$ rpki-client -vvf rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/E101BEF6BA1111EAA2AF621EC4F9AE02.roa File: E101BEF6BA1111EAA2AF621EC4F9AE02.roa (raw, json) Hash identifier: S4rEl380BTJzcHGG2hyACdGlelyGvU4RyQMTlMFDOTU= Subject key identifier: 60:74:20:BE:3F:03:12:77:14:6A:1F:CB:7A:AF:02:7E:35:2F:74:B6 Certificate issuer: /CN=A91E563F/serialNumber=482016E56A0241FD2D35BFD77BC972E673CE9F2F Certificate serial: 08F1 Authority key identifier: 48:20:16:E5:6A:02:41:FD:2D:35:BF:D7:7B:C9:72:E6:73:CE:9F:2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SCAW5WoCQf0tNb_Xe8ly5nPOny8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/E101BEF6BA1111EAA2AF621EC4F9AE02.roa Signing time: Sat 12 Jul 2025 21:00:46 +0000 ROA not before: Sat 12 Jul 2025 21:00:46 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 62500 IP address blocks: 202.95.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/SCAW5WoCQf0tNb_Xe8ly5nPOny8.crl rsync://rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/SCAW5WoCQf0tNb_Xe8ly5nPOny8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SCAW5WoCQf0tNb_Xe8ly5nPOny8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:24:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2289 (0x8f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E563F, serialNumber=482016E56A0241FD2D35BFD77BC972E673CE9F2F Validity Not Before: Jul 12 21:00:46 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=6872ccfe-2ad1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:68:71:7f:44:d3:f1:95:98:35:da:6a:eb:28: 84:74:9c:6d:9b:c1:c7:4e:4d:ec:39:a0:65:47:36: 8f:a4:78:52:47:ff:9f:c4:f3:1d:a2:53:b6:46:4b: c0:83:03:31:9f:78:81:2e:e5:4a:1d:c9:93:c9:40: c2:90:35:80:cb:06:c0:c2:82:60:28:cb:76:2a:71: e0:e5:34:74:e3:ad:23:e2:e0:4a:1f:70:ff:06:ad: 85:11:f3:e2:19:90:89:2b:03:40:12:74:2f:98:88: 70:9d:c6:17:b4:c3:33:a6:4e:2f:23:bf:55:08:90: 7a:fe:c7:20:fa:92:fd:1c:fc:f8:60:ef:85:6a:a4: ed:6a:1d:e1:cd:6d:87:ed:a7:4a:85:7a:38:32:b1: 52:47:00:3f:b6:30:a8:20:4c:47:32:46:23:cc:d8: 6f:de:2e:53:97:5b:43:c4:07:d4:f0:cc:0d:0b:c0: d7:44:f9:38:86:79:43:83:77:eb:25:e6:bb:68:3f: 5c:d4:23:59:51:03:34:fa:7b:39:71:68:f7:8f:de: 02:cf:63:a5:35:c1:ff:81:15:33:82:f1:3f:2e:02: 7f:3e:ca:87:2d:78:90:08:59:a7:ef:0b:31:2d:1b: 4c:73:4e:c4:14:f6:ca:d3:21:22:ce:ea:44:e2:6f: e0:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:74:20:BE:3F:03:12:77:14:6A:1F:CB:7A:AF:02:7E:35:2F:74:B6 X509v3 Authority Key Identifier: keyid:48:20:16:E5:6A:02:41:FD:2D:35:BF:D7:7B:C9:72:E6:73:CE:9F:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/SCAW5WoCQf0tNb_Xe8ly5nPOny8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SCAW5WoCQf0tNb_Xe8ly5nPOny8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/E101BEF6BA1111EAA2AF621EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.95.233.0/24 