$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/0ECA9B023D9F11EC9EC18739C4F9AE02.roa File: 0ECA9B023D9F11EC9EC18739C4F9AE02.roa (raw, json) Hash identifier: aNH379FQc3LoP81plPwndyeL8gm1j9vMgI0IfOPvVJ8= Subject key identifier: 2D:1C:4B:DC:23:3A:34:B7:F4:BF:35:7F:65:37:B9:55:D8:01:CB:0F Certificate issuer: /CN=A91DCD09/serialNumber=ADB98978FD751F99D9A8EB2AE72D3C0C550453A4 Certificate serial: 055D Authority key identifier: AD:B9:89:78:FD:75:1F:99:D9:A8:EB:2A:E7:2D:3C:0C:55:04:53:A4 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/0ECA9B023D9F11EC9EC18739C4F9AE02.roa Signing time: Mon 22 Sep 2025 16:35:20 +0000 ROA not before: Mon 22 Sep 2025 16:35:20 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 134433 IP address blocks: 213.170.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.crl rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:50:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1373 (0x55d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCD09, serialNumber=ADB98978FD751F99D9A8EB2AE72D3C0C550453A4 Validity Not Before: Sep 22 16:35:20 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68d17ac8-e961 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:88:9c:66:e9:21:73:bc:b2:45:46:e4:be:3a: 2d:f5:58:83:86:f1:a4:86:62:d5:f4:ec:ab:9a:a7: 45:4b:66:76:52:8c:e5:a8:9b:9f:02:48:73:2b:10: ac:18:4c:f5:a7:df:8f:b2:06:22:e7:9c:55:ac:fb: f6:29:3c:72:07:98:9f:31:13:cf:e6:0e:70:b0:f3: cb:9b:11:8d:cb:81:11:d9:c4:fc:fb:bb:8a:c5:ac: 44:df:d1:30:b9:f9:24:63:65:bb:7a:d9:09:90:ac: b0:95:4d:3e:cf:cb:0e:22:96:e7:fd:65:f2:d8:38: 53:5a:0c:cd:b1:51:0e:a2:78:a2:92:22:e3:d1:e3: 24:b5:54:43:82:8e:72:dc:8d:66:95:4c:a0:ae:4b: 1b:1a:a9:3e:02:3a:6f:27:4c:bf:d7:32:a9:7c:e1: 65:20:bc:0f:62:f7:38:ba:59:7f:50:a4:e2:de:67: 7d:e4:8f:82:c8:98:ea:0e:5b:3a:90:ce:4e:41:c0: fd:6f:a0:2b:96:3f:94:8b:1c:5a:e1:e6:a4:84:2f: c3:56:f6:b1:af:06:46:e2:c3:27:76:36:f8:df:fe: 91:13:0d:40:a8:a6:dc:31:08:21:a8:b5:c6:dd:e3: 2c:59:8a:6f:82:94:c7:a0:05:29:14:55:a7:8c:61: 2d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:1C:4B:DC:23:3A:34:B7:F4:BF:35:7F:65:37:B9:55:D8:01:CB:0F X509v3 Authority Key Identifier: keyid:AD:B9:89:78:FD:75:1F:99:D9:A8:EB:2A:E7:2D:3C:0C:55:04:53:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/0ECA9B023D9F11EC9EC18739C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 213.170.156.0/22 Signature Algorithm: sha256WithRSAEncryption 