$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/9402F1E2B95711F0959B8139C4F9AE02.roa File: 9402F1E2B95711F0959B8139C4F9AE02.roa (raw, json) Hash identifier: yGR2xqnv87rJpxXoRJ5BLEOl4DCEpjBSrdz8OkezYaM= Subject key identifier: 30:76:A8:73:15:16:C3:09:3D:33:4A:F3:BF:4B:2F:4A:6A:83:A1:0C Certificate issuer: /CN=A91E9CD4/serialNumber=7C789596D5A37B045C9D9F13A4200C1E87477F74 Certificate serial: 03 Authority key identifier: 7C:78:95:96:D5:A3:7B:04:5C:9D:9F:13:A4:20:0C:1E:87:47:7F:74 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHiVltWjewRcnZ8TpCAMHodHf3Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/9402F1E2B95711F0959B8139C4F9AE02.roa Signing time: Tue 04 Nov 2025 08:23:44 +0000 ROA not before: Tue 04 Nov 2025 08:23:44 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 134077 IP address blocks: 138.252.140.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/fHiVltWjewRcnZ8TpCAMHodHf3Q.crl rsync://rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/fHiVltWjewRcnZ8TpCAMHodHf3Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHiVltWjewRcnZ8TpCAMHodHf3Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 08:23:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9CD4, serialNumber=7C789596D5A37B045C9D9F13A4200C1E87477F74 Validity Not Before: Nov 4 08:23:44 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6909b810-3ea4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:fc:c4:21:9d:74:e6:72:10:e4:3f:ab:ca:30: dd:ec:06:3e:a7:bf:5e:3d:0a:d3:0d:ec:74:3d:06: 30:d5:16:5d:00:79:a3:90:6e:2c:be:b2:09:42:23: 1c:a7:6d:cf:ff:6a:f9:d5:55:8f:30:4f:28:17:9b: aa:28:8a:e1:a5:af:c2:24:a3:f9:24:55:63:0a:dd: 5e:d0:5d:59:31:f0:af:27:3a:2c:75:09:64:83:d0: 05:51:fd:2b:5a:89:46:35:15:be:77:e2:00:a8:f0: 80:a7:09:80:f8:44:ec:20:84:fd:cb:48:5a:a1:53: 44:36:a3:84:42:3b:09:09:d4:3e:24:4f:61:68:ae: a2:7e:cb:96:6e:6e:fa:0a:ba:8e:94:72:3b:1f:a1: f2:8f:b6:15:17:27:6d:77:35:c0:3c:36:17:9d:da: a8:31:3a:da:ad:8b:c6:1f:1e:7f:b4:6e:81:5a:f4: d9:54:b0:db:c1:6e:73:96:24:dd:ec:7d:2d:ae:f8: 0a:ce:7c:37:0a:06:7c:5b:7d:49:be:f6:41:2b:4e: b2:83:b7:9e:1a:cb:1b:d1:90:d6:0e:f6:8e:4a:98: 70:db:87:01:b4:ce:00:14:58:b1:6c:30:9e:39:50: e6:ec:1e:ed:3a:e5:48:71:2d:0d:f3:74:d9:51:db: 2b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:76:A8:73:15:16:C3:09:3D:33:4A:F3:BF:4B:2F:4A:6A:83:A1:0C X509v3 Authority Key Identifier: keyid:7C:78:95:96:D5:A3:7B:04:5C:9D:9F:13:A4:20:0C:1E:87:47:7F:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/fHiVltWjewRcnZ8TpCAMHodHf3Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHiVltWjewRcnZ8TpCAMHodHf3Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/9402F1E2B95711F0959B8139C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 