$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5240/27DDE7D89B7D11EDB3C33F5DC4F9AE02/9FBA5FCCA63911ED874E6630C4F9AE02.roa File: 9FBA5FCCA63911ED874E6630C4F9AE02.roa (raw, json) Hash identifier: lCV4Wc/C2vG49K6yvqo7KO+pzcjtBqjnxvlmY9cM+oI= Subject key identifier: FC:9A:D2:B7:CD:5D:53:18:67:D9:81:E4:42:C3:05:65:C3:39:3B:C4 Certificate issuer: /CN=A91D5240/serialNumber=5D89F3AAF9B13A07A5B264F2DEBA64D5C500651C Certificate serial: 018E Authority key identifier: 5D:89:F3:AA:F9:B1:3A:07:A5:B2:64:F2:DE:BA:64:D5:C5:00:65:1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XYnzqvmxOgelsmTy3rpk1cUAZRw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5240/27DDE7D89B7D11EDB3C33F5DC4F9AE02/9FBA5FCCA63911ED874E6630C4F9AE02.roa Signing time: Sun 09 Feb 2025 02:45:00 +0000 ROA not before: Sun 09 Feb 2025 02:44:59 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 19625 IP address blocks: 203.11.220.0/24 maxlen: 24 203.23.160.0/24 maxlen: 24 203.23.162.0/24 maxlen: 24 203.23.163.0/24 maxlen: 24 203.23.165.0/24 maxlen: 24 203.23.166.0/24 maxlen: 24 203.23.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5240/27DDE7D89B7D11EDB3C33F5DC4F9AE02/XYnzqvmxOgelsmTy3rpk1cUAZRw.crl rsync://rpki.apnic.net/member_repository/A91D5240/27DDE7D89B7D11EDB3C33F5DC4F9AE02/XYnzqvmxOgelsmTy3rpk1cUAZRw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XYnzqvmxOgelsmTy3rpk1cUAZRw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:25:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 398 (0x18e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5240, serialNumber=5D89F3AAF9B13A07A5B264F2DEBA64D5C500651C Validity Not Before: Feb 9 02:44:59 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67a816ab-8e27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:87:dc:40:3b:9a:f5:f3:89:90:ed:58:1d:3a: 4c:ea:4a:90:30:c0:27:a8:5f:da:b0:18:71:8c:7e: eb:35:aa:64:d2:33:6d:a0:99:1d:6b:ca:43:b1:03: 7b:81:ec:95:85:d0:73:e2:41:5d:7c:21:35:e6:33: c9:7c:ea:d0:43:b3:d6:64:8a:89:34:1b:f1:b1:18: e7:e5:c1:f2:25:e1:c9:cb:a7:49:82:64:19:e3:6c: 9b:a0:18:43:f2:91:96:aa:b5:27:ec:1b:44:19:19: 5d:61:b6:2c:82:b0:e5:fb:63:09:1b:93:a7:ed:11: 9a:5e:31:b1:b3:58:32:47:8a:6c:68:3b:16:24:13: f6:be:22:a0:aa:ab:3a:53:d0:2c:3e:47:50:a7:c4: 09:d7:b7:c3:0d:ba:09:b7:89:68:a5:9e:4c:96:41: 48:70:d2:7a:5d:55:66:09:72:2d:e5:bf:eb:3f:47: df:37:99:40:7f:63:b1:69:7a:01:55:af:4e:b7:54: 5e:a9:9d:1f:e8:f0:b0:60:80:8e:0a:8c:ce:e5:e1: 84:1d:77:bf:00:fa:1a:e0:7d:4a:ea:3a:cf:47:46: b6:94:78:d9:9a:f1:63:aa:1d:e9:4f:a2:81:ce:a6: 0f:54:dd:6b:c2:73:02:0e:4d:9c:46:40:65:18:d4: 1d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:9A:D2:B7:CD:5D:53:18:67:D9:81:E4:42:C3:05:65:C3:39:3B:C4 X509v3 Authority Key Identifier: