$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA623/D3167F0A060C11ECAF675043C4F9AE02/9CD333C6B92B11F09402D810C4F9AE02.roa File: 9CD333C6B92B11F09402D810C4F9AE02.roa (raw, json) Hash identifier: V3sarL+FrCY0k0yCUIbon3gPbo07HsyruaUuXsvwjyw= Subject key identifier: 61:6D:1B:DF:59:4D:79:C4:7C:00:B3:1E:49:A8:E6:63:85:71:5D:55 Certificate issuer: /CN=A91EA623/serialNumber=D12FF5BDE5D4D2EA7188CB002C7FF016DC994D72 Certificate serial: 0564 Authority key identifier: D1:2F:F5:BD:E5:D4:D2:EA:71:88:CB:00:2C:7F:F0:16:DC:99:4D:72 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0S_1veXU0upxiMsALH_wFtyZTXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA623/D3167F0A060C11ECAF675043C4F9AE02/9CD333C6B92B11F09402D810C4F9AE02.roa Signing time: Tue 04 Nov 2025 03:09:01 +0000 ROA not before: Tue 04 Nov 2025 03:09:01 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 9918 IP address blocks: 152.101.5.0/24 maxlen: 24 152.101.25.0/24 maxlen: 24 152.101.26.0/24 maxlen: 24 152.101.27.0/24 maxlen: 24 152.101.32.0/24 maxlen: 24 152.101.50.0/24 maxlen: 24 152.101.174.0/24 maxlen: 24 152.101.185.0/24 maxlen: 24 152.101.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA623/D3167F0A060C11ECAF675043C4F9AE02/0S_1veXU0upxiMsALH_wFtyZTXI.crl rsync://rpki.apnic.net/member_repository/A91EA623/D3167F0A060C11ECAF675043C4F9AE02/0S_1veXU0upxiMsALH_wFtyZTXI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0S_1veXU0upxiMsALH_wFtyZTXI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:26:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1380 (0x564) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA623, serialNumber=D12FF5BDE5D4D2EA7188CB002C7FF016DC994D72 Validity Not Before: Nov 4 03:09:01 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=69096e4d-d99a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a9:90:5a:35:45:46:17:f2:fd:f3:4d:2a:68: f2:69:fa:21:33:3d:dd:d4:0e:9d:7a:84:a3:7d:df: 98:c9:b2:ef:d9:88:0c:d0:90:2d:fb:31:b9:98:06: f7:bb:66:15:42:1b:bf:30:67:d9:60:fe:bf:68:c9: ba:64:7c:36:02:f2:e9:d2:8c:14:0c:f7:e2:cb:6e: 59:e9:f7:33:af:02:a0:a5:ac:dc:85:c7:ff:f2:70: e4:04:f9:1a:1d:05:54:4a:7b:0c:bd:6f:80:9e:c6: 13:70:aa:e2:6f:6c:33:dd:f7:24:b4:da:02:6a:1d: 02:00:a1:a8:2e:f9:e3:60:7b:96:c6:ee:ec:76:ce: 4a:2a:74:0a:6e:1f:04:c1:1f:78:f2:95:da:2c:d7: f0:01:d2:4b:1a:39:3b:19:cf:54:f1:28:4c:ed:1f: ca:2c:b0:33:a4:5c:3a:d7:27:a7:74:8f:1c:d8:20: ad:40:2a:9c:70:95:a8:2d:09:00:88:e7:f1:7e:9d: 19:10:d6:06:02:4c:a0:86:a9:7e:f0:9f:f2:f2:8b: 02:7f:c3:0e:19:de:67:80:26:bb:d2:3b:b1:b0:bb: 14:1b:9f:a5:73:b9:70:12:ce:8d:8c:c6:3b:5d:62: fa:b1:62:aa:3c:a4:1d:d6:42:43:73:23:ba:97:ed: ec:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:6D:1B:DF:59:4D:79:C4:7C:00:B3:1E:49:A8:E6:63:85:71:5D:55 X509v3 Authority Key Identifier: