$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/11D9E3F865DB11F0A01C3E60C4F9AE02.roa File: 11D9E3F865DB11F0A01C3E60C4F9AE02.roa (raw, json) Hash identifier: yWabycL0fNoBRknav9eJgJDTlAAj5pKSPiafY7/LIVs= Subject key identifier: 0C:5B:5F:0A:B0:35:59:7A:E2:66:35:3E:FB:7F:0A:D0:78:07:80:B4 Certificate issuer: /CN=A91E4845/serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6 Certificate serial: 2285 Authority key identifier: 01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/11D9E3F865DB11F0A01C3E60C4F9AE02.roa Signing time: Sun 02 Nov 2025 16:03:24 +0000 ROA not before: Sun 02 Nov 2025 16:03:24 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 213513 IP address blocks: 180.210.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.crl rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:58:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8837 (0x2285) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4845, serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6 Validity Not Before: Nov 2 16:03:24 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=690780cb-1f29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:30:70:4a:2f:b5:57:43:06:3f:e6:18:e0:84: 39:ef:84:77:62:25:d7:2f:3e:4e:2e:4f:96:7c:31: 27:95:4e:e3:30:9e:51:6b:f2:be:14:f9:cc:34:2b: 2b:f0:40:0d:96:80:38:ff:ae:9f:ad:01:15:7c:6d: 1b:3c:c3:12:1e:6f:96:d9:cb:6f:59:34:ab:5f:88: 81:e4:2d:23:5e:81:c7:d7:f9:e0:83:04:21:83:89: 67:25:9d:b7:c0:c7:cf:10:56:04:a8:b9:e3:2a:05: e0:fa:af:db:34:bb:1e:32:65:fd:37:f9:5b:48:a5: b0:3d:33:52:3e:80:00:79:74:83:f2:63:b7:87:d6: 14:04:30:06:01:bb:6f:59:b5:3d:19:d5:b3:0d:ab: 3e:ad:09:1c:36:ce:88:88:b8:39:6e:46:85:be:2c: b8:95:1c:7d:3b:5a:d2:1a:41:df:9b:c9:bf:c8:c2: 0d:c7:f0:37:f5:b5:8d:ce:c6:d9:3e:1a:07:43:9c: 96:35:82:25:ab:81:08:47:fc:bb:86:09:09:b8:82: bd:2b:00:80:7d:9b:14:4d:31:a1:cf:b3:78:ba:13: f8:98:76:f1:d5:da:81:bc:f8:ed:0e:45:5d:d2:30: 25:57:d2:7e:76:46:8f:52:12:96:42:44:42:45:f6: d4:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:5B:5F:0A:B0:35:59:7A:E2:66:35:3E:FB:7F:0A:D0:78:07:80:B4 X509v3 Authority Key Identifier: keyid:01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/11D9E3F865DB11F0A01C3E60C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 180.210.221.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:39:33:76:c6:75:a3:3e:c5:2c:c8:e1:09:d7:d3:d3:b6:92: c1:84:26:b2:eb:19:fc:58:ec:48:ce:60:b0:18:49:6d:35:de: 28:bd:fd:ba:24:88:0a:bc:1c:19:5f:30:23:90:a3:34:c0:73: 6b:fe:f0:3d:f4:e4:2f:dd:f1:75:25:8b:49:43:db:77:25:37: 20:53:a6:9c:65:03:d5:f5:b0:87:3a:b8:40:cc:6a:20:e5:ca: a2:53:6e:da:48:8c:b9:17:1d:64:8f:1f:6e:75:27:8e:b0:f0: bb:b8:a0:3c:cc:01:64:24:04:1b:ba:49:c9:b5:2b:b9:4d:f9: 7e:f1:bd:a3:ce:e7:a5:70:87:1b:84:9a:92:a5:73:eb:33:f9: 13:69:a7:f5:20:34:38:11:05:14:7a:35:e6:9e:64:0d:b2:d0: 28:08:67:57:66:18:b7:a1:1d:58:72:f0:a2:eb:28:76:bf:a1: 9e:51:df:cc:9c:ba:40:72:9c:f3:e9:0d:f2:ae:2d:25:4e:9b: d5:3f:03:33:a5:7e:58:0c:17:72:8c:0d:e9:49:46:af:f5:86: 4b:9c:a3:1a:70:b4:4e:60:7c:7a:92:3f:77:15:1e:21:a8:ce: 38:cf:7d:62:2a:83:c5:8b:5e:63:0c:8a:1b:bb:3e:e6:3d:38: ef:2f:4a:d5 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICIoUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ4NDUxMTAvBgNVBAUTKDAxQTQxMkVGNDE2Qzg4NEY2RjYzN0YxQkRBODAwRUI2 RUY2N0I2RDYwHhcNMjUxMTAyMTYwMzI0WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTA3ODBjYi0xZjI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4DBwSi+1V0MGP+YY4IQ574R3YiXXLz5OLk+WfDEnlU7jMJ5Ra/K+FPnMNCsr 8EANloA4/66frQEVfG0bPMMSHm+W2ctvWTSrX4iB5C0jXoHH1/nggwQhg4lnJZ23 wMfPEFYEqLnjKgXg+q/bNLseMmX9N/lbSKWwPTNSPoAAeXSD8mO3h9YUBDAGAbtv WbU9GdWzDas+rQkcNs6IiLg5bkaFviy4lRx9O1rSGkHfm8m/yMINx/A39bWNzsbZ PhoHQ5yWNYIlq4EIR/y7hgkJuIK9KwCAfZsUTTGhz7N4uhP4mHbx1dqBvPjtDkVd 0jAlV9J+dkaPUhKWQkRCRfbUSwIDAQABo4IClTCCApEwHQYDVR0OBBYEFAxbXwqw NVl64mY1Pvt/CtB4B4C0MB8GA1UdIwQYMBaAFAGkEu9BbIhPb2N/G9qADrbvZ7bW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDg0NS80MDAxNTNCNkQy RUIxMUU1QjREMTVBNEVDNEY5QUUwMi9BYVFTNzBGc2lFOXZZMzhiMm9BT3R1OW50 dFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FhUVM3MEZzaUU5dlkzOGIyb0FPdHU5bnR0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTQ4NDUvNDAwMTUzQjZEMkVCMTFFNUI0RDE1QTRFQzRGOUFFMDIvMTFEOUUzRjg2 NURCMTFGMEEwMUMzRTYwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAC00t0wDQYJKoZIhvcNAQELBQADggEBAEo5M3bGdaM+xSzI 4QnX09O2ksGEJrLrGfxY7EjOYLAYSW013ii9/bokiAq8HBlfMCOQozTAc2v+8D30 5C/d8XUli0lD23clNyBTppxlA9X1sIc6uEDMaiDlyqJTbtpIjLkXHWSPH251J46w 8Lu4oDzMAWQkBBu6Scm1K7lN+X7xvaPO56VwhxuEmpKlc+sz+RNpp/UgNDgRBRR6 NeaeZA2y0CgIZ1dmGLehHVhy8KLrKHa/oZ5R38ycukBynPPpDfKuLSVOm9U/AzOl flgMF3KMDelJRq/1hkucoxpwtE5gfHqSP3cVHiGozjjPfWIqg8WLXmMMihu7PuY9 OO8vStU= -----END CERTIFICATE-----Generated at Wed Nov 5 14:33:03 2025 by rpki-client