$ rpki-client -vvf rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/4A06FF10FF2711EAB7D5F235C4F9AE02.roa File: 4A06FF10FF2711EAB7D5F235C4F9AE02.roa (raw, json) Hash identifier: 4dlrQ4m4GuqrlwQC8/clahOIGGqO7yOvH8v7wChtYp8= Subject key identifier: 33:71:1A:E1:B9:66:8F:EC:33:91:5B:12:BA:F3:A2:89:E2:14:17:DF Certificate issuer: /CN=A91E96D9/serialNumber=219EA63C6AC966DDB285886BD711C78A14DF512B Certificate serial: 08A3 Authority key identifier: 21:9E:A6:3C:6A:C9:66:DD:B2:85:88:6B:D7:11:C7:8A:14:DF:51:2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/4A06FF10FF2711EAB7D5F235C4F9AE02.roa Signing time: Wed 22 Oct 2025 21:39:53 +0000 ROA not before: Wed 22 Oct 2025 21:39:53 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 55340 IP address blocks: 116.0.33.0/24 maxlen: 24 116.0.34.0/24 maxlen: 24 116.0.40.0/24 maxlen: 24 116.0.41.0/24 maxlen: 24 116.0.43.0/24 maxlen: 24 116.0.44.0/24 maxlen: 24 116.0.46.0/24 maxlen: 24 116.0.55.0/24 maxlen: 24 116.0.56.0/24 maxlen: 24 116.0.57.0/24 maxlen: 24 116.0.58.0/24 maxlen: 24 116.0.59.0/24 maxlen: 24 116.0.61.0/24 maxlen: 24 116.0.62.0/24 maxlen: 24 116.0.63.0/24 maxlen: 24 2400:a960:6::/48 maxlen: 48 2400:a960:8::/48 maxlen: 48 2400:a960:9::/48 maxlen: 48 2400:a960:a::/48 maxlen: 48 2400:a960:b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:49:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2211 (0x8a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E96D9, serialNumber=219EA63C6AC966DDB285886BD711C78A14DF512B Validity Not Before: Oct 22 21:39:53 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68f94f29-810b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a8:45:b0:b3:9d:c1:a1:42:4b:68:9e:a9:d4: 9f:60:9f:39:91:00:7f:4b:88:a9:39:e7:95:fe:3c: e4:0e:94:79:32:2c:1c:a3:cd:b0:1b:93:9d:b5:43: ef:9a:b0:c0:77:81:dd:8c:0b:72:84:ac:ab:9e:8d: f0:6f:10:58:04:1c:b8:fa:36:b7:21:4e:05:7b:f3: 0f:dd:74:0c:64:36:83:0c:1d:7c:b7:c2:60:dc:71: 80:af:7e:cb:04:8e:ad:97:79:f8:24:61:d8:d2:f0: a7:c3:5c:19:f9:3d:6f:76:e6:eb:68:ab:a1:17:5e: 76:db:88:e4:be:e3:5c:8a:a3:d5:8f:98:b6:aa:a4: be:99:4e:61:3c:1f:23:01:49:d7:d2:29:e8:ad:6f: 6f:52:7e:3f:da:d9:95:a1:e8:e7:b1:7a:ca:7c:74: f7:25:eb:ac:51:e6:77:38:58:82:fd:83:d8:e2:3d: 77:75:aa:53:f2:63:e8:14:19:08:3c:14:50:61:4c: 46:cd:88:00:7c:7e:cd:c0:f4:6a:4f:ec:7e:59:71: 06:5b:b5:29:6a:f7:b7:6f:07:74:da:91:7d:de:42: 58:4c:ea:ad:eb:7f:cb:83:dd:df:7a:30:b6:d5:b2: 59:af:8a:38:58:15:b9:ff:bf:dd:10:2c:a2:5b:23: df:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:71:1A:E1:B9:66:8F:EC:33:91:5B:12:BA:F3:A2:89:E2:14:17:DF X509v3 Authority Key Identifier: keyid:21:9E:A6:3C:6A:C9:66:DD:B2:85:88:6B:D7:11:C7:8A:14:DF:51:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/4A06FF10FF2711EAB7D5F235C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 116.0.33.0-116.0.34.255 