$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA0F7/0D8CC9D6766C11F09FCA192DC4F9AE02/8A9CF2DEB4D311F0A84CEE1EC4F9AE02.roa File: 8A9CF2DEB4D311F0A84CEE1EC4F9AE02.roa (raw, json) Hash identifier: S8iQ1WKz3ZWJ+bpf44oizB2yWlxKeDlDls7es6li9nw= Subject key identifier: 66:2A:BF:C0:BB:B4:58:9E:A5:0A:C2:92:21:0F:BC:56:5D:0C:ED:05 Certificate issuer: /CN=A91EA0F7/serialNumber=82CA104DC5F2AFF533FBF68CF298F40FBD481F04 Certificate serial: 56 Authority key identifier: 82:CA:10:4D:C5:F2:AF:F5:33:FB:F6:8C:F2:98:F4:0F:BD:48:1F:04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA0F7/0D8CC9D6766C11F09FCA192DC4F9AE02/8A9CF2DEB4D311F0A84CEE1EC4F9AE02.roa Signing time: Wed 29 Oct 2025 14:28:30 +0000 ROA not before: Wed 29 Oct 2025 14:28:30 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 154131 IP address blocks: 202.12.123.0/24 maxlen: 24 2001:df5:f640::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA0F7/0D8CC9D6766C11F09FCA192DC4F9AE02/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.crl rsync://rpki.apnic.net/member_repository/A91EA0F7/0D8CC9D6766C11F09FCA192DC4F9AE02/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:51:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 86 (0x56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA0F7, serialNumber=82CA104DC5F2AFF533FBF68CF298F40FBD481F04 Validity Not Before: Oct 29 14:28:30 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=6902248e-907d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:52:07:f2:4d:6d:4a:51:63:f7:fb:dc:35:c6: bb:f0:12:04:67:81:7b:d2:67:bb:ad:e0:92:ff:f9: f2:89:f9:2e:ef:cd:da:0a:3a:12:78:f0:9c:b0:a7: 89:d4:b6:ba:83:25:2f:84:77:d5:a5:0d:2a:1f:29: 6c:31:cd:0d:0d:35:f5:63:83:7b:0d:a5:8b:a5:d5: 35:45:cf:7b:98:ab:cf:4c:72:6e:e3:e7:71:91:49: dd:f1:a7:d3:c2:04:3d:54:96:df:05:5a:be:b9:b4: 2d:98:53:08:7c:b4:e4:b0:93:26:07:e4:2b:91:c8: 64:c8:1b:1c:49:7a:60:60:bb:2e:55:36:93:61:eb: 3c:8b:03:75:43:1e:cd:d2:82:e4:fb:47:7f:bf:99: 57:5f:37:ed:62:dd:60:bf:4e:cb:da:6d:6d:54:2d: 3a:ff:95:26:3e:59:ae:6e:90:2d:85:63:fd:d1:48: a3:2d:5d:13:a7:ae:76:be:fb:86:b8:2c:d9:96:bb: 13:b1:63:21:23:85:98:4c:24:bb:ec:17:f4:0b:16: 9e:44:a3:a8:bf:eb:c9:9f:5c:c7:3a:eb:6f:5a:fd: b8:6d:a7:9c:14:ac:66:66:42:57:ff:b9:d3:4a:5c: 2a:e4:39:6a:ad:a7:2e:94:f2:73:db:27:79:d4:f3: ed:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:2A:BF:C0:BB:B4:58:9E:A5:0A:C2:92:21:0F:BC:56:5D:0C:ED:05 X509v3 Authority Key Identifier: keyid:82:CA:10:4D:C5:F2:AF:F5:33:FB:F6:8C:F2:98:F4:0F:BD:48:1F:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA0F7/0D8CC9D6766C11F09FCA192DC4F9AE02/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA0F7/0D8CC9D6766C11F09FCA192DC4F9AE02/8A9CF2DEB4D311F0A84CEE1EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.12.123.0/24 