$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/47D5EEA2A5FF11F08004B67CC4F9AE02.roa File: 47D5EEA2A5FF11F08004B67CC4F9AE02.roa (raw, json) Hash identifier: iNZxFEtD+6QgSBLSeVmK2n+qo/Nt14F+67ViKVlRAEM= Subject key identifier: 52:34:23:A0:90:C3:97:D3:53:44:46:75:FC:22:40:49:E9:E4:93:A6 Certificate issuer: /CN=A91E3493/serialNumber=31311CFCC1401BD6D0E6B6B39167B65C21092114 Certificate serial: 0E Authority key identifier: 31:31:1C:FC:C1:40:1B:D6:D0:E6:B6:B3:91:67:B6:5C:21:09:21:14 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/47D5EEA2A5FF11F08004B67CC4F9AE02.roa Signing time: Fri 10 Oct 2025 17:33:49 +0000 ROA not before: Fri 10 Oct 2025 17:33:49 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 15169 IP address blocks: 152.65.192.0/18 maxlen: 22 152.65.192.0/19 maxlen: 24 152.65.224.0/20 maxlen: 24 152.65.240.0/21 maxlen: 24 152.65.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.crl rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:48:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14 (0xe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3493, serialNumber=31311CFCC1401BD6D0E6B6B39167B65C21092114 Validity Not Before: Oct 10 17:33:49 2025 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=68e9437d-26ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:17:e6:c6:f0:ab:fb:ac:71:78:30:1b:d8:a4: 80:1c:70:e6:6d:cb:dd:c4:b6:2f:30:1b:21:aa:7b: 5c:31:e5:31:31:31:d9:e0:3a:5b:c7:61:52:ca:db: 7f:32:82:c9:76:61:ae:a4:21:b6:8c:3d:61:71:ee: 3d:79:4e:27:3d:e0:22:9a:17:76:1d:44:d7:83:24: 6b:cf:51:7d:0f:7c:0e:99:12:15:28:63:01:5c:bf: e0:7f:f0:77:47:b0:ea:4b:2c:07:b0:bf:82:c4:02: 72:2c:dd:28:88:e7:4a:de:e6:28:78:08:1b:b1:b7: 70:dc:bb:77:ba:ca:18:5f:35:e3:40:92:e6:7e:b4: 6c:73:bf:cb:a8:15:c2:dc:5c:90:d1:78:59:5e:f2: a4:38:83:fb:0b:b3:03:55:2a:3c:62:77:ab:e9:0a: 84:e9:2b:e4:cc:17:0c:18:34:08:a9:4d:80:4c:f0: 9e:b8:4b:ad:74:24:16:4d:96:98:e5:21:10:a5:8d: 80:e6:1f:df:c2:24:f1:43:cb:91:6b:64:8f:77:c0: 42:4d:be:9f:c8:a5:de:f8:2e:14:b4:56:80:b7:4c: 19:bc:31:bc:0f:52:ec:95:45:1e:b7:17:d5:06:f9: 93:b3:39:49:be:0d:ef:d5:cb:c8:f0:b9:2f:5c:ce: 4d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:34:23:A0:90:C3:97:D3:53:44:46:75:FC:22:40:49:E9:E4:93:A6 X509v3 Authority Key Identifier: keyid:31:31:1C:FC:C1:40:1B:D6:D0:E6:B6:B3:91:67:B6:5C:21:09:21:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/47D5EEA2A5FF11F08004B67CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 152.65.192.0/18 Signature Algorithm: sha256WithRSAEncryption