$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/0BD4BBC2716911EDA03D4A50C4F9AE02.roa File: 0BD4BBC2716911EDA03D4A50C4F9AE02.roa (raw, json) Hash identifier: cPYnpI3kGQmxwwOOv5mKKhlzOW7rqIA0gQdI/cqCGyc= Subject key identifier: 71:B0:BC:1C:2E:01:DE:BD:97:BB:D5:3C:28:F7:B7:F4:46:87:4F:8A Certificate issuer: /CN=A91CD39D/serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3 Certificate serial: 0633 Authority key identifier: 56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/0BD4BBC2716911EDA03D4A50C4F9AE02.roa Signing time: Mon 03 Nov 2025 00:14:16 +0000 ROA not before: Mon 03 Nov 2025 00:14:16 +0000 ROA not after: Sun 01 Mar 2026 00:00:00 +0000 asID: 134927 IP address blocks: 36.255.200.0/22 maxlen: 22 36.255.200.0/24 maxlen: 24 36.255.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1587 (0x633) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD39D, serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3 Validity Not Before: Nov 3 00:14:16 2025 GMT Not After : Mar 1 00:00:00 2026 GMT Subject: CN=6907f3d8-f23b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:b2:bc:28:a3:f9:f5:9e:39:6d:f5:df:52:7a: 0a:2b:d0:94:a3:01:16:a3:90:44:73:45:62:8d:3e: e9:4a:5e:19:38:ab:84:54:67:8c:b0:95:5a:62:dc: a1:35:a1:65:9d:c5:43:b4:c2:9e:71:5a:90:1d:01: f5:be:51:35:0a:a5:c6:da:96:d9:23:da:41:7d:5b: 32:e7:9a:b8:49:50:b8:37:09:5b:52:78:57:08:55: e5:8a:6e:34:24:36:b5:4b:24:17:46:92:47:0d:3e: 23:35:c7:b0:34:d1:6b:69:7b:ed:d8:4a:e8:06:57: 7a:b1:cd:13:78:09:bf:3c:b1:d6:0a:45:51:7f:99: 05:a5:c4:3d:3f:47:b9:b1:d7:48:4e:fb:6e:a7:71: 80:d6:d8:38:63:e9:8f:8f:53:ec:2f:b0:a6:14:82: 3a:ec:d7:24:85:13:2a:62:43:5b:fd:5c:24:83:9d: 3a:27:b3:e8:c9:83:ea:07:18:03:dc:83:84:65:71: ba:38:87:e2:12:09:90:ed:68:7d:7e:fa:7d:15:89: f6:4f:51:f3:39:08:d8:14:c8:3f:44:ce:f0:c2:7f: 06:04:a0:04:13:9d:ae:09:b9:6b:ea:e9:15:6f:8b: ec:86:83:6a:6f:bc:db:ca:e5:df:38:3c:44:c7:5c: e1:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:B0:BC:1C:2E:01:DE:BD:97:BB:D5:3C:28:F7:B7:F4:46:87:4F:8A X509v3 Authority Key Identifier: keyid:56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/0BD4BBC2716911EDA03D4A50C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 36.255.200.0/22 Signature Algorithm: sha256WithRSAEncryption 35:95:42:99:03:12:95:88:66:8e:1f:0e:fc:ae:32:5a:51:67: 9c:23:a9:b8:68:67:7f:2e:da:69:33:8a:9f:e2:e5:96:be:85: 