$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/0D0517EE716911EDA03D4A50C4F9AE02.roa File: 0D0517EE716911EDA03D4A50C4F9AE02.roa (raw, json) Hash identifier: FgiQknGsf7DRcnndmAuVGpIsF8nK2t/XgRUgQEEavfs= Subject key identifier: A4:81:8C:1B:A0:68:D0:42:EA:AD:E6:24:BD:9B:7F:9A:38:2C:82:FC Certificate issuer: /CN=A91CD39D/serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3 Certificate serial: 0635 Authority key identifier: 56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/0D0517EE716911EDA03D4A50C4F9AE02.roa Signing time: Mon 03 Nov 2025 00:14:18 +0000 ROA not before: Mon 03 Nov 2025 00:14:18 +0000 ROA not after: Sun 01 Mar 2026 00:00:00 +0000 asID: 23664 IP address blocks: 118.185.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1589 (0x635) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD39D, serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3 Validity Not Before: Nov 3 00:14:18 2025 GMT Not After : Mar 1 00:00:00 2026 GMT Subject: CN=6907f3d9-5a57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:66:7b:97:b9:b0:0c:95:9b:b1:58:80:ef:40: 14:cd:66:20:ba:49:49:f8:a4:29:6f:20:17:ee:47: b3:3b:72:84:b3:f9:91:ae:e0:83:56:f2:33:1e:09: 7d:be:bc:3b:97:36:1f:7b:e3:70:d0:7e:9d:db:4e: a2:14:76:7a:6c:34:0d:07:40:2f:67:70:dc:7e:d6: b8:d8:ca:84:d1:6e:2a:fb:f7:44:54:a4:fe:51:a5: 1e:ed:3f:f5:97:f6:9a:05:c8:1c:99:7d:8a:64:b5: 03:3b:4b:d9:66:09:0c:38:d4:f2:25:83:99:59:38: ab:f0:06:81:1b:ce:46:5a:83:a4:2a:83:ee:9d:51: 39:9c:24:b4:32:67:12:bf:29:db:5d:6c:ec:64:74: 5b:f0:ec:2b:9c:8f:4c:a3:8a:e3:93:11:16:42:94: 83:66:62:99:37:2a:48:f7:7c:9c:6f:1a:9e:33:85: 9e:1f:4d:3e:8f:cf:9f:ef:a3:21:1d:be:14:0e:77: ca:95:9a:75:7d:72:c8:f2:39:93:ef:df:a4:68:78: 21:37:91:8a:8a:01:0b:b5:93:3d:1d:d7:14:6b:33: 88:fd:82:b4:a3:f2:b8:c8:79:fd:2b:7a:56:f6:ad: a8:8e:3b:1a:ed:4e:de:fe:4f:b3:d0:db:f7:67:3a: c8:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:81:8C:1B:A0:68:D0:42:EA:AD:E6:24:BD:9B:7F:9A:38:2C:82:FC X509v3 Authority Key Identifier: keyid:56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/0D0517EE716911EDA03D4A50C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 118.185.96.0/24 Signature Algorithm: sha256WithRSAEncryption 78:e2:71:ea:35:59:75:e6:75:7c:8e:4d:9f:bd:be:52:78:74: 57:32:44:b2:88:4d:d4:85:6c:fb:b5:1c:4b:9d:2d:79:37:d3: df:f1:d4:82:ec:a7:b7:2c:97:b7:af:1e:44:ed:77:c3:38:cb: 6b:77:b5:0d:7d:21:db:d3:2f:f2:e8:6b:aa:af:50:50:73:ca: bc:ab:81:40:60:4e:ba:48:66:6f:66:5b:0d:c2:f0:51:76:44: 77:e5:b6:12:ba:b0:41:e9:d3:66:50:63:2c:f1:f7:45:14:e3: 4a:dc:b4:f3:e1:7e:b3:69:62:8c:88:ee:51:f2:92:c9:2e:9d: d2:28:e5:38:dc:10:c6:20:66:b3:f3:6d:d3:53:13:ac:e9:62: 1b:0c:5b:6d:23:37:92:e1:33:b9:ea:42:8d:23:13:77:3f:c5: bf:4d:38:e1:f7:0a:0e:45:ca:ea:6d:ec:28:78:24:9c:4a:27: 73:f7:b2:b2:5e:da:3a:f6:a1:dd:04:83:bc:16:23:6e:45:0b: 0b:58:a3:58:5a:e9:7e:1f:d5:0b:1f:40:5c:aa:6c:81:47:69: 79:5b:6e:61:33:1f:f8:20:4c:65:e1:b8:38:94:74:0e:37:54: ad:5e:ce:72:d2:51:c8:6c:79:4f:de:12:40:b8:6e:9d:4f:68: 5b:6b:0a:46 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBjUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QzOUQxMTAvBgNVBAUTKDU2Qjk4M0U0NkJDQkExMTVGRjIyNjVGRTQ5MTkwOUM3 RDc0MTQ3RjMwHhcNMjUxMTAzMDAxNDE4WhcNMjYwMzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTA3ZjNkOS01YTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn2Z7l7mwDJWbsViA70AUzWYguklJ+KQpbyAX7kezO3KEs/mRruCDVvIzHgl9 vrw7lzYfe+Nw0H6d206iFHZ6bDQNB0AvZ3Dcfta42MqE0W4q+/dEVKT+UaUe7T/1 l/aaBcgcmX2KZLUDO0vZZgkMONTyJYOZWTir8AaBG85GWoOkKoPunVE5nCS0MmcS vynbXWzsZHRb8OwrnI9Mo4rjkxEWQpSDZmKZNypI93ycbxqeM4WeH00+j8+f76Mh Hb4UDnfKlZp1fXLI8jmT79+kaHghN5GKigELtZM9HdcUazOI/YK0o/K4yHn9K3pW 9q2ojjsa7U7e/k+z0Nv3ZzrIRQIDAQABo4IClTCCApEwHQYDVR0OBBYEFKSBjBug aNBC6q3mJL2bf5o4LIL8MB8GA1UdIwQYMBaAFFa5g+Rry6EV/yJl/kkZCcfXQUfz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDM5RC9ERTdEMkY5NDRF NzYxMUVDQTU3MjBCNzlDNEY5QUUwMi9Wcm1ENUd2TG9SWF9JbVgtU1JrSng5ZEJS X00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZybUQ1R3ZMb1JYX0ltWC1TUmtKeDlkQlJfTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0QzOUQvREU3RDJGOTQ0RTc2MTFFQ0E1NzIwQjc5QzRGOUFFMDIvMEQwNTE3RUU3 MTY5MTFFREEwM0Q0QTUwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAB2uWAwDQYJKoZIhvcNAQELBQADggEBAHjiceo1WXXmdXyO TZ+9vlJ4dFcyRLKITdSFbPu1HEudLXk309/x1ILsp7csl7evHkTtd8M4y2t3tQ19 IdvTL/Loa6qvUFBzyryrgUBgTrpIZm9mWw3C8FF2RHflthK6sEHp02ZQYyzx90UU 40rctPPhfrNpYoyI7lHykskundIo5TjcEMYgZrPzbdNTE6zpYhsMW20jN5LhM7nq Qo0jE3c/xb9NOOH3Cg5Fyupt7Ch4JJxKJ3P3srJe2jr2od0Eg7wWI25FCwtYo1ha 6X4f1QsfQFyqbIFHaXlbbmEzH/ggTGXhuDiUdA43VK1eznLSUchseU/eEkC4bp1P aFtrCkY= -----END CERTIFICATE-----Generated at Wed Nov 5 13:08:46 2025 by rpki-client