138.252.140.0/23 Signature Algorithm: sha256WithRSAEncryption 82:50:ac:05:d5:57:78:f3:88:c2:eb:a3:4b:f9:3f:fd:b4:9e: 63:f7:6b:88:2c:57:dd:38:3e:95:7c:e7:65:58:51:21:27:07: 4b:2f:77:41:85:3e:4c:19:bf:b7:1b:4b:4f:22:58:d5:31:be: c0:30:1b:7d:82:33:25:64:b0:f9:0c:78:3c:87:d3:d1:e6:e3: d9:29:0d:66:52:da:3b:f5:0b:f4:52:75:4c:c6:cc:49:27:13: 25:1d:d7:d8:7d:e3:24:7d:cb:c6:ba:22:3f:fe:c6:27:77:df: 6d:5e:5f:47:36:50:b8:51:59:fd:38:be:f5:33:ae:14:af:96: 99:31:3d:ec:e3:1f:aa:0f:82:41:62:f0:23:e5:40:fe:c0:82: 02:1a:17:2f:f4:1a:d4:f0:84:30:f8:00:e4:7f:81:75:b8:24: c3:53:d1:01:f6:2a:7d:16:3c:90:53:63:00:7d:fe:ae:ab:9c: 85:70:99:53:20:62:74:cd:6b:e1:bd:03:55:aa:b6:e8:03:03: 0f:33:74:76:0e:7c:26:db:8d:7e:54:7a:9a:15:c5:60:86:f6: 45:14:9f:6b:0a:04:43:f3:2b:a2:e2:9d:6b:20:49:7d:e9:75: 0f:11:bf:54:95:d1:ff:28:8d:62:7e:a3:e5:00:4e:79:c3:d3: 27:a9:2d:94 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF OUNENDExMC8GA1UEBRMoN0M3ODk1OTZENUEzN0IwNDVDOUQ5RjEzQTQyMDBDMUU4 NzQ3N0Y3NDAeFw0yNTExMDQwODIzNDRaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MDliODEwLTNlYTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDh/MQhnXTmchDkP6vKMN3sBj6nv149CtMN7HQ9BjDVFl0AeaOQbiy+sglCIxyn bc//avnVVY8wTygXm6ooiuGlr8Iko/kkVWMK3V7QXVkx8K8nOix1CWSD0AVR/Sta iUY1Fb534gCo8ICnCYD4ROwghP3LSFqhU0Q2o4RCOwkJ1D4kT2ForqJ+y5ZubvoK uo6UcjsfofKPthUXJ213NcA8Nhed2qgxOtqti8YfHn+0boFa9NlUsNvBbnOWJN3s fS2u+ArOfDcKBnxbfUm+9kErTrKDt54ayxvRkNYO9o5KmHDbhwG0zgAUWLFsMJ45 UObsHu065UhxLQ3zdNlR2yvLAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUMHaocxUW wwk9M0rzv0svSmqDoQwwHwYDVR0jBBgwFoAUfHiVltWjewRcnZ8TpCAMHodHf3Qw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5Q0Q0L0Q0N0Y0OTBDQjk1 NTExRjA5QTdGNkQ3MUM0RjlBRTAyL2ZIaVZsdFdqZXdSY25aOFRwQ0FNSG9kSGYz US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZkhpVmx0V2pld1Jjblo4VHBDQU1Ib2RIZjNRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUNENC9ENDdGNDkwQ0I5NTUxMUYwOUE3RjZENzFDNEY5QUUwMi85NDAyRjFFMkI5 NTcxMUYwOTU5QjgxMzlDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAYr8jDANBgkqhkiG9w0BAQsFAAOCAQEAglCsBdVXePOIwuuj S/k//bSeY/driCxX3Tg+lXznZVhRIScHSy93QYU+TBm/txtLTyJY1TG+wDAbfYIz JWSw+Qx4PIfT0ebj2SkNZlLaO/UL9FJ1TMbMSScTJR3X2H3jJH3LxroiP/7GJ3ff bV5fRzZQuFFZ/Ti+9TOuFK+WmTE97OMfqg+CQWLwI+VA/sCCAhoXL/Qa1PCEMPgA 5H+Bdbgkw1PRAfYqfRY8kFNjAH3+rquchXCZUyBidM1r4b0DVaq26AMDDzN0dg58 JtuNflR6mhXFYIb2RRSfawoEQ/MrouKdayBJfel1DxG/VJXR/yiNYn6j5QBOecPT J6ktlA== -----END CERTIFICATE-----Generated at Tue Nov 4 21:47:55 2025 by rpki-client