$ rpki-client -vvf rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/996F44A8AED211F0B837C970C4F9AE02.roa File: 996F44A8AED211F0B837C970C4F9AE02.roa (raw, json) Hash identifier: tCXZU+KGwsujyN/RYr6hZD1s2TH5XkVS8kG4GiK7hzU= Subject key identifier: 34:3E:1D:59:D9:36:BE:49:39:B0:C1:8C:35:60:0D:10:93:00:2B:E5 Certificate issuer: /CN=A91D19ED/serialNumber=1ED4A50449F86200A0C2668069A28324F9F6A93E Certificate serial: 06BB Authority key identifier: 1E:D4:A5:04:49:F8:62:00:A0:C2:66:80:69:A2:83:24:F9:F6:A9:3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtSlBEn4YgCgwmaAaaKDJPn2qT4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/996F44A8AED211F0B837C970C4F9AE02.roa Signing time: Tue 21 Oct 2025 23:06:39 +0000 ROA not before: Tue 21 Oct 2025 23:06:39 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 55954 IP address blocks: 125.214.88.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.crl rsync://rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtSlBEn4YgCgwmaAaaKDJPn2qT4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:24:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1723 (0x6bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D19ED, serialNumber=1ED4A50449F86200A0C2668069A28324F9F6A93E Validity Not Before: Oct 21 23:06:39 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=68f811ff-6245 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f4:bd:63:77:20:96:8d:c1:22:d8:07:ce:38: 98:e4:f8:bb:04:57:48:ef:a9:15:3e:99:27:3a:c2: a2:6a:66:dd:20:0a:ee:2a:9f:55:44:bc:3d:8f:ad: 44:88:2b:2d:d0:33:1c:ff:29:09:c9:1a:f5:f6:d4: de:85:88:0f:d6:80:41:88:7b:11:26:b5:fa:3e:4e: 64:6d:d2:eb:b6:4c:b3:b7:15:7e:49:ba:90:8e:b7: 53:5e:c4:4c:ee:f7:1a:6e:62:40:90:84:bd:d6:e5: 14:f8:ea:fe:b1:76:e3:16:7e:b7:9c:65:4f:a3:ef: 1d:4a:ae:0e:52:e6:b3:7f:6d:18:59:3d:73:66:99: 9f:bd:63:fb:47:b2:b4:50:c6:3b:15:85:61:53:bc: 73:8c:79:38:14:c7:96:5b:7f:7b:27:da:72:94:53: 90:70:ce:06:63:42:c1:3e:94:92:79:9c:d2:45:b7: a2:7a:fc:cf:7c:73:bc:48:05:18:01:f5:77:b9:d1: 46:32:7f:f6:2c:f4:8c:e8:ce:58:05:90:79:c1:14: 5f:6b:1c:2c:e1:d3:a9:84:97:70:70:31:0c:71:b5: 6e:8a:06:c5:61:3d:2b:19:e5:d2:26:fc:dd:07:c5: 82:ab:4a:3b:2e:91:d8:36:ba:13:6a:28:fe:2c:2e: 9d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:3E:1D:59:D9:36:BE:49:39:B0:C1:8C:35:60:0D:10:93:00:2B:E5 X509v3 Authority Key Identifier: keyid:1E:D4:A5:04:49:F8:62:00:A0:C2:66:80:69:A2:83:24:F9:F6:A9:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtSlBEn4YgCgwmaAaaKDJPn2qT4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/996F44A8AED211F0B837C970C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 