$ rpki-client -vvf rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/EABCE94C932111EE8C70453EC4F9AE02.roa File: EABCE94C932111EE8C70453EC4F9AE02.roa (raw, json) Hash identifier: 3jZ9nHpwySfxwNtadAmSfYTid2BMJXTKTIVS2D09msI= Subject key identifier: 8B:61:89:14:CD:CB:8C:24:9C:6C:4B:3E:5A:BC:FB:E4:5A:1D:FB:93 Certificate issuer: /CN=A91E563F/serialNumber=482016E56A0241FD2D35BFD77BC972E673CE9F2F Certificate serial: 08EF Authority key identifier: 48:20:16:E5:6A:02:41:FD:2D:35:BF:D7:7B:C9:72:E6:73:CE:9F:2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SCAW5WoCQf0tNb_Xe8ly5nPOny8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/EABCE94C932111EE8C70453EC4F9AE02.roa Signing time: Sat 12 Jul 2025 21:00:44 +0000 ROA not before: Sat 12 Jul 2025 21:00:44 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 17894 IP address blocks: 202.52.160.0/20 maxlen: 20 202.52.160.0/23 maxlen: 23 202.95.224.0/24 maxlen: 24 202.95.225.0/24 maxlen: 24 202.95.226.0/24 maxlen: 24 202.95.227.0/24 maxlen: 24 202.95.228.0/24 maxlen: 24 202.95.229.0/24 maxlen: 24 202.95.230.0/24 maxlen: 24 202.95.231.0/24 maxlen: 24 202.95.232.0/24 maxlen: 24 202.95.235.0/24 maxlen: 24 202.95.236.0/24 maxlen: 24 202.95.237.0/24 maxlen: 24 202.95.238.0/24 maxlen: 24 202.95.239.0/24 maxlen: 24 202.126.32.0/20 maxlen: 24 2401:b900::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/SCAW5WoCQf0tNb_Xe8ly5nPOny8.crl rsync://rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/SCAW5WoCQf0tNb_Xe8ly5nPOny8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SCAW5WoCQf0tNb_Xe8ly5nPOny8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:24:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2287 (0x8ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E563F, serialNumber=482016E56A0241FD2D35BFD77BC972E673CE9F2F Validity Not Before: Jul 12 21:00:44 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=6872ccfc-71c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:00:cd:c8:cc:62:90:b3:f0:9b:ad:b2:07:f3: 2d:80:19:4c:65:81:08:58:f2:59:4e:94:d0:a3:8d: 40:0a:78:3a:0f:9a:d7:66:10:45:b8:2a:f0:97:a2: f4:c0:10:15:a6:77:47:aa:16:39:98:d9:e9:e5:19: f5:b9:df:06:ea:e2:ec:e1:4f:52:cf:45:d2:69:40: 80:8b:9b:de:e3:99:36:0c:60:37:5d:39:17:5e:89: f6:ce:aa:5f:2a:b2:d8:29:9f:50:25:3a:53:b3:fb: fd:c5:d7:4a:70:2f:ff:ff:dc:fb:54:52:f6:40:b0: d0:aa:62:03:0b:43:37:56:2d:cf:9f:71:6f:78:67: 89:06:a5:be:ad:9d:58:fb:f7:31:c9:e6:16:51:9f: de:75:5f:f4:71:35:5b:7e:f0:1b:f1:5f:91:4a:52: 33:f9:ef:10:aa:ac:c8:e3:53:91:00:db:e4:03:3c: 02:5c:c1:3a:b2:dc:63:7d:0b:50:14:4f:38:62:35: 65:0f:2a:c4:bd:d5:8f:e4:e0:0a:fe:84:71:a6:9e: d6:db:a4:ad:6d:d4:89:08:de:bb:e1:6e:e1:d4:b7: 92:54:b7:cb:4a:aa:1e:b7:d0:44:d6:ff:8c:48:3d: 24:97:d0:fe:ce:42:a7:04:3d:29:05:1f:06:25:5c: f1:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:61:89:14:CD:CB:8C:24:9C:6C:4B:3E:5A:BC:FB:E4:5A:1D:FB:93 X509v3 Authority Key Identifier: keyid:48:20:16:E5:6A:02:41:FD:2D:35:BF:D7:7B:C9:72:E6:73:CE:9F:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/SCAW5WoCQf0tNb_Xe8ly5nPOny8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SCAW5WoCQf0tNb_Xe8ly5nPOny8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/EABCE94C932111EE8C70453EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.52.160.0/20 202.95.224.0-202.95.232.255 202.95.235.0-202.95.239.255 202.126.32.0/20 IPv6: 2401:b900::/32 Signature Algorithm: sha256WithRSAEncryption 4e:f7:a8:30:ce:99:9d:bf:55:b3:cc:be:26:f7:47:fc:d8:19: f9:f1:59:0d:27:c7:64:12:e5:43:5e:d7:6a:06:37:a1:a0:ec: a3:27:6e:60:9f:b1:cf:93:31:6d:7d:4b:b4:7d:63:fc:d7:62: 60:af:f6:7c:bf:7f:07:fe:da:f6:c6:d7:58:69:7a:ee:c3:d7: c1:37:77:73:27:6b:90:6b:90:d8:61:65:58:a5:d0:bd:ff:09: 5e:ae:b4:df:b8:88:58:08:6f:e2:38:4e:1a:5b:1d:ff:0f:00: 26:e4:af:94:8a:f1:e6:1b:5a:d7:34:26:11:12:0f:dd:ab:1a: 1a:da:09:ea:99:45:6f:03:1e:84:61:d9:c0:74:e1:ca:44:5c: df:e6:f3:b5:19:94:a6:c1:7b:37:db:15:d5:ca:75:32:ad:0b: e0:12:d2:cb:21:0f:bc:23:81:f2:82:53:8a:f5:06:ce:de:b4: 3c:23:23:a7:7f:3a:bc:85:c9:0d:84:3a:af:35:e4:33:a5:df: 9b:cb:52:6f:c1:4a:a0:6d:6b:38:80:bf:bd:40:70:de:b2:73: 55:e9:45:4f:38:e5:d6:05:ff:69:06:67:51:b0:3b:c6:24:55: 7a:ce:57:6c:0f:d4:01:1c:dd:d2:f4:4c:84:a7:1d:92:9a:2c: cd:c8:bf:16 -----BEGIN CERTIFICATE----- MIIFojCCBIqgAwIBAgICCO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU2M0YxMTAvBgNVBAUTKDQ4MjAxNkU1NkEwMjQxRkQyRDM1QkZENzdCQzk3MkU2 NzNDRTlGMkYwHhcNMjUwNzEyMjEwMDQ0WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODcyY2NmYy03MWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAogDNyMxikLPwm62yB/MtgBlMZYEIWPJZTpTQo41ACng6D5rXZhBFuCrwl6L0 wBAVpndHqhY5mNnp5Rn1ud8G6uLs4U9Sz0XSaUCAi5ve45k2DGA3XTkXXon2zqpf KrLYKZ9QJTpTs/v9xddKcC///9z7VFL2QLDQqmIDC0M3Vi3Pn3FveGeJBqW+rZ1Y +/cxyeYWUZ/edV/0cTVbfvAb8V+RSlIz+e8QqqzI41ORANvkAzwCXME6stxjfQtQ FE84YjVlDyrEvdWP5OAK/oRxpp7W26StbdSJCN674W7h1LeSVLfLSqoet9BE1v+M SD0kl9D+zkKnBD0pBR8GJVzxiQIDAQABo4ICxjCCAsIwHQYDVR0OBBYEFIthiRTN y4wknGxLPlq8++RaHfuTMB8GA1UdIwQYMBaAFEggFuVqAkH9LTW/13vJcuZzzp8v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTYzRi8wQUI3NzdEQUI2 QTgxMUVBQUVFMTRGN0JDNEY5QUUwMi9TQ0FXNVdvQ1FmMHROYl9YZThseTVuUE9u eTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NDQVc1V29DUWYwdE5iX1hlOGx5NW5QT255OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTU2M0YvMEFCNzc3REFCNkE4MTFFQUFFRTE0RjdCQzRGOUFFMDIvRUFCQ0U5NEM5 MzIxMTFFRThDNzA0NTNFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwUAYIKwYBBQUHAQcBAf8E QTA/MC4EAgABMCgDBATKNKAwDAMEBcpf4AMEAMpf6DAMAwQAyl/rAwQEyl/gAwQE yn4gMA0EAgACMAcDBQAkAbkAMA0GCSqGSIb3DQEBCwUAA4IBAQBO96gwzpmdv1Wz zL4m90f82Bn58VkNJ8dkEuVDXtdqBjehoOyjJ25gn7HPkzFtfUu0fWP812Jgr/Z8 v38H/tr2xtdYaXruw9fBN3dzJ2uQa5DYYWVYpdC9/wlerrTfuIhYCG/iOE4aWx3/ DwAm5K+UivHmG1rXNCYREg/dqxoa2gnqmUVvAx6EYdnAdOHKRFzf5vO1GZSmwXs3 2xXVynUyrQvgEtLLIQ+8I4HyglOK9QbO3rQ8IyOnfzq8hckNhDqvNeQzpd+by1Jv wUqgbWs4gL+9QHDesnNV6UVPOOXWBf9pBmdRsDvGJFV6zldsD9QBHN3S9EyEpx2S mizNyL8W -----END CERTIFICATE-----Generated at Wed Nov 5 11:05:34 2025 by rpki-client