$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/1698D0A4F3C511EEA51BD730C4F9AE02.roa File: 1698D0A4F3C511EEA51BD730C4F9AE02.roa (raw, json) Hash identifier: dK1RlQyJjeiwzuMRZD6/CsndMyibK0XoFCLqDbss32s= Subject key identifier: 59:6C:21:99:C3:F6:AA:27:C8:80:D3:C7:34:F2:21:DA:62:38:05:4F Certificate issuer: /CN=A91DEF41/serialNumber=336DDE7EC3280499964371CAEE2620FBFCACDC98 Certificate serial: DF Authority key identifier: 33:6D:DE:7E:C3:28:04:99:96:43:71:CA:EE:26:20:FB:FC:AC:DC:98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M23efsMoBJmWQ3HK7iYg-_ys3Jg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/1698D0A4F3C511EEA51BD730C4F9AE02.roa Signing time: Fri 23 May 2025 04:56:01 +0000 ROA not before: Fri 23 May 2025 04:56:01 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 147295 IP address blocks: 203.170.90.0/23 maxlen: 24 2001:df3:a2c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.crl rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M23efsMoBJmWQ3HK7iYg-_ys3Jg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:48:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 223 (0xdf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEF41, serialNumber=336DDE7EC3280499964371CAEE2620FBFCACDC98 Validity Not Before: May 23 04:56:01 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=682fffe0-ca17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6b:5f:b8:c2:5f:b5:3b:ee:7a:84:38:9a:f9: f7:8c:85:2a:b1:79:15:a8:dc:5c:75:f4:49:bf:e9: 3d:f6:ce:e9:23:2c:ca:6c:36:4b:17:4a:57:25:08: 84:9c:16:78:84:f4:9a:16:57:3a:32:bd:ac:bb:13: 0f:d6:3f:62:24:87:fd:7b:43:54:cf:4f:4b:f2:be: 94:80:0b:df:db:a0:9b:de:54:f3:5c:c3:88:7b:8a: fa:2c:35:8b:f8:e3:4f:81:8e:11:15:08:ba:f1:c1: 44:b8:f8:87:fa:19:78:33:fb:ba:d4:1e:d3:45:6f: fa:4c:14:54:89:77:e3:13:8f:01:c3:7c:99:9e:f6: 61:76:64:29:52:a5:d4:d0:c7:a7:f9:a3:90:1c:d7: 15:7f:07:0e:ff:43:fc:17:82:67:9f:86:02:e2:46: 92:db:64:dd:a4:6c:7e:c1:02:44:ab:e5:6d:ae:5b: 2c:dc:fe:f8:e0:b4:04:2f:96:b6:28:2c:25:36:3d: 68:23:fd:8b:84:00:61:c6:d1:e1:08:5f:e9:6e:58: f4:b3:cb:80:cf:3b:b1:dc:8c:11:3f:8e:dc:ef:8a: c9:41:9e:6c:17:87:97:c1:21:50:97:c7:09:c0:0d: 92:f1:a8:f0:89:79:d6:d2:c3:44:4b:df:b4:2e:ba: b1:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:6C:21:99:C3:F6:AA:27:C8:80:D3:C7:34:F2:21:DA:62:38:05:4F X509v3 Authority Key Identifier: keyid:33:6D:DE:7E:C3:28:04:99:96:43:71:CA:EE:26:20:FB:FC:AC:DC:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M23efsMoBJmWQ3HK7iYg-_ys3Jg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/1698D0A4F3C511EEA51BD730C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.170.90.0/23 