$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/D359E238716B11ED9F349A49C4F9AE02.roa File: D359E238716B11ED9F349A49C4F9AE02.roa (raw, json) Hash identifier: lnq1z/NNgaBazNdC/lR3zzZc0jlCI7UTz3YNSOjlUMs= Subject key identifier: 47:1D:E2:C1:A3:D8:94:F3:58:D4:B0:E5:C6:B7:71:9C:0D:9D:D2:C0 Certificate issuer: /CN=A91CD39D/serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3 Certificate serial: 063A Authority key identifier: 56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/D359E238716B11ED9F349A49C4F9AE02.roa Signing time: Mon 03 Nov 2025 00:14:29 +0000 ROA not before: Mon 03 Nov 2025 00:14:29 +0000 ROA not after: Sun 01 Mar 2026 00:00:00 +0000 asID: 64520 IP address blocks: 118.185.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1594 (0x63a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD39D, serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3 Validity Not Before: Nov 3 00:14:29 2025 GMT Not After : Mar 1 00:00:00 2026 GMT Subject: CN=6907f3e4-0f1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e8:e1:fa:12:33:3f:44:bb:04:42:91:6c:63: c8:4e:95:c7:49:18:86:39:93:72:d2:fc:af:0d:7b: 91:4b:87:30:db:5e:1c:55:de:7a:0e:4f:41:27:eb: cc:02:4f:f2:1b:16:3a:48:4b:81:92:a7:f1:0a:2d: 21:71:3a:06:03:90:88:58:20:74:60:43:55:3a:f9: 69:83:a5:f6:9e:80:1b:3c:f1:6d:d9:cd:fd:91:58: c9:72:86:1c:9f:90:77:0f:ef:48:e1:ae:8c:f2:54: 90:02:cf:f1:98:60:6a:6e:99:db:2f:30:e1:03:ca: 75:c2:36:ec:68:20:a2:75:7c:0d:d5:bf:53:75:f5: 80:e6:53:65:bf:b1:cb:58:56:b0:49:47:06:63:0d: c5:17:e4:dc:35:36:9b:d6:d5:96:9f:9b:77:98:e2: 69:75:21:c5:8e:c1:67:ce:45:43:1f:9b:db:11:f9: 6f:00:18:d1:1f:bc:c9:88:22:31:1d:3d:d7:16:b4: 09:20:95:37:30:85:74:c6:20:45:01:91:cc:7e:ec: 52:70:01:ce:5f:04:27:2f:3d:88:d5:3a:76:59:4b: d4:bf:8b:88:5a:be:dd:e6:3f:91:b2:d3:1f:ba:52: 01:45:da:35:90:d4:4d:47:e0:b3:91:4f:0a:80:37: 23:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:1D:E2:C1:A3:D8:94:F3:58:D4:B0:E5:C6:B7:71:9C:0D:9D:D2:C0 X509v3 Authority Key Identifier: keyid:56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/D359E238716B11ED9F349A49C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 118.185.115.0/24 Signature Algorithm: sha256WithRSAEncryption 48:7f:c2:2a:39:20:51:f9:6f:77:13:e6:1c:8e:38:96:60:cd: 79:0b:62:6a:0a:a9:95:6f:af:c5:38:ff:21:02:e0:24:30:62: 7f:42:49:54:1e:75:ed:da:be:ae:68:da:a9:fc:cb:5c:51:7e: b0:46:48:c1:e8:23:f2:e3:9c:3c:1c:2a:db:ee:1f:6a:95:7e: 8c:ff:ae:f7:68:28:6a:82:8c:c8:3f:ce:97:36:09:26:e2:c1: 3f:00:1c:57:7c:d1:06:77:37:56:f4:b3:b6:83:6d:e9:91:25: 2d:1a:07:25:be:1e:3e:29:0c:05:83:71:6b:0f:91:3c:48:03: 8c:39:ab:f8:87:72:ba:e9:fd:b4:8a:5e:21:d7:c3:77:08:dd: 30:1e:0a:79:29:90:fc:69:af:5b:2f:fe:37:37:ba:03:22:83: 63:ac:ea:d1:d3:b4:8f:5b:98:fb:58:7b:dd:67:3b:c8:28:8c: af:1d:f6:93:1e:72:be:11:d0:e4:40:fe:eb:fa:ec:cc:58:5c: 1c:41:5f:d0:82:ec:5a:fd:b0:fa:01:97:e7:89:2c:39:eb:d9: 87:ef:ab:a8:c2:74:24:59:97:48:bc:97:d6:22:d2:c8:84:50: 99:69:db:c7:38:54:92:e0:4c:09:4e:09:d2:bd:79:21:4f:15: 35:fd:b8:41 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBjowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QzOUQxMTAvBgNVBAUTKDU2Qjk4M0U0NkJDQkExMTVGRjIyNjVGRTQ5MTkwOUM3 RDc0MTQ3RjMwHhcNMjUxMTAzMDAxNDI5WhcNMjYwMzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTA3ZjNlNC0wZjFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtujh+hIzP0S7BEKRbGPITpXHSRiGOZNy0vyvDXuRS4cw214cVd56Dk9BJ+vM Ak/yGxY6SEuBkqfxCi0hcToGA5CIWCB0YENVOvlpg6X2noAbPPFt2c39kVjJcoYc n5B3D+9I4a6M8lSQAs/xmGBqbpnbLzDhA8p1wjbsaCCidXwN1b9TdfWA5lNlv7HL WFawSUcGYw3FF+TcNTab1tWWn5t3mOJpdSHFjsFnzkVDH5vbEflvABjRH7zJiCIx HT3XFrQJIJU3MIV0xiBFAZHMfuxScAHOXwQnLz2I1Tp2WUvUv4uIWr7d5j+RstMf ulIBRdo1kNRNR+CzkU8KgDcjwwIDAQABo4IClTCCApEwHQYDVR0OBBYEFEcd4sGj 2JTzWNSw5ca3cZwNndLAMB8GA1UdIwQYMBaAFFa5g+Rry6EV/yJl/kkZCcfXQUfz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDM5RC9ERTdEMkY5NDRF NzYxMUVDQTU3MjBCNzlDNEY5QUUwMi9Wcm1ENUd2TG9SWF9JbVgtU1JrSng5ZEJS X00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZybUQ1R3ZMb1JYX0ltWC1TUmtKeDlkQlJfTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0QzOUQvREU3RDJGOTQ0RTc2MTFFQ0E1NzIwQjc5QzRGOUFFMDIvRDM1OUUyMzg3 MTZCMTFFRDlGMzQ5QTQ5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAB2uXMwDQYJKoZIhvcNAQELBQADggEBAEh/wio5IFH5b3cT 5hyOOJZgzXkLYmoKqZVvr8U4/yEC4CQwYn9CSVQede3avq5o2qn8y1xRfrBGSMHo I/LjnDwcKtvuH2qVfoz/rvdoKGqCjMg/zpc2CSbiwT8AHFd80QZ3N1b0s7aDbemR JS0aByW+Hj4pDAWDcWsPkTxIA4w5q/iHcrrp/bSKXiHXw3cI3TAeCnkpkPxpr1sv /jc3ugMig2Os6tHTtI9bmPtYe91nO8gojK8d9pMecr4R0ORA/uv67MxYXBxBX9CC 7Fr9sPoBl+eJLDnr2Yfvq6jCdCRZl0i8l9Yi0siEUJlp28c4VJLgTAlOCdK9eSFP FTX9uEE= -----END CERTIFICATE-----Generated at Wed Nov 5 16:41:42 2025 by rpki-client