0Mzh3YCZ5Rq1GqDN8CSv/4oNRKWQYyj kT2ogU1i7HVMejZXzWkYscQRvHIMZ+AqCxhNCr/3NiAPDKzaTgPuzXKHMaSQBv17 fCnnrcNL1WRvXmEVkp9BzLM3AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUlNwFzEaP ED45gUGSK936qTZgLVgwHwYDVR0jBBgwFoAUHFloWGy0x+KD8UGfWFBGjtpVloIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3OEE3L0ZBRTk2QzRBQjYy MDExRjBBNzQ5MjExRkM0RjlBRTAyL0hGbG9XR3kweC1LRDhVR2ZXRkJHanRwVmxv SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSEZsb1dHeTB4LUtEOFVHZldGQkdqdHBWbG9JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzhBNy9GQUU5NkM0QUI2MjAxMUYwQTc0OTIxMUZDNEY5QUUwMi83RUU3QTA4RUI2 MjExMUYwOEM5QkJCNURDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAYr8eDANBgkqhkiG9w0BAQsFAAOCAQEAYQc9pNHfyTYlBUDf o1YbrCy4oQixUAy6uEh+Sn1iAbOlS0V/Dm9E1TeSK7XhpA2+EwUadjmNTI401pXc Ve2B83Y+vSEpzwWuZyVT6B4Mbtt+uhq3YKRP5zqI4NyXoeBt9a96MOQAI8PD1dR0 lN0YLROr88Ybg3Nj84sD/NaucCISUm0IUpKIlpQgP7YA4HBubCqAWcY38Ks+h9KX rVjjZReQZVPvEB7ToF+GXuHmx5EXZJcVtPZxlNpBQVUBOnBV7wFs4DKsHKqyaw1G Rx23ZZKx8HSh0hDPv39DHgjUfMpxLhJwvEpPW8dX9ntxp/dUgMo2M/bPzj9Z96Md QwS4Qg== -----END CERTIFICATE-----Generated at Wed Nov 5 03:37:42 2025 by rpki-client