$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/AEEA3AE45BF611E984E25E54C4F9AE02.roa File: AEEA3AE45BF611E984E25E54C4F9AE02.roa (raw, json) Hash identifier: DUev2xfHV3YTqcp72PQ09DnBBnHJHORn9wfutfk8dS4= Subject key identifier: CC:0B:76:EC:4A:64:9D:17:A8:05:E8:72:CF:7E:EA:A0:EC:F5:59:26 Certificate issuer: /CN=A91D1136/serialNumber=B7B73E89B621081609CD689AB0AEF7FAF148926C Certificate serial: 267A Authority key identifier: B7:B7:3E:89:B6:21:08:16:09:CD:68:9A:B0:AE:F7:FA:F1:48:92:6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/AEEA3AE45BF611E984E25E54C4F9AE02.roa Signing time: Tue 02 Sep 2025 16:04:10 +0000 ROA not before: Tue 02 Sep 2025 16:04:10 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 17724 IP address blocks: 111.84.12.0/24 maxlen: 24 111.84.16.0/24 maxlen: 24 111.84.20.0/24 maxlen: 24 111.84.52.0/23 maxlen: 24 111.84.54.0/23 maxlen: 24 111.84.178.0/23 maxlen: 24 111.84.180.0/23 maxlen: 24 202.91.16.0/23 maxlen: 24 202.91.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.crl rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:49:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9850 (0x267a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1136, serialNumber=B7B73E89B621081609CD689AB0AEF7FAF148926C Validity Not Before: Sep 2 16:04:10 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68b7157a-6ce2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:1a:34:fd:7e:7c:5d:89:1c:0f:b8:22:d5:17: 15:31:df:45:10:7c:cc:be:e0:52:93:79:af:79:de: fc:72:30:11:51:5c:aa:e6:7f:a0:65:64:41:90:28: 48:c0:f0:23:33:c3:03:db:d2:d6:1a:39:76:9a:5d: 76:b4:27:9a:d4:b4:84:38:e8:c0:69:cb:86:7f:b7: fd:ff:a0:cd:dc:72:db:da:a6:0e:6c:55:28:19:b1: 1e:58:28:b0:9f:e2:42:ab:a6:f2:18:dc:00:0f:e6: a1:77:af:ce:89:7d:41:d7:64:a0:9d:75:15:66:aa: dc:bc:41:2c:d7:21:7d:a8:5c:0f:e4:28:6f:ca:91: c5:08:d2:ec:d1:c6:a6:f6:38:8c:a3:36:28:82:a9: c4:8f:bd:2d:8d:23:73:77:b6:33:4a:3b:62:c8:64: 03:16:a2:6d:81:1e:03:0c:b8:af:4c:fb:d9:9a:e9: 07:fa:53:a7:93:2d:38:23:19:37:59:d8:80:c4:ba: 67:60:8b:11:ee:19:c6:a8:7e:91:af:21:ad:eb:ed: 24:c5:1a:e6:38:49:9e:eb:e6:1a:5d:9a:58:29:f8: 5b:33:66:b0:e4:22:7c:24:c2:b8:63:43:78:4d:76: 27:85:4e:58:5b:fc:d2:79:8b:65:06:76:ac:cd:43: 58:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:0B:76:EC:4A:64:9D:17:A8:05:E8:72:CF:7E:EA:A0:EC:F5:59:26 X509v3 Authority Key Identifier: keyid:B7:B7:3E:89:B6:21:08:16:09:CD:68:9A:B0:AE:F7:FA:F1:48:92:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/AEEA3AE45BF611E984E25E54C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 111.84.12.0/24 111.84.16.0/24 111.84.20.0/24 111.84.52.0/22 111.84.178.0-111.84.181.255 