$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/645EF9CADB9311E988E56C33C4F9AE02.roa File: 645EF9CADB9311E988E56C33C4F9AE02.roa (raw, json) Hash identifier: JRQ7BF2DG2XDWDJQSYzrLycUZShYsOsnU2Hj3xscnfQ= Subject key identifier: 7A:32:8E:66:98:E7:84:D9:CE:61:43:A2:DB:3C:AF:BE:84:F4:39:95 Certificate issuer: /CN=A91C9606/serialNumber=1B471DADCD91209335136EACF6CC988828654B2A Certificate serial: 0D80 Authority key identifier: 1B:47:1D:AD:CD:91:20:93:35:13:6E:AC:F6:CC:98:88:28:65:4B:2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0cdrc2RIJM1E26s9syYiChlSyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/645EF9CADB9311E988E56C33C4F9AE02.roa Signing time: Tue 04 Nov 2025 18:07:26 +0000 ROA not before: Tue 04 Nov 2025 18:07:26 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 9789 IP address blocks: 202.131.3.0/24 maxlen: 24 202.131.5.0/24 maxlen: 24 202.131.6.0/24 maxlen: 24 202.131.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.crl rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0cdrc2RIJM1E26s9syYiChlSyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:07:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3456 (0xd80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9606, serialNumber=1B471DADCD91209335136EACF6CC988828654B2A Validity Not Before: Nov 4 18:07:26 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=690a40de-fa4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f6:1c:a7:2e:cf:e3:14:18:6f:42:9d:9b:92: 96:23:05:a4:01:d8:e4:cd:51:12:19:d1:ed:b6:ad: 2f:2b:8f:83:12:5c:46:27:5c:00:ba:e0:b0:73:00: 61:41:f4:07:7a:9d:0b:2d:68:3d:44:09:58:d8:77: ca:6a:57:26:8e:90:01:5f:c4:a7:bb:a9:74:92:d6: d3:e2:b6:23:6a:b4:8d:72:a4:92:a3:d2:b4:71:57: 2e:ab:17:e0:51:5f:4f:a8:ba:cf:81:52:08:68:5d: 77:2b:fe:9b:9f:10:45:66:82:8b:6b:15:80:78:21: cc:cc:8b:6f:7b:b4:b8:8c:0f:06:6c:1f:42:50:78: 29:6b:1f:86:b8:59:92:92:38:99:7a:9d:ae:46:48: fb:3e:ed:6c:7c:58:e6:03:ad:fd:30:a6:41:47:d5: d7:67:98:e2:46:70:a2:18:4a:33:5f:00:54:c7:cd: eb:ba:15:94:59:c7:6a:8f:84:2e:f2:72:2f:76:c2: d0:03:9e:e3:6f:91:e8:5d:bd:5b:6d:6d:48:fd:57: 6e:88:0c:4d:ae:a4:24:3b:5f:7b:f7:51:fa:af:91: 8d:af:a8:c3:5e:79:94:22:05:4a:97:fe:75:a6:5b: 2f:40:7e:9e:cd:74:fe:a0:60:29:e8:c5:28:7e:65: f4:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:32:8E:66:98:E7:84:D9:CE:61:43:A2:DB:3C:AF:BE:84:F4:39:95 X509v3 Authority Key Identifier: keyid:1B:47:1D:AD:CD:91:20:93:35:13:6E:AC:F6:CC:98:88:28:65:4B:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0cdrc2RIJM1E26s9syYiChlSyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/645EF9CADB9311E988E56C33C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.131.3.0/24 