IPv6: 2001:df5:f640::/48 Signature Algorithm: sha256WithRSAEncryption b1:4d:ab:16:9b:04:39:30:7a:00:8c:88:5b:f1:b3:3e:83:fd: 6c:f4:51:71:71:8d:28:f7:16:a5:dd:43:c0:ef:a7:c4:e0:a1: 79:83:fc:9e:d8:af:17:01:f9:d1:f2:7b:4f:71:0a:a5:0e:d8: 02:62:74:f5:94:bd:dd:80:38:d3:bd:7d:0d:68:c8:32:36:98: ca:d0:65:1c:60:7a:1f:04:d8:cf:11:47:57:f9:a0:2e:6b:47: fc:13:71:cc:2e:4c:49:c1:21:93:3f:3b:b5:87:c0:70:ee:25: 70:a8:95:c9:c8:8e:cf:20:6c:2c:c9:73:88:50:a6:49:19:46: 09:36:ad:f4:14:3f:7b:45:a5:68:87:ca:9c:a1:85:cc:b8:fb: fe:ee:c3:96:f9:9a:4d:09:c0:dc:13:6b:b5:c4:ef:16:91:5c: 40:e8:4d:5e:9f:13:91:c7:47:aa:cd:dc:71:b3:50:ed:95:ce: e7:1e:d4:ef:2e:a0:79:26:11:43:f2:7f:b6:ce:ba:96:18:ba: 23:e4:9c:c0:e2:10:90:59:a2:8a:a1:81:ef:3f:32:8d:62:c0: 24:b7:a2:2f:39:9f:bc:e6:02:c9:4c:da:94:31:68:a7:2e:a3: 93:b2:0b:32:55:3f:6a:bf:b9:9a:09:81:7c:64:c1:5c:5e:53: cc:ec:f6:88 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIBVjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QTBGNzExMC8GA1UEBRMoODJDQTEwNERDNUYyQUZGNTMzRkJGNjhDRjI5OEY0MEZC RDQ4MUYwNDAeFw0yNTEwMjkxNDI4MzBaFw0yNjEyMDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MDIyNDhlLTkwN2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJUgfyTW1KUWP3+9w1xrvwEgRngXvSZ7ut4JL/+fKJ+S7vzdoKOhJ48Jywp4nU trqDJS+Ed9WlDSofKWwxzQ0NNfVjg3sNpYul1TVFz3uYq89Mcm7j53GRSd3xp9PC BD1Ult8FWr65tC2YUwh8tOSwkyYH5CuRyGTIGxxJemBguy5VNpNh6zyLA3VDHs3S guT7R3+/mVdfN+1i3WC/TsvabW1ULTr/lSY+Wa5ukC2FY/3RSKMtXROnrna++4a4 LNmWuxOxYyEjhZhMJLvsF/QLFp5Eo6i/68mfXMc6629a/bhtp5wUrGZmQlf/udNK XCrkOWqtpy6U8nPbJ3nU8+3/AgMBAAGjggKmMIICojAdBgNVHQ4EFgQUZiq/wLu0 WJ6lCsKSIQ+8Vl0M7QUwHwYDVR0jBBgwFoAUgsoQTcXyr/Uz+/aM8pj0D71IHwQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVBMEY3LzBEOENDOUQ2NzY2 QzExRjA5RkNBMTkyREM0RjlBRTAyL2dzb1FUY1h5cl9Vei1fYU04cGowRDcxSUh3 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZ3NvUVRjWHlyX1V6LV9hTThwajBENzFJSHdRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTBGNy8wRDhDQzlENjc2NkMxMUYwOUZDQTE5MkRDNEY5QUUwMi84QTlDRjJERUI0 RDMxMUYwQTg0Q0VFMUVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEAMoMezAPBAIAAjAJAwcAIAEN9fZAMA0GCSqGSIb3DQEBCwUA A4IBAQCxTasWmwQ5MHoAjIhb8bM+g/1s9FFxcY0o9xal3UPA76fE4KF5g/ye2K8X AfnR8ntPcQqlDtgCYnT1lL3dgDjTvX0NaMgyNpjK0GUcYHofBNjPEUdX+aAua0f8 E3HMLkxJwSGTPzu1h8Bw7iVwqJXJyI7PIGwsyXOIUKZJGUYJNq30FD97RaVoh8qc oYXMuPv+7sOW+ZpNCcDcE2u1xO8WkVxA6E1enxORx0eqzdxxs1Dtlc7nHtTvLqB5 JhFD8n+2zrqWGLoj5JzA4hCQWaKKoYHvPzKNYsAkt6IvOZ+85gLJTNqUMWinLqOT sgsyVT9qv7maCYF8ZMFcXlPM7PaI -----END CERTIFICATE-----Generated at Wed Nov 5 09:39:57 2025 by rpki-client