24:73:ba:89:4e:e1:88:31:e6:6c:a5:63:51:30:c1:63:d0:50: ed:6e:24:43:2f:da:88:af:f6:15:ea:70:60:4b:c2:a7:28:ef: 3d:d6:c3:57:67:00:f1:f5:4c:0e:41:39:a0:60:39:c7:1b:6d: ea:3e:10:4a:ed:3f:2e:5c:7b:75:08:8c:73:66:c1:fc:04:fa: 51:23:f7:e8:6d:0b:54:6f:65:83:ad:06:bf:ef:d6:78:33:e6: 1c:3d:6b:bc:4c:84:a5:7b:3c:04:e4:d7:c3:ae:d8:fd:a2:6a: cd:40:e7:9c:39:0c:fc:fa:7a:5b:03:d6:e3:91:2e:09:8a:a4: 07:e4:8b:c4:de:38:75:d9:76:65:16:ad:6f:c9:24:d4:22:e8: e8:f6:e4:b2:d9:e1:64:65:20:48:a0:ad:d2:b7:52:c3:6f:25: 39:90:03:b6:06:90:57:08:05:9c:07:04:d6:6b:a7:ba:4b:82: ba:1f:07:10:5e:b2:9d:e1:b5:1a:96:cf:2e:a0:2c:7d:f4:8c: 36:15:78:ba:fc:e1:4f:bf:5b:6b:c0:8a:20:16:01:d2:5f:c3: b6:af:73:62 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBjMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QzOUQxMTAvBgNVBAUTKDU2Qjk4M0U0NkJDQkExMTVGRjIyNjVGRTQ5MTkwOUM3 RDc0MTQ3RjMwHhcNMjUxMTAzMDAxNDE2WhcNMjYwMzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTA3ZjNkOC1mMjNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+rK8KKP59Z45bfXfUnoKK9CUowEWo5BEc0VijT7pSl4ZOKuEVGeMsJVaYtyh NaFlncVDtMKecVqQHQH1vlE1CqXG2pbZI9pBfVsy55q4SVC4NwlbUnhXCFXlim40 JDa1SyQXRpJHDT4jNcewNNFraXvt2EroBld6sc0TeAm/PLHWCkVRf5kFpcQ9P0e5 sddITvtup3GA1tg4Y+mPj1PsL7CmFII67NckhRMqYkNb/Vwkg506J7PoyYPqBxgD 3IOEZXG6OIfiEgmQ7Wh9fvp9FYn2T1HzOQjYFMg/RM7wwn8GBKAEE52uCblr6ukV b4vshoNqb7zbyuXfODxEx1zhjQIDAQABo4IClTCCApEwHQYDVR0OBBYEFHGwvBwu Ad69l7vVPCj3t/RGh0+KMB8GA1UdIwQYMBaAFFa5g+Rry6EV/yJl/kkZCcfXQUfz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDM5RC9ERTdEMkY5NDRF NzYxMUVDQTU3MjBCNzlDNEY5QUUwMi9Wcm1ENUd2TG9SWF9JbVgtU1JrSng5ZEJS X00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZybUQ1R3ZMb1JYX0ltWC1TUmtKeDlkQlJfTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0QzOUQvREU3RDJGOTQ0RTc2MTFFQ0E1NzIwQjc5QzRGOUFFMDIvMEJENEJCQzI3 MTY5MTFFREEwM0Q0QTUwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAIk/8gwDQYJKoZIhvcNAQELBQADggEBADWVQpkDEpWIZo4f DvyuMlpRZ5wjqbhoZ38u2mkzip/i5Za+hSRzuolO4Ygx5mylY1EwwWPQUO1uJEMv 2oiv9hXqcGBLwqco7z3Ww1dnAPH1TA5BOaBgOccbbeo+EErtPy5ce3UIjHNmwfwE +lEj9+htC1RvZYOtBr/v1ngz5hw9a7xMhKV7PATk18Ou2P2ias1A55w5DPz6elsD 1uORLgmKpAfki8TeOHXZdmUWrW/JJNQi6Oj25LLZ4WRlIEigrdK3UsNvJTmQA7YG kFcIBZwHBNZrp7pLgrofBxBesp3htRqWzy6gLH30jDYVeLr84U+/W2vAiiAWAdJf w7avc2I= -----END CERTIFICATE-----Generated at Wed Nov 5 22:20:42 2025 by rpki-client