202.131.5.0-202.131.7.255 Signature Algorithm: sha256WithRSAEncryption 7e:03:5b:c9:4b:ab:0a:f9:80:a6:b2:00:fb:bf:d6:d4:5d:96: 84:10:40:dc:e2:3e:e9:07:57:51:ee:29:18:15:a9:ea:4a:34: 62:e4:91:c0:a5:49:6a:57:aa:fb:77:7a:24:fb:64:c9:90:f6: 5d:c9:ef:75:4f:e2:bd:8d:f0:09:bc:e2:37:15:5b:3d:b4:ae: 5a:ae:d0:ad:b3:d7:64:47:25:80:3c:14:2c:a0:4a:a8:6f:64: 4f:d8:44:db:50:d4:d8:4c:96:df:17:40:5d:2c:c7:43:2a:b7: bc:6a:b7:77:49:4c:3a:d4:d7:2d:99:00:60:7b:88:7a:60:b9: 5c:c7:87:88:db:07:57:47:60:51:42:e4:b8:85:94:0a:4e:6f: 7b:26:7f:3f:93:55:9e:ff:cb:cd:f1:c8:aa:6a:71:ac:a0:b5: 72:4a:56:23:d3:f4:91:aa:3d:94:0f:ed:17:4f:c1:5a:3f:12: da:aa:d8:c0:58:d0:87:94:7a:ac:8e:0b:c6:4f:44:e5:9a:e9: fe:51:f3:b3:49:bc:58:ae:c8:de:ce:12:2d:46:48:b8:ca:35: 85:f4:47:c8:75:3b:bf:2d:4d:d4:ef:b0:6e:8c:7c:28:65:98: 06:cc:0a:59:fc:da:24:62:6e:4b:0a:54:ed:a4:b1:f5:a0:fd: d7:00:93:32 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgICDYAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk2MDYxMTAvBgNVBAUTKDFCNDcxREFEQ0Q5MTIwOTMzNTEzNkVBQ0Y2Q0M5ODg4 Mjg2NTRCMkEwHhcNMjUxMTA0MTgwNzI2WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OTBhNDBkZS1mYTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz/Ycpy7P4xQYb0Kdm5KWIwWkAdjkzVESGdHttq0vK4+DElxGJ1wAuuCwcwBh QfQHep0LLWg9RAlY2HfKalcmjpABX8Snu6l0ktbT4rYjarSNcqSSo9K0cVcuqxfg UV9PqLrPgVIIaF13K/6bnxBFZoKLaxWAeCHMzItve7S4jA8GbB9CUHgpax+GuFmS kjiZep2uRkj7Pu1sfFjmA639MKZBR9XXZ5jiRnCiGEozXwBUx83ruhWUWcdqj4Qu 8nIvdsLQA57jb5HoXb1bbW1I/VduiAxNrqQkO19791H6r5GNr6jDXnmUIgVKl/51 plsvQH6ezXT+oGAp6MUofmX08QIDAQABo4ICozCCAp8wHQYDVR0OBBYEFHoyjmaY 54TZzmFDots8r76E9DmVMB8GA1UdIwQYMBaAFBtHHa3NkSCTNRNurPbMmIgoZUsq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTYwNi85QzlGOUY5QURC OTAxMUU5QTNDMTJGMkNDNEY5QUUwMi9HMGNkcmMyUklKTTFFMjZzOXN5WWlDaGxT eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0cwY2RyYzJSSUpNMUUyNnM5c3lZaUNobFN5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Qzk2MDYvOUM5RjlGOUFEQjkwMTFFOUEzQzEyRjJDQzRGOUFFMDIvNjQ1RUY5Q0FE QjkzMTFFOTg4RTU2QzMzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLQYIKwYBBQUHAQcBAf8E HjAcMBoEAgABMBQDBADKgwMwDAMEAMqDBQMEA8qDADANBgkqhkiG9w0BAQsFAAOC AQEAfgNbyUurCvmAprIA+7/W1F2WhBBA3OI+6QdXUe4pGBWp6ko0YuSRwKVJaleq +3d6JPtkyZD2XcnvdU/ivY3wCbziNxVbPbSuWq7QrbPXZEclgDwULKBKqG9kT9hE 21DU2EyW3xdAXSzHQyq3vGq3d0lMOtTXLZkAYHuIemC5XMeHiNsHV0dgUULkuIWU Ck5veyZ/P5NVnv/LzfHIqmpxrKC1ckpWI9P0kao9lA/tF0/BWj8S2qrYwFjQh5R6 rI4Lxk9E5Zrp/lHzs0m8WK7I3s4SLUZIuMo1hfRHyHU7vy1N1O+wbox8KGWYBswK WfzaJGJuSwpU7aSx9aD91wCTMg== -----END CERTIFICATE-----Generated at Thu Nov 6 02:43:27 2025 by rpki-client