125.214.88.0/21 Signature Algorithm: sha256WithRSAEncryption 13:1f:f5:20:55:a4:40:56:01:cc:3f:81:12:76:d1:01:50:c2: e8:8e:9a:4d:61:2b:c0:00:7c:c8:61:19:0b:3f:8e:a5:10:18: 2c:33:a8:7e:91:cc:b4:a6:68:40:23:3b:9c:e9:c1:a7:23:5a: 4a:2a:ff:c6:69:cd:48:5d:12:eb:56:8b:81:74:d2:18:6a:15: 06:de:dd:37:9b:c8:c9:2e:6d:c8:86:07:7d:b4:f7:94:9c:83: ee:c4:94:7a:bd:c5:b4:17:1c:2b:5f:9a:fc:3d:cb:d0:5b:cc: fe:17:f9:bf:e6:d2:58:06:51:c2:69:6d:22:d3:ab:43:2f:d9: c2:86:45:5a:0e:9b:b5:bb:7d:40:a2:43:7c:f0:ba:68:b4:af: 3e:f3:87:5c:a1:fb:b2:2f:10:d0:33:a4:b4:70:d5:ed:30:5d: 06:c6:3c:1f:5c:f5:2a:ae:f9:19:de:54:57:63:c9:25:bf:31: d9:cd:27:24:50:9d:cf:6e:8a:01:cb:30:17:43:5b:fe:bd:f6: 6d:6f:ed:fd:d8:21:98:db:b5:dd:8a:2a:9a:5d:42:98:37:d9: 58:89:03:8e:db:e6:9d:a9:c2:d2:30:33:ab:e5:59:db:93:0f: a7:73:e7:fd:6b:30:08:ee:27:cc:28:d2:27:27:18:05:9d:92: fb:3d:80:74 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBrswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE5RUQxMTAvBgNVBAUTKDFFRDRBNTA0NDlGODYyMDBBMEMyNjY4MDY5QTI4MzI0 RjlGNkE5M0UwHhcNMjUxMDIxMjMwNjM5WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGY4MTFmZi02MjQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwvS9Y3cglo3BItgHzjiY5Pi7BFdI76kVPpknOsKiambdIAruKp9VRLw9j61E iCst0DMc/ykJyRr19tTehYgP1oBBiHsRJrX6Pk5kbdLrtkyztxV+SbqQjrdTXsRM 7vcabmJAkIS91uUU+Or+sXbjFn63nGVPo+8dSq4OUuazf20YWT1zZpmfvWP7R7K0 UMY7FYVhU7xzjHk4FMeWW397J9pylFOQcM4GY0LBPpSSeZzSRbeievzPfHO8SAUY AfV3udFGMn/2LPSM6M5YBZB5wRRfaxws4dOphJdwcDEMcbVuigbFYT0rGeXSJvzd B8WCq0o7LpHYNroTaij+LC6dYwIDAQABo4IClTCCApEwHQYDVR0OBBYEFDQ+HVnZ Nr5JObDBjDVgDRCTACvlMB8GA1UdIwQYMBaAFB7UpQRJ+GIAoMJmgGmigyT59qk+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTlFRC81NEI5N0EyNjhB QjYxMUVCODMyRjAzMTRDNEY5QUUwMi9IdFNsQkVuNFlnQ2d3bWFBYWFLREpQbjJx VDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h0U2xCRW40WWdDZ3dtYUFhYUtESlBuMnFUNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDE5RUQvNTRCOTdBMjY4QUI2MTFFQjgzMkYwMzE0QzRGOUFFMDIvOTk2RjQ0QThB RUQyMTFGMEI4MzdDOTcwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAN91lgwDQYJKoZIhvcNAQELBQADggEBABMf9SBVpEBWAcw/ gRJ20QFQwuiOmk1hK8AAfMhhGQs/jqUQGCwzqH6RzLSmaEAjO5zpwacjWkoq/8Zp zUhdEutWi4F00hhqFQbe3TebyMkubciGB32095Scg+7ElHq9xbQXHCtfmvw9y9Bb zP4X+b/m0lgGUcJpbSLTq0Mv2cKGRVoOm7W7fUCiQ3zwumi0rz7zh1yh+7IvENAz pLRw1e0wXQbGPB9c9Squ+RneVFdjySW/MdnNJyRQnc9uigHLMBdDW/699m1v7f3Y IZjbtd2KKppdQpg32ViJA47b5p2pwtIwM6vlWduTD6dz5/1rMAjuJ8wo0icnGAWd kvs9gHQ= -----END CERTIFICATE-----Generated at Wed Nov 5 21:55:27 2025 by rpki-client