$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/A3F69D08606D11F0AFBFBA71C4F9AE02.roa File: A3F69D08606D11F0AFBFBA71C4F9AE02.roa (raw, json) Hash identifier: EtdhNSmEEzfWJVu79eM0TMcwbnGjbBFKpXQ9HMJGHE8= Subject key identifier: 65:D3:3F:4A:2D:A2:B5:17:E3:E3:9E:C0:C8:58:82:D7:0D:31:5E:A0 Certificate issuer: /CN=A91E7561/serialNumber=25BC7D4DE77BD01B3D191587696E5AFDD8CECD04 Certificate serial: 064C Authority key identifier: 25:BC:7D:4D:E7:7B:D0:1B:3D:19:15:87:69:6E:5A:FD:D8:CE:CD:04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/A3F69D08606D11F0AFBFBA71C4F9AE02.roa Signing time: Wed 27 Aug 2025 00:04:51 +0000 ROA not before: Wed 27 Aug 2025 00:04:51 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 45458 IP address blocks: 14.207.7.0/24 maxlen: 24 14.207.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.crl rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:25:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1612 (0x64c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7561, serialNumber=25BC7D4DE77BD01B3D191587696E5AFDD8CECD04 Validity Not Before: Aug 27 00:04:51 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68ae4ba3-6a4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:75:dd:e4:92:c8:f5:9a:3f:da:cf:42:a8:c6: 38:e5:f8:2f:ab:e3:a3:0f:d2:a6:f2:70:e7:0d:69: 80:2a:eb:b6:65:57:6f:23:ae:90:ca:29:f7:b5:03: 68:48:73:8a:1a:d6:e9:b9:4e:61:8d:03:ba:37:31: fd:92:b1:4a:ec:9b:23:54:f5:7f:a9:ae:fe:f5:22: 85:c1:c8:52:69:4c:ba:4e:3d:c9:5e:82:f2:38:36: fe:21:75:3b:a7:0e:d1:73:f9:15:30:ae:d5:04:6b: e5:ec:2e:8a:34:1c:04:17:ab:f8:66:c0:8a:db:91: 2c:1a:c3:90:31:5e:d3:f1:f7:51:45:88:1a:27:6b: 3a:6c:9f:07:54:c1:f8:88:73:3e:b6:d2:2b:05:fc: 2f:0d:af:86:ae:e9:66:ff:4e:7a:33:87:dd:08:b2: 8d:05:84:20:35:b5:47:8a:49:9b:92:3c:f3:4f:be: ff:2f:10:b0:f3:d2:03:48:18:e1:ec:d3:0f:e0:39: 07:07:b0:32:5b:3f:a2:b6:ef:96:b3:11:da:22:39: a4:c8:ee:c0:14:84:94:43:06:c9:2e:eb:37:6a:a3: 1c:38:99:21:a2:22:43:e7:f9:16:ae:78:89:2a:3a: 4b:b1:39:d2:1f:ac:4a:b3:c8:a1:5d:1b:14:70:6f: c9:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:D3:3F:4A:2D:A2:B5:17:E3:E3:9E:C0:C8:58:82:D7:0D:31:5E:A0 X509v3 Authority Key Identifier: keyid:25:BC:7D:4D:E7:7B:D0:1B:3D:19:15:87:69:6E:5A:FD:D8:CE:CD:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/A3F69D08606D11F0AFBFBA71C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 14.207.7.0/24 14.207.128.0/17 Signature Algorithm: sha256WithRSAEncryption 