Signature Algorithm: sha256WithRSAEncryption a4:cb:a3:eb:da:6d:5a:c0:40:64:14:35:9b:b7:2f:b8:f2:dc: c6:4a:ea:4f:b8:cd:f9:c2:fb:5b:ad:d0:43:d9:89:ee:e6:3a: 5c:23:c2:b3:f1:bc:78:35:c5:26:3f:95:4c:64:a1:88:2c:30: eb:8a:fb:59:0b:cd:37:c9:9a:e0:b0:6d:d4:66:64:fb:64:42: de:ea:cd:66:da:d2:ce:7c:ac:d2:c1:5b:41:9a:6b:cc:f1:a4: b5:a6:75:e5:a2:13:e1:cf:fb:30:99:05:77:0f:56:b3:52:65: 19:95:fd:99:3e:c5:8b:b0:ef:c1:1f:a2:b3:f0:75:8f:b2:ef: 17:46:bd:df:95:a5:33:2e:7a:c5:16:9f:df:ee:8e:d4:46:ea: b7:14:9d:30:f0:92:aa:d0:1d:e8:99:d0:38:20:da:cf:3d:b8: 15:4d:de:09:d0:dd:86:bf:0e:59:18:59:37:9f:df:ea:59:1a: 3f:9e:aa:7e:56:3b:6f:01:d0:f3:24:b2:8c:4a:fd:62:b2:6c: 2d:8a:1e:38:31:e9:be:97:f3:f5:36:40:d2:af:55:c1:82:9a: 5e:ab:38:b4:f5:3a:06:36:94:66:4c:26:3b:b2:27:b2:b2:be: 78:90:f2:78:14:24:ba:3c:8f:98:24:3e:7d:b6:ff:e6:41:cd: ac:53:ec:59 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU2M0YxMTAvBgNVBAUTKDQ4MjAxNkU1NkEwMjQxRkQyRDM1QkZENzdCQzk3MkU2 NzNDRTlGMkYwHhcNMjUwNzEyMjEwMDQ2WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODcyY2NmZS0yYWQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuWhxf0TT8ZWYNdpq6yiEdJxtm8HHTk3sOaBlRzaPpHhSR/+fxPMdolO2RkvA gwMxn3iBLuVKHcmTyUDCkDWAywbAwoJgKMt2KnHg5TR0460j4uBKH3D/Bq2FEfPi GZCJKwNAEnQvmIhwncYXtMMzpk4vI79VCJB6/scg+pL9HPz4YO+FaqTtah3hzW2H 7adKhXo4MrFSRwA/tjCoIExHMkYjzNhv3i5Tl1tDxAfU8MwNC8DXRPk4hnlDg3fr Jea7aD9c1CNZUQM0+ns5cWj3j94Cz2OlNcH/gRUzgvE/LgJ/PsqHLXiQCFmn7wsx LRtMc07EFPbK0yEizupE4m/gnQIDAQABo4IClTCCApEwHQYDVR0OBBYEFGB0IL4/ AxJ3FGofy3qvAn41L3S2MB8GA1UdIwQYMBaAFEggFuVqAkH9LTW/13vJcuZzzp8v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTYzRi8wQUI3NzdEQUI2 QTgxMUVBQUVFMTRGN0JDNEY5QUUwMi9TQ0FXNVdvQ1FmMHROYl9YZThseTVuUE9u eTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NDQVc1V29DUWYwdE5iX1hlOGx5NW5QT255OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTU2M0YvMEFCNzc3REFCNkE4MTFFQUFFRTE0RjdCQzRGOUFFMDIvRTEwMUJFRjZC QTExMTFFQUEyQUY2MjFFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADKX+kwDQYJKoZIhvcNAQELBQADggEBAKTLo+vabVrAQGQU NZu3L7jy3MZK6k+4zfnC+1ut0EPZie7mOlwjwrPxvHg1xSY/lUxkoYgsMOuK+1kL zTfJmuCwbdRmZPtkQt7qzWba0s58rNLBW0Gaa8zxpLWmdeWiE+HP+zCZBXcPVrNS ZRmV/Zk+xYuw78EforPwdY+y7xdGvd+VpTMuesUWn9/ujtRG6rcUnTDwkqrQHeiZ 0Dgg2s89uBVN3gnQ3Ya/DlkYWTef3+pZGj+eqn5WO28B0PMksoxK/WKybC2KHjgx 6b6X8/U2QNKvVcGCml6rOLT1OgY2lGZMJjuyJ7KyvniQ8ngUJLo8j5gkPn22/+ZB zaxT7Fk= -----END CERTIFICATE-----Generated at Wed Nov 5 11:05:03 2025 by rpki-client