keyid:D1:2F:F5:BD:E5:D4:D2:EA:71:88:CB:00:2C:7F:F0:16:DC:99:4D:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA623/D3167F0A060C11ECAF675043C4F9AE02/0S_1veXU0upxiMsALH_wFtyZTXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0S_1veXU0upxiMsALH_wFtyZTXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA623/D3167F0A060C11ECAF675043C4F9AE02/9CD333C6B92B11F09402D810C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 152.101.5.0/24 152.101.25.0-152.101.27.255 152.101.32.0/24 152.101.50.0/24 152.101.174.0/24 152.101.185.0-152.101.186.255 Signature Algorithm: sha256WithRSAEncryption 77:f6:b9:b3:f1:ad:4f:4a:fd:2d:85:3a:37:d4:e2:a6:2e:8b: c1:18:ce:f4:05:6c:e2:d4:ae:12:be:db:41:7f:0d:a0:62:2f: 95:5f:34:47:65:a9:7c:87:a0:17:ad:6e:f3:78:58:7b:94:2d: b9:c8:44:31:7d:3f:34:52:08:51:ea:ae:a5:3f:03:b4:e2:d9: 86:cb:e2:ce:1e:d2:67:e9:f0:34:04:bb:7e:2b:92:4e:71:c8: 17:1b:8a:f6:6c:98:a4:85:c3:a4:6d:7c:80:fa:cb:13:3c:34: f2:2a:1e:39:b6:3d:c7:07:e5:3b:ef:88:df:30:b9:1f:b3:a9: 6e:3c:62:0c:e3:5c:6d:23:ec:5f:06:97:f0:00:68:ae:52:19: 74:89:8b:de:c3:8b:05:3c:23:49:73:34:4f:3a:13:ab:5b:9e: d7:c0:ec:e7:39:27:ae:9a:37:f2:5c:ed:5e:b6:65:6f:1d:0b: b2:3a:9d:48:20:75:c4:e0:ad:bd:6c:d1:b9:34:d1:85:d2:84: 06:29:72:21:f5:b0:de:2c:f9:7e:4b:6d:ab:46:8e:50:9a:63: 6a:02:e8:11:ef:9b:c0:0c:9b:99:98:b7:01:f4:33:08:b9:d8: 9b:8e:28:9b:04:62:19:bb:57:62:96:ce:ec:98:0d:ce:dc:73: b4:6f:1d:e9 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgICBWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE2MjMxMTAvBgNVBAUTKEQxMkZGNUJERTVENEQyRUE3MTg4Q0IwMDJDN0ZGMDE2 REM5OTRENzIwHhcNMjUxMTA0MDMwOTAxWhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTA5NmU0ZC1kOTlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuamQWjVFRhfy/fNNKmjyafohMz3d1A6deoSjfd+YybLv2YgM0JAt+zG5mAb3 u2YVQhu/MGfZYP6/aMm6ZHw2AvLp0owUDPfiy25Z6fczrwKgpazchcf/8nDkBPka HQVUSnsMvW+AnsYTcKrib2wz3fcktNoCah0CAKGoLvnjYHuWxu7sds5KKnQKbh8E wR948pXaLNfwAdJLGjk7Gc9U8ShM7R/KLLAzpFw61yendI8c2CCtQCqccJWoLQkA iOfxfp0ZENYGAkyghql+8J/y8osCf8MOGd5ngCa70juxsLsUG5+lc7lwEs6NjMY7 XWL6sWKqPKQd1kJDcyO6l+3sYQIDAQABo4ICwzCCAr8wHQYDVR0OBBYEFGFtG99Z TXnEfACzHkmo5mOFcV1VMB8GA1UdIwQYMBaAFNEv9b3l1NLqcYjLACx/8BbcmU1y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTYyMy9EMzE2N0YwQTA2 MEMxMUVDQUY2NzUwNDNDNEY5QUUwMi8wU18xdmVYVTB1cHhpTXNBTEhfd0Z0eVpU WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzBTXzF2ZVhVMHVweGlNc0FMSF93RnR5WlRYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUE2MjMvRDMxNjdGMEEwNjBDMTFFQ0FGNjc1MDQzQzRGOUFFMDIvOUNEMzMzQzZC OTJCMTFGMDk0MDJEODEwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwTQYIKwYBBQUHAQcBAf8E PjA8MDoEAgABMDQDBACYZQUwDAMEAJhlGQMEAphlGAMEAJhlIAMEAJhlMgMEAJhl rjAMAwQAmGW5AwQAmGW6MA0GCSqGSIb3DQEBCwUAA4IBAQB39rmz8a1PSv0thTo3 1OKmLovBGM70BWzi1K4SvttBfw2gYi+VXzRHZal8h6AXrW7zeFh7lC25yEQxfT80 UghR6q6lPwO04tmGy+LOHtJn6fA0BLt+K5JOccgXG4r2bJikhcOkbXyA+ssTPDTy Kh45tj3HB+U774jfMLkfs6luPGIM41xtI+xfBpfwAGiuUhl0iYvew4sFPCNJczRP OhOrW57XwOznOSeumjfyXO1etmVvHQuyOp1IIHXE4K29bNG5NNGF0oQGKXIh9bDe LPl+S22rRo5QmmNqAugR75vADJuZmLcB9DMIudibjiibBGIZu1dils7smA3O3HO0 bx3p -----END CERTIFICATE-----Generated at Wed Nov 5 02:36:35 2025 by rpki-client