keyid:5D:89:F3:AA:F9:B1:3A:07:A5:B2:64:F2:DE:BA:64:D5:C5:00:65:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5240/27DDE7D89B7D11EDB3C33F5DC4F9AE02/XYnzqvmxOgelsmTy3rpk1cUAZRw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XYnzqvmxOgelsmTy3rpk1cUAZRw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5240/27DDE7D89B7D11EDB3C33F5DC4F9AE02/9FBA5FCCA63911ED874E6630C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.11.220.0/24 203.23.160.0/24 203.23.162.0/23 203.23.165.0-203.23.167.255 Signature Algorithm: sha256WithRSAEncryption 2a:53:ae:11:e1:f3:d0:36:46:92:98:b1:d2:ed:a0:4b:54:4c: cf:f2:89:d5:31:2f:e9:97:cf:aa:ba:c4:96:5b:2a:83:93:93: 2d:ed:5b:70:f5:33:a6:93:ed:64:48:fa:24:45:10:f7:35:3e: 58:bc:41:a2:15:ed:8e:15:48:75:8d:71:9a:84:47:91:6d:5f: c8:74:d6:b6:31:9d:83:67:43:42:dc:88:47:45:bd:bd:e1:1c: 38:4e:68:cc:37:95:14:a7:48:37:2e:81:fa:e3:6d:6a:4a:46: a7:0d:95:a0:24:47:12:e6:2c:17:46:ae:de:2f:f0:86:f2:16: d7:b2:97:1a:63:21:6b:44:48:39:90:66:e5:b8:26:2e:b4:70: 7a:3a:b7:12:7e:25:ea:fc:da:6e:12:1e:d6:aa:58:2d:f3:af: db:a5:35:07:e4:e6:27:5e:36:41:6f:63:42:2c:ed:b4:1d:63: d0:6c:79:f8:61:e6:5e:e2:9a:8c:f6:9f:7b:cd:f9:1b:bb:e4: 9f:a6:a7:50:f4:28:96:88:fc:60:77:69:7e:e0:79:0b:d1:35: 66:60:b9:10:c5:c5:cc:70:55:46:a9:9e:e3:a5:f5:f7:e2:47: 8e:7a:ce:8f:62:54:43:bf:f7:a7:c5:f0:d4:c4:e1:e6:be:73: f3:04:e1:b1 -----BEGIN CERTIFICATE----- MIIFizCCBHOgAwIBAgICAY4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUyNDAxMTAvBgNVBAUTKDVEODlGM0FBRjlCMTNBMDdBNUIyNjRGMkRFQkE2NEQ1 QzUwMDY1MUMwHhcNMjUwMjA5MDI0NDU5WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2E4MTZhYi04ZTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4ofcQDua9fOJkO1YHTpM6kqQMMAnqF/asBhxjH7rNapk0jNtoJkda8pDsQN7 geyVhdBz4kFdfCE15jPJfOrQQ7PWZIqJNBvxsRjn5cHyJeHJy6dJgmQZ42yboBhD 8pGWqrUn7BtEGRldYbYsgrDl+2MJG5On7RGaXjGxs1gyR4psaDsWJBP2viKgqqs6 U9AsPkdQp8QJ17fDDboJt4lopZ5MlkFIcNJ6XVVmCXIt5b/rP0ffN5lAf2OxaXoB Va9Ot1ReqZ0f6PCwYICOCozO5eGEHXe/APoa4H1K6jrPR0a2lHjZmvFjqh3pT6KB zqYPVN1rwnMCDk2cRkBlGNQdiwIDAQABo4ICrzCCAqswHQYDVR0OBBYEFPya0rfN XVMYZ9mB5ELDBWXDOTvEMB8GA1UdIwQYMBaAFF2J86r5sToHpbJk8t66ZNXFAGUc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTI0MC8yN0RERTdEODlC N0QxMUVEQjNDMzNGNURDNEY5QUUwMi9YWW56cXZteE9nZWxzbVR5M3JwazFjVUFa UncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hZbnpxdm14T2dlbHNtVHkzcnBrMWNVQVpSdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDUyNDAvMjdEREU3RDg5QjdEMTFFREIzQzMzRjVEQzRGOUFFMDIvOUZCQTVGQ0NB NjM5MTFFRDg3NEU2NjMwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOQYIKwYBBQUHAQcBAf8E KjAoMCYEAgABMCADBADLC9wDBADLF6ADBAHLF6IwDAMEAMsXpQMEA8sXoDANBgkq hkiG9w0BAQsFAAOCAQEAKlOuEeHz0DZGkpix0u2gS1RMz/KJ1TEv6ZfPqrrEllsq g5OTLe1bcPUzppPtZEj6JEUQ9zU+WLxBohXtjhVIdY1xmoRHkW1fyHTWtjGdg2dD QtyIR0W9veEcOE5ozDeVFKdINy6B+uNtakpGpw2VoCRHEuYsF0au3i/whvIW17KX GmMha0RIOZBm5bgmLrRwejq3En4l6vzabhIe1qpYLfOv26U1B+TmJ142QW9jQizt tB1j0Gx5+GHmXuKajPafe835G7vkn6anUPQoloj8YHdpfuB5C9E1ZmC5EMXFzHBV Rqme46X19+JHjnrOj2JUQ7/3p8Xw1MTh5r5z8wThsQ== -----END CERTIFICATE-----Generated at Wed Nov 5 21:41:49 2025 by rpki-client