116.0.40.0/23 116.0.43.0-116.0.44.255 116.0.46.0/24 116.0.55.0-116.0.59.255 116.0.61.0-116.0.63.255 IPv6: 2400:a960:6::/48 2400:a960:8::/46 Signature Algorithm: sha256WithRSAEncryption 1c:e3:2b:38:60:ff:fa:01:96:23:34:9b:16:87:35:98:66:35: d0:24:dd:22:de:4b:6d:95:fd:9b:80:02:22:7d:51:94:23:d5: fa:8e:a5:ca:78:70:c8:8b:0b:a8:0f:b8:d6:a9:e9:1d:8e:6d: 8b:81:ca:10:ab:91:de:f1:03:03:51:fc:11:d2:1d:32:a9:8f: 0d:f8:4f:16:68:1a:32:6b:6b:f2:f0:75:ba:33:3c:75:9c:f5: f9:30:4e:2e:9d:48:47:7f:a1:1e:d1:d4:29:89:bf:19:7f:fe: 22:34:b1:ff:c9:ba:29:bd:d9:96:ac:13:eb:66:b0:8f:6b:08: b4:3e:79:d5:bc:24:88:8f:1d:6c:13:7b:5f:55:2c:b5:ad:91: 58:5f:38:99:e9:d7:dd:7a:c3:f1:09:d3:16:1e:53:a4:e9:14: cc:f2:c0:f0:25:70:b7:f8:58:6e:cc:da:47:16:b8:ea:83:7d: 3d:1d:43:b7:0f:b6:9e:3d:e5:28:7e:cb:d1:44:7a:dc:ad:71: f5:6e:be:9c:1f:3f:53:8d:e2:82:db:48:26:d3:5c:b2:73:48: 4c:7a:9a:03:d2:f1:73:29:c2:fd:bb:bd:eb:8e:e1:b2:09:f8: 73:d8:41:01:b7:62:13:df:c8:b3:7d:82:1d:f5:53:80:3a:5d: f4:a7:47:6d -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgICCKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk2RDkxMTAvBgNVBAUTKDIxOUVBNjNDNkFDOTY2RERCMjg1ODg2QkQ3MTFDNzhB MTRERjUxMkIwHhcNMjUxMDIyMjEzOTUzWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGY5NGYyOS04MTBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu6hFsLOdwaFCS2ieqdSfYJ85kQB/S4ipOeeV/jzkDpR5Miwco82wG5OdtUPv mrDAd4HdjAtyhKyrno3wbxBYBBy4+ja3IU4Fe/MP3XQMZDaDDB18t8Jg3HGAr37L BI6tl3n4JGHY0vCnw1wZ+T1vdubraKuhF15224jkvuNciqPVj5i2qqS+mU5hPB8j AUnX0inorW9vUn4/2tmVoejnsXrKfHT3JeusUeZ3OFiC/YPY4j13dapT8mPoFBkI PBRQYUxGzYgAfH7NwPRqT+x+WXEGW7Upave3bwd02pF93kJYTOqt63/Lg93fejC2 1bJZr4o4WBW5/7/dECyiWyPfewIDAQABo4IC7TCCAukwHQYDVR0OBBYEFDNxGuG5 Zo/sM5FbErrzooniFBffMB8GA1UdIwQYMBaAFCGepjxqyWbdsoWIa9cRx4oU31Er MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTZEOS84MERGREVDMEU1 REQxMUVBQjI0NjhENjVDNEY5QUUwMi9JWjZtUEdySlp0MnloWWhyMXhISGloVGZV U3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0laNm1QR3JKWnQyeWhZaHIxeEhIaWhUZlVTcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTk2RDkvODBERkRFQzBFNUREMTFFQUIyNDY4RDY1QzRGOUFFMDIvNEEwNkZGMTBG RjI3MTFFQUI3RDVGMjM1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwdwYIKwYBBQUHAQcBAf8E aDBmMEoEAgABMEQwDAMEAHQAIQMEAHQAIgMEAXQAKDAMAwQAdAArAwQAdAAsAwQA dAAuMAwDBAB0ADcDBAJ0ADgwDAMEAHQAPQMEBnQAADAYBAIAAjASAwcAJACpYAAG AwcCJACpYAAIMA0GCSqGSIb3DQEBCwUAA4IBAQAc4ys4YP/6AZYjNJsWhzWYZjXQ JN0i3kttlf2bgAIifVGUI9X6jqXKeHDIiwuoD7jWqekdjm2LgcoQq5He8QMDUfwR 0h0yqY8N+E8WaBoya2vy8HW6Mzx1nPX5ME4unUhHf6Ee0dQpib8Zf/4iNLH/ybop vdmWrBPrZrCPawi0PnnVvCSIjx1sE3tfVSy1rZFYXziZ6dfdesPxCdMWHlOk6RTM 8sDwJXC3+FhuzNpHFrjqg309HUO3D7aePeUofsvRRHrcrXH1br6cHz9TjeKC20gm 01yyc0hMepoD0vFzKcL9u73rjuGyCfhz2EEBt2IT38izfYId9VOAOl30p0dt -----END CERTIFICATE-----Generated at Wed Nov 5 12:23:40 2025 by rpki-client