38:91:90:ac:de:62:7a:1d:c6:eb:b1:43:f5:a5:57:d1:c4:ba: 63:65:f7:4b:2f:76:08:a4:4a:2b:2c:fa:49:9c:06:a0:5f:cd: b4:3d:72:50:08:12:be:f0:63:9e:f1:11:3c:30:89:c0:5f:53: c1:88:5d:aa:a2:d6:36:83:a1:b4:82:37:c4:64:22:e6:f5:9e: d6:d2:cc:9d:0f:a0:be:db:ef:91:ec:b6:b6:14:17:1f:c3:77: e5:ad:54:c4:c4:79:38:90:32:3a:9e:c2:6e:81:7d:60:da:58: 8a:39:ea:59:71:92:7c:7a:26:59:26:ec:55:9c:18:2d:7a:a9: d8:44:41:5b:54:45:40:af:54:a4:22:85:45:9d:be:ea:57:e9: 03:6c:66:5e:f5:ae:fa:83:08:8b:88:2f:e2:97:8f:5d:22:94: 37:91:50:2e:ae:34:96:fa:c2:1f:b3:10:cf:5c:ba:25:98:90: e1:f2:28:6e:a2:cc:d2:00:97:5c:22:bf:eb:61:7c:d6:0d:2d: ca:c7:e7:0c:87:60:06:7b:9d:5a:b0:51:bb:be:7c:7c:40:42: 47:db:44:58:00:a6:d5:04:81:cc:da:2c:c1:e6:76:3a:18:b7: e7:b6:67:14:3b:cf:f0:76:dc:66:a2:a8:e2:85:57:1b:45:e8: 4b:cc:12:c7 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBV0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENEMDkxMTAvBgNVBAUTKEFEQjk4OTc4RkQ3NTFGOTlEOUE4RUIyQUU3MkQzQzBD NTUwNDUzQTQwHhcNMjUwOTIyMTYzNTIwWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGQxN2FjOC1lOTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvYicZukhc7yyRUbkvjot9ViDhvGkhmLV9OyrmqdFS2Z2UozlqJufAkhzKxCs GEz1p9+PsgYi55xVrPv2KTxyB5ifMRPP5g5wsPPLmxGNy4ER2cT8+7uKxaxE39Ew ufkkY2W7etkJkKywlU0+z8sOIpbn/WXy2DhTWgzNsVEOoniikiLj0eMktVRDgo5y 3I1mlUygrksbGqk+AjpvJ0y/1zKpfOFlILwPYvc4ull/UKTi3md95I+CyJjqDls6 kM5OQcD9b6Arlj+Uixxa4eakhC/DVvaxrwZG4sMndjb43/6REw1AqKbcMQghqLXG 3eMsWYpvgpTHoAUpFFWnjGEtEQIDAQABo4IClTCCApEwHQYDVR0OBBYEFC0cS9wj OjS39L81f2U3uVXYAcsPMB8GA1UdIwQYMBaAFK25iXj9dR+Z2ajrKuctPAxVBFOk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0QwOS9FQUM3RUVBMDEx MkQxMUVDOEQ4NzA1N0RDNEY5QUUwMi9yYm1KZVAxMUg1blpxT3NxNXkwOERGVUVV NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3JibUplUDExSDVuWnFPc3E1eTA4REZVRVU2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RENEMDkvRUFDN0VFQTAxMTJEMTFFQzhEODcwNTdEQzRGOUFFMDIvMEVDQTlCMDIz RDlGMTFFQzlFQzE4NzM5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBALVqpwwDQYJKoZIhvcNAQELBQADggEBADiRkKzeYnodxuux Q/WlV9HEumNl90svdgikSiss+kmcBqBfzbQ9clAIEr7wY57xETwwicBfU8GIXaqi 1jaDobSCN8RkIub1ntbSzJ0PoL7b75HstrYUFx/Dd+WtVMTEeTiQMjqewm6BfWDa WIo56llxknx6Jlkm7FWcGC16qdhEQVtURUCvVKQihUWdvupX6QNsZl71rvqDCIuI L+KXj10ilDeRUC6uNJb6wh+zEM9cuiWYkOHyKG6izNIAl1wiv+thfNYNLcrH5wyH YAZ7nVqwUbu+fHxAQkfbRFgAptUEgczaLMHmdjoYt+e2ZxQ7z/B23GaiqOKFVxtF 6EvMEsc= -----END CERTIFICATE-----Generated at Tue Nov 4 22:23:22 2025 by rpki-client