$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA294/BDC09A2A9DAA11F096420B63C4F9AE02/1EC99BBCA2F811F0ACA39B18C4F9AE02.roa File: 1EC99BBCA2F811F0ACA39B18C4F9AE02.roa (raw, json) Hash identifier: OPNRGLnOYn0FnL/Q0g2b6h1BOq6mkXKBmGsTnzds7jI= Subject key identifier: 05:54:1B:02:8A:3F:DE:6D:E9:9D:C4:41:8A:FC:CB:2A:09:E3:1B:8D Certificate issuer: /CN=A91CA294/serialNumber=19BD822D3EB6FF6E9370245EE874BEA9EB8BEE55 Certificate serial: 09 Authority key identifier: 19:BD:82:2D:3E:B6:FF:6E:93:70:24:5E:E8:74:BE:A9:EB:8B:EE:55 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gb2CLT62_26TcCRe6HS-qeuL7lU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA294/BDC09A2A9DAA11F096420B63C4F9AE02/1EC99BBCA2F811F0ACA39B18C4F9AE02.roa Signing time: Mon 06 Oct 2025 21:05:00 +0000 ROA not before: Mon 06 Oct 2025 21:05:00 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 198949 IP address blocks: 156.69.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA294/BDC09A2A9DAA11F096420B63C4F9AE02/Gb2CLT62_26TcCRe6HS-qeuL7lU.crl rsync://rpki.apnic.net/member_repository/A91CA294/BDC09A2A9DAA11F096420B63C4F9AE02/Gb2CLT62_26TcCRe6HS-qeuL7lU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gb2CLT62_26TcCRe6HS-qeuL7lU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 08:06:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9 (0x9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA294, serialNumber=19BD822D3EB6FF6E9370245EE874BEA9EB8BEE55 Validity Not Before: Oct 6 21:05:00 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68e42efc-92ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:02:54:97:33:c2:bd:16:4f:90:fa:ba:87:1f: 62:d1:99:43:e6:79:2f:b6:eb:e5:99:63:c2:23:98: b2:cf:b9:c6:d1:01:a7:05:80:e5:3d:85:4a:bd:0d: 93:10:18:05:03:76:65:79:46:07:61:b7:ca:dd:e2: 7f:83:0a:e9:d6:a4:22:2d:b1:aa:a2:65:73:9a:9e: 37:ad:52:28:91:f9:64:60:97:5a:23:7c:1b:88:65: d5:4f:8f:3c:3f:f7:62:b3:f5:9f:85:4a:01:c1:80: 6f:47:58:5c:71:cb:71:98:d9:23:19:58:db:cc:36: 3f:b5:ff:6d:6d:14:e9:3e:5a:44:f5:39:77:19:ea: d4:b5:09:9e:33:79:3e:b7:f0:7b:83:b6:a0:0b:1e: 82:79:3d:52:cb:4a:1f:79:64:18:96:dc:98:47:5a: f8:dc:13:21:21:ec:4c:4e:7d:c2:41:74:37:5e:23: 9f:6b:14:d8:c9:0a:b6:9c:1c:a1:f0:01:fa:b2:e9: 76:ba:63:98:ca:2e:04:ae:08:2a:2f:8f:f9:11:2a: 46:27:97:f8:45:f8:40:f3:57:2b:87:cd:3d:ae:b7: 5e:63:0a:b5:63:c7:ee:55:bd:23:c9:89:47:2d:57: 2c:c1:6e:e4:d4:9c:75:af:b8:6a:f2:7a:79:be:6b: 76:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:54:1B:02:8A:3F:DE:6D:E9:9D:C4:41:8A:FC:CB:2A:09:E3:1B:8D X509v3 Authority Key Identifier: keyid:19:BD:82:2D:3E:B6:FF:6E:93:70:24:5E:E8:74:BE:A9:EB:8B:EE:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA294/BDC09A2A9DAA11F096420B63C4F9AE02/Gb2CLT62_26TcCRe6HS-qeuL7lU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gb2CLT62_26TcCRe6HS-qeuL7lU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA294/BDC09A2A9DAA11F096420B63C4F9AE02/1EC99BBCA2F811F0ACA39B18C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 156.69.31.0/24 Signature Algorithm: sha256WithRSAEncryption c0:6d:1b:ad:c7:7f:a0:7d:0b:f9:6e:2e:1a:62:1f:05:1b:25: c3:69:d6:8a:bd:b3:be:db:9d:45:90:b9:32:49:73:1e:cd:58: c4:ed:a4:d7:79:99:b6:87:d3:b8:41:02:03:3b:f1:34:0a:7a: 7f:d3:3c:2b:a1:96:14:42:a1:1e:75:8c:a1:85:2b:06:23:f4: 73:60:88:dc:3e:10:2f:40:f7:95:8d:e9:28:2b:50:54:6c:87: b5:9c:1c:fe:19:76:ac:c0:92:7f:cb:54:1e:13:8d:67:2c:76: a8:0b:40:3b:a6:35:85:c7:45:30:1e:09:f3:8e:8a:4d:d6:26: 2f:6c:95:b4:f6:5c:2f:f2:fe:23:5b:32:84:87:2c:95:22:10: 6e:41:38:65:4e:5f:5b:e9:11:be:7f:c6:5d:d5:05:48:b5:85: 41:c1:04:60:c0:1b:cb:82:53:d7:70:28:bb:f7:b5:e7:69:e0: bd:96:2e:3c:33:a9:e0:a4:32:18:8e:d0:33:2f:af:e8:ad:17: 54:fc:52:1d:db:da:e2:be:f2:b5:c0:5a:a7:57:c5:d3:6c:ad: 91:92:a3:37:b2:a3:f1:02:79:43:63:6a:62:62:a3:d3:72:09: 24:d6:9c:43:3d:5d:bd:93:ba:f2:69:26:b0:4e:f1:4d:d1:a9: 81:d7:e3:ea -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QTI5NDExMC8GA1UEBRMoMTlCRDgyMkQzRUI2RkY2RTkzNzAyNDVFRTg3NEJFQTlF QjhCRUU1NTAeFw0yNTEwMDYyMTA1MDBaFw0yNjEyMDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4ZTQyZWZjLTkyZWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCAlSXM8K9Fk+Q+rqHH2LRmUPmeS+26+WZY8IjmLLPucbRAacFgOU9hUq9DZMQ GAUDdmV5Rgdht8rd4n+DCunWpCItsaqiZXOanjetUiiR+WRgl1ojfBuIZdVPjzw/ 92Kz9Z+FSgHBgG9HWFxxy3GY2SMZWNvMNj+1/21tFOk+WkT1OXcZ6tS1CZ4zeT63 8HuDtqALHoJ5PVLLSh95ZBiW3JhHWvjcEyEh7ExOfcJBdDdeI59rFNjJCracHKHw Afqy6Xa6Y5jKLgSuCCovj/kRKkYnl/hF+EDzVyuHzT2ut15jCrVjx+5VvSPJiUct VyzBbuTUnHWvuGryenm+a3YvAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUBVQbAoo/ 3m3pncRBivzLKgnjG40wHwYDVR0jBBgwFoAUGb2CLT62/26TcCRe6HS+qeuL7lUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNBMjk0L0JEQzA5QTJBOURB QTExRjA5NjQyMEI2M0M0RjlBRTAyL0diMkNMVDYyXzI2VGNDUmU2SFMtcWV1TDds VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvR2IyQ0xUNjJfMjZUY0NSZTZIUy1xZXVMN2xVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTI5NC9CREMwOUEyQTlEQUExMUYwOTY0MjBCNjNDNEY5QUUwMi8xRUM5OUJCQ0Ey RjgxMUYwQUNBMzlCMThDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAJxFHzANBgkqhkiG9w0BAQsFAAOCAQEAwG0brcd/oH0L+W4u GmIfBRslw2nWir2zvtudRZC5MklzHs1YxO2k13mZtofTuEECAzvxNAp6f9M8K6GW FEKhHnWMoYUrBiP0c2CI3D4QL0D3lY3pKCtQVGyHtZwc/hl2rMCSf8tUHhONZyx2 qAtAO6Y1hcdFMB4J846KTdYmL2yVtPZcL/L+I1syhIcslSIQbkE4ZU5fW+kRvn/G XdUFSLWFQcEEYMAby4JT13Aou/e152ngvZYuPDOp4KQyGI7QMy+v6K0XVPxSHdva 4r7ytcBap1fF02ytkZKjN7Kj8QJ5Q2NqYmKj03IJJNacQz1dvZO68mkmsE7xTdGp gdfj6g== -----END CERTIFICATE-----Generated at Wed Nov 5 19:08:12 2025 by rpki-client