IPv6: 2001:df3:a2c0::/48 Signature Algorithm: sha256WithRSAEncryption 03:44:ca:fc:d4:73:b2:9f:66:8d:c6:4f:9e:ee:8a:55:57:ee: 69:ec:e8:97:2c:69:74:47:c5:ae:8b:cc:1a:35:ec:2a:1d:1e: ba:6b:43:54:50:4f:45:37:a1:02:90:dc:95:c6:51:57:0f:40: a2:0d:19:57:e4:a4:71:df:dd:70:16:74:1b:30:a0:57:2f:02: 36:a1:4d:0d:ea:05:2b:3c:3a:0d:fc:c7:db:38:84:ac:20:02: f4:0b:70:a6:79:cb:92:61:2a:1e:63:5a:50:9a:72:a2:68:4f: fa:03:30:fa:ac:12:c1:36:82:d6:0d:c6:51:a1:ed:99:c8:03: ea:6a:1d:6c:16:6e:40:ad:8a:8a:c8:62:65:e5:aa:9c:f4:dc: fc:5d:42:62:40:08:38:3b:51:da:5c:ea:9d:4f:96:4f:45:78: 2c:03:39:5f:bf:b4:96:c9:b7:5a:ae:4e:5b:b1:ff:d2:67:d9: 33:35:83:87:58:2f:88:fd:87:11:bd:1f:2f:22:d1:31:dc:f0: 0c:7f:a1:f7:85:68:80:ba:76:78:23:54:b0:50:d7:98:29:99: 6b:e6:e4:65:d5:a8:eb:b6:cc:0d:47:14:73:d4:89:8b:5f:50: 85:cc:a0:21:7d:f2:dd:29:bf:66:18:07:f5:57:b6:f1:64:f6: 1a:0a:2c:e5 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVGNDExMTAvBgNVBAUTKDMzNkRERTdFQzMyODA0OTk5NjQzNzFDQUVFMjYyMEZC RkNBQ0RDOTgwHhcNMjUwNTIzMDQ1NjAxWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODJmZmZlMC1jYTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqmtfuMJftTvueoQ4mvn3jIUqsXkVqNxcdfRJv+k99s7pIyzKbDZLF0pXJQiE nBZ4hPSaFlc6Mr2suxMP1j9iJIf9e0NUz09L8r6UgAvf26Cb3lTzXMOIe4r6LDWL +ONPgY4RFQi68cFEuPiH+hl4M/u61B7TRW/6TBRUiXfjE48Bw3yZnvZhdmQpUqXU 0Men+aOQHNcVfwcO/0P8F4Jnn4YC4kaS22TdpGx+wQJEq+Vtrlss3P744LQEL5a2 KCwlNj1oI/2LhABhxtHhCF/pblj0s8uAzzux3IwRP47c74rJQZ5sF4eXwSFQl8cJ wA2S8ajwiXnW0sNES9+0LrqxrQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFFlsIZnD 9qonyIDTxzTyIdpiOAVPMB8GA1UdIwQYMBaAFDNt3n7DKASZlkNxyu4mIPv8rNyY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUY0MS9DNzVEQTEzMkYy RkIxMUVFOUZDRjc2NENDNEY5QUUwMi9NMjNlZnNNb0JKbVdRM0hLN2lZZy1feXMz SmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL00yM2Vmc01vQkptV1EzSEs3aVlnLV95czNKZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REVGNDEvQzc1REExMzJGMkZCMTFFRTlGQ0Y3NjRDQzRGOUFFMDIvMTY5OEQwQTRG M0M1MTFFRUE1MUJENzMwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAHLqlowDwQCAAIwCQMHACABDfOiwDANBgkqhkiG9w0BAQsF AAOCAQEAA0TK/NRzsp9mjcZPnu6KVVfuaezolyxpdEfFrovMGjXsKh0eumtDVFBP RTehApDclcZRVw9Aog0ZV+Skcd/dcBZ0GzCgVy8CNqFNDeoFKzw6DfzH2ziErCAC 9AtwpnnLkmEqHmNaUJpyomhP+gMw+qwSwTaC1g3GUaHtmcgD6modbBZuQK2Kishi ZeWqnPTc/F1CYkAIODtR2lzqnU+WT0V4LAM5X7+0lsm3Wq5OW7H/0mfZMzWDh1gv iP2HEb0fLyLRMdzwDH+h94VogLp2eCNUsFDXmCmZa+bkZdWo67bMDUcUc9SJi19Q hcygIX3y3Sm/ZhgH9Ve28WT2Ggos5Q== -----END CERTIFICATE-----Generated at Wed Nov 5 20:54:57 2025 by rpki-client