202.91.16.0/23 202.91.20.0/22 Signature Algorithm: sha256WithRSAEncryption aa:b9:69:0d:55:02:f0:04:9e:0e:8d:99:ec:95:c8:b8:b4:d6: 1b:d0:bf:f1:a6:4d:58:e0:ee:33:c0:18:cf:de:54:9e:dc:75: f5:47:0d:aa:13:27:76:d6:27:73:6d:f6:7c:0d:8a:1d:52:b1: 61:25:5b:e7:91:3f:c9:46:7d:e8:b5:c6:8d:56:08:9a:76:ac: fa:5e:9c:ac:a2:b5:94:90:b4:14:f9:e8:a2:be:03:f2:83:63: 2b:5b:42:20:b8:0e:65:b6:95:e9:e3:62:25:5c:43:a3:d7:b7: 8b:6f:b2:ea:02:01:52:db:7c:e5:26:bd:cd:fb:42:8e:4d:b9: 74:59:90:07:55:82:f3:3c:9b:ca:e4:b4:d1:61:42:3c:21:f1: d7:0a:9f:10:25:2b:a6:e3:34:c7:dd:fb:36:80:23:b0:e9:f2: cc:5c:91:06:26:13:17:61:dc:ff:57:dd:a0:fa:52:fb:a5:87: 6c:9e:3b:9b:42:09:a4:c5:30:38:1f:03:97:19:bd:09:5b:67: c8:c7:da:a5:cc:85:4e:57:23:d2:d6:c2:dc:b2:38:f2:4e:5e: 67:7b:fe:fb:3e:bf:a1:4c:2e:cb:a5:1c:51:ee:bb:6a:ba:df: 55:68:f7:75:8a:71:c1:32:71:53:3c:b0:91:ac:9f:0b:81:bf: 55:ca:75:6c -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgICJnowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDExMzYxMTAvBgNVBAUTKEI3QjczRTg5QjYyMTA4MTYwOUNENjg5QUIwQUVGN0ZB RjE0ODkyNkMwHhcNMjUwOTAyMTYwNDEwWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGI3MTU3YS02Y2UyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnxo0/X58XYkcD7gi1RcVMd9FEHzMvuBSk3mved78cjARUVyq5n+gZWRBkChI wPAjM8MD29LWGjl2ml12tCea1LSEOOjAacuGf7f9/6DN3HLb2qYObFUoGbEeWCiw n+JCq6byGNwAD+ahd6/OiX1B12SgnXUVZqrcvEEs1yF9qFwP5ChvypHFCNLs0cam 9jiMozYogqnEj70tjSNzd7YzSjtiyGQDFqJtgR4DDLivTPvZmukH+lOnky04Ixk3 WdiAxLpnYIsR7hnGqH6RryGt6+0kxRrmOEme6+YaXZpYKfhbM2aw5CJ8JMK4Y0N4 TXYnhU5YW/zSeYtlBnaszUNYVwIDAQABo4ICwTCCAr0wHQYDVR0OBBYEFMwLduxK ZJ0XqAXocs9+6qDs9VkmMB8GA1UdIwQYMBaAFLe3Pom2IQgWCc1omrCu9/rxSJJs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTEzNi9DRjMyODFDODIx NUIxMUU1QTdCRjg5MEVDNEY5QUUwMi90N2MtaWJZaENCWUp6V2lhc0s3My12Rklr bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Q3Yy1pYlloQ0JZSnpXaWFzSzczLXZGSWttdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDExMzYvQ0YzMjgxQzgyMTVCMTFFNUE3QkY4OTBFQzRGOUFFMDIvQUVFQTNBRTQ1 QkY2MTFFOTg0RTI1RTU0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwSwYIKwYBBQUHAQcBAf8E PDA6MDgEAgABMDIDBABvVAwDBABvVBADBABvVBQDBAJvVDQwDAMEAW9UsgMEAW9U tAMEAcpbEAMEAspbFDANBgkqhkiG9w0BAQsFAAOCAQEAqrlpDVUC8ASeDo2Z7JXI uLTWG9C/8aZNWODuM8AYz95Untx19UcNqhMndtYnc232fA2KHVKxYSVb55E/yUZ9 6LXGjVYImnas+l6crKK1lJC0FPnoor4D8oNjK1tCILgOZbaV6eNiJVxDo9e3i2+y 6gIBUtt85Sa9zftCjk25dFmQB1WC8zybyuS00WFCPCHx1wqfECUrpuM0x937NoAj sOnyzFyRBiYTF2Hc/1fdoPpS+6WHbJ47m0IJpMUwOB8Dlxm9CVtnyMfapcyFTlcj 0tbC3LI48k5eZ3v++z6/oUwuy6UcUe67arrfVWj3dYpxwTJxUzywkayfC4G/Vcp1 bA== -----END CERTIFICATE-----Generated at Wed Nov 5 13:33:43 2025 by rpki-client