ab:64:f5:f5:97:89:e7:05:2f:35:14:0d:dc:30:f2:28:98:f2: 55:33:4b:db:99:47:6a:bf:29:72:8a:90:f7:36:d0:48:f6:8e: 52:67:0c:d0:c4:d1:66:2c:ff:f1:0f:17:7d:4c:c9:3b:7a:dc: b2:18:da:60:fb:27:73:e1:01:3b:d0:db:25:40:6f:c2:72:e8: 33:de:90:ec:bb:3b:0b:29:a5:eb:25:d3:36:7b:d3:72:42:bb: 01:b5:44:9a:1f:80:3a:18:33:59:d3:35:82:05:1c:6e:20:d2: e2:8b:7d:02:9c:d8:ef:94:55:af:eb:8a:b4:44:5e:44:91:e5: 23:45:f3:87:4e:b3:97:24:90:65:60:f1:86:6b:6e:45:15:2b: 0c:8e:3c:ed:a6:0a:a0:b9:b4:68:89:05:ca:9b:3b:ab:ba:34: ef:e2:3e:fb:8b:db:40:69:35:26:68:be:90:df:41:ea:98:27: a3:06:ab:37:ba:a5:00:0b:4e:4b:d5:70:27:eb:fd:08:f4:8c: 48:70:ad:44:a8:6a:f6:a9:0c:a2:bb:b3:52:d5:71:c6:47:f7: 56:cc:6f:c7:87:3e:20:77:2b:20:5f:da:29:7b:2e:c5:63:33: 69:01:71:43:58:8c:aa:f4:9d:d1:32:87:a1:bb:f2:3d:79:35: 55:e0:19:cb -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBDjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MzQ5MzExMC8GA1UEBRMoMzEzMTFDRkNDMTQwMUJENkQwRTZCNkIzOTE2N0I2NUMy MTA5MjExNDAeFw0yNTEwMTAxNzMzNDlaFw0yNjAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4ZTk0MzdkLTI2ZWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8F+bG8Kv7rHF4MBvYpIAccOZty93Eti8wGyGqe1wx5TExMdngOlvHYVLK238y gsl2Ya6kIbaMPWFx7j15Tic94CKaF3YdRNeDJGvPUX0PfA6ZEhUoYwFcv+B/8HdH sOpLLAewv4LEAnIs3SiI50re5ih4CBuxt3Dcu3e6yhhfNeNAkuZ+tGxzv8uoFcLc XJDReFle8qQ4g/sLswNVKjxid6vpCoTpK+TMFwwYNAipTYBM8J64S610JBZNlpjl IRCljYDmH9/CJPFDy5FrZI93wEJNvp/Ipd74LhS0VoC3TBm8MbwPUuyVRR63F9UG +ZOzOUm+De/Vy8jwuS9czk2vAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUUjQjoJDD l9NTREZ1/CJASenkk6YwHwYDVR0jBBgwFoAUMTEc/MFAG9bQ5razkWe2XCEJIRQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUzNDkzL0U1MkMxNEMwOUZG QTExRjBCQUQ1MEI2MUM0RjlBRTAyL01URWNfTUZBRzliUTVyYXprV2UyWENFSklS US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTVRFY19NRkFHOWJRNXJhemtXZTJYQ0VKSVJRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzQ5My9FNTJDMTRDMDlGRkExMUYwQkFENTBCNjFDNEY5QUUwMi80N0Q1RUVBMkE1 RkYxMUYwODAwNEI2N0NDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEBphBwDANBgkqhkiG9w0BAQsFAAOCAQEAq2T19ZeJ5wUvNRQN 3DDyKJjyVTNL25lHar8pcoqQ9zbQSPaOUmcM0MTRZiz/8Q8XfUzJO3rcshjaYPsn c+EBO9DbJUBvwnLoM96Q7Ls7Cyml6yXTNnvTckK7AbVEmh+AOhgzWdM1ggUcbiDS 4ot9ApzY75RVr+uKtEReRJHlI0Xzh06zlySQZWDxhmtuRRUrDI487aYKoLm0aIkF yps7q7o07+I++4vbQGk1Jmi+kN9B6pgnowarN7qlAAtOS9VwJ+v9CPSMSHCtRKhq 9qkMoruzUtVxxkf3Vsxvx4c+IHcrIF/aKXsuxWMzaQFxQ1iMqvSd0TKHobvyPXk1 VeAZyw== -----END CERTIFICATE-----Generated at Wed Nov 5 04:23:56 2025 by rpki-client