34:80:7f:03:b8:7c:95:77:d3:2f:f1:c2:cc:2a:d9:4a:97:24: 0e:59:5e:98:7e:58:c9:be:1e:15:54:3f:ad:a3:5b:9b:dc:71: bf:6b:24:72:ac:7a:2c:44:21:84:52:5f:00:3c:a4:b8:33:80: 54:dc:cf:42:8f:50:8d:7e:39:3d:29:15:7e:02:11:c8:46:73: 81:cd:53:79:d8:de:84:17:de:5d:c6:fa:b2:db:6b:03:4a:72: 9d:cb:f2:4f:48:be:f9:c6:38:20:08:be:2d:55:d0:a8:fb:e8: e1:71:8e:90:ff:bb:2b:a7:69:58:9d:4a:c4:fe:91:bd:3e:0f: 88:49:da:76:e2:e4:11:03:f6:1e:f3:61:2a:e7:56:31:0d:ae: d5:a3:e0:a4:5e:e7:89:9e:09:f8:0f:0f:a4:06:3a:6b:c1:0c: af:90:85:17:bf:1b:17:3c:2f:da:be:6c:26:8b:e3:4b:c8:e3: ff:04:7a:b5:c4:89:7d:e4:06:f2:ba:91:68:8a:0f:ca:cf:ab: 3a:7d:57:2c:f9:85:d6:7d:28:76:52:94:3d:ba:34:aa:77:24: 5f:b6:ae:58:f8:74:17:47:52:6b:4a:ce:4d:4e:49:17:3f:5b: 38:46:66:63:9f:00:f0:ed:69:45:ff:ec:7a:3b:5e:bd:5c:46: e3:ff:bc:39 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBkwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc1NjExMTAvBgNVBAUTKDI1QkM3RDRERTc3QkQwMUIzRDE5MTU4NzY5NkU1QUZE RDhDRUNEMDQwHhcNMjUwODI3MDAwNDUxWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGFlNGJhMy02YTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+HXd5JLI9Zo/2s9CqMY45fgvq+OjD9Km8nDnDWmAKuu2ZVdvI66Qyin3tQNo SHOKGtbpuU5hjQO6NzH9krFK7JsjVPV/qa7+9SKFwchSaUy6Tj3JXoLyODb+IXU7 pw7Rc/kVMK7VBGvl7C6KNBwEF6v4ZsCK25EsGsOQMV7T8fdRRYgaJ2s6bJ8HVMH4 iHM+ttIrBfwvDa+Grulm/056M4fdCLKNBYQgNbVHikmbkjzzT77/LxCw89IDSBjh 7NMP4DkHB7AyWz+itu+WsxHaIjmkyO7AFISUQwbJLus3aqMcOJkhoiJD5/kWrniJ KjpLsTnSH6xKs8ihXRsUcG/JMQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFGXTP0ot orUX4+OewMhYgtcNMV6gMB8GA1UdIwQYMBaAFCW8fU3ne9AbPRkVh2luWv3Yzs0E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzU2MS9BMjZFMDZFMDA1 NEMxMUVDQkRCNEZFNDZDNEY5QUUwMi9KYng5VGVkNzBCczlHUldIYVc1YV9kak96 UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pieDlUZWQ3MEJzOUdSV0hhVzVhX2RqT3pRUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTc1NjEvQTI2RTA2RTAwNTRDMTFFQ0JEQjRGRTQ2QzRGOUFFMDIvQTNGNjlEMDg2 MDZEMTFGMEFGQkZCQTcxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAAOzwcDBAcOz4AwDQYJKoZIhvcNAQELBQADggEBADSAfwO4 fJV30y/xwswq2UqXJA5ZXph+WMm+HhVUP62jW5vccb9rJHKseixEIYRSXwA8pLgz gFTcz0KPUI1+OT0pFX4CEchGc4HNU3nY3oQX3l3G+rLbawNKcp3L8k9IvvnGOCAI vi1V0Kj76OFxjpD/uyunaVidSsT+kb0+D4hJ2nbi5BED9h7zYSrnVjENrtWj4KRe 54meCfgPD6QGOmvBDK+QhRe/Gxc8L9q+bCaL40vI4/8EerXEiX3kBvK6kWiKD8rP qzp9Vyz5hdZ9KHZSlD26NKp3JF+2rlj4dBdHUmtKzk1OSRc/WzhGZmOfAPDtaUX/ 7Ho7Xr1cRuP/vDk= -----END CERTIFICATE-----Generated at Wed Nov 5 18:35:54 2025 by rpki-client